This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json) Hash identifier: TrcN8eRxRHZv1aor/sL0yADyxsegGkq4JWsoZ2kCdkY= Subject key identifier: CB:31:37:70:F5:91:5D:DD:64:C5:1A:5E:73:D0:B6:A3:A8:42:8F:A5 Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9 Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9 Certificate serial: 019AF088B05DC6D9B69A3FAD7B4BAA762176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft Manifest number: 0638 Signing time: Fri 05 Dec 2025 22:01:21 +0000 Manifest this update: Fri 05 Dec 2025 22:01:21 +0000 Manifest next update: Sat 06 Dec 2025 22:01:21 +0000 Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: LXs8nVL/LVO4Lz6EXCgSCFczj/x+4miaLsIToryP1GQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b0:5d:c6:d9:b6:9a:3f:ad:7b:4b:aa:76:21:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9 Validity Not Before: Dec 5 22:01:21 2025 GMT Not After : Dec 6 22:01:21 2025 GMT Subject: CN=cb313770f5915ddd64c51a5e73d0b6a3a8428fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e1:6e:9d:62:32:41:23:ac:19:5f:aa:2c:67: 35:93:3e:9d:28:1a:2a:3d:ab:d5:14:31:02:06:07: 4b:41:11:f8:7e:c0:c8:e2:18:25:2d:13:a5:84:02: 7a:d3:2f:b1:0e:bb:c1:ef:6f:30:53:e7:24:60:78: f1:c0:5a:42:bc:56:e3:27:10:fc:62:ee:eb:ab:48: 22:d8:60:39:37:14:cc:51:ac:c4:48:96:b6:e0:6a: ac:c7:0b:5f:8a:7c:a5:49:bc:52:bb:e1:f0:c4:1e: 7b:68:02:c1:d0:0c:05:1b:15:dd:a2:f6:44:e6:9d: a5:8c:e0:12:2d:82:c9:fd:24:a9:7b:58:c3:9b:90: 72:cb:5d:57:4f:6c:56:c0:00:a6:dc:2c:ef:f7:22: 05:0d:73:ea:0f:a6:6b:72:e8:23:2f:80:68:bb:53: 8a:99:19:6e:9d:45:42:df:a6:49:e2:c2:b9:aa:b3: 7e:01:e3:ce:8f:8d:4f:70:17:3d:19:9d:61:dd:1f: ec:78:fe:b5:7b:2e:9e:f7:0a:b9:55:ac:49:6d:a2: 7f:5d:ae:a2:85:97:56:bc:78:cf:5c:dd:52:50:47: 78:3b:85:41:bf:d2:5c:83:63:2d:19:b1:49:3e:30: 06:9b:f5:a9:8c:04:3f:03:28:7c:e1:25:b7:69:4a: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:31:37:70:F5:91:5D:DD:64:C5:1A:5E:73:D0:B6:A3:A8:42:8F:A5 X509v3 Authority Key Identifier: keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:72:1a:7d:99:00:ab:74:2c:2b:59:a0:f6:a2:3e:7c:45:d4: 76:c0:39:e8:dd:ad:d6:98:74:a4:9e:f8:26:2f:06:51:d5:34: 74:ce:67:00:26:19:46:cc:5c:de:7d:81:21:a7:3f:a2:a3:1c: 20:9c:bf:01:68:49:13:47:9b:49:52:06:f8:9d:b2:1d:28:6c: 3d:46:00:78:c0:4f:c8:ed:10:81:d3:3a:b2:56:81:35:93:89: f4:a8:11:d1:ba:ef:3f:38:e8:33:d4:18:77:b8:e7:13:f2:bd: e0:89:fe:fb:8c:d9:c2:16:96:a0:31:ab:7c:0f:ba:3f:12:3f: 2e:c4:fe:90:4f:1a:cd:13:b3:91:96:d3:31:4e:ea:c8:f9:46: 2d:af:ac:98:70:07:94:5d:50:00:4a:88:57:ba:51:38:e5:a6: af:ff:05:3d:36:f8:02:9b:9f:c0:9d:ac:9e:46:3b:95:42:46: af:3b:20:a5:1c:f5:82:ea:8d:3b:9a:6f:0d:75:56:03:54:f3: 6f:33:49:ab:33:3e:35:70:80:32:98:e8:fe:12:21:37:e3:6f: 74:1f:cc:7f:92:22:11:2a:2e:91:b5:28:2d:40:0d:6c:f8:14: 47:f0:2e:c5:81:26:6a:b8:90:3e:34:47:18:23:d1:46:74:81: 86:c5:ba:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLBdxtm2mj+te0uqdiF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTRmZjZhY2IxODBlNjA0OTczYTUyODdlZjBhOTJlNjZk ZmNjZTkwHhcNMjUxMjA1MjIwMTIxWhcNMjUxMjA2MjIwMTIxWjAzMTEwLwYDVQQD EyhjYjMxMzc3MGY1OTE1ZGRkNjRjNTFhNWU3M2QwYjZhM2E4NDI4ZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+FunWIyQSOsGV+qLGc1kz6dKBoq PavVFDECBgdLQRH4fsDI4hglLROlhAJ60y+xDrvB728wU+ckYHjxwFpCvFbjJxD8 Yu7rq0gi2GA5NxTMUazESJa24GqsxwtfinylSbxSu+HwxB57aALB0AwFGxXdovZE 5p2ljOASLYLJ/SSpe1jDm5Byy11XT2xWwACm3Czv9yIFDXPqD6ZrcugjL4Bou1OK mRlunUVC36ZJ4sK5qrN+AePOj41PcBc9GZ1h3R/seP61ey6e9wq5VaxJbaJ/Xa6i hZdWvHjPXN1SUEd4O4VBv9Jcg2MtGbFJPjAGm/WpjAQ/Ayh84SW3aUpvSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsxN3D1kV3dZMUaXnPQtqOoQo+lMB8GA1UdIwQY MBaAFOpU/2rLGA5gSXOlKH7wqS5m38zpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMt NDNjOGY4YjJjMzg0LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMtNDNjOGY4YjJjMzg0 LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXIafZkA q3QsK1mg9qI+fEXUdsA56N2t1ph0pJ74Ji8GUdU0dM5nACYZRsxc3n2BIac/oqMc IJy/AWhJE0ebSVIG+J2yHShsPUYAeMBPyO0QgdM6slaBNZOJ9KgR0brvPzjoM9QY d7jnE/K94In++4zZwhaWoDGrfA+6PxI/LsT+kE8azROzkZbTMU7qyPlGLa+smHAH lF1QAEqIV7pROOWmr/8FPTb4ApufwJ2snkY7lUJGrzsgpRz1guqNO5pvDXVWA1Tz bzNJqzM+NXCAMpjo/hIhN+NvdB/Mf5IiESoukbUoLUANbPgUR/AuxYEmariQPjRH GCPRRnSBhsW6BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:49 2025 by rpki-client