This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft File: 6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json) Hash identifier: BKpJlL94NtwOUnemmZqwW+swrHaGzMjSL8dhl3QPXec= Subject key identifier: 64:4F:73:E5:2C:90:3F:AE:22:CC:00:19:55:FB:83:C3:4F:01:16:1F Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8 Certificate issuer: /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8 Certificate serial: 019AF50BBE8709183A183A1F561AAC79EBA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:02:58 +0000 Manifest this update: Sat 06 Dec 2025 19:02:58 +0000 Manifest next update: Sun 07 Dec 2025 19:02:58 +0000 Files and hashes: 1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: mDJ/hHEDIXl4V/lL7gxInXAh7dJ6pj73gE2Je0y1SYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:be:87:09:18:3a:18:3a:1f:56:1a:ac:79:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8 Validity Not Before: Dec 6 19:02:58 2025 GMT Not After : Dec 7 19:02:58 2025 GMT Subject: CN=644f73e52c903fae22cc001955fb83c34f01161f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:75:03:3a:96:80:9e:e8:d3:19:dc:b3:ff: 04:3b:d5:07:71:60:99:ab:d9:97:2f:9a:1a:fa:5c: 19:76:09:45:37:6b:f8:cb:a9:38:a3:e5:f1:c8:31: 31:ab:35:df:f1:c6:2e:a4:1f:c6:eb:7d:ce:42:c4: 01:f4:92:dd:10:b3:f6:ad:53:02:5a:0b:e3:4a:87: 88:7f:81:3e:a8:ed:e1:ec:5b:f6:e5:19:26:d5:b4: e7:be:3c:f7:3a:5d:97:31:8d:fe:b5:f7:54:7a:6d: 2b:d1:d1:42:4d:92:62:d6:60:78:72:cb:ad:1d:74: fe:5c:16:b2:63:49:6a:7d:55:a4:fd:24:4b:27:7e: db:64:dd:2c:3b:68:a3:80:77:47:98:d0:ea:ba:66: 04:99:d4:0c:29:39:e9:76:27:68:c9:4e:41:84:df: d7:d6:85:f2:fa:15:e8:1f:38:6f:30:19:9c:db:67: 36:75:7f:99:65:6b:c2:5d:34:35:44:b4:d8:b3:1c: e6:2f:57:5c:22:cf:58:ee:78:cf:fd:b2:83:80:3a: 52:0d:ea:c8:6c:4f:2b:b5:52:b2:30:51:b3:85:20: af:aa:2c:bc:08:5a:db:e9:dd:af:7e:a4:e3:8e:49: e0:fd:e1:9a:be:17:55:a4:af:22:12:87:55:1c:c1: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4F:73:E5:2C:90:3F:AE:22:CC:00:19:55:FB:83:C3:4F:01:16:1F X509v3 Authority Key Identifier: keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8d:da:53:0f:15:e4:58:8e:4c:8d:3c:5c:4f:06:87:22:76: 86:c3:eb:61:17:0f:b7:a9:e4:e1:ce:72:3a:8c:c1:77:46:da: 3a:c2:20:6a:e4:b9:a1:12:35:86:72:b7:3d:fe:ca:a5:39:b5: 1d:ed:53:b3:e0:81:0b:e2:b6:fb:1f:cc:c1:63:e0:00:41:b8: 1f:20:45:93:75:32:67:1a:4c:00:71:44:0f:7a:d0:36:81:ae: 2e:6d:dd:3d:a3:24:0c:79:5d:5f:55:c2:2d:1f:1b:29:16:5d: 85:46:9b:85:32:1a:70:ff:9c:36:37:50:0d:f2:c1:38:bf:67: cd:54:02:e0:7c:c0:a8:1f:ea:3c:11:ac:76:dd:cd:e1:7b:b9: 9a:15:fe:d3:5e:ec:38:6f:5b:e4:83:58:cf:3c:ee:76:76:c8: 96:de:05:a8:ca:ba:20:e0:d6:4a:88:ab:7d:44:00:ef:a0:a0: df:47:13:ca:b8:f3:b9:b2:06:24:b3:38:cf:35:c9:7e:af:70: a6:b7:7f:ed:0f:df:a3:85:54:f5:da:85:c8:ab:b0:f0:64:e9: ee:d9:20:92:14:2e:f2:96:fe:1f:19:92:94:ea:ce:f9:b0:2c: db:4c:a6:4d:a9:d0:8c:e3:40:c2:3b:08:32:91:fd:7b:f0:4a: 31:9b:9c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C76HCRg6GDofVhqseeugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTUwYmY4NmI4N2NmODlmYzQ0OTA2MDY1ZjY5NzJiMDZi MDllYTgwHhcNMjUxMjA2MTkwMjU4WhcNMjUxMjA3MTkwMjU4WjAzMTEwLwYDVQQD Eyg2NDRmNzNlNTJjOTAzZmFlMjJjYzAwMTk1NWZiODNjMzRmMDExNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKF1AzqWgJ7o0xncs/8EO9UHcWCZ q9mXL5oa+lwZdglFN2v4y6k4o+XxyDExqzXf8cYupB/G633OQsQB9JLdELP2rVMC WgvjSoeIf4E+qO3h7Fv25Rkm1bTnvjz3Ol2XMY3+tfdUem0r0dFCTZJi1mB4csut HXT+XBayY0lqfVWk/SRLJ37bZN0sO2ijgHdHmNDqumYEmdQMKTnpdidoyU5BhN/X 1oXy+hXoHzhvMBmc22c2dX+ZZWvCXTQ1RLTYsxzmL1dcIs9Y7njP/bKDgDpSDerI bE8rtVKyMFGzhSCvqiy8CFrb6d2vfqTjjkng/eGavhdVpK8iEodVHMG5cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRPc+UskD+uIswAGVX7g8NPARYfMB8GA1UdIwQY MBaAFOsVC/hrh8+J/ESQYGX2lysGsJ6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhVTC1HdUh6NG44UkpCZ1pmYVhLd2F3bnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MzczMzItZDNjMy00ZTgyLWFkMTMt MzM4ODM2MGZjODQ0LzEvNnhVTC1HdUh6NG44UkpCZ1pmYVhLd2F3bnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MzczMzItZDNjMy00ZTgyLWFkMTMtMzM4ODM2MGZjODQ0 LzEvNnhVTC1HdUh6NG44UkpCZ1pmYVhLd2F3bnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY3aUw8V 5FiOTI08XE8GhyJ2hsPrYRcPt6nk4c5yOozBd0baOsIgauS5oRI1hnK3Pf7KpTm1 He1Ts+CBC+K2+x/MwWPgAEG4HyBFk3UyZxpMAHFED3rQNoGuLm3dPaMkDHldX1XC LR8bKRZdhUabhTIacP+cNjdQDfLBOL9nzVQC4HzAqB/qPBGsdt3N4Xu5mhX+017s OG9b5INYzzzudnbIlt4FqMq6IODWSoirfUQA76Cg30cTyrjzubIGJLM4zzXJfq9w prd/7Q/fo4VU9dqFyKuw8GTp7tkgkhQu8pb+HxmSlOrO+bAs20ymTanQjONAwjsI MpH9e/BKMZucpA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:38 2025 by rpki-client