This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft File: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json) Hash identifier: WaPL4kHm6fuPOvQLr8p+6tBM+RVQB0sZ3WV65xeynTQ= Subject key identifier: B3:1A:58:63:6E:57:83:53:9B:48:E7:8F:DD:DF:3A:ED:40:CB:66:1D Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB Certificate issuer: /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb Certificate serial: 019AF31C8FED7EBB741F5D0C2A89E7DB8654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft Manifest number: 060B Signing time: Sat 06 Dec 2025 10:02:06 +0000 Manifest this update: Sat 06 Dec 2025 10:02:06 +0000 Manifest next update: Sun 07 Dec 2025 10:02:06 +0000 Files and hashes: 1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: TOqQWrTxB8eRKbdOEBZYqVKg3qc1KQcF0CrS/PjdZtU=) 2: h4IDWh5GVC7RbE5zSCDWjjHj0_w.roa (hash: mtJ3QHHj/MXmx1AqDIJUZFeqCYJYqfmAn/WwFLDw0/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8f:ed:7e:bb:74:1f:5d:0c:2a:89:e7:db:86:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb Validity Not Before: Dec 6 10:02:06 2025 GMT Not After : Dec 7 10:02:06 2025 GMT Subject: CN=b31a58636e5783539b48e78fdddf3aed40cb661d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:17:fb:e4:d3:ae:31:1e:40:df:3f:fb:f7: a6:38:d6:d2:5c:77:ba:1d:26:39:42:0f:e5:76:6a: 98:74:19:99:34:59:90:f2:d1:ea:9d:9a:72:27:cf: b3:53:2e:4b:20:f6:cb:2f:ae:7a:56:9f:78:de:b5: e8:ed:73:b4:4f:1b:53:b4:5a:74:53:1f:19:10:da: 38:25:28:c4:a4:29:f3:21:15:c3:d7:e5:b7:6e:47: 92:9d:16:58:26:af:f0:97:d5:37:87:74:1d:d3:5b: b4:ce:05:91:35:29:3f:58:d9:9a:33:1a:d4:09:d1: ed:70:09:0e:25:e7:90:8e:93:94:1c:25:7d:ff:c1: 3e:88:01:0a:68:fb:15:f3:52:7f:13:3e:18:80:39: a9:b7:a4:66:0c:ca:4d:ad:54:16:08:bf:cb:dd:73: 9d:8a:10:c4:87:7c:f3:ad:1a:26:e4:a5:96:b1:39: 3f:12:b0:7f:06:ed:40:0f:19:a5:e2:9a:cb:72:2a: 19:a6:ca:64:ba:57:6d:a1:c8:92:69:ba:4e:a6:b1: 09:1b:45:86:2f:26:15:04:08:4c:66:7c:5e:d3:15: 9f:b5:b4:b0:20:34:26:6a:6c:18:2a:eb:d5:b4:fd: d8:4d:72:20:19:eb:33:25:4c:5c:a2:02:cf:76:70: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1A:58:63:6E:57:83:53:9B:48:E7:8F:DD:DF:3A:ED:40:CB:66:1D X509v3 Authority Key Identifier: keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c6:2f:b6:49:64:77:1e:de:73:40:94:5c:b3:07:ae:5a:94: fa:59:36:5f:06:10:c9:79:97:9d:08:19:a9:fc:f4:90:5b:2e: 8f:88:c8:bf:9c:e7:b0:93:91:e4:7d:81:fa:5b:ae:84:cd:2c: d7:66:28:3e:15:f4:00:84:ff:71:21:8e:ae:3f:e3:5a:1e:ef: ca:c1:a4:2c:66:5d:66:73:e9:8a:a8:05:54:3e:56:0c:0c:65: ef:e1:ee:6a:dd:b6:11:72:f4:5d:05:d4:fc:ed:c6:7d:f4:5d: b9:9d:d4:4d:58:a9:d7:cf:e7:73:56:4b:04:99:f7:c8:e6:25: 7a:61:d1:d5:cf:c4:19:30:b0:85:ce:c7:0e:76:37:9b:9f:4d: c6:98:7c:ac:fa:7e:f2:4f:63:8a:6d:18:80:66:59:cb:94:3e: f7:d0:42:6d:de:9a:a1:d9:47:62:d3:b0:00:64:81:9b:1c:16: 5a:a4:7c:64:94:ec:d5:27:bd:5b:0c:99:ef:87:13:f3:d3:fb: f1:7f:8d:f3:37:04:61:8a:a2:0d:10:83:5f:a6:38:dd:1f:38: b7:48:c9:d1:a4:cf:13:4c:89:51:1f:af:03:db:ee:a4:6a:cd: 44:ee:5a:a9:43:48:49:0c:26:4d:90:97:65:4b:38:f0:58:9c: ec:b0:33:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHI/tfrt0H10MKonn24ZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NWNjMTc4Y2RmNWFkOTI3OTkzOWU1NzY4YWU4ODgzZmZi ZjM1ZWIwHhcNMjUxMjA2MTAwMjA2WhcNMjUxMjA3MTAwMjA2WjAzMTEwLwYDVQQD EyhiMzFhNTg2MzZlNTc4MzUzOWI0OGU3OGZkZGRmM2FlZDQwY2I2NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pcX++TTrjEeQN8/+/emONbSXHe6 HSY5Qg/ldmqYdBmZNFmQ8tHqnZpyJ8+zUy5LIPbLL656Vp943rXo7XO0TxtTtFp0 Ux8ZENo4JSjEpCnzIRXD1+W3bkeSnRZYJq/wl9U3h3Qd01u0zgWRNSk/WNmaMxrU CdHtcAkOJeeQjpOUHCV9/8E+iAEKaPsV81J/Ez4YgDmpt6RmDMpNrVQWCL/L3XOd ihDEh3zzrRom5KWWsTk/ErB/Bu1ADxml4prLcioZpspkuldtociSabpOprEJG0WG LyYVBAhMZnxe0xWftbSwIDQmamwYKuvVtP3YTXIgGeszJUxcogLPdnCyuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMaWGNuV4NTm0jnj93fOu1Ay2YdMB8GA1UdIwQY MBaAFOlcwXjN9a2SeZOeV2iuiIP/vzXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYt MmRmOTlkODEyM2I3LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYtMmRmOTlkODEyM2I3 LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMYvtklk dx7ec0CUXLMHrlqU+lk2XwYQyXmXnQgZqfz0kFsuj4jIv5znsJOR5H2B+luuhM0s 12YoPhX0AIT/cSGOrj/jWh7vysGkLGZdZnPpiqgFVD5WDAxl7+Huat22EXL0XQXU /O3GffRduZ3UTVip18/nc1ZLBJn3yOYlemHR1c/EGTCwhc7HDnY3m59Nxph8rPp+ 8k9jim0YgGZZy5Q+99BCbd6aodlHYtOwAGSBmxwWWqR8ZJTs1Se9WwyZ74cT89P7 8X+N8zcEYYqiDRCDX6Y43R84t0jJ0aTPE0yJUR+vA9vupGrNRO5aqUNISQwmTZCX ZUs48Fic7LAzlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:41 2025 by rpki-client