This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft File: w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json) Hash identifier: zpbapY8XCTxx8m7W5yDMIK/GjwEXrfRgisxlMq/0Sfs= Subject key identifier: F5:38:1C:3C:A6:F8:1A:18:68:CF:CD:B3:9F:3E:2D:F7:B5:87:BF:68 Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F Certificate issuer: /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f Certificate serial: 019AF3F75C9ED869D82E98A4A891E8FB5B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft Manifest number: 06E9 Signing time: Sat 06 Dec 2025 14:01:05 +0000 Manifest this update: Sat 06 Dec 2025 14:01:05 +0000 Manifest next update: Sun 07 Dec 2025 14:01:05 +0000 Files and hashes: 1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: GqoqTriMVZKj1XrD5cZGFntqBoF1qpCprfjXS6t9Prw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5c:9e:d8:69:d8:2e:98:a4:a8:91:e8:fb:5b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f Validity Not Before: Dec 6 14:01:05 2025 GMT Not After : Dec 7 14:01:05 2025 GMT Subject: CN=f5381c3ca6f81a1868cfcdb39f3e2df7b587bf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:a0:c0:63:bb:e7:0b:ed:2d:93:8d:f6:ca: 60:27:d5:ed:3c:21:e5:45:cd:d9:c2:13:df:94:cd: d4:cd:f9:d3:f7:e5:79:9e:66:6d:0a:9d:d2:69:bd: 50:1c:c1:0b:95:14:7b:94:27:0f:69:9f:3c:10:c4: 6b:1e:1c:69:18:8e:a3:0a:ec:96:ae:6d:0f:c3:94: f6:f1:a8:66:92:d0:a1:8a:38:4c:89:44:b6:37:01: 8d:60:b7:62:db:e9:02:d7:50:fd:8b:63:a5:ae:d2: ce:96:34:86:ca:cb:bf:3e:c0:6f:65:f3:f9:28:ce: 95:29:ea:94:91:10:35:77:70:eb:be:a4:33:71:96: b9:3f:a7:68:43:2b:ff:fb:b0:10:c9:37:db:fd:06: 03:17:ff:af:14:d3:6f:76:13:bf:d1:98:d2:0d:a1: fa:5a:ff:cf:0b:d5:5d:64:d0:89:4e:c8:e5:90:66: 87:4b:ef:ce:5f:33:90:df:62:95:82:35:af:68:a6: d2:d1:4c:37:74:63:22:90:ff:66:48:23:a9:a8:6d: 22:8e:d8:16:18:69:9e:dc:fe:81:62:d9:4d:69:54: 4e:b7:a7:0f:41:06:6d:8e:a8:80:08:cf:45:11:28: 7f:63:d6:f9:ea:8f:d9:3f:dc:41:5a:82:15:57:73: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:38:1C:3C:A6:F8:1A:18:68:CF:CD:B3:9F:3E:2D:F7:B5:87:BF:68 X509v3 Authority Key Identifier: keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ee:7e:67:a8:53:2e:bc:cd:05:d5:46:2b:ad:59:5a:ee:7f: d5:11:37:9b:eb:7b:c3:c5:c1:b6:38:77:42:4e:eb:0f:c3:ac: a6:d4:00:96:4d:be:9a:19:11:9a:fe:81:3e:6d:6f:32:0b:af: 09:2f:65:aa:57:fc:70:45:1c:bc:f5:7b:f5:81:5a:bc:13:4f: 37:eb:9b:f2:3c:63:c9:c4:26:cd:a5:84:15:d0:79:95:53:fa: 03:e6:ec:6a:e5:ad:5e:4d:d5:e3:af:20:15:a2:af:dc:e4:c7: 0f:74:d8:ad:ed:6d:88:66:a6:ed:08:f5:90:5b:95:96:14:a9: 4d:9e:9a:0d:55:7b:a6:3a:0f:f1:ca:c8:4d:26:91:27:2b:7b: f1:82:22:6e:24:d5:15:fb:01:40:83:1e:2c:37:ae:8d:b4:43: 75:34:12:4d:e9:01:c9:12:f5:a8:de:42:10:45:9b:98:d8:ff: 60:be:bb:37:87:91:43:69:cc:7b:2a:b8:f6:d5:b6:a8:00:74: 07:ea:54:68:bf:11:c7:09:35:fb:f1:06:d6:dd:29:26:60:14: 3c:9c:ef:ae:81:09:e9:2e:41:c4:e3:03:be:1c:f9:49:3c:ed: de:2f:a0:7f:c7:c2:10:a8:4f:8e:7e:7f:48:a8:3d:bc:9d:7b: b2:b9:0d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91ye2GnYLpikqJHo+1uXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw OGY4NWYwHhcNMjUxMjA2MTQwMTA1WhcNMjUxMjA3MTQwMTA1WjAzMTEwLwYDVQQD EyhmNTM4MWMzY2E2ZjgxYTE4NjhjZmNkYjM5ZjNlMmRmN2I1ODdiZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwugwGO75wvtLZON9spgJ9XtPCHl Rc3ZwhPflM3UzfnT9+V5nmZtCp3Sab1QHMELlRR7lCcPaZ88EMRrHhxpGI6jCuyW rm0Pw5T28ahmktChijhMiUS2NwGNYLdi2+kC11D9i2OlrtLOljSGysu/PsBvZfP5 KM6VKeqUkRA1d3DrvqQzcZa5P6doQyv/+7AQyTfb/QYDF/+vFNNvdhO/0ZjSDaH6 Wv/PC9VdZNCJTsjlkGaHS+/OXzOQ32KVgjWvaKbS0Uw3dGMikP9mSCOpqG0ijtgW GGme3P6BYtlNaVROt6cPQQZtjqiACM9FESh/Y9b56o/ZP9xBWoIVV3P+4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPU4HDym+BoYaM/Ns58+Lfe1h79oMB8GA1UdIwQY MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+5+Z6hT LrzNBdVGK61ZWu5/1RE3m+t7w8XBtjh3Qk7rD8OsptQAlk2+mhkRmv6BPm1vMguv CS9lqlf8cEUcvPV79YFavBNPN+ub8jxjycQmzaWEFdB5lVP6A+bsauWtXk3V468g FaKv3OTHD3TYre1tiGam7Qj1kFuVlhSpTZ6aDVV7pjoP8crITSaRJyt78YIibiTV FfsBQIMeLDeujbRDdTQSTekByRL1qN5CEEWbmNj/YL67N4eRQ2nMeyq49tW2qAB0 B+pUaL8Rxwk1+/EG1t0pJmAUPJzvroEJ6S5BxOMDvhz5STzt3i+gf8fCEKhPjn5/ SKg9vJ17srkNQw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:02 2025 by rpki-client