This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft File: 6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json) Hash identifier: SD4s7xF0XcD9jHu4RnGIxkr1lxtI9jzq56uSvRkvR0o= Subject key identifier: EE:09:A1:BD:27:9A:6D:85:68:20:6B:1C:C5:BE:0D:9B:AB:8A:A6:A3 Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6 Certificate issuer: /CN=e9eeb078328c3c7b29c37000f71a92f572918de6 Certificate serial: 019AF3520857539D19C17D4969F32B0D21A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft Manifest number: AE Signing time: Sat 06 Dec 2025 11:00:30 +0000 Manifest this update: Sat 06 Dec 2025 11:00:30 +0000 Manifest next update: Sun 07 Dec 2025 11:00:30 +0000 Files and hashes: 1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: mr4zHkxxhQGQKcDoJuiBbEvS3QaaYzxLWMZximw3Pec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:08:57:53:9d:19:c1:7d:49:69:f3:2b:0d:21:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6 Validity Not Before: Dec 6 11:00:30 2025 GMT Not After : Dec 7 11:00:30 2025 GMT Subject: CN=ee09a1bd279a6d8568206b1cc5be0d9bab8aa6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:90:af:d6:e4:91:cb:f4:6e:01:87:5c:e9: bf:e1:f7:5c:86:54:d6:b4:24:79:d6:4c:78:7e:4e: c1:08:7d:ef:23:44:bf:a8:7f:f3:fb:ac:c1:11:ee: 5b:66:08:1f:06:da:5a:89:84:55:7b:30:68:7a:7d: bd:21:01:d6:99:60:ed:ce:37:25:64:be:ea:b7:70: 9d:47:79:c2:57:43:b6:2e:08:db:b1:94:99:ae:d4: e9:ab:37:b7:a9:ad:b2:91:ce:3a:d8:7a:c3:66:e8: 5d:e7:90:fa:14:16:4b:bf:08:52:5b:c8:e2:0b:c3: e9:bd:df:ee:d2:98:d0:8e:cf:80:cf:7a:64:c7:00: 86:45:fa:72:52:bf:8d:1c:a3:5d:e8:a5:cc:09:a6: 2b:b4:22:d2:cc:31:38:c9:6d:0f:bb:68:1c:e1:11: a5:2b:f2:8a:ad:2c:14:ba:ac:7a:55:d8:28:73:56: 2a:37:9d:d2:93:9a:ab:26:37:d5:55:87:eb:21:70: 7c:5d:e7:2e:01:e5:06:71:53:7a:76:bc:da:35:6a: 77:83:43:46:e8:d9:f9:ad:3c:8c:3d:7e:55:35:10: 21:bd:3b:18:de:62:13:90:76:a2:d3:9e:83:05:d5: 61:0d:df:8d:bc:d3:f4:18:e2:6f:a8:bd:13:20:ed: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:A1:BD:27:9A:6D:85:68:20:6B:1C:C5:BE:0D:9B:AB:8A:A6:A3 X509v3 Authority Key Identifier: keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:b0:09:9f:fa:3a:b6:d4:90:cd:d1:2c:38:00:19:49:d6: bd:7b:bc:25:95:ff:99:8e:6e:9c:43:22:e3:5e:b1:44:0d:e1: 73:d4:37:9e:b2:9e:05:9e:d1:ec:a6:50:05:c5:64:06:5f:75: 0b:c4:4e:80:71:f1:78:cd:52:7d:da:ab:ee:23:8b:12:43:68: 07:a9:1f:76:ed:36:8d:15:c9:44:c9:9e:ee:89:7c:f0:93:f8: f7:4b:d8:76:e9:c1:8c:ad:e4:2f:fb:cb:ad:c3:ad:de:a7:a0: ce:f2:7a:4d:89:b8:c8:56:04:83:8f:26:33:0c:8f:39:9a:a8: a4:b4:96:9f:5a:35:0d:cb:68:02:55:56:db:87:c1:45:c1:4a: 5d:c9:35:31:3e:b7:94:eb:0e:2c:16:87:b9:90:de:e5:80:be: 3a:69:20:17:73:ab:e8:9d:2e:1a:0d:78:b3:52:81:85:5e:41: 53:41:ff:d5:de:da:af:3f:66:82:64:05:41:4c:6c:f8:12:fc: a8:b9:b0:1b:fd:58:96:68:e9:3a:ba:eb:38:00:4a:7f:4f:3c: e2:6e:20:f5:76:ef:fd:16:fa:1c:e8:e9:ab:54:04:a7:60:8b: 8f:77:d9:b9:55:b4:de:e1:b7:2e:7f:06:e2:26:03:10:34:7e: de:30:e8:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUghXU50ZwX1JafMrDSGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZWViMDc4MzI4YzNjN2IyOWMzNzAwMGY3MWE5MmY1NzI5 MThkZTYwHhcNMjUxMjA2MTEwMDMwWhcNMjUxMjA3MTEwMDMwWjAzMTEwLwYDVQQD EyhlZTA5YTFiZDI3OWE2ZDg1NjgyMDZiMWNjNWJlMGQ5YmFiOGFhNmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEyQr9bkkcv0bgGHXOm/4fdchlTW tCR51kx4fk7BCH3vI0S/qH/z+6zBEe5bZggfBtpaiYRVezBoen29IQHWmWDtzjcl ZL7qt3CdR3nCV0O2LgjbsZSZrtTpqze3qa2ykc462HrDZuhd55D6FBZLvwhSW8ji C8Ppvd/u0pjQjs+Az3pkxwCGRfpyUr+NHKNd6KXMCaYrtCLSzDE4yW0Pu2gc4RGl K/KKrSwUuqx6Vdgoc1YqN53Sk5qrJjfVVYfrIXB8XecuAeUGcVN6drzaNWp3g0NG 6Nn5rTyMPX5VNRAhvTsY3mITkHai056DBdVhDd+NvNP0GOJvqL0TIO2kaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4Job0nmm2FaCBrHMW+DZuriqajMB8GA1UdIwQY MBaAFOnusHgyjDx7KcNwAPcakvVykY3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmU2d2VES01QSHNwdzNBQTl4cVM5WEtSamVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YmRiZDgtZTI1Yi00Yjk4LTgxOTQt MTRhZjJkZmQyZGZjLzEvNmU2d2VES01QSHNwdzNBQTl4cVM5WEtSamVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YmRiZDgtZTI1Yi00Yjk4LTgxOTQtMTRhZjJkZmQyZGZj LzEvNmU2d2VES01QSHNwdzNBQTl4cVM5WEtSamVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCuwCZ/6 OrbUkM3RLDgAGUnWvXu8JZX/mY5unEMi416xRA3hc9Q3nrKeBZ7R7KZQBcVkBl91 C8ROgHHxeM1Sfdqr7iOLEkNoB6kfdu02jRXJRMme7ol88JP490vYdunBjK3kL/vL rcOt3qegzvJ6TYm4yFYEg48mMwyPOZqopLSWn1o1DctoAlVW24fBRcFKXck1MT63 lOsOLBaHuZDe5YC+OmkgF3Or6J0uGg14s1KBhV5BU0H/1d7arz9mgmQFQUxs+BL8 qLmwG/1YlmjpOrrrOABKf0884m4g9Xbv/Rb6HOjpq1QEp2CLj3fZuVW03uG3Ln8G 4iYDEDR+3jDocQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:25 2025 by rpki-client