This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft File: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json) Hash identifier: gfFBy0+/TE1VBXN1aetXrNZPUCg62Hb2HVsRU7nXYw8= Subject key identifier: F9:11:FC:29:04:D0:75:9B:95:68:A7:9F:53:6F:3C:DD:37:2F:F8:1A Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d Certificate serial: 019AF1D25E6C98D7E38A930AE4AB8DAEB7AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft Manifest number: 161D Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: ENguFVn5VKhcd5OWGpK2O3LW5P42CmgCVQ9PORiHoj4=) 2: XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa (hash: P/OmeGABxQo0KdahW/abtL2rzvBKjRzNV4nj+svt9Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5e:6c:98:d7:e3:8a:93:0a:e4:ab:8d:ae:b7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=f911fc2904d0759b9568a79f536f3cdd372ff81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:7c:c7:05:78:96:3e:cf:23:eb:f8:53:79: 9e:2e:e7:4d:5d:21:9b:1b:85:87:68:7e:a8:0a:83: f9:b2:cd:ee:43:1e:21:53:1c:08:5a:f6:a6:38:c6: ae:a1:d7:6e:9f:09:dd:b7:d3:c5:8e:ed:8a:69:7a: f9:76:52:46:09:82:91:61:b1:05:22:cf:58:69:ac: 65:dc:10:f4:3e:54:36:44:9e:59:e3:df:11:8d:6d: a5:f3:51:1f:1f:36:8a:d3:29:11:f9:c4:8d:ff:06: a2:9f:1c:2b:a4:8a:80:01:2d:01:8d:0f:bb:04:74: 0a:04:5a:52:e1:a9:53:32:fa:5e:83:b4:e4:ff:56: 08:14:07:4a:3b:54:8a:28:a5:69:d4:99:13:d3:a7: 7c:08:cc:b7:1f:47:43:87:4b:80:5c:c4:f8:c9:05: 7c:87:db:af:db:62:db:31:a0:72:8c:1a:42:5a:1d: 41:f5:7a:4b:43:e8:8b:65:53:0a:e6:ef:a4:3b:41: 40:b1:2f:56:02:41:dc:69:a8:60:c8:93:e7:f0:d5: be:0d:5a:b3:ac:de:06:cc:a6:74:62:1f:75:94:fe: d3:eb:a1:d1:f0:cb:e1:00:80:cc:b4:68:c4:a6:31: bf:d9:c6:4b:ad:3e:66:a3:1f:2c:bc:cf:4c:b0:7b: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:FC:29:04:D0:75:9B:95:68:A7:9F:53:6F:3C:DD:37:2F:F8:1A X509v3 Authority Key Identifier: keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ab:ad:7e:a7:7c:75:89:3b:90:b5:7f:8a:01:30:03:66:3d: fb:b4:e5:03:dc:f5:d6:5e:29:b8:be:8a:9a:cb:dd:0a:27:d4: 18:a0:90:3b:4f:0c:bb:88:32:e5:e5:ba:5b:8d:26:7e:3f:6b: e2:17:09:19:49:e9:93:8d:7c:a0:66:03:32:e9:d1:5f:d3:20: 6a:42:ed:22:43:17:2c:d9:8b:54:c1:6e:ce:d4:fe:02:ae:2f: f1:91:db:98:36:ab:cb:a2:c4:54:9b:b6:4d:57:55:71:63:df: 7a:16:22:0f:5f:d0:9f:27:22:0c:2d:cf:f6:71:37:04:f2:32: 20:46:78:3a:86:05:1c:10:8d:7b:31:dd:e6:9c:3e:b2:a7:e6: 98:03:fb:6f:f4:bd:5a:b9:c3:d2:dd:9e:3b:d4:36:4c:bc:45: 9f:cf:1a:ab:b5:21:b5:1a:1f:61:02:90:38:d9:33:59:65:6e: d3:0c:18:84:96:c8:1b:b5:fa:f5:6f:f6:88:41:78:ca:bf:4a: 57:33:2b:c9:75:a0:2e:24:6b:dd:46:77:6c:e3:9e:c7:72:04: 4c:59:94:72:ce:92:a3:ed:35:63:af:f8:22:e7:af:2d:2b:a4: e0:a3:9f:98:b7:c4:98:28:13:3e:cb:c5:d9:a2:74:27:75:76: b9:1f:8a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l5smNfjipMK5KuNrretMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmQwZDlhYThjNzQzY2RhMTgyZjAwNjY4NTgzYTQ2ZTYw MGMzMmQwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EyhmOTExZmMyOTA0ZDA3NTliOTU2OGE3OWY1MzZmM2NkZDM3MmZmODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5d8xwV4lj7PI+v4U3meLudNXSGb G4WHaH6oCoP5ss3uQx4hUxwIWvamOMauoddunwndt9PFju2KaXr5dlJGCYKRYbEF Is9Yaaxl3BD0PlQ2RJ5Z498RjW2l81EfHzaK0ykR+cSN/wainxwrpIqAAS0BjQ+7 BHQKBFpS4alTMvpeg7Tk/1YIFAdKO1SKKKVp1JkT06d8CMy3H0dDh0uAXMT4yQV8 h9uv22LbMaByjBpCWh1B9XpLQ+iLZVMK5u+kO0FAsS9WAkHcaahgyJPn8NW+DVqz rN4GzKZ0Yh91lP7T66HR8MvhAIDMtGjEpjG/2cZLrT5mox8svM9MsHu8KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkR/CkE0HWblWinn1NvPN03L/gaMB8GA1UdIwQY MBaAFOi9DZqox0PNoYLwBmhYOkbmAMMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMt ODg5MjQzODY5Njc5LzEvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMtODg5MjQzODY5Njc5 LzEvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqutfqd8 dYk7kLV/igEwA2Y9+7TlA9z11l4puL6KmsvdCifUGKCQO08Mu4gy5eW6W40mfj9r 4hcJGUnpk418oGYDMunRX9MgakLtIkMXLNmLVMFuztT+Aq4v8ZHbmDary6LEVJu2 TVdVcWPfehYiD1/QnyciDC3P9nE3BPIyIEZ4OoYFHBCNezHd5pw+sqfmmAP7b/S9 WrnD0t2eO9Q2TLxFn88aq7UhtRofYQKQONkzWWVu0wwYhJbIG7X69W/2iEF4yr9K VzMryXWgLiRr3UZ3bOOex3IETFmUcs6So+01Y6/4IuevLSuk4KOfmLfEmCgTPsvF 2aJ0J3V2uR+KFA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:19 2025 by rpki-client