This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json) Hash identifier: QJDB7Cl80q1JbI+m32bzfzA0nI8+PYfterove4cPUyA= Subject key identifier: BC:66:F3:BB:79:47:7A:0A:34:C2:0E:80:0B:F2:3E:1D:6B:F1:79:26 Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Certificate serial: 019AF1645FE87257D7DA876E597A7FC23E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft Manifest number: 0EFF Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: fAGjsxQfawcd55dxFXN2oH7sWVtX1SVDSWJjAYLi4iA=) 2: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (hash: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5f:e8:72:57:d7:da:87:6e:59:7a:7f:c2:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=bc66f3bb79477a0a34c20e800bf23e1d6bf17926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:cf:05:08:9d:f1:2e:5e:2b:c9:79:b1:54: 55:14:2b:41:24:c0:18:c2:4f:a3:4d:d4:a8:2f:68: 05:c0:74:73:37:33:56:c9:f3:c6:f4:0c:c7:bc:ec: 87:37:89:36:2d:e0:71:0c:e7:a3:00:78:0a:43:b8: b8:1c:ea:49:a5:a0:be:e1:28:53:bf:1c:c2:0c:e9: 5f:94:70:d3:1b:e3:a9:10:c2:4c:e0:ae:6c:7d:80: eb:cf:8b:9a:7e:d6:4a:99:c8:09:6e:29:7b:14:27: 3e:48:ee:5b:a6:2b:ea:d4:3a:36:93:64:d0:dc:3d: e9:d5:c5:cb:dc:50:fd:9c:d6:4f:16:d1:e4:ae:2e: f0:69:22:51:b3:e7:d1:ff:3f:91:fd:75:cd:f7:34: 83:87:c0:81:34:5f:d4:f4:31:ed:70:fa:ae:66:28: 4a:b6:c5:04:04:de:c7:d9:d2:5d:94:fc:1b:5e:0a: 08:ab:2d:f2:dc:00:83:6b:16:b6:9c:15:bf:3b:be: cd:55:90:6a:2f:48:50:d0:22:06:c7:e4:43:17:86: 80:f3:c7:c1:51:8f:1d:cc:c9:e0:c7:d1:9c:96:b3: e2:60:ce:db:b6:ce:4e:8d:4e:72:44:91:0b:55:ba: 6f:52:85:a3:99:d9:5d:85:f5:f3:b6:f7:37:d0:b4: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:66:F3:BB:79:47:7A:0A:34:C2:0E:80:0B:F2:3E:1D:6B:F1:79:26 X509v3 Authority Key Identifier: keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c4:87:84:b5:55:13:f0:44:af:a1:03:9f:c8:ea:43:51:09: e8:79:66:e6:d9:75:3a:38:40:f0:9f:86:80:6b:ec:0d:44:37: e9:0a:92:e8:c8:25:9e:cb:09:9e:9e:6a:ba:8d:7f:47:b6:61: ac:ae:b5:58:b2:fb:b9:cc:4f:82:4d:bd:5f:3a:dd:5b:e3:2d: 74:54:82:6f:83:3c:28:09:42:3b:0b:00:b4:a1:73:9b:35:44: 14:b7:94:f9:c5:5a:dc:22:87:e3:af:97:4e:d7:44:ce:97:8f: c3:c1:6a:2e:f6:35:cf:f0:60:50:1a:f8:da:0f:d9:07:5e:ca: 84:4b:17:20:f4:23:cf:32:a9:18:90:e1:bc:a1:1c:d0:26:93: 91:30:f6:e8:e0:0d:d7:ce:fb:cf:9c:26:94:2b:77:9b:9d:b5: 80:19:51:99:93:47:34:5f:f6:a9:f2:30:8e:81:0b:e9:85:c4: f2:2b:62:1f:31:a0:ad:2b:4d:8a:16:97:85:de:cf:f5:4c:a3: 4a:c7:2f:1c:4e:25:8d:bd:b6:f4:1d:38:df:f8:0a:c0:4c:91: f1:e4:02:50:b2:d2:a3:b8:b2:64:43:5b:d6:24:44:64:f6:56: 8f:51:4d:8b:2c:4c:72:92:7e:e1:5b:10:c4:4a:4e:54:2f:83: b5:38:c6:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZF/oclfX2oduWXp/wj5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDFkMTVmNTkxMWQ0OGQxYzU5ZWVmMzc0ZjdiMzdmNzFk NGViYmYwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD EyhiYzY2ZjNiYjc5NDc3YTBhMzRjMjBlODAwYmYyM2UxZDZiZjE3OTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXXPBQid8S5eK8l5sVRVFCtBJMAY wk+jTdSoL2gFwHRzNzNWyfPG9AzHvOyHN4k2LeBxDOejAHgKQ7i4HOpJpaC+4ShT vxzCDOlflHDTG+OpEMJM4K5sfYDrz4uaftZKmcgJbil7FCc+SO5bpivq1Do2k2TQ 3D3p1cXL3FD9nNZPFtHkri7waSJRs+fR/z+R/XXN9zSDh8CBNF/U9DHtcPquZihK tsUEBN7H2dJdlPwbXgoIqy3y3ACDaxa2nBW/O77NVZBqL0hQ0CIGx+RDF4aA88fB UY8dzMngx9GclrPiYM7bts5OjU5yRJELVbpvUoWjmdldhfXztvc30LTebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxm87t5R3oKNMIOgAvyPh1r8XkmMB8GA1UdIwQY MBaAFOjR0V9ZEdSNHFnu83T3s39x1Ou/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEt NjZmOGI2ZTE2YjhhLzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEtNjZmOGI2ZTE2Yjhh LzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMSHhLVV E/BEr6EDn8jqQ1EJ6Hlm5tl1OjhA8J+GgGvsDUQ36QqS6MglnssJnp5quo1/R7Zh rK61WLL7ucxPgk29XzrdW+MtdFSCb4M8KAlCOwsAtKFzmzVEFLeU+cVa3CKH46+X TtdEzpePw8FqLvY1z/BgUBr42g/ZB17KhEsXIPQjzzKpGJDhvKEc0CaTkTD26OAN 1877z5wmlCt3m521gBlRmZNHNF/2qfIwjoEL6YXE8itiHzGgrStNihaXhd7P9Uyj SscvHE4ljb229B043/gKwEyR8eQCULLSo7iyZENb1iREZPZWj1FNiyxMcpJ+4VsQ xEpOVC+DtTjG8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:32 2025 by rpki-client