This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json) Hash identifier: H4239LEDqr5aa/6vusLLlbIp9afiTGG+JIP7G1yBa48= Subject key identifier: 4A:8C:36:6D:2E:61:D5:CA:C7:CD:0F:23:4D:E8:BF:8A:14:1D:D7:F5 Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Certificate serial: 019AF31B18F06CF67206FF93433252E4884D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft Manifest number: 0A6B Signing time: Sat 06 Dec 2025 10:00:30 +0000 Manifest this update: Sat 06 Dec 2025 10:00:30 +0000 Manifest next update: Sun 07 Dec 2025 10:00:30 +0000 Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: OsDgjgR0h2GJxx2lEfnsKedN8b1I4kn/b/k2NgvXhPk=) 2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:18:f0:6c:f6:72:06:ff:93:43:32:52:e4:88:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Validity Not Before: Dec 6 10:00:30 2025 GMT Not After : Dec 7 10:00:30 2025 GMT Subject: CN=4a8c366d2e61d5cac7cd0f234de8bf8a141dd7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:98:82:2e:88:85:bb:e1:bb:f3:43:1b:a1: 1a:30:95:f2:ed:d6:80:86:be:17:f6:22:88:7d:e1: 8d:51:93:01:fa:57:19:4a:66:3b:b8:53:fe:b1:ac: 91:b6:d3:3d:16:b9:30:46:6c:8a:64:92:1d:0d:15: f5:a8:9e:dc:7b:4e:90:ae:e2:8c:e4:5c:fd:43:77: 6e:93:3d:9d:89:e9:61:b7:32:44:eb:7e:53:e5:6b: 31:2f:2b:f4:1a:aa:bf:58:c8:be:ef:19:0f:78:de: 96:e7:f7:4d:9f:06:b3:2a:bd:cb:d0:5c:a0:4f:88: a8:6b:f8:7a:2b:8f:aa:87:3f:22:06:ae:49:5f:88: e5:9b:94:63:99:e6:ff:a1:cc:61:24:31:5f:d5:b0: 63:c7:38:ea:c5:a4:bf:e3:23:33:44:fd:b4:ae:80: 30:cb:28:ab:56:de:72:62:31:3b:e6:2f:50:91:bf: 94:33:cc:06:3e:89:68:c6:56:af:cb:e1:81:9f:bf: 06:e6:85:af:4a:0a:af:d7:ab:c5:20:cb:8b:51:35: 4d:d7:4e:00:c9:f5:c2:35:2b:8c:df:7f:14:7d:73: 98:df:06:e7:62:00:1c:04:9f:31:30:f9:60:5a:5d: cc:de:6c:01:49:3a:c9:ee:0c:41:5b:f4:c4:f1:45: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8C:36:6D:2E:61:D5:CA:C7:CD:0F:23:4D:E8:BF:8A:14:1D:D7:F5 X509v3 Authority Key Identifier: keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5e:a3:b0:3d:d7:5a:3b:84:5c:b8:e7:1d:a4:5d:98:d7:84: 53:5c:2d:15:0f:0b:5b:88:21:f3:15:db:a3:13:f5:4a:f6:21: aa:30:a8:59:1a:13:c4:4c:4e:78:39:30:23:38:ec:47:14:22: d4:1a:15:bd:25:a1:bc:c8:af:30:e1:37:7e:c2:cf:90:f5:d5: 54:21:c6:a8:4a:39:00:08:3b:9d:6d:05:0a:92:78:22:b4:82: 9c:e0:b0:2c:43:ae:0d:70:3f:5e:74:c2:84:2c:2d:86:88:61: 0a:2a:46:51:43:05:47:85:ac:ba:00:70:05:8b:7c:8c:de:98: 00:b1:fd:15:d5:81:36:1f:f7:4b:9b:0d:01:5a:70:56:81:21: 46:0d:1b:24:5e:7d:16:16:3f:d0:43:a3:94:21:4c:bb:2f:28: 64:53:1d:0a:47:a2:5a:bb:9f:aa:fb:cd:64:6a:b2:e9:40:af: 66:60:75:f4:ac:69:a6:f6:3a:60:2c:5f:ff:17:83:05:f5:81: dc:f7:86:f6:ae:17:02:be:78:7a:f3:62:46:0e:fe:9d:5d:53: 39:ab:82:99:cb:97:b9:fd:e7:67:82:d2:5e:58:9a:64:c0:a1: dd:61:da:0f:86:64:8e:44:19:b1:af:a1:99:dd:6e:b5:79:8a: 11:b3:55:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxjwbPZyBv+TQzJS5IhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm MDliYzkwHhcNMjUxMjA2MTAwMDMwWhcNMjUxMjA3MTAwMDMwWjAzMTEwLwYDVQQD Eyg0YThjMzY2ZDJlNjFkNWNhYzdjZDBmMjM0ZGU4YmY4YTE0MWRkN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0iYgi6Ihbvhu/NDG6EaMJXy7daA hr4X9iKIfeGNUZMB+lcZSmY7uFP+sayRttM9FrkwRmyKZJIdDRX1qJ7ce06QruKM 5Fz9Q3dukz2dielhtzJE635T5WsxLyv0Gqq/WMi+7xkPeN6W5/dNnwazKr3L0Fyg T4ioa/h6K4+qhz8iBq5JX4jlm5Rjmeb/ocxhJDFf1bBjxzjqxaS/4yMzRP20roAw yyirVt5yYjE75i9Qkb+UM8wGPoloxlavy+GBn78G5oWvSgqv16vFIMuLUTVN104A yfXCNSuM338UfXOY3wbnYgAcBJ8xMPlgWl3M3mwBSTrJ7gxBW/TE8UUFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqMNm0uYdXKx80PI03ov4oUHdf1MB8GA1UdIwQY MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV6jsD3X WjuEXLjnHaRdmNeEU1wtFQ8LW4gh8xXboxP1SvYhqjCoWRoTxExOeDkwIzjsRxQi 1BoVvSWhvMivMOE3fsLPkPXVVCHGqEo5AAg7nW0FCpJ4IrSCnOCwLEOuDXA/XnTC hCwthohhCipGUUMFR4WsugBwBYt8jN6YALH9FdWBNh/3S5sNAVpwVoEhRg0bJF59 FhY/0EOjlCFMuy8oZFMdCkeiWrufqvvNZGqy6UCvZmB19KxppvY6YCxf/xeDBfWB 3PeG9q4XAr54evNiRg7+nV1TOauCmcuXuf3nZ4LSXliaZMCh3WHaD4ZkjkQZsa+h md1utXmKEbNVwg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:26 2025 by rpki-client