This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft File: 6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json) Hash identifier: f2Ov6MRceuud+kmHBx/Sso61gbgfmIiYitPGNt+6NFo= Subject key identifier: 08:B6:5D:73:3E:5F:CD:0C:90:E1:CD:43:46:94:37:72:E4:C2:2E:5D Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62 Certificate issuer: /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62 Certificate serial: 019AF464EE19F6540D2C73DC8FF224079F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft Manifest number: 0425 Signing time: Sat 06 Dec 2025 16:00:46 +0000 Manifest this update: Sat 06 Dec 2025 16:00:46 +0000 Manifest next update: Sun 07 Dec 2025 16:00:46 +0000 Files and hashes: 1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: 8vefsUDKpkzbktYeSC4Z8NZirfY7VgGWLbuVuAF7cKQ=) 2: Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa (hash: Useq54Tz9psDJFY8ug181fsHtAqbkZCsf85Cmb59VeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ee:19:f6:54:0d:2c:73:dc:8f:f2:24:07:9f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62 Validity Not Before: Dec 6 16:00:46 2025 GMT Not After : Dec 7 16:00:46 2025 GMT Subject: CN=08b65d733e5fcd0c90e1cd4346943772e4c22e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:74:d3:a3:53:4e:2b:88:d6:ab:5d:17:e9: cf:05:f4:7d:df:7b:e9:64:f2:c0:51:34:21:bc:ff: 22:bc:37:aa:f1:0b:1b:64:30:cc:e6:a4:c9:01:7b: 16:f2:32:fc:93:f5:bd:34:d6:a6:6a:03:dd:e0:65: 45:dd:7a:a3:77:6c:1c:56:58:8d:98:46:00:23:43: 7e:fc:84:7f:19:65:9b:2f:e0:a7:4f:66:f2:4e:e8: 3e:09:1c:2a:f8:b5:82:ec:a9:d3:66:8a:8a:2c:90: 2c:f7:94:d9:c2:b7:a2:8a:0f:cb:39:e2:99:13:5e: eb:22:d7:c4:cc:b6:d2:66:a7:be:6e:cb:a8:04:bb: 18:88:d5:a5:b0:be:75:82:c1:08:3d:4f:27:b0:f7: 8b:36:ec:cc:7e:4b:83:91:20:a3:af:01:c3:8a:01: 16:e5:4f:88:c8:48:94:f7:47:9e:4f:52:ee:c8:f1: 26:2e:12:f9:3a:10:7e:ed:63:57:ae:5e:8f:33:c0: d8:49:34:0d:a6:0d:fb:74:67:ac:73:3b:e2:9f:4e: ff:09:66:72:6f:84:89:da:ba:96:c1:b7:67:03:20: 48:2b:44:45:7d:02:30:b6:9b:c1:5a:ff:3b:19:a6: ee:ec:b9:9c:a6:82:57:fd:be:a5:1a:d0:ae:ac:2f: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B6:5D:73:3E:5F:CD:0C:90:E1:CD:43:46:94:37:72:E4:C2:2E:5D X509v3 Authority Key Identifier: keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:8a:9a:c1:11:f3:ee:09:f0:00:ef:73:3c:5c:1d:88:48:43: 40:a4:c8:7c:61:5d:40:6b:04:4e:f9:49:16:a9:0e:60:6c:83: bd:89:b9:dc:42:d5:ae:0a:74:92:44:bd:82:cf:f7:f0:a3:9c: 5b:fc:23:43:e4:29:00:04:30:aa:1e:c9:98:55:a8:a5:55:ec: 3b:3f:b2:af:22:75:9f:0a:5f:14:e2:51:cb:a1:e0:f1:cc:c5: 76:9d:14:bc:53:c6:a1:3f:eb:b0:8d:e3:00:c1:7f:eb:bc:f5: 72:b2:89:fc:6c:c3:8e:4f:5c:d0:85:22:19:61:f4:a2:0d:12: 5a:e7:c8:b1:74:10:61:e4:21:ab:80:2b:98:65:b0:02:b2:ee: 99:45:ef:53:30:06:fa:b7:ee:5b:13:d9:b3:23:04:bf:38:2e: 2e:a6:17:60:76:60:22:fd:83:22:19:b6:f2:c0:e9:f6:68:54: 77:06:54:ca:f0:b6:d4:8b:53:b2:b6:23:07:b4:5d:ad:b3:84: 15:45:4e:b6:01:f7:be:14:e5:2e:7a:6e:8f:5b:77:d4:95:09: 10:a6:8b:c4:82:e6:f9:43:39:9d:3e:c7:a8:28:7e:92:37:7c: 69:d3:aa:9d:c9:0a:65:4a:87:4a:50:e0:4a:dc:c9:13:ca:68: b7:fc:b4:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZO4Z9lQNLHPcj/IkB59FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOTBlZDY4NDhhOWNhMWVmMjAxMGU2MzRjZTIxYjZjOWFk ZGViNjIwHhcNMjUxMjA2MTYwMDQ2WhcNMjUxMjA3MTYwMDQ2WjAzMTEwLwYDVQQD EygwOGI2NWQ3MzNlNWZjZDBjOTBlMWNkNDM0Njk0Mzc3MmU0YzIyZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOV006NTTiuI1qtdF+nPBfR933vp ZPLAUTQhvP8ivDeq8QsbZDDM5qTJAXsW8jL8k/W9NNamagPd4GVF3Xqjd2wcVliN mEYAI0N+/IR/GWWbL+CnT2byTug+CRwq+LWC7KnTZoqKLJAs95TZwreiig/LOeKZ E17rItfEzLbSZqe+bsuoBLsYiNWlsL51gsEIPU8nsPeLNuzMfkuDkSCjrwHDigEW 5U+IyEiU90eeT1LuyPEmLhL5OhB+7WNXrl6PM8DYSTQNpg37dGesczvin07/CWZy b4SJ2rqWwbdnAyBIK0RFfQIwtpvBWv87Gabu7LmcpoJX/b6lGtCurC9JXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi2XXM+X80MkOHNQ0aUN3Lkwi5dMB8GA1UdIwQY MBaAFOqQ7WhIqcoe8gEOY0ziG2ya3etiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUt NTg2YjZkMDQ3ODc4LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUtNTg2YjZkMDQ3ODc4 LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA34qawRHz 7gnwAO9zPFwdiEhDQKTIfGFdQGsETvlJFqkOYGyDvYm53ELVrgp0kkS9gs/38KOc W/wjQ+QpAAQwqh7JmFWopVXsOz+yryJ1nwpfFOJRy6Hg8czFdp0UvFPGoT/rsI3j AMF/67z1crKJ/GzDjk9c0IUiGWH0og0SWufIsXQQYeQhq4ArmGWwArLumUXvUzAG +rfuWxPZsyMEvzguLqYXYHZgIv2DIhm28sDp9mhUdwZUyvC21ItTsrYjB7RdrbOE FUVOtgH3vhTlLnpuj1t31JUJEKaLxILm+UM5nT7HqCh+kjd8adOqnckKZUqHSlDg StzJE8pot/y0+A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:33 2025 by rpki-client