This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json) Hash identifier: DCRSfzsNgQzNmPuRTU6ZhoD5f2Bl3a5PYWQB66urvIc= Subject key identifier: E1:81:4A:51:01:FC:4D:8E:1A:2C:72:9C:D9:F4:7D:54:06:47:6E:F0 Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46 Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46 Certificate serial: 019AF209A4409D07F0079CC259EA1234BDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft Manifest number: 0ED8 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=) 2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: WcrV69v+TA2lhSg7EEcW4/dBYUxOoyJ3HUvTExFHPpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a4:40:9d:07:f0:07:9c:c2:59:ea:12:34:bd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=e1814a5101fc4d8e1a2c729cd9f47d5406476ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:27:aa:6e:87:12:68:21:84:44:5c:a8:2b: e8:4b:8d:a3:65:e0:9b:a7:88:7b:5e:a0:ab:5a:73: 79:9b:7e:a8:f3:58:0d:41:56:ab:7b:1f:ed:75:40: dc:bf:cd:33:83:fe:b5:96:70:a1:56:7e:75:4e:f4: 1e:51:67:08:11:63:f9:62:2b:11:28:8c:d9:95:c5: 5e:a7:95:a0:6e:2b:8e:00:cc:10:5f:b1:28:27:89: fc:61:2c:88:f9:12:43:c8:70:dd:45:95:91:c6:6e: c2:1e:e0:49:5e:25:2b:95:cb:d8:7b:ad:78:39:87: 9f:3e:bb:41:cc:e4:90:02:f2:70:72:bf:40:b7:9b: 4b:3a:f7:6d:a1:52:cb:9f:bc:a8:3e:64:df:67:26: 70:d8:2c:68:67:db:55:7d:20:fd:ba:01:8d:8a:d4: 72:a4:76:29:a7:bf:a4:02:8b:aa:f2:8f:28:2c:3e: ae:44:b5:20:db:bd:a8:90:9d:86:ab:6c:c2:c4:bf: 37:a6:8c:77:ec:1d:c0:93:92:10:4a:32:10:30:5f: ad:b4:ca:9a:94:66:46:10:0e:f9:a2:98:88:d6:ad: f8:c9:31:c8:5a:59:59:78:79:c0:64:8c:a6:2a:ca: fd:c7:02:c7:b3:a4:d3:8f:4c:f8:02:23:99:3b:7d: da:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:81:4A:51:01:FC:4D:8E:1A:2C:72:9C:D9:F4:7D:54:06:47:6E:F0 X509v3 Authority Key Identifier: keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:c2:bc:02:73:c0:bf:44:4a:12:c8:1f:74:f9:1a:56:2b: 5f:1c:cb:7f:e3:8c:71:20:af:ad:51:bf:ff:7f:ea:78:cd:90: fc:45:d3:ec:72:50:11:f1:55:f7:34:1c:e1:01:78:78:d5:93: 1c:c9:03:28:e1:97:4e:82:37:5a:87:05:13:04:4f:9f:cd:a3: b2:af:a0:c4:98:d2:a5:75:a8:19:13:d2:bb:d0:af:fd:b4:f4: 9a:cb:d5:91:0e:f9:40:cc:ea:6a:ea:e8:16:3c:a0:f3:30:4d: 24:d3:62:37:ba:52:72:7a:f6:1a:79:c1:ee:43:cb:94:52:c8: 5d:75:d0:eb:2a:85:e8:a0:7b:dd:ef:69:7f:30:20:58:49:8a: 41:9f:27:02:5c:84:99:cb:6e:af:a9:23:a1:04:a6:cc:a6:e2: 9c:8d:52:23:9d:d2:3b:24:a4:e8:f3:10:e0:29:0e:21:99:aa: 1b:09:b6:c9:d4:49:7e:9b:63:34:0e:01:39:bd:ed:b4:93:12: 3f:24:71:ec:1b:07:6d:9c:58:5d:b0:df:2b:e1:dd:75:b1:06: eb:16:3f:1e:bd:de:19:59:3b:6a:24:8d:f1:6e:6e:b3:43:5b: ad:6b:97:cf:9b:c1:47:da:ab:9b:a2:72:ab:57:67:24:47:d7: 7a:b3:3f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaRAnQfwB5zCWeoSNL2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YTk4YWUxMGQ4NTQ3OGNlYzVjMjU1NjNjNzNlYmI1NmM5 YjFhNDYwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EyhlMTgxNGE1MTAxZmM0ZDhlMWEyYzcyOWNkOWY0N2Q1NDA2NDc2ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFMnqm6HEmghhERcqCvoS42jZeCb p4h7XqCrWnN5m36o81gNQVarex/tdUDcv80zg/61lnChVn51TvQeUWcIEWP5YisR KIzZlcVep5WgbiuOAMwQX7EoJ4n8YSyI+RJDyHDdRZWRxm7CHuBJXiUrlcvYe614 OYefPrtBzOSQAvJwcr9At5tLOvdtoVLLn7yoPmTfZyZw2CxoZ9tVfSD9ugGNitRy pHYpp7+kAouq8o8oLD6uRLUg272okJ2Gq2zCxL83pox37B3Ak5IQSjIQMF+ttMqa lGZGEA75opiI1q34yTHIWllZeHnAZIymKsr9xwLHs6TTj0z4AiOZO33aNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGBSlEB/E2OGixynNn0fVQGR27wMB8GA1UdIwQY MBaAFIepiuENhUeM7FwlVjxz67VsmxpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDZtSzRRMkZSNHpzWENWV1BIUHJ0V3liR2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MjA4NDMtYWRlZi00MzM4LTg5OTUt MWM1NTZiMDNiMjJjLzEvaDZtSzRRMkZSNHpzWENWV1BIUHJ0V3liR2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83MjA4NDMtYWRlZi00MzM4LTg5OTUtMWM1NTZiMDNiMjJj LzEvaDZtSzRRMkZSNHpzWENWV1BIUHJ0V3liR2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI/CvAJz wL9EShLIH3T5GlYrXxzLf+OMcSCvrVG//3/qeM2Q/EXT7HJQEfFV9zQc4QF4eNWT HMkDKOGXToI3WocFEwRPn82jsq+gxJjSpXWoGRPSu9Cv/bT0msvVkQ75QMzqauro Fjyg8zBNJNNiN7pScnr2GnnB7kPLlFLIXXXQ6yqF6KB73e9pfzAgWEmKQZ8nAlyE mctur6kjoQSmzKbinI1SI53SOySk6PMQ4CkOIZmqGwm2ydRJfptjNA4BOb3ttJMS PyRx7BsHbZxYXbDfK+HddbEG6xY/Hr3eGVk7aiSN8W5us0NbrWuXz5vBR9qrm6Jy q1dnJEfXerM/Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:24 2025 by rpki-client