This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json) Hash identifier: FzMAL+ALLGROlmqJR0aiuI+uIost7rEk8dI0WGtw8a4= Subject key identifier: 82:4B:93:94:2A:C7:03:C0:CC:21:44:FA:9B:D2:5C:BC:3C:1A:04:DB Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb Certificate serial: 019AF2AD50045F8ED0DEB27D48450DB8E532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft Manifest number: 0B4A Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: vo2NIZbEzrXuF63SHbgHOefPos/f7l1WWa5JSFGINVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:50:04:5f:8e:d0:de:b2:7d:48:45:0d:b8:e5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=824b93942ac703c0cc2144fa9bd25cbc3c1a04db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:13:16:6b:db:02:d7:38:d3:4b:26:61:c5: 5a:35:ed:20:36:b7:0d:cf:8d:b2:c7:ef:e1:3d:85: 64:9f:03:2c:42:03:fb:4e:bd:61:bf:f9:c4:af:ec: a8:df:15:86:f7:52:a0:26:d7:67:6a:47:db:38:96: 6d:bf:15:01:6f:3a:dd:c5:2f:e8:86:25:1b:1d:1f: f0:10:2f:74:1d:ac:5c:ca:15:c7:52:9c:56:d7:47: ab:a7:92:72:3b:9c:db:3f:f7:46:a1:58:8e:38:7f: 8b:02:6a:e8:68:eb:26:44:6d:d5:f0:ac:02:77:f7: f8:a6:1a:c9:05:9e:76:0b:0e:5c:31:2d:ba:44:61: bc:38:c8:9c:ed:0c:6d:ea:d7:bc:d8:53:a5:2b:75: 7a:10:2d:64:25:85:e6:dc:3d:38:d7:4a:95:3d:6b: 1c:28:c2:b4:2d:2a:a7:c3:98:73:74:39:29:d1:76: 97:39:5a:ef:c6:b8:94:b7:f1:f6:f2:34:be:eb:b7: bd:fe:0a:af:f4:a4:96:4d:58:d4:57:bc:58:3e:6f: 2f:ca:0e:84:17:e7:db:88:71:84:d9:e9:db:33:26: c8:e4:b9:02:df:ad:8e:b0:3f:c8:64:33:02:71:bc: c6:76:30:77:42:87:f6:e5:99:7a:b2:76:7e:8c:a5: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4B:93:94:2A:C7:03:C0:CC:21:44:FA:9B:D2:5C:BC:3C:1A:04:DB X509v3 Authority Key Identifier: keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:64:18:6f:62:80:31:f5:07:0a:b9:22:5c:22:a1:b7:61:aa: 93:97:ee:b0:18:33:30:d4:c7:d4:7d:b7:4b:11:81:f1:57:12: 5b:6c:2b:5d:da:a8:68:7e:2e:b6:c8:f1:ed:66:ed:c6:1f:aa: 98:73:d4:89:29:41:22:84:56:cd:d4:4c:b1:1a:be:d8:ce:ae: 6b:26:35:d1:44:c9:3a:8f:18:e2:51:9c:15:81:e3:6b:4d:3f: 27:1b:bb:3d:98:e6:1b:cd:e6:d0:10:33:7d:e9:a7:f3:d0:97: fb:d3:e6:b2:22:69:84:7d:3c:d6:51:71:c9:fa:69:4c:12:7c: 40:ff:e2:32:f7:59:25:81:e5:c8:ae:b7:44:57:bd:c4:d1:d9: 53:87:82:ec:28:f4:19:fc:e1:aa:28:e0:d5:0e:ca:79:27:3a: b3:d5:0a:e4:1e:6c:6c:98:67:7b:b8:5e:95:60:6b:2d:11:b2: 3a:68:ae:2f:69:e6:ad:ea:d1:8f:c0:ab:e7:2b:08:09:69:df: ef:e1:de:fa:99:03:91:d4:67:06:d0:76:61:51:e0:25:8b:43: 02:29:1a:b8:fe:25:74:d4:16:57:c2:e3:8e:3b:69:f7:59:71: fd:ab:2f:3d:ad:22:83:cf:86:f0:7f:70:c2:41:53:e1:65:9b: 9c:d3:0d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVAEX47Q3rJ9SEUNuOUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YWJlYzA0ZmQ1Mjk5OTRmNTQ1NmExM2E4Yjg4ZjEzZmRl MTJhYmIwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD Eyg4MjRiOTM5NDJhYzcwM2MwY2MyMTQ0ZmE5YmQyNWNiYzNjMWEwNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBITFmvbAtc400smYcVaNe0gNrcN z42yx+/hPYVknwMsQgP7Tr1hv/nEr+yo3xWG91KgJtdnakfbOJZtvxUBbzrdxS/o hiUbHR/wEC90HaxcyhXHUpxW10erp5JyO5zbP/dGoViOOH+LAmroaOsmRG3V8KwC d/f4phrJBZ52Cw5cMS26RGG8OMic7Qxt6te82FOlK3V6EC1kJYXm3D0410qVPWsc KMK0LSqnw5hzdDkp0XaXOVrvxriUt/H28jS+67e9/gqv9KSWTVjUV7xYPm8vyg6E F+fbiHGE2enbMybI5LkC362OsD/IZDMCcbzGdjB3Qof25Zl6snZ+jKW4OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJLk5QqxwPAzCFE+pvSXLw8GgTbMB8GA1UdIwQY MBaAFOir7AT9UpmU9UVqE6i4jxP94Sq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkt2c0JQMVNtWlQxUldvVHFMaVBFXzNoS3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMGVlZmUtYWJjZS00Mzg3LWJlMzgt NWZlMjJiOTgzYjllLzEvNkt2c0JQMVNtWlQxUldvVHFMaVBFXzNoS3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMGVlZmUtYWJjZS00Mzg3LWJlMzgtNWZlMjJiOTgzYjll LzEvNkt2c0JQMVNtWlQxUldvVHFMaVBFXzNoS3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWQYb2KA MfUHCrkiXCKht2Gqk5fusBgzMNTH1H23SxGB8VcSW2wrXdqoaH4utsjx7Wbtxh+q mHPUiSlBIoRWzdRMsRq+2M6uayY10UTJOo8Y4lGcFYHja00/Jxu7PZjmG83m0BAz femn89CX+9PmsiJphH081lFxyfppTBJ8QP/iMvdZJYHlyK63RFe9xNHZU4eC7Cj0 Gfzhqijg1Q7KeSc6s9UK5B5sbJhne7helWBrLRGyOmiuL2nmrerRj8Cr5ysICWnf 7+He+pkDkdRnBtB2YVHgJYtDAikauP4ldNQWV8Ljjjtp91lx/asvPa0ig8+G8H9w wkFT4WWbnNMNdg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:31 2025 by rpki-client