This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json) Hash identifier: mS1wRWXGua1wbmyxbw1Xh/1Y3ySAIuZaMTyXNoBXIMc= Subject key identifier: EE:65:60:48:50:20:B8:B5:35:D1:8E:D7:C7:91:DD:22:F7:8D:01:C2 Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00 Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00 Certificate serial: 019AF1D1A535B049248077CBA2B1C83620C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft Manifest number: 129D Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: CClAv4pJWxg2FOLp1QaUwb5fv7wnwk0iR+Wnb04jZms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a5:35:b0:49:24:80:77:cb:a2:b1:c8:36:20:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=ee6560485020b8b535d18ed7c791dd22f78d01c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:7c:31:7d:34:ba:ce:df:5e:0a:38:2b:2c: 8c:27:ce:95:07:33:e3:fc:31:86:30:86:b1:e3:03: 08:85:53:75:5c:4f:bd:4d:8d:28:af:e7:34:11:7f: d6:50:28:7e:d6:54:1d:a4:08:0e:b9:14:66:b9:22: 0b:8b:1b:d2:ff:80:c8:73:9d:fe:ea:d4:a1:0c:d1: 95:3f:fa:56:4c:b8:4e:2e:3f:44:77:1c:03:fc:01: f8:0b:db:61:37:95:de:c7:a6:29:42:dd:a6:9c:f1: aa:68:e6:fe:90:da:b8:bc:9c:86:04:26:a2:39:f5: 95:fc:fd:a0:83:4d:c1:16:67:8d:e2:b1:10:d1:9e: 71:93:29:ac:7d:01:f6:6b:ae:88:33:d9:99:c3:2a: ad:8f:08:21:0a:7d:35:22:11:a1:0c:b4:de:72:b0: 48:05:49:91:4c:c1:7b:ea:ca:66:e7:27:7d:c3:19: 03:cb:3c:b3:d0:5a:66:34:a3:91:a7:e4:b6:e5:18: 71:b2:0b:1e:38:17:b7:03:02:a8:29:00:fe:2d:52: fa:26:61:d1:24:2b:37:1a:15:a3:96:3c:4b:a4:44: 20:70:bf:e6:e8:01:ff:10:f3:d8:ef:54:27:e9:56: 4e:46:f2:22:75:7e:c6:5c:41:74:60:8a:b3:dc:1b: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:60:48:50:20:B8:B5:35:D1:8E:D7:C7:91:DD:22:F7:8D:01:C2 X509v3 Authority Key Identifier: keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d8:c2:f3:8f:6c:3e:4d:19:f0:be:c5:a9:68:da:a0:35:84: 1b:52:1f:db:81:9c:50:37:88:37:74:1a:df:77:a6:12:46:74: 65:1c:f9:b4:67:bb:0f:0b:0d:f6:80:4b:68:40:05:1c:6e:22: 17:c0:87:47:ed:7d:61:a3:2d:55:a2:2c:14:0b:bb:d1:f2:01: cd:fd:a8:05:33:17:49:55:16:2e:63:0b:fb:e9:0f:fc:b4:d6: 6d:60:b7:4f:99:c9:c8:e8:b1:f1:22:07:67:5e:53:20:a9:60: c7:11:e4:ca:0f:d6:a2:98:46:ca:9a:ce:a9:06:88:85:80:5d: d7:4c:ad:f8:8a:e4:20:aa:32:5d:3e:63:63:a5:f5:b3:4d:0c: 78:3b:8c:2e:81:bb:92:bb:54:81:90:00:1d:66:70:f2:a1:b5: a1:a0:b4:c8:16:1f:2b:b1:7b:bd:97:28:7d:3f:c8:bf:b9:97: 69:57:1e:b4:f5:23:b3:d6:5c:96:fa:d1:17:c1:4d:98:2d:95: b3:f4:d5:be:6f:e8:de:0e:0e:12:d5:b9:a1:cf:e1:3c:b5:1e: bf:e8:7c:1a:63:b8:70:7d:c7:0e:34:6b:31:89:65:97:d0:d6: 4e:bc:08:d6:5c:21:e2:98:a6:2d:51:8b:94:bf:9b:3a:45:59: 73:ae:20:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aU1sEkkgHfLorHINiDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzQ4M2I3NWMyZGIxY2Y5ZmY0ZTk0YzdhMGZkZjBkYjAw MDBmMDAwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD EyhlZTY1NjA0ODUwMjBiOGI1MzVkMThlZDdjNzkxZGQyMmY3OGQwMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuml8MX00us7fXgo4KyyMJ86VBzPj /DGGMIax4wMIhVN1XE+9TY0or+c0EX/WUCh+1lQdpAgOuRRmuSILixvS/4DIc53+ 6tShDNGVP/pWTLhOLj9EdxwD/AH4C9thN5Xex6YpQt2mnPGqaOb+kNq4vJyGBCai OfWV/P2gg03BFmeN4rEQ0Z5xkymsfQH2a66IM9mZwyqtjwghCn01IhGhDLTecrBI BUmRTMF76spm5yd9wxkDyzyz0FpmNKORp+S25RhxsgseOBe3AwKoKQD+LVL6JmHR JCs3GhWjljxLpEQgcL/m6AH/EPPY71Qn6VZORvIidX7GXEF0YIqz3BvzswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5lYEhQILi1NdGO18eR3SL3jQHCMB8GA1UdIwQY MBaAFOjEg7dcLbHPn/TpTHoP3w2wAA8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTIt ZWIzNWJmYTA2NWFkLzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTItZWIzNWJmYTA2NWFk LzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdjC849s Pk0Z8L7FqWjaoDWEG1If24GcUDeIN3Qa33emEkZ0ZRz5tGe7DwsN9oBLaEAFHG4i F8CHR+19YaMtVaIsFAu70fIBzf2oBTMXSVUWLmML++kP/LTWbWC3T5nJyOix8SIH Z15TIKlgxxHkyg/WophGyprOqQaIhYBd10yt+IrkIKoyXT5jY6X1s00MeDuMLoG7 krtUgZAAHWZw8qG1oaC0yBYfK7F7vZcofT/Iv7mXaVcetPUjs9ZclvrRF8FNmC2V s/TVvm/o3g4OEtW5oc/hPLUev+h8GmO4cH3HDjRrMYlll9DWTrwI1lwh4pimLVGL lL+bOkVZc64gnw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:46 2025 by rpki-client