This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft File: a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json) Hash identifier: ysVtN3V5LIv+nAvWd0Tpl+wpYAsXpsEmhkRciQONH+U= Subject key identifier: 02:82:C1:89:CC:05:B2:BB:E2:AA:19:CE:74:8C:EB:1B:40:4C:10:3B Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D Certificate issuer: /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d Certificate serial: 019AF19B923D8A3C4467743230E27F123745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft Manifest number: 024D Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: sq86n65P5zVtPZjuUEW7dkrQrJj7ByBcV2FRFZpmCXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:92:3d:8a:3c:44:67:74:32:30:e2:7f:12:37:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=0282c189cc05b2bbe2aa19ce748ceb1b404c103b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:bd:ca:2c:f9:aa:18:a1:21:9d:d3:88:6b: 1f:cb:0f:02:2f:13:77:2a:a1:cd:61:f1:78:59:b9: 81:0d:9a:b0:b1:ea:0c:aa:b6:27:af:df:a1:46:0e: d8:c4:0f:87:85:bb:aa:ec:2a:0b:68:cf:64:99:4d: cc:8a:bc:97:17:27:eb:3e:19:98:3b:ae:f8:57:6b: c5:f3:e9:95:5d:94:46:66:35:b0:46:aa:ed:56:93: ce:c9:ba:72:c3:cf:c2:ae:70:d7:8a:ee:20:6c:71: 71:89:fb:f0:77:4f:48:bb:9c:a5:68:14:7c:bd:ef: 92:9d:e3:67:b0:89:53:23:06:4d:36:de:75:21:b8: d6:33:12:e7:ee:c9:1d:04:aa:60:89:93:3f:21:21: 84:34:fe:18:7f:da:16:f6:a0:6c:c8:be:8b:a1:56: e5:3c:2b:c1:10:7b:bf:f3:49:f2:18:05:71:c9:04: c1:29:56:a3:5c:bf:e7:8b:43:ea:86:29:7c:1e:fc: 9f:39:00:d4:d6:01:2f:30:ad:39:fc:f5:d3:24:89: 12:5c:92:06:2f:8e:a5:40:4f:8c:1a:24:f3:42:eb: bc:44:64:85:3e:ad:07:c9:bc:17:68:0f:e9:4f:f3: 59:cd:d0:36:43:55:47:f0:6e:94:21:f2:0a:bd:07: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:82:C1:89:CC:05:B2:BB:E2:AA:19:CE:74:8C:EB:1B:40:4C:10:3B X509v3 Authority Key Identifier: keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d1:8c:2d:6c:fa:a5:36:d1:7a:79:dc:6e:8e:23:27:31:19: 0d:fd:01:7e:88:70:1f:54:d6:46:0f:31:dd:b5:b7:20:22:9b: b8:b3:94:f5:44:83:a0:88:2c:dc:c7:2b:a2:59:1a:75:fa:d5: ae:ba:45:72:8b:65:10:7b:c0:13:14:a8:90:9d:40:0a:ff:c6: 7c:f6:7b:27:4a:47:82:d6:c6:ac:cd:e8:16:e1:e0:47:de:35: bd:f7:f8:a1:87:26:ad:5f:26:8a:39:e6:8e:fb:64:df:b8:2f: 4a:13:1d:77:58:5e:f4:82:8d:a2:89:bc:e2:ba:de:d8:46:23: ca:74:8d:eb:c9:41:1a:39:ee:cb:8c:df:a7:4e:83:34:00:99: 7c:f6:73:86:6d:de:56:50:45:e1:07:55:96:d2:32:01:99:c0: 20:51:9c:e6:02:7e:1c:96:61:c7:32:ff:84:f7:8b:16:e3:b3: 52:93:09:dd:c6:d8:eb:68:d8:02:25:c5:61:b4:04:7d:6a:0f: 04:66:1d:04:e6:f7:33:90:f5:f4:a8:cd:2e:4c:de:0c:ac:ca: fe:55:3f:d2:7c:fa:2b:1b:74:6a:59:bf:e5:c6:03:d0:a3:06: 15:9c:58:80:8b:4c:5e:b5:ef:b4:1c:35:44:2d:a8:71:ef:90: e6:76:6b:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5I9ijxEZ3QyMOJ/EjdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTBhYzk3MWQwN2I1MzhjNDNmYmM4YWRiMDc5ZTU0ZDMz MTBlMGQwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD EygwMjgyYzE4OWNjMDViMmJiZTJhYTE5Y2U3NDhjZWIxYjQwNGMxMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kC9yiz5qhihIZ3TiGsfyw8CLxN3 KqHNYfF4WbmBDZqwseoMqrYnr9+hRg7YxA+Hhbuq7CoLaM9kmU3MiryXFyfrPhmY O674V2vF8+mVXZRGZjWwRqrtVpPOybpyw8/CrnDXiu4gbHFxifvwd09Iu5ylaBR8 ve+SneNnsIlTIwZNNt51IbjWMxLn7skdBKpgiZM/ISGENP4Yf9oW9qBsyL6LoVbl PCvBEHu/80nyGAVxyQTBKVajXL/ni0Pqhil8HvyfOQDU1gEvMK05/PXTJIkSXJIG L46lQE+MGiTzQuu8RGSFPq0HybwXaA/pT/NZzdA2Q1VH8G6UIfIKvQcHYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKCwYnMBbK74qoZznSM6xtATBA7MB8GA1UdIwQY MBaAFGugrJcdB7U4xD+8itsHnlTTMQ4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZDc2x4MEh0VGpFUDd5SzJ3ZWVWTk14RGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80ZDM1NDAtYjc5MC00NjRmLTg3ZTIt MThkMWU5MTBiOTI1LzEvYTZDc2x4MEh0VGpFUDd5SzJ3ZWVWTk14RGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80ZDM1NDAtYjc5MC00NjRmLTg3ZTItMThkMWU5MTBiOTI1 LzEvYTZDc2x4MEh0VGpFUDd5SzJ3ZWVWTk14RGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetGMLWz6 pTbRenncbo4jJzEZDf0BfohwH1TWRg8x3bW3ICKbuLOU9USDoIgs3McrolkadfrV rrpFcotlEHvAExSokJ1ACv/GfPZ7J0pHgtbGrM3oFuHgR941vff4oYcmrV8mijnm jvtk37gvShMdd1he9IKNoom84rre2EYjynSN68lBGjnuy4zfp06DNACZfPZzhm3e VlBF4QdVltIyAZnAIFGc5gJ+HJZhxzL/hPeLFuOzUpMJ3cbY62jYAiXFYbQEfWoP BGYdBOb3M5D19KjNLkzeDKzK/lU/0nz6Kxt0alm/5cYD0KMGFZxYgItMXrXvtBw1 RC2oce+Q5nZrVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:35 2025 by rpki-client