This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft File: 6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json) Hash identifier: NURIx4eZfRr91J4GVGAXlkgrUzLqIcS+J4MzRudrt94= Subject key identifier: 68:E0:67:EE:57:AA:68:DC:71:6F:5F:3E:D3:53:D1:F3:5D:D2:C1:84 Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86 Certificate issuer: /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86 Certificate serial: 019AF2771C5375ED96D65C1DBAAD6D96F38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft Manifest number: 146B Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: o1bfM0qL7aXKFT7nhLuI35qNJD//GocsbbgPsyTWoh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1c:53:75:ed:96:d6:5c:1d:ba:ad:6d:96:f3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=68e067ee57aa68dc716f5f3ed353d1f35dd2c184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:c8:a5:24:4b:f4:1f:c4:d2:39:7c:71:0e: 90:25:a8:45:1b:1b:88:51:65:0b:8d:c9:e3:5e:4b: bb:87:c9:e5:03:b6:2e:f8:42:fd:0c:7c:bd:62:a5: 56:31:02:cf:54:b5:ca:8f:ad:42:85:58:4d:72:90: b0:6d:50:70:09:53:f7:b3:f1:77:3c:0e:6f:be:ce: 54:fe:15:30:39:de:6e:3a:40:13:e7:ac:ae:69:5d: c1:47:77:cd:e6:ec:c9:04:ed:65:f5:bf:ed:76:b4: 60:b3:2e:de:65:73:43:70:07:f4:a7:19:81:a6:53: 6e:fd:27:f5:83:92:51:d0:2e:c1:6d:21:a7:0b:f0: 65:4e:6c:05:b2:90:51:80:4c:85:e3:fa:32:59:20: 56:5d:ec:ef:8b:ae:2a:c4:26:a9:44:06:1b:53:b0: c7:c3:ac:63:2b:09:d8:02:d0:a2:89:80:93:b0:79: 70:d3:aa:fe:e2:ca:5f:3a:b0:d7:0d:3b:74:2d:b0: 59:ff:24:5a:c5:2a:c0:a5:67:1c:64:44:e8:a7:84: 3f:77:3b:0c:63:0d:d1:0d:e4:c1:9d:1d:88:6c:11: c7:db:bf:7e:94:16:63:74:27:1a:5e:a2:c0:bd:a2: 1c:f5:4b:ba:39:fd:9c:7e:a9:2b:1c:11:8e:07:eb: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E0:67:EE:57:AA:68:DC:71:6F:5F:3E:D3:53:D1:F3:5D:D2:C1:84 X509v3 Authority Key Identifier: keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c4:dc:32:23:1b:53:c2:33:3e:01:0b:2a:ff:48:5b:bc:60: e5:80:11:b8:51:85:87:0e:be:b4:d5:23:89:06:05:a6:bc:9e: 40:3d:05:5f:5b:84:ae:43:d1:a2:67:05:0f:99:42:4b:31:56: c8:a4:9a:87:f0:57:c9:f9:cf:ff:3c:58:05:68:b8:b7:d7:a8: f1:f3:24:f0:40:47:84:fd:70:a7:93:8e:37:07:4d:38:36:05: a2:29:37:20:18:a7:4d:d8:e1:c5:f7:74:7c:da:12:a7:2c:a9: 55:c5:6a:4d:6e:66:f8:73:89:8a:71:d4:42:49:38:f5:f5:9f: 48:aa:6f:93:7f:1f:c0:cf:ab:ac:15:ba:c0:33:b3:a7:c3:54: 73:c4:80:eb:fb:58:2c:d2:86:f7:22:cd:53:3c:b7:b2:c7:b7: 8f:67:7d:7f:ef:46:81:8b:c6:51:69:f9:ea:2d:d7:f6:ae:81: 98:74:3a:4c:6e:31:27:66:6f:00:9f:51:7c:b0:2d:90:18:9a: 86:77:20:fd:fb:30:95:9d:2f:31:64:61:28:1c:06:1b:3e:5f: d8:64:24:e7:e0:41:50:f9:45:6d:d7:95:56:b9:55:db:0b:fd: 78:4a:b2:44:cd:0c:1a:f0:20:a5:13:7b:82:14:27:46:4c:65: bb:7b:6d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxxTde2W1lwduq1tlvOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTJkMjNjM2Q3NGUyMzdkZTRlMzFmNzEyZTQxNGI1ZDRl ZjVjODYwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD Eyg2OGUwNjdlZTU3YWE2OGRjNzE2ZjVmM2VkMzUzZDFmMzVkZDJjMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWTIpSRL9B/E0jl8cQ6QJahFGxuI UWULjcnjXku7h8nlA7Yu+EL9DHy9YqVWMQLPVLXKj61ChVhNcpCwbVBwCVP3s/F3 PA5vvs5U/hUwOd5uOkAT56yuaV3BR3fN5uzJBO1l9b/tdrRgsy7eZXNDcAf0pxmB plNu/Sf1g5JR0C7BbSGnC/BlTmwFspBRgEyF4/oyWSBWXezvi64qxCapRAYbU7DH w6xjKwnYAtCiiYCTsHlw06r+4spfOrDXDTt0LbBZ/yRaxSrApWccZETop4Q/dzsM Yw3RDeTBnR2IbBHH279+lBZjdCcaXqLAvaIc9Uu6Of2cfqkrHBGOB+v72wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjgZ+5XqmjccW9fPtNT0fNd0sGEMB8GA1UdIwQY MBaAFOii0jw9dOI33k4x9xLkFLXU71yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktMU1BEMTA0amZlVGpIM0V1UVV0ZFR2WElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMDY2MzItY2E1YS00MjlkLTlhZDQt ODFjYzkwODI2ZThlLzEvNktMU1BEMTA0amZlVGpIM0V1UVV0ZFR2WElZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMDY2MzItY2E1YS00MjlkLTlhZDQtODFjYzkwODI2ZThl LzEvNktMU1BEMTA0amZlVGpIM0V1UVV0ZFR2WElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcTcMiMb U8IzPgELKv9IW7xg5YARuFGFhw6+tNUjiQYFpryeQD0FX1uErkPRomcFD5lCSzFW yKSah/BXyfnP/zxYBWi4t9eo8fMk8EBHhP1wp5OONwdNODYFoik3IBinTdjhxfd0 fNoSpyypVcVqTW5m+HOJinHUQkk49fWfSKpvk38fwM+rrBW6wDOzp8NUc8SA6/tY LNKG9yLNUzy3sse3j2d9f+9GgYvGUWn56i3X9q6BmHQ6TG4xJ2ZvAJ9RfLAtkBia hncg/fswlZ0vMWRhKBwGGz5f2GQk5+BBUPlFbdeVVrlV2wv9eEqyRM0MGvAgpRN7 ghQnRkxlu3ttOg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:37 2025 by rpki-client