This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft File: e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json) Hash identifier: dexwtfSFXXVHnpRt2WEIaE2Xtca47sAiF63M/0SiyzQ= Subject key identifier: FC:0B:62:7F:AD:23:24:B2:BE:35:76:90:B9:4A:F3:E9:50:0F:0B:C0 Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 Certificate issuer: /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059 Certificate serial: 019AF1D1CDA7651C1A914601972ABF665814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft Manifest number: 0739 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: fH36g/fjhAmJ2cLUTkgd3Qep6CXHO4PyoZProNC98hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cd:a7:65:1c:1a:91:46:01:97:2a:bf:66:58:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=fc0b627fad2324b2be357690b94af3e9500f0bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:d2:2f:2c:4e:fd:ed:2b:26:64:4c:1c:c5: 60:c0:71:5c:b0:da:f2:a4:c1:78:8a:9e:d6:e1:af: 7f:15:de:81:66:38:90:db:b5:db:f7:75:06:90:28: d0:bf:8f:23:9d:0c:8f:08:1a:29:8f:6e:0d:b0:37: e5:3c:dc:cc:1d:ec:c8:27:cd:52:89:9a:30:5f:fb: 10:49:22:74:07:2d:ad:e2:b9:b2:45:57:ec:c1:c0: 38:74:23:61:66:19:92:e5:30:f2:f8:83:2c:d2:2b: 16:61:37:14:4f:b1:7b:cb:21:6e:a1:28:1c:33:28: 06:79:31:60:43:f8:f8:1a:ab:c0:d0:60:dd:0c:86: b6:b4:55:86:19:28:aa:04:b7:e3:5b:28:04:fb:5a: 5c:8b:fb:75:70:f0:c8:ca:38:48:52:2c:8f:b3:8e: e6:0d:f7:21:51:06:63:d6:56:96:b0:f2:0c:03:d8: 21:23:cf:69:70:f8:77:98:cc:eb:a6:e9:f0:66:67: 31:41:05:5e:31:0e:94:66:1f:75:a5:67:c8:d8:05: 58:3c:9b:78:e6:e4:f8:36:88:e4:ff:e9:2f:58:3b: c2:46:da:82:90:7e:65:8a:ba:6d:86:cf:9d:ae:52: e1:ab:df:77:03:54:a3:68:6f:0e:9a:45:35:27:32: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0B:62:7F:AD:23:24:B2:BE:35:76:90:B9:4A:F3:E9:50:0F:0B:C0 X509v3 Authority Key Identifier: keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fe:49:0e:8f:a6:af:93:63:aa:83:55:41:e4:75:60:58:67: b2:c0:f1:c2:54:97:50:52:24:18:3f:a9:7e:ce:87:6c:87:15: eb:14:8c:65:51:87:30:bd:ce:f4:3b:eb:a8:4a:69:8b:da:92: 6b:25:a8:74:a5:22:37:51:2e:aa:8c:ed:84:4f:2e:72:97:c1: 0b:33:1b:28:3d:38:6e:dc:e3:c8:5a:12:0a:d7:d7:eb:b1:d9: 58:26:df:0b:b6:c9:1a:f7:57:19:b1:a6:73:2b:12:cd:84:82: b9:90:4c:f5:9d:0d:97:42:99:d7:8d:35:e7:7f:a2:fb:4e:9d: 32:eb:42:fe:58:ff:9e:42:d8:84:fc:b0:30:08:51:60:93:99: cb:e8:e9:27:c7:4e:1d:64:8d:5a:bb:f4:38:de:48:e5:55:fe: b9:78:8b:19:3c:3b:80:9a:37:a4:f4:d6:50:a8:9f:5c:75:04: 02:01:4a:76:07:c7:eb:29:a0:5c:c1:cf:4f:9f:97:36:f9:51: ca:f6:06:0f:14:eb:21:9c:a6:b9:1a:70:fe:c4:ec:fb:02:af: 1c:86:c7:c6:cf:a4:69:a9:33:27:44:60:37:0c:ba:0d:57:e7: c5:7c:96:6c:79:44:71:21:42:ce:63:c6:51:59:f1:71:d6:7d: 3e:dd:e2:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c2nZRwakUYBlyq/ZlgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTIzMWQyOWM0YTIzYjNlOThiMTQ4MTNkYWMwOTgzZTNh MzQwNTkwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EyhmYzBiNjI3ZmFkMjMyNGIyYmUzNTc2OTBiOTRhZjNlOTUwMGYwYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dHSLyxO/e0rJmRMHMVgwHFcsNry pMF4ip7W4a9/Fd6BZjiQ27Xb93UGkCjQv48jnQyPCBopj24NsDflPNzMHezIJ81S iZowX/sQSSJ0By2t4rmyRVfswcA4dCNhZhmS5TDy+IMs0isWYTcUT7F7yyFuoSgc MygGeTFgQ/j4GqvA0GDdDIa2tFWGGSiqBLfjWygE+1pci/t1cPDIyjhIUiyPs47m DfchUQZj1laWsPIMA9ghI89pcPh3mMzrpunwZmcxQQVeMQ6UZh91pWfI2AVYPJt4 5uT4Nojk/+kvWDvCRtqCkH5lirpths+drlLhq993A1SjaG8OmkU1JzKyPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwLYn+tIySyvjV2kLlK8+lQDwvAMB8GA1UdIwQY MBaAFHuiMdKcSiOz6YsUgT2sCYPjo0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGIt NTEyNGU5NTE1YjE0LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGItNTEyNGU5NTE1YjE0 LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP5JDo+m r5NjqoNVQeR1YFhnssDxwlSXUFIkGD+pfs6HbIcV6xSMZVGHML3O9DvrqEppi9qS ayWodKUiN1EuqozthE8ucpfBCzMbKD04btzjyFoSCtfX67HZWCbfC7bJGvdXGbGm cysSzYSCuZBM9Z0Nl0KZ140153+i+06dMutC/lj/nkLYhPywMAhRYJOZy+jpJ8dO HWSNWrv0ON5I5VX+uXiLGTw7gJo3pPTWUKifXHUEAgFKdgfH6ymgXMHPT5+XNvlR yvYGDxTrIZymuRpw/sTs+wKvHIbHxs+kaakzJ0RgNwy6DVfnxXyWbHlEcSFCzmPG UVnxcdZ9Pt3iSw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:38 2025 by rpki-client