This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft File: DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json) Hash identifier: Pvr+1nCKb1Lz5N4CD2mbwTWcNbmXPfcdtZ22he5YwV8= Subject key identifier: 84:03:A9:8A:AB:90:22:49:CF:8B:B1:78:1D:8D:AD:39:AD:77:A4:F3 Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92 Certificate issuer: /CN=dc6b06b855bf97c397bdb8516944b4db18663f92 Certificate serial: 2A510F0DFA56D889655EC7CAECA587EB7375C394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft Manifest number: 03E0 Signing time: Sat 06 Dec 2025 07:55:50 +0000 Manifest this update: Sat 06 Dec 2025 07:50:50 +0000 Manifest next update: Sun 07 Dec 2025 11:39:50 +0000 Files and hashes: 1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: oOJtGUTE/ho23aqp1UYM3pmy1rt5pcpcUWjTVtO6XVg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:51:0f:0d:fa:56:d8:89:65:5e:c7:ca:ec:a5:87:eb:73:75:c3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92 Validity Not Before: Dec 6 07:50:50 2025 GMT Not After : Dec 7 11:39:50 2025 GMT Subject: CN=8403A98AAB902249CF8BB1781D8DAD39AD77A4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:a3:ad:48:46:30:c6:10:56:f5:a1:b5:ba: 4d:b0:50:43:5d:c0:d8:fc:61:54:d6:46:68:b5:db: 7c:c8:9b:46:51:36:4d:c9:eb:74:ef:43:4a:28:11: 1b:92:5e:36:de:4b:32:f6:10:18:12:b0:be:04:5e: 18:bc:50:c3:8b:20:aa:30:eb:d9:57:f0:25:1c:66: a4:b2:84:2a:ad:22:72:73:07:26:5c:8a:65:9b:bd: 86:1a:fc:0b:ea:3e:89:94:ec:79:09:4a:9a:32:f7: 21:bc:ca:e3:ea:54:d9:c0:5a:61:8f:a7:59:41:6c: 43:8f:3b:33:23:90:87:af:ba:77:21:a8:ec:50:87: 76:c5:85:2f:36:51:af:e7:c8:c7:b0:84:28:e0:98: 5c:bc:49:b5:38:7b:21:43:7e:b5:a9:79:39:2a:9f: 3a:0e:d3:4d:8c:e3:f3:c9:6a:07:96:b2:c2:10:f5: 13:19:de:c3:a3:43:f5:e1:cc:0f:61:4f:eb:eb:68: fb:20:90:ab:cf:73:cb:de:01:9e:12:d1:f2:61:a7: fe:ac:de:15:f1:f5:9d:3a:dc:c2:68:d1:f8:2a:d5: 97:ad:7c:2a:f9:33:47:50:0a:f1:98:d3:7f:70:99: 0f:53:3a:9b:06:7b:41:0b:7c:2e:85:0b:dc:a2:98: 04:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:A9:8A:AB:90:22:49:CF:8B:B1:78:1D:8D:AD:39:AD:77:A4:F3 X509v3 Authority Key Identifier: keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:05:ae:58:74:3e:79:e6:bc:17:79:d3:b0:6e:21:f8:42:8d: fc:0f:fd:34:d4:e6:96:d7:79:3c:64:7d:bd:7b:b1:06:d4:46: ed:7d:eb:44:ff:e3:28:c1:1f:cd:a5:ea:db:1b:51:3f:79:a1: d8:57:66:20:37:29:41:8d:1a:d5:93:f8:83:f4:e4:fa:cb:a3: e5:43:c9:ec:54:09:6c:82:d6:e1:3d:50:fc:1c:07:91:21:1a: 59:7d:5c:20:f4:a0:cf:74:d2:1d:6c:4d:61:0c:88:16:66:8a: 11:da:f2:4c:6a:96:6d:0a:3b:6c:fc:7f:73:a2:f1:5d:45:e7: fd:58:2b:d9:c5:0d:73:90:10:a8:6f:0f:d2:c9:79:e1:68:26: f5:b6:08:20:52:12:64:0f:c8:a7:11:13:27:e3:16:bf:74:cd: 52:c9:89:ee:00:47:6a:02:94:64:a6:47:62:ab:26:d7:0b:74: 60:58:80:3b:0d:c3:a6:36:26:cd:cd:45:63:34:7a:65:a6:85: 4d:73:86:81:12:79:4c:54:c2:7e:9a:43:81:1b:05:94:f5:f4: 1e:76:f6:71:b1:8e:9a:42:5e:ae:67:9c:36:d8:01:00:12:7d: f7:93:8f:f5:97:c1:98:df:1c:3c:31:ce:0d:f3:ef:7d:c5:f7: 17:de:c2:df -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKlEPDfpW2IllXsfK7KWH63N1w5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM2YjA2Yjg1NWJmOTdjMzk3YmRiODUxNjk0NGI0ZGIx ODY2M2Y5MjAeFw0yNTEyMDYwNzUwNTBaFw0yNTEyMDcxMTM5NTBaMDMxMTAvBgNV BAMTKDg0MDNBOThBQUI5MDIyNDlDRjhCQjE3ODFEOERBRDM5QUQ3N0E0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYqOtSEYwxhBW9aG1uk2wUENd wNj8YVTWRmi123zIm0ZRNk3J63TvQ0ooERuSXjbeSzL2EBgSsL4EXhi8UMOLIKow 69lX8CUcZqSyhCqtInJzByZcimWbvYYa/AvqPomU7HkJSpoy9yG8yuPqVNnAWmGP p1lBbEOPOzMjkIevunchqOxQh3bFhS82Ua/nyMewhCjgmFy8SbU4eyFDfrWpeTkq nzoO002M4/PJageWssIQ9RMZ3sOjQ/XhzA9hT+vraPsgkKvPc8veAZ4S0fJhp/6s 3hXx9Z063MJo0fgq1ZetfCr5M0dQCvGY039wmQ9TOpsGe0ELfC6FC9yimARDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhAOpiquQIknPi7F4HY2tOa13pPMwHwYDVR0j BBgwFoAU3GsGuFW/l8OXvbhRaUS02xhmP5IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzk3MjFiOTktMGIyZS00Zjc3LTlhMmYtOGMzMzVhM2Uy N2FkLzAvREM2QjA2Qjg1NUJGOTdDMzk3QkRCODUxNjk0NEI0REIxODY2M0Y5Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNHc0d1RldfbDhPWHZiaFJhVVMwMnho bVA1SS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zOTcyMWI5OS0w YjJlLTRmNzctOWEyZi04YzMzNWEzZTI3YWQvMC9EQzZCMDZCODU1QkY5N0MzOTdC REI4NTE2OTQ0QjREQjE4NjYzRjkyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgWuWHQ+eea8F3nTsG4h +EKN/A/9NNTmltd5PGR9vXuxBtRG7X3rRP/jKMEfzaXq2xtRP3mh2FdmIDcpQY0a 1ZP4g/Tk+suj5UPJ7FQJbILW4T1Q/BwHkSEaWX1cIPSgz3TSHWxNYQyIFmaKEdry TGqWbQo7bPx/c6LxXUXn/Vgr2cUNc5AQqG8P0sl54Wgm9bYIIFISZA/IpxETJ+MW v3TNUsmJ7gBHagKUZKZHYqsm1wt0YFiAOw3DpjYmzc1FYzR6ZaaFTXOGgRJ5TFTC fppDgRsFlPX0Hnb2cbGOmkJermecNtgBABJ995OP9ZfBmN8cPDHODfPvfcX3F97C 3w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:39 2025 by rpki-client