This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json) Hash identifier: SlSyis/bnB9acNwrIlInjnLoVpiu1fKQhKSShtilzGA= Subject key identifier: 93:4F:C8:D9:5E:FD:AE:74:D5:A6:34:4D:BA:2E:B9:F6:2C:D5:B4:62 Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f Certificate serial: 019AF12E3D82068F03FA939DA535EF8E0A0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft Manifest number: 172E Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: T2eIdAO3T55u2ZpqY/PEOKNKahzVsNqUO06dld8wSwA=) 2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3d:82:06:8f:03:fa:93:9d:a5:35:ef:8e:0a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=934fc8d95efdae74d5a6344dba2eb9f62cd5b462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b9:4f:4f:0f:3f:78:6e:94:52:1f:c7:14:db: 80:18:1c:23:42:65:93:33:1c:96:43:a8:c5:e3:d5: 9e:cd:63:96:f8:a8:95:39:d6:fe:c9:e4:cd:3e:d7: d3:5d:ad:a0:f5:2a:6f:f2:84:ac:ac:56:d6:d4:81: 01:28:07:32:a9:5a:4a:7d:4f:93:35:59:49:2f:e9: ee:9f:42:83:48:c4:c0:99:a4:76:6f:63:8d:74:66: 2b:06:2c:7a:90:68:92:9e:a1:ca:11:1d:d9:f1:cb: 36:05:63:31:fd:82:4b:4b:3a:df:9f:d8:32:d5:27: 04:5f:71:0f:5a:da:a5:19:aa:b3:7c:b1:33:e1:16: 0c:28:b8:53:8b:18:6f:98:94:08:90:df:49:24:6b: 88:ee:32:1d:f6:be:06:30:b0:2f:20:47:96:c5:d7: 7e:ac:c9:a5:7e:6a:4a:92:a5:86:46:c9:d9:0f:24: 8a:a8:12:dd:77:b7:8f:58:81:e2:0a:fb:31:93:22: 92:12:5d:f5:21:bb:1c:d5:7b:3f:29:b6:f7:89:dd: 77:f6:5b:8e:5b:1f:bb:99:03:5a:b4:43:37:e5:4b: 21:19:2d:c8:86:27:4e:02:b2:33:ae:6f:75:9a:1c: a1:0f:6a:e8:ef:fa:cc:85:23:28:a2:8a:f8:63:79: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4F:C8:D9:5E:FD:AE:74:D5:A6:34:4D:BA:2E:B9:F6:2C:D5:B4:62 X509v3 Authority Key Identifier: keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:de:dc:6f:d0:60:51:a1:4d:94:a6:7f:f7:b3:a7:e0:2e:a6: 1b:03:da:78:74:38:f1:2e:05:59:ce:65:0e:aa:e9:01:ce:e0: d0:1d:e1:40:7c:bd:dc:7d:98:f4:37:4f:6c:93:34:0c:04:a2: 38:7c:0e:2f:44:c2:9a:b7:73:af:e9:53:94:1a:de:d9:20:bf: a1:5e:12:60:0d:3a:ae:84:40:c5:11:5f:57:fa:9b:55:c9:71: b0:1b:b0:e9:bc:0b:2a:38:78:8a:68:cd:41:c1:39:69:79:d1: a6:d4:46:ed:3f:84:2c:5a:58:af:cd:ae:bd:35:18:74:74:89: 98:1e:01:2f:ec:1b:be:a1:1f:ea:a7:7d:99:a4:48:50:a1:74: 9f:5d:dc:10:11:08:cc:55:a9:18:65:11:15:11:1d:9f:e1:88: 93:31:fa:3f:c4:5c:b1:d9:b3:2f:d8:ba:9f:2f:3b:ea:7f:dd: 6d:b1:7c:29:40:e9:5d:3b:ac:d5:c8:0c:e3:39:6f:e4:de:7b: cb:40:07:b1:29:0e:a6:52:64:37:4b:ef:f3:6c:0d:99:89:fd: 9a:f6:05:51:75:9f:2a:a7:75:a6:65:6a:b7:52:c7:a4:10:1a: 76:0e:40:fc:31:c0:cd:a0:bd:4a:4b:66:9f:07:08:41:1f:d3: 0f:c7:c0:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj2CBo8D+pOdpTXvjgoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NTgzMzhkZWE2YWU0ZGRiYjI0ODUwYTA3MDdmNDNhYTE3 OTRjM2YwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD Eyg5MzRmYzhkOTVlZmRhZTc0ZDVhNjM0NGRiYTJlYjlmNjJjZDViNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirlPTw8/eG6UUh/HFNuAGBwjQmWT MxyWQ6jF49WezWOW+KiVOdb+yeTNPtfTXa2g9Spv8oSsrFbW1IEBKAcyqVpKfU+T NVlJL+nun0KDSMTAmaR2b2ONdGYrBix6kGiSnqHKER3Z8cs2BWMx/YJLSzrfn9gy 1ScEX3EPWtqlGaqzfLEz4RYMKLhTixhvmJQIkN9JJGuI7jId9r4GMLAvIEeWxdd+ rMmlfmpKkqWGRsnZDySKqBLdd7ePWIHiCvsxkyKSEl31Ibsc1Xs/Kbb3id139luO Wx+7mQNatEM35UshGS3IhidOArIzrm91mhyhD2ro7/rMhSMooor4Y3n53wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNPyNle/a501aY0TbouufYs1bRiMB8GA1UdIwQY MBaAFOhYM43qauTduySFCgcH9DqheUw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMt YTFkY2U2YWQxNTBjLzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMtYTFkY2U2YWQxNTBj LzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN7cb9Bg UaFNlKZ/97On4C6mGwPaeHQ48S4FWc5lDqrpAc7g0B3hQHy93H2Y9DdPbJM0DASi OHwOL0TCmrdzr+lTlBre2SC/oV4SYA06roRAxRFfV/qbVclxsBuw6bwLKjh4imjN QcE5aXnRptRG7T+ELFpYr82uvTUYdHSJmB4BL+wbvqEf6qd9maRIUKF0n13cEBEI zFWpGGURFREdn+GIkzH6P8RcsdmzL9i6ny876n/dbbF8KUDpXTus1cgM4zlv5N57 y0AHsSkOplJkN0vv82wNmYn9mvYFUXWfKqd1pmVqt1LHpBAadg5A/DHAzaC9Sktm nwcIQR/TD8fAWA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:30 2025 by rpki-client