This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft File: Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json) Hash identifier: hxBazXkYTebSH7j562iHZZHTDq/STWQ7RNTIlIssjok= Subject key identifier: 05:95:09:6A:4B:FA:10:E2:57:30:0A:0B:7F:D6:49:58:AB:82:16:3C Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71 Certificate issuer: /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671 Certificate serial: 019AF051112EFEFCFD695EFC072CBE587B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft Manifest number: E9 Signing time: Fri 05 Dec 2025 21:00:35 +0000 Manifest this update: Fri 05 Dec 2025 21:00:35 +0000 Manifest next update: Sat 06 Dec 2025 21:00:35 +0000 Files and hashes: 1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: T/ZvdOxomc1VG4j5yWy4iLrID/qf+KuBH73Au26ZRug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:11:2e:fe:fc:fd:69:5e:fc:07:2c:be:58:7b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671 Validity Not Before: Dec 5 21:00:35 2025 GMT Not After : Dec 6 21:00:35 2025 GMT Subject: CN=0595096a4bfa10e257300a0b7fd64958ab82163c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:5c:d0:f1:a8:95:9d:d5:25:c8:c6:82:7c: 4b:71:d5:1b:2a:cb:74:85:af:8d:22:3c:ad:56:c1: 39:db:1c:f9:c9:74:b4:9c:22:59:18:60:d4:1e:4f: 66:3d:88:6b:bd:bf:64:f2:21:5b:14:23:f4:0d:fe: 85:dd:13:3e:ab:be:24:75:3b:52:a7:a5:72:59:50: e4:df:34:4b:f8:06:51:e2:23:c2:de:f0:40:2f:a3: 1d:7a:fa:e7:4b:f1:7c:3d:cb:eb:f6:01:c2:30:fd: 8f:b0:30:ca:fb:e0:0e:71:0d:ff:cb:ee:ce:e0:d0: 9f:d8:11:85:81:e6:57:3d:19:4c:a1:b4:16:1c:24: bb:04:38:5f:4b:52:d4:b5:26:af:18:f1:d9:f8:5c: 38:b3:4d:69:56:6d:b7:3d:a8:c4:46:da:00:23:fa: d4:28:f9:84:5c:e6:38:af:e2:e8:c4:5d:9a:de:6b: 51:2a:4c:28:78:b4:61:01:f9:1c:c6:57:d8:98:9f: 60:89:e8:1f:70:9c:2b:6e:c8:eb:81:11:29:af:dc: 49:93:2d:45:32:97:30:a6:ff:2a:98:af:7d:51:22: da:a6:74:d1:de:82:c2:31:ef:e4:e1:d7:fd:43:61: 20:8a:f1:b9:aa:c4:fd:ed:66:fc:e0:51:8e:c9:a7: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:95:09:6A:4B:FA:10:E2:57:30:0A:0B:7F:D6:49:58:AB:82:16:3C X509v3 Authority Key Identifier: keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:db:ee:41:a5:fe:7c:1c:98:e3:43:13:df:b8:12:72:91:f2: d0:81:07:69:d9:c8:e0:2c:c4:f6:d2:98:fd:6c:de:e9:cc:9e: 35:c3:25:79:2e:81:e5:0c:ed:0d:9a:de:b3:cd:4b:cb:4b:6d: ce:a9:f5:4d:ad:61:b0:2c:76:3c:bf:a5:e1:5b:ef:45:0b:37: ae:a2:b7:e7:10:48:b3:1b:49:c1:3f:b3:fa:a7:e4:79:fb:ec: f1:27:0a:49:45:38:b2:d4:f4:fe:02:ad:db:4b:85:60:7b:eb: 47:dc:51:94:76:1e:a8:fd:fe:2a:8a:ba:2f:84:58:95:59:4f: 8e:e6:5f:83:a8:8b:31:8c:60:58:e0:9e:f6:c7:a6:a6:7c:9e: a5:db:6c:65:2d:a6:2b:81:0c:73:3a:e4:7d:da:97:a8:77:50: df:ee:35:9f:97:2f:f1:bd:03:3d:81:c7:7d:93:c9:35:65:8c: 18:7d:2d:07:0d:84:25:d7:26:10:39:51:4b:b9:ca:f5:4c:42: b1:da:3d:dc:f8:73:c3:e4:a0:c6:91:8d:1b:b9:43:28:ab:c1: 6e:bf:4e:a6:e3:39:e7:84:41:38:c6:ff:a2:87:f5:eb:97:7a: ee:70:e8:ab:48:21:16:4e:ad:c2:a2:0c:7a:90:3a:02:31:30: ce:35:34:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUREu/vz9aV78Byy+WHuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGVhNWY5MmU5MjlkNjc0NGQ0YzhkYTZhNWRjOTJlYTMy YmY2NzEwHhcNMjUxMjA1MjEwMDM1WhcNMjUxMjA2MjEwMDM1WjAzMTEwLwYDVQQD EygwNTk1MDk2YTRiZmExMGUyNTczMDBhMGI3ZmQ2NDk1OGFiODIxNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM9c0PGolZ3VJcjGgnxLcdUbKst0 ha+NIjytVsE52xz5yXS0nCJZGGDUHk9mPYhrvb9k8iFbFCP0Df6F3RM+q74kdTtS p6VyWVDk3zRL+AZR4iPC3vBAL6MdevrnS/F8Pcvr9gHCMP2PsDDK++AOcQ3/y+7O 4NCf2BGFgeZXPRlMobQWHCS7BDhfS1LUtSavGPHZ+Fw4s01pVm23PajERtoAI/rU KPmEXOY4r+LoxF2a3mtRKkwoeLRhAfkcxlfYmJ9giegfcJwrbsjrgREpr9xJky1F Mpcwpv8qmK99USLapnTR3oLCMe/k4df9Q2EgivG5qsT97Wb84FGOyadbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWVCWpL+hDiVzAKC3/WSVirghY8MB8GA1UdIwQY MBaAFCHepfkukp1nRNTI2mpdyS6jK/ZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ2bC1TNlNuV2RFMU1qYWFsM0pMcU1yOW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYzM2YTAtZGQ0My00NTU3LTliYzQt ZGQ5NWFjNjE5NzBmLzEvSWQ2bC1TNlNuV2RFMU1qYWFsM0pMcU1yOW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kYzM2YTAtZGQ0My00NTU3LTliYzQtZGQ5NWFjNjE5NzBm LzEvSWQ2bC1TNlNuV2RFMU1qYWFsM0pMcU1yOW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtvuQaX+ fByY40MT37gScpHy0IEHadnI4CzE9tKY/Wze6cyeNcMleS6B5QztDZres81Ly0tt zqn1Ta1hsCx2PL+l4VvvRQs3rqK35xBIsxtJwT+z+qfkefvs8ScKSUU4stT0/gKt 20uFYHvrR9xRlHYeqP3+Koq6L4RYlVlPjuZfg6iLMYxgWOCe9sempnyepdtsZS2m K4EMczrkfdqXqHdQ3+41n5cv8b0DPYHHfZPJNWWMGH0tBw2EJdcmEDlRS7nK9UxC sdo93Phzw+SgxpGNG7lDKKvBbr9OpuM554RBOMb/oof165d67nDoq0ghFk6twqIM epA6AjEwzjU0Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:38 2025 by rpki-client