This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft File: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json) Hash identifier: lBe88jZGfR46aLzV/fCZOoE9cDViFmus50fPpqFXhLA= Subject key identifier: 92:0F:B9:21:C3:51:B4:B5:3F:72:48:25:20:8D:AF:4F:83:12:3D:37 Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D Certificate issuer: /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d Certificate serial: 019AF31CC46895E697FFBADDE541A9C0BFEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: KCfNgjNX63q5LZKuc3wwgcVzuVky0Gzt/GvLylAGMfI=) 2: fz0sJARZZ_TYinSLBp8Y46GRSAE.roa (hash: k5Klk32fNc1hp3soFN9xokf0fk3JpGUEVYNQtXZtdqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c4:68:95:e6:97:ff:ba:dd:e5:41:a9:c0:bf:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=920fb921c351b4b53f724825208daf4f83123d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:cb:1b:4e:28:2d:c0:76:0d:1f:17:df:b7: 36:ff:86:9d:a3:e8:61:d6:de:4a:2f:ba:85:52:d7: 6f:1f:81:54:f8:9e:d6:b3:32:e8:3c:da:3c:ac:c2: f3:45:90:3b:3a:83:b5:1d:d0:1d:67:2d:56:28:41: a5:78:4c:4f:47:1a:8f:7c:d3:1e:21:5c:32:f7:ee: 6a:ed:dc:46:02:55:a4:76:4b:0c:cc:cf:36:b7:f0: 49:b3:52:60:a7:fc:85:21:ef:7b:60:0e:ed:c1:f9: 48:0e:48:cc:85:13:8a:c1:4a:ab:df:86:b8:15:5d: 7b:45:31:68:19:9d:b3:35:b8:48:52:b3:18:d0:39: 70:08:f0:0c:3c:e1:0c:97:11:fb:3e:6c:5b:6d:d5: 7a:c2:be:07:9b:d6:dd:21:f3:ee:e2:f7:2e:77:ad: bd:3e:94:d2:34:f0:14:12:17:c9:be:40:39:15:d2: 82:09:c0:e3:f7:4b:29:30:26:6a:a1:6c:6b:c3:df: a3:ba:12:be:93:6f:29:f8:82:45:5b:2a:ba:00:6b: 88:1f:33:c6:9b:0f:33:cf:db:5d:15:63:a8:0c:d0: 48:2d:08:7f:21:81:d7:2a:16:3c:eb:e7:e3:b0:b0: cd:15:53:9a:f9:f5:c8:da:34:ed:2b:5d:ed:b2:ff: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0F:B9:21:C3:51:B4:B5:3F:72:48:25:20:8D:AF:4F:83:12:3D:37 X509v3 Authority Key Identifier: keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2a:f1:99:91:a8:88:ef:7f:09:22:88:e4:1d:6d:33:29:42: f4:6a:72:0e:0d:23:8d:4b:1c:d4:88:d7:51:81:1e:b2:09:da: 1f:ce:3e:be:81:c0:c0:51:93:5b:dd:be:fa:0f:c0:59:dc:17: 92:5d:7b:f8:f7:57:dd:fd:9c:41:44:3c:de:7f:35:99:45:66: 96:92:04:38:b4:e0:c1:dd:38:62:2d:ea:9d:33:9e:a9:e7:13: 50:27:fa:9b:f6:f5:51:33:a0:c4:62:41:d5:ce:6b:a0:ab:79: 19:b2:80:26:3e:e0:f3:b1:97:00:c6:6e:25:49:07:f6:5f:a7: 58:c2:49:cb:b3:d4:4d:88:15:ff:f6:1f:fe:78:c4:7d:73:3e: 90:da:27:22:c5:5d:f3:5a:84:78:a5:5b:99:a1:4f:89:6d:8c: 55:d0:69:f0:da:42:e2:06:d7:88:c4:04:29:2f:47:55:00:d1: 8f:7a:b9:a7:a2:8b:1e:e1:9a:da:62:84:90:cb:30:f0:1b:10: fc:98:00:d6:8e:b8:f6:96:e2:4d:9a:63:d2:5a:11:40:a1:3c: 60:3f:36:eb:50:9b:c4:4c:c1:ae:6e:30:2c:29:5d:bf:a3:75: 3b:48:b9:f1:0c:c3:9c:f4:fa:e7:f7:f5:a2:e5:b2:7f:6d:59: 58:05:da:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMRoleaX/7rd5UGpwL/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmUxNDZhMWU5ZTgzYjM3NTZmMDQ4YjZjMWIzMWUwZmM3 ZDIwN2QwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD Eyg5MjBmYjkyMWMzNTFiNGI1M2Y3MjQ4MjUyMDhkYWY0ZjgzMTIzZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9/LG04oLcB2DR8X37c2/4ado+hh 1t5KL7qFUtdvH4FU+J7WszLoPNo8rMLzRZA7OoO1HdAdZy1WKEGleExPRxqPfNMe IVwy9+5q7dxGAlWkdksMzM82t/BJs1Jgp/yFIe97YA7twflIDkjMhROKwUqr34a4 FV17RTFoGZ2zNbhIUrMY0DlwCPAMPOEMlxH7PmxbbdV6wr4Hm9bdIfPu4vcud629 PpTSNPAUEhfJvkA5FdKCCcDj90spMCZqoWxrw9+juhK+k28p+IJFWyq6AGuIHzPG mw8zz9tdFWOoDNBILQh/IYHXKhY86+fjsLDNFVOa+fXI2jTtK13tsv95QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIPuSHDUbS1P3JIJSCNr0+DEj03MB8GA1UdIwQY MBaAFOkuFGoenoOzdW8Ei2wbMeD8fSB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmIt NzRhMzk1YWE1NjA2LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmItNzRhMzk1YWE1NjA2 LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGirxmZGo iO9/CSKI5B1tMylC9GpyDg0jjUsc1IjXUYEesgnaH84+voHAwFGTW92++g/AWdwX kl17+PdX3f2cQUQ83n81mUVmlpIEOLTgwd04Yi3qnTOeqecTUCf6m/b1UTOgxGJB 1c5roKt5GbKAJj7g87GXAMZuJUkH9l+nWMJJy7PUTYgV//Yf/njEfXM+kNonIsVd 81qEeKVbmaFPiW2MVdBp8NpC4gbXiMQEKS9HVQDRj3q5p6KLHuGa2mKEkMsw8BsQ /JgA1o649pbiTZpj0loRQKE8YD8261CbxEzBrm4wLCldv6N1O0i58QzDnPT65/f1 ouWyf21ZWAXaPA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:27:50 2025 by rpki-client