This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json) Hash identifier: 827vSGNVueNUJQ/Dy8c4k7/N8bFvckgovTEPki/cB8w= Subject key identifier: E9:28:6A:C2:D8:CA:45:1F:23:EC:10:0E:3B:5B:7E:2C:2D:99:AE:DB Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61 Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61 Certificate serial: 019AF50AE46DB81EE19AD2A16F48C2A15E23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft Manifest number: 07EA Signing time: Sat 06 Dec 2025 19:02:03 +0000 Manifest this update: Sat 06 Dec 2025 19:02:03 +0000 Manifest next update: Sun 07 Dec 2025 19:02:03 +0000 Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: K57FgjLHdkUP8SR4bEE2gASOOWJ82C8iagKt+oI+W4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e4:6d:b8:1e:e1:9a:d2:a1:6f:48:c2:a1:5e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61 Validity Not Before: Dec 6 19:02:03 2025 GMT Not After : Dec 7 19:02:03 2025 GMT Subject: CN=e9286ac2d8ca451f23ec100e3b5b7e2c2d99aedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:fc:ff:d9:41:94:f0:74:df:67:62:7f:ca: dd:a8:9b:b4:44:86:fe:2b:3f:67:b1:60:09:2c:49: 7a:89:bd:87:32:53:5f:49:20:e4:2f:41:74:8d:e6: 3a:b0:7f:d1:54:cd:99:8c:1e:24:d0:33:62:7e:2a: 26:ff:b2:98:d0:56:b3:5c:61:e4:7c:6d:67:10:e8: 75:86:60:99:0f:69:68:4f:de:b2:b9:14:7f:ff:e2: 23:ed:a4:b6:f7:97:c1:c7:9e:f0:07:f2:92:6e:c4: 9c:00:c3:df:f3:20:46:e5:66:9f:5f:b1:71:1b:d2: c1:6b:71:32:ad:66:16:5c:10:92:5e:11:0a:b0:ee: de:13:41:4b:f8:66:e0:bf:a8:40:cf:02:e1:82:17: c8:52:d1:83:b6:5c:4f:75:ee:d9:b9:13:d0:93:23: 75:6c:28:63:c5:3f:a3:aa:55:04:61:2f:57:f7:21: f9:9f:6f:82:c5:eb:ae:81:da:74:eb:b9:53:5f:c7: 60:ec:7b:b4:7b:57:6b:a7:bd:04:a8:d6:e1:c3:76: 7a:bd:3f:df:f2:68:02:b3:b2:96:76:6d:70:83:55: 54:00:3f:c7:e1:50:42:1b:8d:16:58:39:71:b9:ab: 0a:65:73:b4:74:8a:c9:64:aa:10:24:7a:bc:fe:e9: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:28:6A:C2:D8:CA:45:1F:23:EC:10:0E:3B:5B:7E:2C:2D:99:AE:DB X509v3 Authority Key Identifier: keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d5:07:40:ac:48:9d:4a:16:bd:9c:26:a6:0f:9f:1f:09:69: 18:c6:19:bc:e4:48:f2:d1:be:23:35:e1:25:fc:20:3b:72:09: 1c:ab:f1:c4:de:fa:8a:20:e3:83:f0:9f:d8:fc:62:37:2d:ec: e5:a7:4a:62:8d:41:1d:44:e5:b9:6a:9c:35:41:c6:c6:fd:a7: d2:62:62:9a:98:09:6f:30:19:d9:d9:3c:6a:a4:32:4a:d6:ce: a8:a3:1f:e8:ca:c3:3f:4f:4d:45:3d:73:4a:d5:9b:37:ac:eb: 43:e0:b7:fb:af:7f:da:57:29:09:fc:86:1b:9a:57:21:7e:b1: 46:7c:28:f5:34:25:3b:b4:1e:60:8b:3c:b6:50:49:39:9a:da: b7:18:b7:b7:16:ee:15:59:dc:d9:9e:f5:07:ac:7c:4c:a3:5d: fc:cd:03:bf:23:0f:f2:a2:8a:38:34:ad:ea:8b:37:15:cd:c6: 5b:32:e9:0e:a9:43:16:63:2b:e4:c1:6d:4e:f6:93:c6:3d:e7: fd:08:6c:c2:c4:41:bd:1e:3a:3d:4c:61:bb:0b:b1:b7:e3:4b: 8b:01:63:61:2e:2b:9a:bb:62:81:5a:eb:4d:31:f5:e4:d8:1f: 24:1f:11:86:50:fc:47:b6:90:f2:cd:27:a7:ee:ea:e2:34:89: 94:b2:63:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuRtuB7hmtKhb0jCoV4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMTcwZmM3NmNiODVmYTQ3NjA2ZDZjNTc0N2M5ZDRhMzg1 OTJiNjEwHhcNMjUxMjA2MTkwMjAzWhcNMjUxMjA3MTkwMjAzWjAzMTEwLwYDVQQD EyhlOTI4NmFjMmQ4Y2E0NTFmMjNlYzEwMGUzYjViN2UyYzJkOTlhZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi/8/9lBlPB032dif8rdqJu0RIb+ Kz9nsWAJLEl6ib2HMlNfSSDkL0F0jeY6sH/RVM2ZjB4k0DNifiom/7KY0FazXGHk fG1nEOh1hmCZD2loT96yuRR//+Ij7aS295fBx57wB/KSbsScAMPf8yBG5WafX7Fx G9LBa3EyrWYWXBCSXhEKsO7eE0FL+Gbgv6hAzwLhghfIUtGDtlxPde7ZuRPQkyN1 bChjxT+jqlUEYS9X9yH5n2+Cxeuugdp067lTX8dg7Hu0e1drp70EqNbhw3Z6vT/f 8mgCs7KWdm1wg1VUAD/H4VBCG40WWDlxuasKZXO0dIrJZKoQJHq8/unc/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkoasLYykUfI+wQDjtbfiwtma7bMB8GA1UdIwQY MBaAFOoXD8dsuF+kdgbWxXR8nUo4WSthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUt ZTgyODgxYjVlMmQ5LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUtZTgyODgxYjVlMmQ5 LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNUHQKxI nUoWvZwmpg+fHwlpGMYZvORI8tG+IzXhJfwgO3IJHKvxxN76iiDjg/Cf2PxiNy3s 5adKYo1BHUTluWqcNUHGxv2n0mJimpgJbzAZ2dk8aqQyStbOqKMf6MrDP09NRT1z StWbN6zrQ+C3+69/2lcpCfyGG5pXIX6xRnwo9TQlO7QeYIs8tlBJOZratxi3txbu FVnc2Z71B6x8TKNd/M0DvyMP8qKKODSt6os3Fc3GWzLpDqlDFmMr5MFtTvaTxj3n /QhswsRBvR46PUxhuwuxt+NLiwFjYS4rmrtigVrrTTH15NgfJB8RhlD8R7aQ8s0n p+7q4jSJlLJjRA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:01 2025 by rpki-client