This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json) Hash identifier: GsPhaeYKH+aJj0qFqUZPkqvin3Cy/OK5maQPm+IRnV8= Subject key identifier: F3:A9:36:E8:FD:53:A5:B1:A7:81:68:6D:1F:5E:B5:56:A9:85:C8:79 Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53 Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653 Certificate serial: 019AF19A9BDF61B0038B3AEE118C991D407B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft Manifest number: 0DF5 Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: vEOtLaFVqsuqrp8+i9JF7JbPl4o3yeWUbsvg7Pnh1s4=) 2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9b:df:61:b0:03:8b:3a:ee:11:8c:99:1d:40:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653 Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=f3a936e8fd53a5b1a781686d1f5eb556a985c879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:30:e4:1c:c4:59:02:52:8a:4f:b6:d3:0d: 08:99:1e:57:e8:8d:16:c5:1c:29:27:53:df:4b:cc: 9a:e3:88:1d:c2:d5:77:c7:73:0e:1d:bb:e6:72:15: 7a:23:7a:c5:43:36:17:33:0d:17:6d:79:3c:2c:96: fd:38:bd:4a:45:fa:b2:43:0a:6e:f4:c7:4e:22:b6: 9b:2b:27:64:36:64:45:6a:cc:d1:59:7d:f2:6b:58: a5:39:7c:90:07:26:20:10:96:3f:63:15:74:e0:a2: f7:99:53:50:ce:d9:7c:b2:96:33:74:77:01:89:cd: 42:37:66:52:4a:7f:13:7c:50:4a:92:3f:ba:c1:92: eb:ce:d3:04:2b:9e:62:03:e8:a9:e5:30:08:8e:d0: f4:dc:43:91:22:f7:51:5f:10:7a:bf:a0:78:88:31: 94:ff:c5:5a:54:a2:c8:c0:d2:3d:9c:33:4f:54:d8: ed:76:5b:fc:31:c5:5d:3b:4f:18:ef:0e:ab:8c:02: 8f:6d:f0:dd:5b:f3:c6:98:57:e4:1e:69:8f:33:8d: 34:78:b2:86:ec:ec:4c:03:d2:0f:45:49:ed:d0:89: 0a:3b:f5:69:a9:8d:12:08:02:bd:17:71:75:b9:b2: f6:9d:3f:9c:5c:80:f0:f4:65:b6:d2:c7:69:7d:b8: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A9:36:E8:FD:53:A5:B1:A7:81:68:6D:1F:5E:B5:56:A9:85:C8:79 X509v3 Authority Key Identifier: keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:2a:61:d9:80:93:a5:28:50:e6:9a:38:8c:50:33:0a:cb: 6f:5b:e4:41:51:0b:39:2f:04:1c:cb:e8:e4:bb:b1:25:53:8b: 53:9c:52:3e:c7:b2:3b:3d:15:45:8b:40:d7:da:a1:38:4a:bb: 20:b0:a1:9f:5e:fe:65:19:b8:f7:50:be:ec:6b:07:a2:d5:2b: cf:90:6a:28:42:04:a8:76:bb:62:66:8b:f6:9a:e7:cf:e1:f0: 03:49:47:2a:57:2e:4c:40:2f:32:8f:cd:c4:41:c5:11:78:22: 50:e5:68:4c:a2:72:86:c2:dc:dd:f7:8a:5d:b9:d3:27:d6:fb: 40:bb:ac:60:51:08:92:8e:cb:e3:ce:e0:f2:6e:08:06:38:c4: a6:f8:88:54:65:94:ee:29:46:98:3a:24:be:69:75:80:a5:b9: f5:a9:3f:93:fe:c2:74:80:2c:c9:16:11:b4:8b:19:a2:fc:56: 26:cf:eb:7e:a8:74:30:66:ca:10:c6:53:e1:26:a6:0e:fe:e6: d4:f0:fa:1d:1e:bb:b9:6e:39:36:c1:b9:34:4a:9b:72:f1:68: f1:9f:8b:87:c3:dd:36:06:20:2c:10:15:26:0d:e5:bd:d8:b2: f2:af:f3:3d:0a:39:d6:f0:0b:88:c8:e7:1f:71:70:82:55:1e: f5:1a:62:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpvfYbADizruEYyZHUB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBm NmY2NTMwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD EyhmM2E5MzZlOGZkNTNhNWIxYTc4MTY4NmQxZjVlYjU1NmE5ODVjODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxAw5BzEWQJSik+20w0ImR5X6I0W xRwpJ1PfS8ya44gdwtV3x3MOHbvmchV6I3rFQzYXMw0XbXk8LJb9OL1KRfqyQwpu 9MdOIrabKydkNmRFaszRWX3ya1ilOXyQByYgEJY/YxV04KL3mVNQztl8spYzdHcB ic1CN2ZSSn8TfFBKkj+6wZLrztMEK55iA+ip5TAIjtD03EORIvdRXxB6v6B4iDGU /8VaVKLIwNI9nDNPVNjtdlv8McVdO08Y7w6rjAKPbfDdW/PGmFfkHmmPM400eLKG 7OxMA9IPRUnt0IkKO/VpqY0SCAK9F3F1ubL2nT+cXIDw9GW20sdpfbhOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOpNuj9U6Wxp4FobR9etVaphch5MB8GA1UdIwQY MBaAFOqwZsbhgAo/W9LkBummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEt OTMxY2Y3OThlNDEyLzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEy LzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM78qYdmA k6UoUOaaOIxQMwrLb1vkQVELOS8EHMvo5LuxJVOLU5xSPseyOz0VRYtA19qhOEq7 ILChn17+ZRm491C+7GsHotUrz5BqKEIEqHa7YmaL9prnz+HwA0lHKlcuTEAvMo/N xEHFEXgiUOVoTKJyhsLc3feKXbnTJ9b7QLusYFEIko7L487g8m4IBjjEpviIVGWU 7ilGmDokvml1gKW59ak/k/7CdIAsyRYRtIsZovxWJs/rfqh0MGbKEMZT4SamDv7m 1PD6HR67uW45NsG5NEqbcvFo8Z+Lh8PdNgYgLBAVJg3lvdiy8q/zPQo51vALiMjn H3FwglUe9Rpiwg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:45 2025 by rpki-client