This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json) Hash identifier: uvwB0hFtlH6I10T/WjqNiBEnsB0dp/sK3F09hM71pJY= Subject key identifier: 3F:ED:E1:18:90:A6:2E:EE:F2:39:90:84:CE:F5:48:B1:A3:95:A3:E9 Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67 Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767 Certificate serial: 019B2FD54704523BDAB54D4A625F14603E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft Manifest number: 0600 Signing time: Thu 18 Dec 2025 05:01:04 +0000 Manifest this update: Thu 18 Dec 2025 05:01:04 +0000 Manifest next update: Fri 19 Dec 2025 05:01:04 +0000 Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: wE9tRwFwj5f+9GnQ/KfPjXItlSOLj4mtnszoL7Qvpfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:47:04:52:3b:da:b5:4d:4a:62:5f:14:60:3e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767 Validity Not Before: Dec 18 05:01:04 2025 GMT Not After : Dec 19 05:01:04 2025 GMT Subject: CN=3fede11890a62eeef2399084cef548b1a395a3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:6d:38:cb:8b:3a:ef:dd:de:6f:46:70:ce: 92:93:14:e4:1a:73:76:cc:99:dc:82:2f:35:1d:58: 8c:70:f1:dc:f3:60:97:70:1f:76:28:c8:d2:7f:bd: ed:fe:78:24:da:4e:46:7d:1c:23:a0:b2:a7:fa:e0: ca:37:6c:5d:8a:b4:6d:0e:41:a1:5d:cb:dd:61:0e: 50:df:5c:fd:09:2b:fa:e0:24:c0:0e:57:be:ad:c7: d9:2a:33:7d:7a:e5:7d:63:e0:c7:c5:3b:b9:3b:31: 85:58:33:74:07:74:9d:bc:9e:dc:ba:db:6a:5f:58: 9a:20:0d:fa:60:49:10:f5:ce:10:1f:7e:5f:2d:e9: 86:2c:f8:31:db:f1:79:81:44:be:b8:16:0d:ba:08: e1:83:39:0e:5d:ff:8d:95:61:5d:8f:39:fd:4f:4d: 17:ae:da:11:0e:db:b1:8e:ac:f0:a4:31:c5:3f:80: c9:f3:72:f4:e4:27:c3:83:b0:df:6b:6e:5c:73:37: 7d:4f:b5:0d:83:c1:8d:e5:fa:cb:53:7d:b6:2b:00: 38:28:c0:62:b6:f8:94:33:e7:0d:51:2c:50:aa:1b: bf:c9:5f:31:ac:cf:c2:b8:9e:d9:ce:eb:fb:8f:af: a7:e8:1a:ab:4f:a7:7a:72:43:b2:1b:b0:50:58:30: b1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:ED:E1:18:90:A6:2E:EE:F2:39:90:84:CE:F5:48:B1:A3:95:A3:E9 X509v3 Authority Key Identifier: keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f8:ba:6c:75:42:c8:1d:51:c2:f8:38:82:f3:3a:27:30:63: 6a:77:91:f1:a0:ef:c7:3f:53:5a:89:30:31:a2:c8:b0:89:ee: 49:49:a5:60:02:4e:87:bf:e0:13:1f:e9:e8:40:d2:6f:bd:d8: c6:ec:eb:08:2e:a8:13:2a:e4:7e:84:a9:f5:11:ed:37:f8:bb: 55:5c:2b:6a:9f:5e:f3:57:f8:8b:4d:6f:e1:aa:59:ef:a0:b9: 4c:52:30:7a:a5:e8:23:5b:89:c6:f6:8f:1c:b6:7c:ad:c0:b7: 9e:d2:50:56:c5:ad:8f:50:cf:84:4d:8f:aa:16:f4:61:60:75: d2:d9:49:83:03:92:a1:14:78:55:90:bf:ac:8b:47:f0:7b:94: 0a:30:9b:5e:59:64:54:b3:a3:25:da:3b:d0:c0:a8:bf:18:fc: 53:bd:c8:c2:a8:68:5f:5a:2c:d5:29:85:db:76:d1:fb:49:bb: ca:69:c8:0e:fc:b0:16:c2:27:6f:c3:47:a7:77:a4:b9:32:79: 78:a9:78:a8:1a:87:88:66:e4:36:a6:57:d5:de:ba:ff:04:a9: 48:8d:58:26:bf:b9:ca:59:55:bd:b7:cb:f2:69:b1:ea:78:fb: 62:2e:71:32:81:ec:7f:a6:35:d6:fd:a7:f0:9f:81:ae:54:00: d5:d7:52:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1UcEUjvatU1KYl8UYD6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmU5OGE4NTVmZWUwMmYzZGZmMDczMmQ3ZTE4NzkyZjNh ZmY3NjcwHhcNMjUxMjE4MDUwMTA0WhcNMjUxMjE5MDUwMTA0WjAzMTEwLwYDVQQD EygzZmVkZTExODkwYTYyZWVlZjIzOTkwODRjZWY1NDhiMWEzOTVhM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtShtOMuLOu/d3m9GcM6SkxTkGnN2 zJncgi81HViMcPHc82CXcB92KMjSf73t/ngk2k5GfRwjoLKn+uDKN2xdirRtDkGh XcvdYQ5Q31z9CSv64CTADle+rcfZKjN9euV9Y+DHxTu5OzGFWDN0B3SdvJ7cuttq X1iaIA36YEkQ9c4QH35fLemGLPgx2/F5gUS+uBYNugjhgzkOXf+NlWFdjzn9T00X rtoRDtuxjqzwpDHFP4DJ83L05CfDg7Dfa25cczd9T7UNg8GN5frLU322KwA4KMBi tviUM+cNUSxQqhu/yV8xrM/CuJ7Zzuv7j6+n6BqrT6d6ckOyG7BQWDCxpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/t4RiQpi7u8jmQhM71SLGjlaPpMB8GA1UdIwQY MBaAFAkumKhV/uAvPf8HMtfhh5Lzr/dnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wN2JhYjQtMmZmOS00NTU0LTgyMzQt YmU3NzcxZjE4MjQ5LzEvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wN2JhYjQtMmZmOS00NTU0LTgyMzQtYmU3NzcxZjE4MjQ5 LzEvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPi6bHVC yB1Rwvg4gvM6JzBjaneR8aDvxz9TWokwMaLIsInuSUmlYAJOh7/gEx/p6EDSb73Y xuzrCC6oEyrkfoSp9RHtN/i7VVwrap9e81f4i01v4apZ76C5TFIweqXoI1uJxvaP HLZ8rcC3ntJQVsWtj1DPhE2Pqhb0YWB10tlJgwOSoRR4VZC/rItH8HuUCjCbXllk VLOjJdo70MCovxj8U73IwqhoX1os1SmF23bR+0m7ymnIDvywFsInb8NHp3ekuTJ5 eKl4qBqHiGbkNqZX1d66/wSpSI1YJr+5yllVvbfL8mmx6nj7Yi5xMoHsf6Y11v2n 8J+BrlQA1ddSVA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:21 2025 by rpki-client