This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json) Hash identifier: gwMOfRUjPpo72AxfH5LrKnBzMChP4fm6NqICE7IB1o4= Subject key identifier: B0:60:22:42:E4:17:B8:83:EC:45:63:A3:18:C8:8A:8B:FC:57:94:8D Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68 Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68 Certificate serial: 019AF2AD65F684C2933E22E3594C4EB9DC8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft Manifest number: 06AC Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: tGtAOk29Pq0aj0kTrcRF9cpyMxl6e6bHaJh6BPhfd0c=) 2: kRbJM0r9hkR1wq3RdsUFiL0HT7Q.roa (hash: TB8ehbBKofWhXL0zKQ3+dh6paWgo+N+m/aat6bTAmec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:65:f6:84:c2:93:3e:22:e3:59:4c:4e:b9:dc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68 Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=b0602242e417b883ec4563a318c88a8bfc57948d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:ea:7a:42:4f:f9:c4:b3:83:b8:0c:f6:12: 1f:2c:04:0b:0c:4f:1d:86:3e:5e:09:55:b5:b7:c7: c8:47:db:34:6d:e8:b4:9e:ac:ce:c0:39:35:ab:e6: ad:d3:d9:3f:a8:6d:2e:22:3e:75:1c:29:50:c7:8a: a4:e7:9e:1e:81:e3:21:0b:62:89:88:c0:10:0a:97: 8d:ed:62:df:61:60:14:5e:50:9b:eb:a9:7f:ea:39: dc:69:48:f6:19:5c:ed:1b:2b:84:28:40:9b:c0:e3: d5:e5:93:c0:e6:71:75:a5:41:0a:1b:04:54:57:c7: 81:99:e3:4e:80:7e:bf:4a:16:79:28:d6:05:ed:fb: bc:75:d6:a9:50:e0:cc:56:a5:e8:e7:ef:68:76:3e: eb:0a:ba:7f:1f:b2:28:81:0d:a8:60:87:10:cb:ea: 04:e6:66:d9:f6:07:71:6a:2d:ad:1b:98:00:cd:60: 01:d7:72:bb:3b:61:42:fc:e3:5a:8e:10:d8:53:6f: e9:d3:70:ee:9d:c3:e4:38:a1:cb:0d:0b:89:61:ed: 8a:e1:b3:8f:b4:fc:94:47:0c:28:db:b9:fd:bb:4e: 68:0e:e2:fb:d4:4e:4f:c2:20:71:1d:eb:14:7a:19: 69:3f:8d:da:31:68:42:ec:75:bb:08:87:1c:2b:de: f2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:22:42:E4:17:B8:83:EC:45:63:A3:18:C8:8A:8B:FC:57:94:8D X509v3 Authority Key Identifier: keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:7b:b6:4f:cf:32:03:6c:bc:ba:35:81:71:1c:f1:a0:7e: 4e:c3:18:d0:42:54:c1:7b:c4:c8:45:34:df:4a:54:a4:61:ce: 08:a0:99:c3:bf:46:25:2f:3b:80:52:0e:8b:3c:62:b8:05:42: 0c:d7:57:6d:48:cf:50:0c:37:5c:62:f6:5e:96:10:08:a6:d6: df:4c:1b:2b:48:cb:56:b2:a4:c0:a4:d5:9a:31:3f:2e:f8:ae: 23:23:46:bb:fd:92:58:fb:5b:2e:21:f4:bb:6e:e7:08:05:2a: a7:38:25:6b:70:f8:16:aa:be:ed:67:1b:62:1f:ac:d0:83:d7: 2e:41:56:ba:33:74:4c:f8:12:1e:4c:d5:0f:c3:b0:f9:aa:26: 03:9c:3f:e6:b8:c5:ce:95:7d:ba:53:9c:65:ec:ac:1a:77:40: a7:75:16:55:cb:a5:2a:b9:10:e0:a9:12:d4:66:43:86:0f:f8: a8:c0:53:dd:cd:d4:b7:3f:36:5d:27:52:66:c1:6a:02:8e:08: 17:61:b2:31:72:a0:ee:8c:a8:31:f0:f7:1f:43:93:04:93:de: 40:12:d1:66:4d:12:08:5f:32:61:27:40:6d:e4:e6:50:91:be: 19:f2:5b:ad:fd:20:ec:e2:56:f5:48:26:7a:94:a6:48:d1:18: ed:33:0e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWX2hMKTPiLjWUxOudyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NWIyMWFmZTFiMDkxNmY1NWVlYTZkNWJkYzFkYmYyZTcz YTNjNjgwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD EyhiMDYwMjI0MmU0MTdiODgzZWM0NTYzYTMxOGM4OGE4YmZjNTc5NDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+bqekJP+cSzg7gM9hIfLAQLDE8d hj5eCVW1t8fIR9s0bei0nqzOwDk1q+at09k/qG0uIj51HClQx4qk554egeMhC2KJ iMAQCpeN7WLfYWAUXlCb66l/6jncaUj2GVztGyuEKECbwOPV5ZPA5nF1pUEKGwRU V8eBmeNOgH6/ShZ5KNYF7fu8ddapUODMVqXo5+9odj7rCrp/H7IogQ2oYIcQy+oE 5mbZ9gdxai2tG5gAzWAB13K7O2FC/ONajhDYU2/p03DuncPkOKHLDQuJYe2K4bOP tPyURwwo27n9u05oDuL71E5PwiBxHesUehlpP43aMWhC7HW7CIccK97yAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBgIkLkF7iD7EVjoxjIiov8V5SNMB8GA1UdIwQY MBaAFOhbIa/hsJFvVe6m1b3B2/LnOjxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTkt MGI0MTIzNGNiMGNlLzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTktMGI0MTIzNGNiMGNl LzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqt7tk/P MgNsvLo1gXEc8aB+TsMY0EJUwXvEyEU030pUpGHOCKCZw79GJS87gFIOizxiuAVC DNdXbUjPUAw3XGL2XpYQCKbW30wbK0jLVrKkwKTVmjE/LviuIyNGu/2SWPtbLiH0 u27nCAUqpzgla3D4Fqq+7WcbYh+s0IPXLkFWujN0TPgSHkzVD8Ow+aomA5w/5rjF zpV9ulOcZeysGndAp3UWVculKrkQ4KkS1GZDhg/4qMBT3c3Utz82XSdSZsFqAo4I F2GyMXKg7oyoMfD3H0OTBJPeQBLRZk0SCF8yYSdAbeTmUJG+GfJbrf0g7OJW9Ugm epSmSNEY7TMOsw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:08 2025 by rpki-client