This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft File: b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json) Hash identifier: B8fFf87JcFlvrkeFcMI4TnrljXFVay63IRnvKxuR2Jc= Subject key identifier: 09:E5:B8:C3:07:E1:EA:12:82:E2:30:49:A4:AF:57:AB:14:4D:D0:37 Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Certificate serial: 019AF19B8D6D6CB23980B791970EB54C9413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:01:34 +0000 Manifest this update: Sat 06 Dec 2025 03:01:34 +0000 Manifest next update: Sun 07 Dec 2025 03:01:34 +0000 Files and hashes: 1: 1-US7yaRiFFKnKqL_Az-oiKaBwo8.roa (hash: FthpX5qfWVZK7tmP9o2nAg/lcWbaiX6ztEINECGa57Q=) 2: FsdwEgiqk0tgi0Rde-JJq-MqKkc.roa (hash: pNc7mIfrGdsXcLvKWTR7Ssmi3FPFS6cjaq4FxY0o41k=) 3: IarevL5_EzIJs87Wc8QNEXezxEg.roa (hash: 3HU1Yl+/zUftCbIriX5nyjFf4lXlFXWqr+wjeiwWuSc=) 4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: il6sohgcXsyEn0l7CfZ5jmO/aGZRneHESfkyZoh5LB0=) 5: c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa (hash: v2eej8TLgNyCOcTzYSfQkKDLdsnqMKtNEWYP6ylBCUQ=) 6: gCqBeQcxeP4mgIeC8gxfXD2ihNA.roa (hash: M8yQO0ZHmNcXujVHcxJQENuFmwi7ywPsRmKiyTk43dA=) 7: j_oVR8giIGJ9TAqquqYifkLeIjM.roa (hash: 5Tkxpz+Z+2HB95vYCH8LtVhmoPXDta/4SPNsrM3AuI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8d:6d:6c:b2:39:80:b7:91:97:0e:b5:4c:94:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Validity Not Before: Dec 6 03:01:34 2025 GMT Not After : Dec 7 03:01:34 2025 GMT Subject: CN=09e5b8c307e1ea1282e23049a4af57ab144dd037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:95:99:76:06:d5:80:a9:42:24:43:5d:d5: 77:10:63:d4:ad:47:79:4e:e4:7d:af:c4:f1:3e:50: 42:63:92:e5:08:35:15:cb:28:0a:11:bc:8a:d0:94: 3f:10:25:3b:df:4e:b8:b2:aa:53:6c:06:90:2f:53: a7:8e:e1:96:c5:b8:9d:ef:68:78:57:f3:99:0f:cf: 62:80:bc:35:df:2c:87:37:7c:dc:e0:74:d6:d9:75: 3a:04:3a:4e:d9:05:75:07:e3:18:b1:fb:75:35:06: b1:d5:41:53:95:94:1a:c4:49:5b:97:21:91:a4:4d: 1b:50:e7:3a:09:61:9d:9f:16:46:c4:41:a6:7a:af: db:56:94:bc:e8:5a:e1:a8:5b:dc:81:cf:a7:10:ea: 3e:c7:d6:9a:71:8f:ba:12:6e:6e:7a:75:b3:05:a4: 5d:a6:76:04:f8:9a:aa:6c:2c:31:75:b9:b2:1c:02: bb:cc:a6:03:67:b0:07:57:e8:f7:56:3b:fa:67:b2: 60:36:c1:22:df:96:d1:66:3e:e1:06:f1:97:b4:64: 41:f6:03:0c:03:d5:87:77:55:30:f0:3e:63:fd:4c: f5:47:c1:ea:d9:93:08:de:7b:d9:e6:e5:46:41:1d: 6e:4d:81:41:93:37:12:4c:3e:4c:dd:1c:52:f7:1c: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E5:B8:C3:07:E1:EA:12:82:E2:30:49:A4:AF:57:AB:14:4D:D0:37 X509v3 Authority Key Identifier: keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5e:c4:6f:d8:d1:0e:62:bf:b2:01:16:43:c1:a1:96:31:a2: b2:c0:18:0f:59:c7:48:4b:f6:56:41:10:6e:a7:27:4f:f6:e2: fb:96:3e:aa:b8:a7:29:72:b0:b5:37:ee:27:b4:35:35:28:16: e4:ae:85:1d:67:99:a2:94:e3:bd:dc:d4:6b:96:3a:57:f4:e7: 89:bb:0f:ca:b2:08:78:5f:5f:26:cb:69:89:78:87:d0:05:c4: 39:58:ce:a8:41:8f:65:5d:19:69:7e:ad:84:eb:bb:c3:0a:42: 79:7b:27:29:b1:7a:e4:3b:d9:56:b1:d0:6f:01:c0:b7:91:ff: c9:f9:8f:47:d4:98:6b:8c:1a:2b:d2:dc:fa:32:58:c8:5c:54: e9:ef:74:45:ee:e6:db:54:05:ab:d9:de:ba:6f:22:39:c0:dd: ad:95:76:de:d5:35:16:f5:79:ef:d2:b1:ed:fc:64:f0:04:3d: 49:84:15:b5:54:cc:e5:f2:43:2c:84:78:ed:da:43:cc:8e:7c: d7:51:ed:8c:15:f6:f3:40:45:a9:6b:47:77:b3:dc:99:8c:ae: 1d:ad:f1:1d:e7:c0:15:13:dc:ae:ff:1c:b1:ae:a0:49:b9:3f: 51:9f:40:57:d9:9d:93:6f:5c:1d:6b:8b:98:bf:03:f4:be:cb: b2:18:d2:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm41tbLI5gLeRlw61TJQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm ZjBlNWIwHhcNMjUxMjA2MDMwMTM0WhcNMjUxMjA3MDMwMTM0WjAzMTEwLwYDVQQD EygwOWU1YjhjMzA3ZTFlYTEyODJlMjMwNDlhNGFmNTdhYjE0NGRkMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW2VmXYG1YCpQiRDXdV3EGPUrUd5 TuR9r8TxPlBCY5LlCDUVyygKEbyK0JQ/ECU73064sqpTbAaQL1OnjuGWxbid72h4 V/OZD89igLw13yyHN3zc4HTW2XU6BDpO2QV1B+MYsft1NQax1UFTlZQaxElblyGR pE0bUOc6CWGdnxZGxEGmeq/bVpS86FrhqFvcgc+nEOo+x9aacY+6Em5uenWzBaRd pnYE+JqqbCwxdbmyHAK7zKYDZ7AHV+j3Vjv6Z7JgNsEi35bRZj7hBvGXtGRB9gMM A9WHd1Uw8D5j/Uz1R8Hq2ZMI3nvZ5uVGQR1uTYFBkzcSTD5M3RxS9xzehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnluMMH4eoSguIwSaSvV6sUTdA3MB8GA1UdIwQY MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt NmFhYjJiMWI5MjJjLzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnl7Eb9jR DmK/sgEWQ8GhljGissAYD1nHSEv2VkEQbqcnT/bi+5Y+qrinKXKwtTfuJ7Q1NSgW 5K6FHWeZopTjvdzUa5Y6V/TnibsPyrIIeF9fJstpiXiH0AXEOVjOqEGPZV0ZaX6t hOu7wwpCeXsnKbF65DvZVrHQbwHAt5H/yfmPR9SYa4waK9Lc+jJYyFxU6e90Re7m 21QFq9neum8iOcDdrZV23tU1FvV579Kx7fxk8AQ9SYQVtVTM5fJDLIR47dpDzI58 11HtjBX280BFqWtHd7PcmYyuHa3xHefAFRPcrv8csa6gSbk/UZ9AV9mdk29cHWuL mL8D9L7LshjS4A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:05 2025 by rpki-client