This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json) Hash identifier: iUsI/iDYHj6IDxlH3m8Ca+ra7h+sPYaGR4vEoRu17SM= Subject key identifier: CD:CB:8F:36:77:EA:05:FB:97:31:42:E5:5E:93:68:0F:90:20:8B:B5 Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf Certificate serial: 019AF1D2608AEFDC57EA1D5761D53660D53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: rOZxJnV0BlpPZVjUDAz4o0gBlgbG6o70N8IzUO9ntkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:60:8a:ef:dc:57:ea:1d:57:61:d5:36:60:d5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=cdcb8f3677ea05fb973142e55e93680f90208bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:aa:5d:80:bd:4b:50:63:dd:8d:9e:27:86: be:42:15:b8:75:b8:74:57:bd:bc:cd:59:64:c6:ff: 04:e2:6c:af:a4:6a:92:bc:c8:03:a6:d3:fe:b7:5e: 25:dd:f1:40:7e:c4:46:0b:8e:d9:a6:b1:12:19:c0: a1:74:a4:39:55:59:5c:b2:9f:0b:50:f6:d7:73:ae: 1f:79:6e:ef:09:f1:9f:96:80:1f:ca:5f:e9:f4:38: 05:60:d0:ea:36:76:d7:8d:75:84:36:a1:bc:9b:b3: b3:be:62:df:a1:1b:c9:eb:22:be:d7:ca:6d:16:2f: 27:eb:d4:28:e7:7d:53:d4:a6:df:2d:c6:68:10:10: 97:b3:0d:a6:c9:91:f7:94:80:00:7d:40:84:a3:cf: 03:19:75:c4:32:00:ac:59:50:57:41:91:dd:3a:26: db:79:a8:c4:84:a4:6a:ce:c1:1b:9f:62:1a:41:53: 10:93:ff:61:fe:ce:05:61:ed:df:68:12:ce:53:46: 4d:35:ed:47:71:cc:e4:34:4b:05:7c:c2:a0:6d:aa: 8b:4a:07:ca:4a:87:85:e9:2f:94:03:e6:ff:82:e7: 1c:f8:86:4f:9c:12:84:10:e6:4b:b4:de:52:b3:97: 1f:d5:c1:e5:f6:67:b6:f5:6c:0c:d5:c6:91:21:00: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CB:8F:36:77:EA:05:FB:97:31:42:E5:5E:93:68:0F:90:20:8B:B5 X509v3 Authority Key Identifier: keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:84:4b:46:e2:e9:c7:ce:e3:7a:35:bf:f6:6f:95:00:66:cd: 77:16:5b:59:96:c8:f4:71:da:10:93:5c:fa:9f:dd:04:8a:ff: f7:53:0d:6e:d9:90:04:49:24:4b:97:94:f9:c7:cf:26:a9:5e: c9:44:3e:fc:f7:4d:02:05:97:df:4f:05:2c:3b:d5:45:27:67: 35:ab:cd:8b:f1:9a:c2:54:34:4a:e1:9a:64:89:a9:9e:4a:b1: af:43:45:07:14:a8:2f:18:d0:2c:30:c3:2a:d3:ea:aa:0c:9d: ba:35:74:ab:b9:bd:5b:c1:00:3d:7c:6f:90:02:3b:09:15:48: 7c:4a:7e:a6:35:e6:da:2f:7a:be:0d:b6:79:8e:19:71:22:9a: 55:9e:1b:30:60:2a:6c:35:76:3c:7f:9a:a1:71:dd:4b:57:fb: a3:ef:d7:c9:2f:07:0d:ac:46:1a:0c:32:48:15:9e:2e:ab:08: 14:fc:53:24:77:8a:7f:73:5d:c6:ce:15:14:09:f8:3b:2b:70: 2e:42:1a:57:d0:3c:da:90:84:8e:8e:1a:bc:8f:25:a6:7b:0e: 3d:28:ff:76:6b:d2:c1:e6:95:ac:7d:d2:b4:4a:e0:68:e5:ee: c3:83:70:06:dd:a0:3d:6a:45:83:e1:25:46:8f:d4:ec:99:bd: d2:0b:be:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mCK79xX6h1XYdU2YNU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl NjE4YmYwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EyhjZGNiOGYzNjc3ZWEwNWZiOTczMTQyZTU1ZTkzNjgwZjkwMjA4YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xyqXYC9S1Bj3Y2eJ4a+QhW4dbh0 V728zVlkxv8E4myvpGqSvMgDptP+t14l3fFAfsRGC47ZprESGcChdKQ5VVlcsp8L UPbXc64feW7vCfGfloAfyl/p9DgFYNDqNnbXjXWENqG8m7OzvmLfoRvJ6yK+18pt Fi8n69Qo531T1KbfLcZoEBCXsw2myZH3lIAAfUCEo88DGXXEMgCsWVBXQZHdOibb eajEhKRqzsEbn2IaQVMQk/9h/s4FYe3faBLOU0ZNNe1HcczkNEsFfMKgbaqLSgfK SoeF6S+UA+b/gucc+IZPnBKEEOZLtN5Ss5cf1cHl9me29WwM1caRIQDE2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3LjzZ36gX7lzFC5V6TaA+QIIu1MB8GA1UdIwQY MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYRLRuLp x87jejW/9m+VAGbNdxZbWZbI9HHaEJNc+p/dBIr/91MNbtmQBEkkS5eU+cfPJqle yUQ+/PdNAgWX308FLDvVRSdnNavNi/GawlQ0SuGaZImpnkqxr0NFBxSoLxjQLDDD KtPqqgydujV0q7m9W8EAPXxvkAI7CRVIfEp+pjXm2i96vg22eY4ZcSKaVZ4bMGAq bDV2PH+aoXHdS1f7o+/XyS8HDaxGGgwySBWeLqsIFPxTJHeKf3Ndxs4VFAn4Oytw LkIaV9A82pCEjo4avI8lpnsOPSj/dmvSweaVrH3StErgaOXuw4NwBt2gPWpFg+El Ro/U7Jm90gu+kA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:46 2025 by rpki-client