This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft File: 6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json) Hash identifier: pf5qWc8nLW2IbxcCH9coTtcRKinvJKOJxVR9CULTF2U= Subject key identifier: 39:3B:92:A6:EB:A0:70:75:73:E5:2C:9C:99:A5:E4:44:35:20:27:62 Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2 Certificate issuer: /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2 Certificate serial: 019AF3527278FF969BBCD5CF3D82B2C329BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 11:00:58 +0000 Manifest this update: Sat 06 Dec 2025 11:00:58 +0000 Manifest next update: Sun 07 Dec 2025 11:00:58 +0000 Files and hashes: 1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: vO3Hoi4RMYp74XGgSmyngmb/yzIofZo89ZTCLU0r1Go=) 2: njlinsmP7gnmt4n7VDuZ0b4k0ZQ.roa (hash: 8omn75JjRFfw43kmGbnsTzRzp9iit4iIDtbQyHgj6GQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:72:78:ff:96:9b:bc:d5:cf:3d:82:b2:c3:29:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2 Validity Not Before: Dec 6 11:00:58 2025 GMT Not After : Dec 7 11:00:58 2025 GMT Subject: CN=393b92a6eba0707573e52c9c99a5e44435202762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:31:5b:15:2b:1b:43:d6:78:05:c3:d3:d5: c8:35:bf:26:11:ff:74:47:05:ba:b6:ac:2e:8d:1d: 26:48:73:b9:79:0e:01:cd:be:ed:fb:6b:12:08:fe: 8e:0d:12:db:8d:f7:7a:e1:f0:44:92:df:40:cd:95: 64:09:cd:68:e5:ba:97:1b:20:1e:c2:2e:3c:ca:4a: e9:69:cd:d7:59:25:00:23:f6:7d:2b:c8:33:8e:04: 14:4d:d7:11:a5:0e:9b:be:95:02:c7:a5:b1:5e:6c: ad:1a:3f:1a:b5:2d:1e:45:53:70:51:76:f3:99:54: c3:5f:02:c7:04:51:a2:b7:07:37:a2:62:2d:a0:6a: 8b:2a:ea:08:50:62:7d:33:1a:7c:48:f9:b6:30:d4: 3d:f6:6c:bd:c9:2c:74:24:bf:79:12:c1:e3:c8:88: ee:e7:db:c2:d6:c7:b5:a7:2f:ed:09:15:7f:26:86: 6f:6f:ad:3b:ba:68:59:78:f5:84:6c:cf:6b:9d:cd: c2:43:fc:23:5d:d3:46:e0:ea:61:06:95:ef:b4:8c: 89:37:69:ef:fd:d0:e3:50:7f:03:7b:d8:dd:28:05: 1a:af:be:57:c4:59:87:12:44:ed:0a:bb:b6:5a:0a: 5a:3e:4f:8c:ef:f9:44:d8:77:1a:7a:c8:0b:f0:59: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3B:92:A6:EB:A0:70:75:73:E5:2C:9C:99:A5:E4:44:35:20:27:62 X509v3 Authority Key Identifier: keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:00:f3:f7:9a:26:6c:d5:80:69:b5:0f:15:f2:8e:a4:fb:80: 4b:f2:e4:ff:2f:51:67:2b:99:40:b9:33:a0:5d:ec:d9:59:14: e5:de:fc:30:68:fc:d8:9f:b3:8a:60:c6:ce:be:72:d5:c1:f2: 0f:40:53:a0:16:a0:5a:9b:e7:24:60:b8:86:63:da:3b:bc:ff: 3f:1f:6b:a6:96:ec:4d:3b:6e:85:65:88:0f:51:22:44:26:8a: d4:c1:a1:fd:4e:02:09:9f:a4:37:16:e5:a4:3a:41:b9:9c:03: 8a:b1:a0:9c:88:36:54:1e:7f:6a:e3:89:dd:fe:c5:d3:4f:a7: 3c:6d:38:32:de:51:7c:d2:47:14:ca:a8:5c:5b:8a:97:96:85: 3f:85:f3:29:d2:7d:9f:bd:53:f4:0f:3d:60:1f:84:a1:11:42: 71:1a:dc:ed:e9:a6:1f:ac:0e:34:29:5d:5a:31:18:5f:6e:3f: 9f:6a:d0:34:68:4d:3b:40:3d:1a:8b:00:91:01:0f:c8:82:bf: b8:f8:b2:ae:6d:50:7d:99:e2:a7:2c:ea:bd:b3:3f:08:4a:25: 56:0b:9e:e0:c2:1a:a0:80:78:0f:25:71:6d:11:2c:f7:c7:0e: 6c:7e:bd:a2:92:e6:50:c4:37:ca:d4:1b:01:35:de:1e:5e:63: 67:6a:0d:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnJ4/5abvNXPPYKywym7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NjM2MGRiODFmNTA1YzVlOWE5YjVhZDEwYTgxYzY0ZjRh ODViZDIwHhcNMjUxMjA2MTEwMDU4WhcNMjUxMjA3MTEwMDU4WjAzMTEwLwYDVQQD EygzOTNiOTJhNmViYTA3MDc1NzNlNTJjOWM5OWE1ZTQ0NDM1MjAyNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3cxWxUrG0PWeAXD09XINb8mEf90 RwW6tqwujR0mSHO5eQ4Bzb7t+2sSCP6ODRLbjfd64fBEkt9AzZVkCc1o5bqXGyAe wi48ykrpac3XWSUAI/Z9K8gzjgQUTdcRpQ6bvpUCx6WxXmytGj8atS0eRVNwUXbz mVTDXwLHBFGitwc3omItoGqLKuoIUGJ9Mxp8SPm2MNQ99my9ySx0JL95EsHjyIju 59vC1se1py/tCRV/JoZvb607umhZePWEbM9rnc3CQ/wjXdNG4OphBpXvtIyJN2nv /dDjUH8De9jdKAUar75XxFmHEkTtCru2WgpaPk+M7/lE2HcaesgL8FmyaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk7kqbroHB1c+UsnJml5EQ1ICdiMB8GA1UdIwQY MBaAFOhjYNuB9QXF6am1rRCoHGT0qFvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMt NzYxODliZDRhMDQwLzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMtNzYxODliZDRhMDQw LzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgDz95om bNWAabUPFfKOpPuAS/Lk/y9RZyuZQLkzoF3s2VkU5d78MGj82J+zimDGzr5y1cHy D0BToBagWpvnJGC4hmPaO7z/Px9rppbsTTtuhWWID1EiRCaK1MGh/U4CCZ+kNxbl pDpBuZwDirGgnIg2VB5/auOJ3f7F00+nPG04Mt5RfNJHFMqoXFuKl5aFP4XzKdJ9 n71T9A89YB+EoRFCcRrc7emmH6wONCldWjEYX24/n2rQNGhNO0A9GosAkQEPyIK/ uPiyrm1QfZnipyzqvbM/CEolVgue4MIaoIB4DyVxbREs98cObH69opLmUMQ3ytQb ATXeHl5jZ2oNaw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:57 2025 by rpki-client