This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft File: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft (raw, json) Hash identifier: PIKW4DnizF60RX0i51lhowZ/22B+lEu8zjLN1s77NNw= Subject key identifier: D9:71:9D:60:36:E4:2D:81:DF:3A:8A:AF:73:93:D2:AE:EF:91:7F:1D Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3 Certificate issuer: /CN=e87cc680c85983e7bf74498d0e6be800f86451c3 Certificate serial: 019AF12D6B75D239B77909DFFA8E1EECAECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft Manifest number: 128D Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl (hash: mlgYF7x7pk3nL9LyF1ErRHdXorH8UNs0An0y1pgzq3I=) 2: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (hash: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=) 3: fbyo7xw7OVQjt-Z_risAcNBtcH8.roa (hash: QFqUQxFJMJ/HRIgpyInlcTMTKwfoUJaISjB36SzyexU=) 4: lxoRTf-wo4YOlgiYkmNsq_STsOo.roa (hash: TqDSPnCDTrr4iXHUBYL0fqJjIVOuIkCFrz5kt7VpmEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6b:75:d2:39:b7:79:09:df:fa:8e:1e:ec:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3 Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=d9719d6036e42d81df3a8aaf7393d2aeef917f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:aa:af:ba:80:25:db:08:f2:9e:c4:80:af: 70:95:30:bd:f5:4a:84:72:28:9c:21:43:cb:6e:3d: 95:2c:0b:bb:ea:97:59:cf:fe:d4:95:e4:87:88:f6: be:0d:6b:10:06:f5:14:9b:5c:9c:c4:fe:d2:50:b6: 24:cc:9b:3b:48:e0:30:01:de:ed:1f:98:42:3a:27: df:07:14:e4:c3:31:cc:07:b2:68:51:b9:cc:a4:26: 39:9d:c6:e4:0a:03:1b:ba:9b:3a:8f:d6:be:1b:05: db:bc:08:dd:ac:e5:15:58:a0:90:48:2b:98:83:a8: cf:2e:20:a5:35:1f:c9:da:48:be:31:56:f3:87:f1: a2:87:5d:66:08:ca:6e:56:4d:16:4f:4d:ac:32:36: 2f:41:99:2c:5f:cd:15:df:ec:b6:60:e9:23:68:25: 60:e2:71:38:c1:ea:52:92:02:3e:5e:33:3f:86:0f: fe:4d:8b:1c:7c:c4:ee:2e:d9:77:29:0a:26:87:dc: 19:54:71:1f:77:02:da:2c:12:4e:d5:0c:eb:4e:0d: d8:0a:29:30:69:43:b5:4e:09:53:74:71:f5:f8:e7: e6:85:d0:60:52:ab:cb:c5:99:4d:35:eb:04:95:23: 52:18:51:28:8e:01:5f:33:6b:39:76:af:ff:59:9c: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:9D:60:36:E4:2D:81:DF:3A:8A:AF:73:93:D2:AE:EF:91:7F:1D X509v3 Authority Key Identifier: keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ac:39:29:a4:1c:ca:63:fe:14:51:cb:b2:6c:a7:ed:11:07: 7d:45:cd:75:d4:6f:c7:00:dc:02:c0:0c:a3:d9:81:eb:40:3f: 45:11:67:63:c3:ef:aa:0e:67:58:fb:f5:74:4b:5d:90:b4:d1: 69:08:14:d5:c8:12:0b:a9:16:15:78:0e:c5:13:dc:c1:d6:38: 45:01:d0:a5:16:7d:e6:ab:20:e5:25:a7:62:e9:e1:b7:eb:23: 43:ad:1d:92:7c:a5:6c:11:49:4b:d7:5a:11:19:cd:75:91:18: a6:ed:58:ad:97:d6:b8:ea:a1:ba:35:0b:50:c9:0e:9b:bd:04: 10:29:26:26:e7:b0:99:96:02:6f:f9:ab:ce:7f:6f:56:1f:ee: 47:60:63:d6:ea:79:5a:d0:25:7b:7c:a7:05:e6:53:f9:d1:95: 6f:b8:a0:95:e4:26:53:87:7a:b6:a1:6e:6a:02:c2:00:86:68: b5:83:b3:b0:90:a2:f7:30:a8:8c:e0:37:8b:56:c7:b3:ef:1f: 5e:34:05:11:a6:0c:bf:82:62:7e:99:cb:d8:93:e9:94:f0:ac: b4:0d:d8:e6:a4:2b:b1:a6:d7:80:d4:17:c6:d7:bf:ff:01:f5: b4:a3:49:76:3a:8d:0e:e3:84:bf:a8:78:77:dd:de:37:86:d1: 82:ba:ba:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWt10jm3eQnf+o4e7K7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4N2NjNjgwYzg1OTgzZTdiZjc0NDk4ZDBlNmJlODAwZjg2 NDUxYzMwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD EyhkOTcxOWQ2MDM2ZTQyZDgxZGYzYThhYWY3MzkzZDJhZWVmOTE3ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGaqr7qAJdsI8p7EgK9wlTC99UqE ciicIUPLbj2VLAu76pdZz/7UleSHiPa+DWsQBvUUm1ycxP7SULYkzJs7SOAwAd7t H5hCOiffBxTkwzHMB7JoUbnMpCY5ncbkCgMbups6j9a+GwXbvAjdrOUVWKCQSCuY g6jPLiClNR/J2ki+MVbzh/Gih11mCMpuVk0WT02sMjYvQZksX80V3+y2YOkjaCVg 4nE4wepSkgI+XjM/hg/+TYscfMTuLtl3KQomh9wZVHEfdwLaLBJO1QzrTg3YCikw aUO1TglTdHH1+OfmhdBgUqvLxZlNNesElSNSGFEojgFfM2s5dq//WZw5eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlxnWA25C2B3zqKr3OT0q7vkX8dMB8GA1UdIwQY MBaAFOh8xoDIWYPnv3RJjQ5r6AD4ZFHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYt MTRkMDJlMzBkMjI3LzEvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yOWFmNTktMGI3Yi00ZDgwLThmOWYtMTRkMDJlMzBkMjI3 LzEvNkh6R2dNaFpnLWVfZEVtTkRtdm9BUGhrVWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaw5KaQc ymP+FFHLsmyn7REHfUXNddRvxwDcAsAMo9mB60A/RRFnY8Pvqg5nWPv1dEtdkLTR aQgU1cgSC6kWFXgOxRPcwdY4RQHQpRZ95qsg5SWnYunht+sjQ60dknylbBFJS9da ERnNdZEYpu1YrZfWuOqhujULUMkOm70EECkmJuewmZYCb/mrzn9vVh/uR2Bj1up5 WtAle3ynBeZT+dGVb7igleQmU4d6tqFuagLCAIZotYOzsJCi9zCojOA3i1bHs+8f XjQFEaYMv4JifpnL2JPplPCstA3Y5qQrsabXgNQXxte//wH1tKNJdjqNDuOEv6h4 d93eN4bRgrq61A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:35 2025 by rpki-client