This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json) Hash identifier: SSUzFE9+MtVTJRcaHWbHU+6KXAWi9ZICUsCPDOyGJDI= Subject key identifier: 02:9F:B5:C1:DC:26:57:AF:62:AF:95:A5:46:6B:C3:61:C2:F2:6F:BE Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c Certificate serial: 019AF20998E5B3F12F7D45AC410CB331CFF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft Manifest number: 0BD6 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: omM8MfmzS56BmtmLslzMoLvSP9RlAiRczGryuw7mvWk=) 2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:98:e5:b3:f1:2f:7d:45:ac:41:0c:b3:31:cf:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=029fb5c1dc2657af62af95a5466bc361c2f26fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:5f:73:14:eb:64:ad:92:4d:4d:ef:1f:89: 79:1f:91:82:11:3e:06:5d:cc:25:6a:cc:2d:0b:a3: ea:5b:68:0e:37:eb:08:a7:6a:4a:8a:da:54:8a:8b: 9b:ba:7b:15:8b:19:84:63:7f:79:81:3c:ae:ea:37: 5e:b8:34:75:76:1e:85:1f:a9:60:bb:9a:18:5d:01: 42:d2:15:81:20:04:d6:03:9f:60:c8:77:05:ae:0a: 11:9e:fa:88:cf:07:a0:7c:d6:11:de:7b:de:8b:10: 9a:3a:5b:e4:01:51:c9:3f:04:26:c8:74:74:28:aa: c1:72:b3:dd:da:61:03:41:1d:92:c8:9e:f1:34:84: 5f:9a:1f:f1:3d:3a:60:b0:ab:e9:5b:eb:98:05:ad: bf:d3:b4:ce:01:49:4f:e6:0e:24:31:90:bb:83:6b: b8:a7:02:5a:f7:5a:43:85:b8:84:77:2e:59:5f:15: 95:03:35:b9:91:93:d8:b3:bb:e0:26:f6:4c:a9:8c: 0e:bc:bc:55:00:55:91:e2:1f:6b:3a:6e:be:d0:9e: 05:c0:ab:66:fb:7a:fe:5a:48:44:f9:70:a8:de:d4: d9:5a:4e:cb:a3:67:88:78:7f:54:da:28:ac:d2:09: 1a:f0:7c:64:c8:af:47:9f:c8:3d:2e:27:fc:ab:38: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9F:B5:C1:DC:26:57:AF:62:AF:95:A5:46:6B:C3:61:C2:F2:6F:BE X509v3 Authority Key Identifier: keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4f:9c:d2:ae:85:2e:f2:e7:bb:4b:67:1e:22:2b:2c:15:ed: d6:10:90:6d:6e:0d:8f:04:83:32:4f:97:09:9c:c9:b9:1e:97: 48:6e:5e:2d:d3:91:1b:3a:94:31:9b:bb:ca:63:58:b8:93:ad: 00:11:de:0e:ea:b8:8d:dc:69:05:d4:98:2b:3f:15:99:3f:2d: 04:2f:83:20:24:32:04:b3:87:a6:e0:5b:ac:6a:dc:9c:e9:32: e4:04:1a:e2:3d:0b:c9:a2:ba:5b:49:17:7c:1a:79:32:ac:1d: 15:30:fc:57:cd:40:c2:91:83:c5:df:9c:ac:f9:f5:4a:3a:38: de:7d:8a:4c:88:bb:86:03:54:b1:00:b8:5e:d6:3a:c6:e6:79: d4:2c:59:cb:e9:33:1a:51:41:ba:cd:bf:ba:b1:89:7a:7d:2a: 6c:76:61:0a:cd:71:c5:40:a4:fe:c1:78:6e:60:00:05:d5:d9: 08:7c:ee:52:0a:19:33:7c:4a:af:59:c9:5d:b8:79:c6:66:8a: cb:88:94:78:29:cd:97:b7:3a:7a:90:2d:85:9d:b1:f0:b6:2e: a4:5d:b6:c7:9f:10:48:a3:45:9f:93:fc:e4:66:09:26:a0:8e: 83:52:47:c5:8c:10:a7:26:65:0c:12:2e:0b:cc:3b:76:ce:ad: e9:3c:83:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZjls/EvfUWsQQyzMc/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYTkyNGFkNTliNDU5MzU3YTE5ZWUwYTQ3ZjM3OTUzMGUy ZDI0NGMwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EygwMjlmYjVjMWRjMjY1N2FmNjJhZjk1YTU0NjZiYzM2MWMyZjI2ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveBfcxTrZK2STU3vH4l5H5GCET4G XcwlaswtC6PqW2gON+sIp2pKitpUioubunsVixmEY395gTyu6jdeuDR1dh6FH6lg u5oYXQFC0hWBIATWA59gyHcFrgoRnvqIzwegfNYR3nveixCaOlvkAVHJPwQmyHR0 KKrBcrPd2mEDQR2SyJ7xNIRfmh/xPTpgsKvpW+uYBa2/07TOAUlP5g4kMZC7g2u4 pwJa91pDhbiEdy5ZXxWVAzW5kZPYs7vgJvZMqYwOvLxVAFWR4h9rOm6+0J4FwKtm +3r+WkhE+XCo3tTZWk7Lo2eIeH9U2iis0gka8HxkyK9Hn8g9Lif8qzisowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKftcHcJlevYq+VpUZrw2HC8m++MB8GA1UdIwQY MBaAFDOpJK1ZtFk1ehnuCkfzeVMOLSRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQt ZWI3N2U5NTcxMTUyLzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wOTgzMGUtMGZmZS00NjgyLWJjNGQtZWI3N2U5NTcxMTUy LzEvTTZra3JWbTBXVFY2R2U0S1JfTjVVdzR0SkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXk+c0q6F LvLnu0tnHiIrLBXt1hCQbW4NjwSDMk+XCZzJuR6XSG5eLdORGzqUMZu7ymNYuJOt ABHeDuq4jdxpBdSYKz8VmT8tBC+DICQyBLOHpuBbrGrcnOky5AQa4j0LyaK6W0kX fBp5MqwdFTD8V81AwpGDxd+crPn1Sjo43n2KTIi7hgNUsQC4XtY6xuZ51CxZy+kz GlFBus2/urGJen0qbHZhCs1xxUCk/sF4bmAABdXZCHzuUgoZM3xKr1nJXbh5xmaK y4iUeCnNl7c6epAthZ2x8LYupF22x58QSKNFn5P85GYJJqCOg1JHxYwQpyZlDBIu C8w7ds6t6TyDNw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:18 2025 by rpki-client