This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft File: 6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json) Hash identifier: U3hrAWp1aF0aqbXcnRMfHSL1V3gNqFb0tAnOMv58ZnM= Subject key identifier: 57:B6:53:62:A0:AD:4F:54:40:33:C8:0E:C6:CB:5C:C7:70:EC:08:1F Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7 Certificate issuer: /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7 Certificate serial: 019AF12D7335DB1AFEB5B817B8BA25E7AB36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft Manifest number: 0B06 Signing time: Sat 06 Dec 2025 01:01:18 +0000 Manifest this update: Sat 06 Dec 2025 01:01:18 +0000 Manifest next update: Sun 07 Dec 2025 01:01:18 +0000 Files and hashes: 1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: 7dbvxv/gqF6ljLxYUyqkQxty8BXhmYgQ7lR5Pm11cyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:73:35:db:1a:fe:b5:b8:17:b8:ba:25:e7:ab:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7 Validity Not Before: Dec 6 01:01:18 2025 GMT Not After : Dec 7 01:01:18 2025 GMT Subject: CN=57b65362a0ad4f544033c80ec6cb5cc770ec081f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:66:96:a3:9a:94:2b:2b:d3:47:e1:67:b2:79: f9:99:44:de:ce:67:56:18:91:dc:e1:90:3b:56:cc: be:1f:43:56:a1:9f:ef:d3:36:b0:89:d1:e1:09:63: 16:f9:b1:a8:e2:f3:0a:0b:ef:b2:83:20:89:c4:3e: a4:c5:9a:ee:3f:61:70:ed:e1:36:ee:ff:a3:bd:ae: b5:cf:85:0d:46:95:f3:64:ec:4e:6b:6a:b1:17:8c: df:fb:7a:86:3a:3b:d7:7e:c2:ea:c7:4f:f9:a3:29: d7:28:23:21:9a:52:8a:90:e4:c2:a1:28:df:02:6c: dc:c4:af:e8:7c:56:c6:04:c9:7e:90:2a:73:7e:a7: 5c:cd:24:75:8d:70:d3:4c:69:3e:1a:27:22:ad:3e: a8:cd:60:40:fa:82:13:be:23:4d:23:07:52:b3:75: 95:af:7b:e8:d0:ad:7a:89:9a:75:e7:50:c1:be:4f: b3:f6:94:dd:78:35:32:50:fa:da:0f:65:ba:dc:fa: 38:d9:3e:bf:24:78:b5:f5:67:eb:25:0a:b6:55:d4: 99:23:6a:5e:40:91:72:33:b6:56:cf:3a:27:96:2c: fe:0a:7a:f3:0a:39:fa:ed:5b:ae:ab:eb:80:48:96: e0:61:a0:40:59:66:de:d0:f4:81:90:17:5e:a4:75: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B6:53:62:A0:AD:4F:54:40:33:C8:0E:C6:CB:5C:C7:70:EC:08:1F X509v3 Authority Key Identifier: keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:34:44:e7:94:70:67:eb:9b:01:c8:a8:a6:50:b7:68:3e:b1: 15:50:15:b2:af:15:0e:34:f8:22:b0:8d:c0:8a:46:e7:a7:aa: 60:52:8d:a0:27:99:5b:a4:2f:b6:31:e8:40:b7:fc:98:ec:79: 15:b8:c3:f4:bc:5f:20:46:55:3a:68:5a:58:33:e9:ac:5b:da: d3:ac:0c:a3:36:77:ee:b1:4a:0f:b5:13:c5:2a:d3:da:d9:13: 89:ef:fb:55:57:7e:5e:92:72:79:c5:0e:12:15:99:36:10:35: e7:3d:09:45:2a:a5:76:3b:6e:5c:0f:6a:22:2e:fd:be:a8:a7: 6e:ab:ba:c1:6a:a4:f0:96:ca:0f:fb:b0:8c:96:98:c1:57:f2: 3b:c7:a3:4c:ae:88:a1:67:e0:b4:b0:19:cf:d5:46:bd:23:1b: 32:db:d6:f7:9a:14:1c:9f:1e:0e:b7:9b:ab:25:f2:0b:28:14: 5d:34:c9:42:83:a7:a6:9a:07:14:de:4c:2f:f6:c2:c7:c2:62: 35:44:2e:48:fe:4d:6e:10:38:1f:e7:42:ab:fc:ef:f1:48:23: 76:cb:e5:dd:09:b5:14:68:54:d4:ae:a0:2c:c6:cc:94:9e:25: d9:53:fe:88:15:ba:57:bb:0f:45:a3:14:ca:31:e1:9f:28:1b: 98:5a:0e:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXM12xr+tbgXuLol56s2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MTI0NjEyY2FiZDEwMWMxOGM5MzVlZDIxNzc1YTBlNWM0 YTg5YjcwHhcNMjUxMjA2MDEwMTE4WhcNMjUxMjA3MDEwMTE4WjAzMTEwLwYDVQQD Eyg1N2I2NTM2MmEwYWQ0ZjU0NDAzM2M4MGVjNmNiNWNjNzcwZWMwODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WaWo5qUKyvTR+Fnsnn5mUTezmdW GJHc4ZA7Vsy+H0NWoZ/v0zawidHhCWMW+bGo4vMKC++ygyCJxD6kxZruP2Fw7eE2 7v+jva61z4UNRpXzZOxOa2qxF4zf+3qGOjvXfsLqx0/5oynXKCMhmlKKkOTCoSjf AmzcxK/ofFbGBMl+kCpzfqdczSR1jXDTTGk+GicirT6ozWBA+oITviNNIwdSs3WV r3vo0K16iZp151DBvk+z9pTdeDUyUPraD2W63Po42T6/JHi19WfrJQq2VdSZI2pe QJFyM7ZWzzonliz+CnrzCjn67Vuuq+uASJbgYaBAWWbe0PSBkBdepHUdnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe2U2KgrU9UQDPIDsbLXMdw7AgfMB8GA1UdIwQY MBaAFOkSRhLKvRAcGMk17SF3Wg5cSom3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNzI2MjgtMmQzNy00YzlmLWIxZjMt YzFkODQ1NzA4YTZiLzEvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9kNzI2MjgtMmQzNy00YzlmLWIxZjMtYzFkODQ1NzA4YTZi LzEvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzRE55Rw Z+ubAcioplC3aD6xFVAVsq8VDjT4IrCNwIpG56eqYFKNoCeZW6QvtjHoQLf8mOx5 FbjD9LxfIEZVOmhaWDPprFva06wMozZ37rFKD7UTxSrT2tkTie/7VVd+XpJyecUO EhWZNhA15z0JRSqldjtuXA9qIi79vqinbqu6wWqk8JbKD/uwjJaYwVfyO8ejTK6I oWfgtLAZz9VGvSMbMtvW95oUHJ8eDrebqyXyCygUXTTJQoOnppoHFN5ML/bCx8Ji NUQuSP5NbhA4H+dCq/zv8Ugjdsvl3Qm1FGhU1K6gLMbMlJ4l2VP+iBW6V7sPRaMU yjHhnygbmFoOFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:01 2025 by rpki-client