This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json) Hash identifier: XZmigcFM/aIH23MWEDih6RjaxvwMoHEgGuRxdxjymI8= Subject key identifier: 75:52:99:79:AD:B8:A6:08:25:7E:EF:0B:FF:48:D9:B6:2C:C2:7E:A2 Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Certificate serial: 019AF1D1D1E2CE026D96643EC72BF9805ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft Manifest number: 1614 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: V2prH00u0LK0BSIjD48zRK+0IxC7bDTjIcQMdZC8P9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d1:e2:ce:02:6d:96:64:3e:c7:2b:f9:80:5a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=75529979adb8a608257eef0bff48d9b62cc27ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:ce:54:47:16:b5:44:e8:66:b4:cc:7b:0f: 71:04:af:a6:fd:81:15:cf:11:c4:06:3d:94:cc:2a: ef:90:02:8a:13:eb:01:bc:48:aa:6b:55:79:12:ba: 37:eb:18:20:da:80:76:c4:a0:c8:a8:e3:59:5e:b1: 08:f8:98:36:be:50:f6:97:c7:97:87:02:70:44:b3: 1e:46:6f:aa:65:8e:c9:0e:f0:07:13:63:2c:a1:b9: 77:9c:0a:ae:66:e3:63:51:47:fc:81:30:78:4f:12: 8b:b9:f1:e0:41:9b:49:4f:08:8d:f2:93:28:72:81: 84:8b:17:9f:33:33:b4:24:a6:b6:95:9b:9f:7f:17: a1:20:f1:9c:01:d4:b4:c5:08:d6:25:5c:28:96:2d: 99:a5:a4:fe:dd:d0:2a:1b:e3:8b:75:fc:f5:8e:43: d2:4d:66:ec:1e:6c:85:61:c2:cb:98:28:13:a9:56: 0c:27:83:0a:c6:5f:34:5b:b1:15:e1:df:d4:90:41: c1:54:c3:62:38:4a:fa:1e:02:5d:7f:19:51:82:46: 12:24:8a:b9:9e:58:4e:c1:82:97:a2:1f:d8:ea:01: ba:c3:47:1a:db:36:b1:e2:1b:be:59:e4:14:90:08: 2c:15:0f:04:07:61:40:31:8b:04:44:2a:1b:ae:d5: 19:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:52:99:79:AD:B8:A6:08:25:7E:EF:0B:FF:48:D9:B6:2C:C2:7E:A2 X509v3 Authority Key Identifier: keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:12:66:06:f8:0f:16:d3:ce:b3:b8:37:29:ad:ae:15:1e: f5:0e:a0:b2:b7:28:a1:fe:42:b0:f3:e3:8f:21:00:14:fe:94: 56:66:28:51:61:a1:32:d6:b8:76:5a:16:66:88:35:4e:95:6c: 46:c5:84:fb:8d:c4:7e:0f:35:81:24:ea:91:5b:59:b7:5c:4f: 24:c6:8f:d4:70:5a:c4:71:f0:93:04:61:33:fa:c7:c6:0a:ee: 51:f1:b5:0d:ca:b1:48:e3:f7:3d:09:c7:41:b8:f4:4e:bc:8f: 84:8e:d1:c7:3b:55:e5:a4:8c:bb:5c:08:4f:4d:d5:2b:cb:51: dc:cb:cb:0c:b2:5c:4c:a8:ce:78:d1:7c:d5:ff:9c:a7:3e:88: 5f:5e:a0:91:52:d9:ad:3b:9f:e1:90:76:04:57:a1:4b:77:2b: fe:b8:bd:17:5a:49:d9:d7:76:35:6e:d0:97:11:66:29:79:06: 42:cf:e1:3c:2d:f6:6c:c3:2d:c4:2a:04:f9:e4:24:4a:98:38: 61:c2:0e:16:0b:1f:63:9d:4f:38:23:47:8f:c1:c1:90:aa:5c: b8:ba:1e:66:d0:7b:32:78:e3:f8:53:3e:07:7a:57:12:13:9a: 24:92:24:c3:da:dd:9f:a2:5f:8b:4b:40:29:0a:20:6e:a5:ce: 6e:ef:48:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dHizgJtlmQ+xyv5gFrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNWNmN2QxZGM1ZmJkYmQ2MzRiZDYxYjgwYjdlZmZlZWM0 NjI4NzMwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD Eyg3NTUyOTk3OWFkYjhhNjA4MjU3ZWVmMGJmZjQ4ZDliNjJjYzI3ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbbOVEcWtUToZrTMew9xBK+m/YEV zxHEBj2UzCrvkAKKE+sBvEiqa1V5Ero36xgg2oB2xKDIqONZXrEI+Jg2vlD2l8eX hwJwRLMeRm+qZY7JDvAHE2Msobl3nAquZuNjUUf8gTB4TxKLufHgQZtJTwiN8pMo coGEixefMzO0JKa2lZuffxehIPGcAdS0xQjWJVwoli2ZpaT+3dAqG+OLdfz1jkPS TWbsHmyFYcLLmCgTqVYMJ4MKxl80W7EV4d/UkEHBVMNiOEr6HgJdfxlRgkYSJIq5 nlhOwYKXoh/Y6gG6w0ca2zax4hu+WeQUkAgsFQ8EB2FAMYsERCobrtUZlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVSmXmtuKYIJX7vC/9I2bYswn6iMB8GA1UdIwQY MBaAFOpc99HcX729Y0vWG4C37/7sRihzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQt ODEzMjMyOWFjMzViLzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQtODEzMjMyOWFjMzVi LzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuoSZgb4 DxbTzrO4NymtrhUe9Q6gsrcoof5CsPPjjyEAFP6UVmYoUWGhMta4dloWZog1TpVs RsWE+43Efg81gSTqkVtZt1xPJMaP1HBaxHHwkwRhM/rHxgruUfG1DcqxSOP3PQnH Qbj0TryPhI7RxztV5aSMu1wIT03VK8tR3MvLDLJcTKjOeNF81f+cpz6IX16gkVLZ rTuf4ZB2BFehS3cr/ri9F1pJ2dd2NW7QlxFmKXkGQs/hPC32bMMtxCoE+eQkSpg4 YcIOFgsfY51POCNHj8HBkKpcuLoeZtB7Mnjj+FM+B3pXEhOaJJIkw9rdn6Jfi0tA KQogbqXObu9IOg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:14 2025 by rpki-client