This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json) Hash identifier: ldzhEYeL64/hwbp4zNNDM6TIR6pl5uZ8QWy8bf9oFlc= Subject key identifier: 9E:EF:8B:34:29:AF:E0:9F:4F:19:1E:CB:54:FA:37:C0:3B:1D:39:B6 Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Certificate serial: 019AF0BF42547C79D364DE99BF4B226E7EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft Manifest number: 0266 Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: LaLyolrE4CeRXPrS3B8uyKgvWma3jp1fKMlwf05E/2M=) 2: nTzt_7yObYF91YEfJlGe8rhCQyE.roa (hash: UZJuy0N8FDFUyDPS/6Vsx+tptqpEF0jDlmMqyvXeZZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:42:54:7c:79:d3:64:de:99:bf:4b:22:6e:7e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=9eef8b3429afe09f4f191ecb54fa37c03b1d39b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:9e:84:c4:02:76:85:bf:3e:13:a8:14:6b: c3:eb:4e:18:01:86:ad:88:f7:07:9b:7d:ad:4e:ac: b8:cd:92:4d:51:e7:e6:49:70:20:b2:34:90:f2:02: 11:83:8e:7d:fe:cd:e4:aa:a4:b7:00:a1:02:be:fc: 88:2d:97:df:50:77:d1:4c:8d:fc:43:6d:b3:71:69: 81:61:41:d4:72:0d:4e:f3:d8:9c:66:75:dd:74:ff: ba:aa:f3:1e:c2:16:0a:fb:8a:81:e7:c9:fc:e4:55: 11:d3:1d:62:cf:7e:05:e3:00:bb:ae:7b:11:44:ce: 72:45:63:04:86:93:0c:ad:59:bb:7a:58:da:b3:25: 5c:a2:83:07:4d:9b:7e:f6:ea:9e:cd:8f:1d:60:05: b9:3a:29:ec:ee:70:48:1b:c3:63:ba:fa:89:d1:3a: bd:3c:c5:04:9a:56:f4:8a:7b:6e:cd:e7:69:d5:59: 17:1a:21:f6:6a:c5:a9:fe:23:ad:cb:b9:c6:da:e8: b8:52:f5:44:61:b6:1f:e5:c7:3e:c3:40:99:52:d0: 61:af:43:df:17:e6:6c:73:38:c4:a7:64:20:aa:48: 59:b6:28:7f:fe:24:6d:70:7a:f6:32:04:f8:99:42: 88:a1:5a:a3:3e:3e:94:39:87:33:f1:67:41:d4:78: e2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:8B:34:29:AF:E0:9F:4F:19:1E:CB:54:FA:37:C0:3B:1D:39:B6 X509v3 Authority Key Identifier: keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4e:54:82:74:0e:72:83:1f:df:0e:9b:a9:b4:c4:6f:7b:e2: 47:75:a8:d4:76:68:bb:68:11:ec:1e:1f:22:b2:a5:7a:fb:65: 80:f8:21:54:b6:a8:5d:ce:04:9c:0b:4d:bf:af:cf:8a:8b:0d: 76:b5:46:eb:2c:a8:40:88:92:37:96:8e:61:be:f7:c2:15:94: d0:3b:1f:7d:18:18:d9:8e:1e:78:e8:66:39:55:1f:02:87:eb: 8c:5a:9d:b5:ef:50:2c:86:80:8f:ed:82:42:de:39:a9:c0:f8: e5:64:62:cd:34:bc:f2:c7:b3:5f:d5:47:14:e6:2b:28:37:f9: 20:03:87:e8:9c:e5:31:3f:5e:a8:1a:d6:7a:93:c3:4c:5c:5c: f5:bd:3a:0c:b2:42:87:65:fb:78:d5:ff:d2:db:3c:ae:7d:e4: df:2d:90:7d:95:cd:09:24:e9:83:80:72:21:ea:7e:61:83:a9: 6d:4c:4b:77:60:10:85:e5:dc:5c:45:c5:59:37:ba:23:e8:55: 54:f8:17:c4:f2:b0:a8:95:d0:17:cb:2f:47:d0:c0:58:41:26: ff:c2:96:80:dd:9b:2c:93:ca:7b:79:4b:6e:40:1c:62:4b:2b: 68:ca:6b:ca:0f:14:ad:19:9d:05:70:eb:5f:33:76:c0:ba:75: 96:ef:0c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0JUfHnTZN6Zv0sibn7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2 NjMzZGEwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD Eyg5ZWVmOGIzNDI5YWZlMDlmNGYxOTFlY2I1NGZhMzdjMDNiMWQzOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB2ehMQCdoW/PhOoFGvD604YAYat iPcHm32tTqy4zZJNUefmSXAgsjSQ8gIRg459/s3kqqS3AKECvvyILZffUHfRTI38 Q22zcWmBYUHUcg1O89icZnXddP+6qvMewhYK+4qB58n85FUR0x1iz34F4wC7rnsR RM5yRWMEhpMMrVm7eljasyVcooMHTZt+9uqezY8dYAW5Oins7nBIG8NjuvqJ0Tq9 PMUEmlb0intuzedp1VkXGiH2asWp/iOty7nG2ui4UvVEYbYf5cc+w0CZUtBhr0Pf F+ZsczjEp2QgqkhZtih//iRtcHr2MgT4mUKIoVqjPj6UOYcz8WdB1HjiQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7vizQpr+CfTxkey1T6N8A7HTm2MB8GA1UdIwQY MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt ZGI5MDU5MTNjYjg3LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3 LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU5UgnQO coMf3w6bqbTEb3viR3Wo1HZou2gR7B4fIrKlevtlgPghVLaoXc4EnAtNv6/PiosN drVG6yyoQIiSN5aOYb73whWU0DsffRgY2Y4eeOhmOVUfAofrjFqdte9QLIaAj+2C Qt45qcD45WRizTS88sezX9VHFOYrKDf5IAOH6JzlMT9eqBrWepPDTFxc9b06DLJC h2X7eNX/0ts8rn3k3y2QfZXNCSTpg4ByIep+YYOpbUxLd2AQheXcXEXFWTe6I+hV VPgXxPKwqJXQF8svR9DAWEEm/8KWgN2bLJPKe3lLbkAcYksraMpryg8UrRmdBXDr XzN2wLp1lu8M2A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:24 2025 by rpki-client