This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft File: DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json) Hash identifier: Qr5MmWs+SUnbPNnqBSes4J/CEc+0LkmxES8Vmz7TwhQ= Subject key identifier: 1A:A8:94:E3:97:7C:69:B7:2A:F2:0C:24:0D:4C:DC:76:C0:9D:AD:87 Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92 Certificate issuer: /CN=dc6b06b855bf97c397bdb8516944b4db18663f92 Certificate serial: 5F62B9A324F1FF30D0F6BB77B4D7DCC0E9A526F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft Manifest number: 03ED Signing time: Tue 16 Dec 2025 06:08:21 +0000 Manifest this update: Tue 16 Dec 2025 06:03:21 +0000 Manifest next update: Wed 17 Dec 2025 06:10:21 +0000 Files and hashes: 1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: z32YwOCog8YgFUEFX2ah64egPQuBQXoMfB+pUE2wHzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:62:b9:a3:24:f1:ff:30:d0:f6:bb:77:b4:d7:dc:c0:e9:a5:26:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92 Validity Not Before: Dec 16 06:03:21 2025 GMT Not After : Dec 17 06:10:21 2025 GMT Subject: CN=1AA894E3977C69B72AF20C240D4CDC76C09DAD87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:4a:31:23:c3:98:21:ec:ef:1e:9d:1d:c6: ab:7c:eb:ee:5a:0c:c9:8d:38:a2:c0:f8:6c:fe:25: 66:ed:c8:d2:47:09:a1:45:d0:b5:45:3b:df:c1:9a: 97:32:83:35:9e:d1:85:a7:dc:55:f8:b3:d8:2f:16: 6c:35:d6:d6:9f:f4:6b:66:0c:9c:54:de:11:72:d5: 96:06:82:4c:2b:1a:2c:17:6f:4d:46:48:fb:cd:50: 99:ee:80:97:9b:6a:0c:ab:85:7e:5a:98:5a:0d:a2: 00:6e:60:00:14:b6:19:bc:10:f8:8b:9e:ef:c9:77: 59:d8:a3:82:50:28:97:09:ff:ab:9e:00:36:36:18: d4:d3:f0:e7:1c:ce:e1:78:de:03:b8:30:a6:90:7c: 70:45:c0:8b:2d:41:14:b8:cf:86:33:50:cc:84:ff: 74:b7:f0:e0:51:49:06:96:27:6a:dc:ac:26:ad:bc: 40:23:c9:d1:6b:82:9a:6f:ad:97:97:8c:65:b9:da: 8b:dc:f8:9a:2b:f1:e1:4a:ec:01:68:9c:3a:0d:b3: 31:8b:20:a2:90:f2:f0:99:b5:52:1d:b0:8e:22:8a: 10:e6:78:6c:fe:24:f5:86:86:ca:12:58:d8:be:d3: ad:a7:a2:45:de:14:a4:be:b7:25:d4:48:32:0e:01: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:94:E3:97:7C:69:B7:2A:F2:0C:24:0D:4C:DC:76:C0:9D:AD:87 X509v3 Authority Key Identifier: keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ac:1c:2c:0b:8e:3c:34:44:88:0c:8d:b9:ca:ea:c2:b6:c4: ed:06:68:8b:21:31:3a:8e:8a:2c:61:22:02:02:39:ce:40:b1: 6a:b2:dd:99:67:99:05:4a:f3:95:b8:90:12:6d:f3:c3:a5:91: e6:73:ee:57:7e:50:01:11:1e:53:4c:12:b0:5e:96:c9:2f:a9: 4c:fe:4c:54:c2:e6:99:c8:7d:66:a1:5b:d8:11:47:4c:49:29: ec:26:1c:d1:16:30:ae:16:6c:7d:f5:8e:6c:84:0c:c3:2c:6c: d8:7a:4a:f6:ee:e7:f5:a6:9b:66:a9:60:4e:70:3b:32:31:ba: 85:0b:ee:d1:97:f2:be:db:9e:ee:e5:4a:58:fb:6f:66:45:aa: 21:b1:d6:d2:93:aa:b0:70:56:e6:a9:47:34:9f:b7:e3:9b:d3: db:31:c6:54:ed:b4:95:ad:e6:bb:f5:c5:13:b1:09:80:1b:fd: 7c:46:d6:88:61:57:04:b1:a2:d2:77:f5:35:bc:f4:fe:86:60: e8:af:21:40:c8:4b:10:1a:e4:6c:05:6c:75:c8:c8:db:d3:0c: cc:87:21:a4:ed:e8:43:87:ba:91:ed:9d:37:3d:57:69:8b:44: a9:ca:41:d1:9e:83:a2:88:9b:55:16:9d:cf:db:cf:44:2b:03: 7a:ca:82:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX2K5oyTx/zDQ9rt3tNfcwOmlJvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM2YjA2Yjg1NWJmOTdjMzk3YmRiODUxNjk0NGI0ZGIx ODY2M2Y5MjAeFw0yNTEyMTYwNjAzMjFaFw0yNTEyMTcwNjEwMjFaMDMxMTAvBgNV BAMTKDFBQTg5NEUzOTc3QzY5QjcyQUYyMEMyNDBENENEQzc2QzA5REFEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlEoxI8OYIezvHp0dxqt86+5a DMmNOKLA+Gz+JWbtyNJHCaFF0LVFO9/BmpcygzWe0YWn3FX4s9gvFmw11taf9Gtm DJxU3hFy1ZYGgkwrGiwXb01GSPvNUJnugJebagyrhX5amFoNogBuYAAUthm8EPiL nu/Jd1nYo4JQKJcJ/6ueADY2GNTT8OcczuF43gO4MKaQfHBFwIstQRS4z4YzUMyE /3S38OBRSQaWJ2rcrCatvEAjydFrgppvrZeXjGW52ovc+Jor8eFK7AFonDoNszGL IKKQ8vCZtVIdsI4iihDmeGz+JPWGhsoSWNi+062nokXeFKS+tyXUSDIOAezlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGqiU45d8abcq8gwkDUzcdsCdrYcwHwYDVR0j BBgwFoAU3GsGuFW/l8OXvbhRaUS02xhmP5IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzk3MjFiOTktMGIyZS00Zjc3LTlhMmYtOGMzMzVhM2Uy N2FkLzAvREM2QjA2Qjg1NUJGOTdDMzk3QkRCODUxNjk0NEI0REIxODY2M0Y5Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNHc0d1RldfbDhPWHZiaFJhVVMwMnho bVA1SS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zOTcyMWI5OS0w YjJlLTRmNzctOWEyZi04YzMzNWEzZTI3YWQvMC9EQzZCMDZCODU1QkY5N0MzOTdC REI4NTE2OTQ0QjREQjE4NjYzRjkyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqwcLAuOPDREiAyNucrq wrbE7QZoiyExOo6KLGEiAgI5zkCxarLdmWeZBUrzlbiQEm3zw6WR5nPuV35QAREe U0wSsF6WyS+pTP5MVMLmmch9ZqFb2BFHTEkp7CYc0RYwrhZsffWObIQMwyxs2HpK 9u7n9aabZqlgTnA7MjG6hQvu0Zfyvtue7uVKWPtvZkWqIbHW0pOqsHBW5qlHNJ+3 45vT2zHGVO20la3mu/XFE7EJgBv9fEbWiGFXBLGi0nf1Nbz0/oZg6K8hQMhLEBrk bAVsdcjI29MMzIchpO3oQ4e6ke2dNz1XaYtEqcpB0Z6DooibVRadz9vPRCsDesqC Jw== -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:30 2025 by rpki-client