This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json) Hash identifier: Vw8BZXQEGttWEdSur1XSvR8beC39yFVaXYQGd627LB8= Subject key identifier: DC:D5:3C:48:5A:7D:65:AA:59:81:14:69:EA:6E:1D:3E:58:22:AB:96 Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Certificate serial: 019AF209379032D020E9A50A7818BFC08A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft Manifest number: 0E98 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: N6AFFYS5iNbFEp4iKP463k7J1a/KlHhToZQCytNZhhc=) 2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:37:90:32:d0:20:e9:a5:0a:78:18:bf:c0:8a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=dcd53c485a7d65aa59811469ea6e1d3e5822ab96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:b8:07:c0:5e:fa:6b:e1:34:c9:08:f8:8a: 2b:11:f1:2b:9c:ad:86:aa:9c:8e:f3:e2:93:4f:36: 1e:0d:44:a7:9a:f9:cf:07:37:e2:fc:94:eb:63:fc: f1:2d:88:40:bf:ff:06:cb:53:86:4e:7a:ff:c9:31: 21:80:a8:7e:fc:0e:77:35:23:1a:cc:fe:de:ac:cc: 87:58:f7:cb:cc:b6:58:cb:da:e4:6d:6c:99:5c:b0: 14:5d:cb:ed:b2:42:1b:15:dd:4c:70:93:b4:4e:31: 2c:d0:dd:70:4c:3a:2b:9e:ff:0c:a6:eb:2a:d0:99: ee:9c:86:5a:1e:4f:43:93:fa:e1:ad:b5:b8:ff:3c: f7:54:c6:a7:a0:08:14:67:cf:40:06:42:4c:80:e1: 23:67:46:41:2b:f5:11:ba:6e:ab:9d:90:7a:ff:8e: cf:b0:4e:ea:25:a1:92:12:5e:63:5a:b0:04:9e:cc: d5:f5:d9:11:5e:a1:b9:70:b3:f9:40:f8:cd:91:43: 7f:2e:0a:14:1b:d7:a9:14:d9:0c:16:e4:6f:9e:d1: 8e:d1:57:23:b8:80:17:57:55:6a:73:8f:c1:05:95: b3:b8:b1:3e:26:13:f1:c4:45:bc:f5:b1:36:f3:ea: ce:e8:63:53:ec:10:94:c3:e8:34:27:a9:86:05:b7: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D5:3C:48:5A:7D:65:AA:59:81:14:69:EA:6E:1D:3E:58:22:AB:96 X509v3 Authority Key Identifier: keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e1:d0:6c:70:6b:69:ec:66:4c:f3:ef:41:cd:3f:81:39:e2: fb:95:d1:fd:7b:d5:b3:e3:25:26:e1:d9:6c:3e:4a:a6:79:10: f2:fb:c0:4c:c0:96:25:23:2b:46:22:a3:c7:eb:c7:d2:42:a1: 3f:7d:30:cb:e8:cc:8f:12:5f:98:07:cc:24:fb:1a:fb:9e:ff: 22:63:7a:f9:65:5b:ee:55:44:27:40:01:4c:78:ad:21:b3:d6: d4:ac:01:64:5a:64:39:98:18:19:8d:d8:7c:2c:23:21:d6:22: cb:a9:9c:90:f7:c9:50:71:5b:5e:4c:a7:ec:78:26:82:27:a6: 18:2d:3e:17:e1:0d:79:c0:08:fd:b5:9d:c4:02:27:96:9d:ca: 35:53:94:14:5c:c5:6a:51:50:68:72:c0:a6:44:42:93:35:e5: c1:3e:b4:40:97:bd:76:85:3f:46:d2:4a:4c:b8:28:8f:c0:ce: f1:7c:96:5b:6f:a6:6f:67:1d:b3:10:52:a5:65:41:28:7f:67: fc:72:c9:b0:b9:6f:b6:36:43:44:1f:74:62:66:a6:29:69:e6: 20:7f:89:5c:81:f2:07:f3:1d:13:00:da:24:84:f2:90:74:8c: 01:3b:cb:d7:3d:da:45:9e:0c:1f:01:4e:bd:9f:c1:7e:d7:4a: 0c:7b:60:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTeQMtAg6aUKeBi/wIpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5 MDJmOTgwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EyhkY2Q1M2M0ODVhN2Q2NWFhNTk4MTE0NjllYTZlMWQzZTU4MjJhYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudi4B8Be+mvhNMkI+IorEfErnK2G qpyO8+KTTzYeDUSnmvnPBzfi/JTrY/zxLYhAv/8Gy1OGTnr/yTEhgKh+/A53NSMa zP7erMyHWPfLzLZYy9rkbWyZXLAUXcvtskIbFd1McJO0TjEs0N1wTDornv8Mpusq 0JnunIZaHk9Dk/rhrbW4/zz3VManoAgUZ89ABkJMgOEjZ0ZBK/URum6rnZB6/47P sE7qJaGSEl5jWrAEnszV9dkRXqG5cLP5QPjNkUN/LgoUG9epFNkMFuRvntGO0Vcj uIAXV1Vqc4/BBZWzuLE+JhPxxEW89bE28+rO6GNT7BCUw+g0J6mGBbdZpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzVPEhafWWqWYEUaepuHT5YIquWMB8GA1UdIwQY MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeHQbHBr aexmTPPvQc0/gTni+5XR/XvVs+MlJuHZbD5KpnkQ8vvATMCWJSMrRiKjx+vH0kKh P30wy+jMjxJfmAfMJPsa+57/ImN6+WVb7lVEJ0ABTHitIbPW1KwBZFpkOZgYGY3Y fCwjIdYiy6mckPfJUHFbXkyn7HgmgiemGC0+F+ENecAI/bWdxAInlp3KNVOUFFzF alFQaHLApkRCkzXlwT60QJe9doU/RtJKTLgoj8DO8XyWW2+mb2cdsxBSpWVBKH9n /HLJsLlvtjZDRB90YmamKWnmIH+JXIHyB/MdEwDaJITykHSMATvL1z3aRZ4MHwFO vZ/BftdKDHtg8g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:18 2025 by rpki-client