This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft File: 6rBQEXItJcEknmWLLK7MEYwp6CI.mft (raw, json) Hash identifier: +fjYNYyKrOwWJ1wyMHAooKFp7O3o5BXiMKv/c2zpLbc= Subject key identifier: B1:E1:E6:25:6B:55:00:22:A0:B6:D8:8D:90:52:43:B0:CA:65:59:D2 Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 Certificate issuer: /CN=eab05011722d25c1249e658b2caecc118c29e822 Certificate serial: 019AF19ACD0D8D70044893B71D2977C68936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft Manifest number: 04DF Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: 6rBQEXItJcEknmWLLK7MEYwp6CI.crl (hash: qH40WoOV6CADwMTC4C8HZbd5Ru8OFdUGU/mq9wZyOI8=) 2: CJPWpn8RP7gsAwpJK6rfiafLL0g.roa (hash: MSILC9AgMAOaApiwEtXOHau49IMY7PQIrPiC8xgTPYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cd:0d:8d:70:04:48:93:b7:1d:29:77:c6:89:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=b1e1e6256b550022a0b6d88d905243b0ca6559d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:25:0f:47:34:3d:aa:7e:c9:ef:26:a7:b6: 81:2e:48:08:b0:e7:39:d8:e9:77:db:05:63:a1:ae: c6:92:3a:45:12:ea:80:41:06:36:80:bd:05:c7:73: ee:ba:c9:3a:e5:fe:90:6f:0e:ee:39:d5:21:fc:65: 6d:98:1e:f3:60:ca:24:79:18:93:07:9b:df:f3:aa: 9b:5b:ce:a3:7d:81:7f:dd:08:6c:d5:d3:c5:f8:7d: 94:61:ef:5c:20:b6:7f:52:ce:d6:c9:00:24:7d:f6: 57:69:0f:9a:e9:9c:f0:e6:c6:8f:aa:ec:c4:c2:8e: 68:d9:d1:73:9d:31:08:f8:6f:cd:b1:79:30:b3:a5: 07:41:eb:36:1b:ec:8d:71:8b:ce:97:f9:57:b5:90: 2e:43:5c:d8:9a:41:1a:0d:93:92:00:63:ca:ac:7b: 70:16:9b:44:13:c2:b6:95:55:13:21:36:4e:c1:19: 8b:6f:63:38:c8:a9:95:80:b6:eb:40:8d:e9:60:da: 51:e0:1f:8d:75:df:cf:2d:c5:f9:6b:1c:a3:79:c5: da:dc:1f:df:8e:27:4b:12:32:3f:95:38:ea:2c:5b: 5d:f3:f5:27:d3:a0:1b:47:5a:3f:c3:c5:aa:61:25: c2:05:25:9b:4c:a9:be:21:49:dc:e0:53:b2:e8:c2: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:E6:25:6B:55:00:22:A0:B6:D8:8D:90:52:43:B0:CA:65:59:D2 X509v3 Authority Key Identifier: keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a8:11:81:25:e7:41:d0:33:f8:40:52:5a:2e:6f:a2:15:0b: e5:1f:87:4d:47:92:da:0d:8e:98:a7:1a:c4:22:44:c4:9d:0c: 18:b1:8d:9f:d1:01:38:62:60:98:73:11:05:67:d7:c8:41:58: fc:8b:f4:5a:5e:37:6d:61:29:bb:54:38:82:df:2b:cd:4d:67: b6:2b:f8:ca:8c:4a:6e:3b:e1:1b:ad:4d:d9:f3:4a:5b:57:f5: ce:a7:eb:29:9f:ea:80:1c:bf:02:10:ef:d7:dc:93:8f:e2:cb: a3:86:b7:98:c5:96:10:ae:dd:93:9f:33:38:a4:3f:52:cc:43: e5:40:a0:f5:58:22:eb:4c:91:2a:fc:29:a6:f5:c4:e2:c8:5c: da:42:c9:fb:e2:7b:76:93:ea:82:94:33:a0:f9:4c:87:3a:9e: 9c:0d:55:f9:18:dd:de:72:b6:82:d9:71:03:b1:4b:0f:ba:45: 6e:1b:04:c5:bf:10:bd:ab:61:ae:0f:cc:49:6e:68:0b:c7:f1: ac:bf:39:c5:48:ff:3c:4c:7c:00:30:c8:80:f4:fc:1e:ae:b6: de:0f:b3:bb:ac:53:0b:ef:7b:01:0f:05:1c:bd:2a:94:2d:46: 3a:59:c1:4f:e6:16:f6:c6:46:7b:c7:d1:1d:e7:d8:8f:9b:7d: 85:8c:f9:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxms0NjXAESJO3HSl3xok2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjA1MDExNzIyZDI1YzEyNDllNjU4YjJjYWVjYzExOGMy OWU4MjIwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD EyhiMWUxZTYyNTZiNTUwMDIyYTBiNmQ4OGQ5MDUyNDNiMGNhNjU1OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH4lD0c0Pap+ye8mp7aBLkgIsOc5 2Ol32wVjoa7GkjpFEuqAQQY2gL0Fx3Puusk65f6Qbw7uOdUh/GVtmB7zYMokeRiT B5vf86qbW86jfYF/3Qhs1dPF+H2UYe9cILZ/Us7WyQAkffZXaQ+a6Zzw5saPquzE wo5o2dFznTEI+G/NsXkws6UHQes2G+yNcYvOl/lXtZAuQ1zYmkEaDZOSAGPKrHtw FptEE8K2lVUTITZOwRmLb2M4yKmVgLbrQI3pYNpR4B+Ndd/PLcX5axyjecXa3B/f jidLEjI/lTjqLFtd8/Un06AbR1o/w8WqYSXCBSWbTKm+IUnc4FOy6MJkYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHh5iVrVQAioLbYjZBSQ7DKZVnSMB8GA1UdIwQY MBaAFOqwUBFyLSXBJJ5liyyuzBGMKegiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDct N2RiOGY4MTZkMDc3LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDctN2RiOGY4MTZkMDc3 LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKgRgSXn QdAz+EBSWi5vohUL5R+HTUeS2g2OmKcaxCJExJ0MGLGNn9EBOGJgmHMRBWfXyEFY /Iv0Wl43bWEpu1Q4gt8rzU1ntiv4yoxKbjvhG61N2fNKW1f1zqfrKZ/qgBy/AhDv 19yTj+LLo4a3mMWWEK7dk58zOKQ/UsxD5UCg9Vgi60yRKvwppvXE4shc2kLJ++J7 dpPqgpQzoPlMhzqenA1V+Rjd3nK2gtlxA7FLD7pFbhsExb8Qvathrg/MSW5oC8fx rL85xUj/PEx8ADDIgPT8Hq623g+zu6xTC+97AQ8FHL0qlC1GOlnBT+YW9sZGe8fR HefYj5t9hYz5HA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:57 2025 by rpki-client