This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft File: au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json) Hash identifier: FyF2SothmI/7RguAXcApuPizzSiCOz2uPTZnSXp904E= Subject key identifier: 70:77:CE:F0:86:2B:E1:DF:7B:E0:86:4A:58:8D:3F:92:85:C4:CF:84 Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21 Certificate issuer: /CN=6aeeab5d3c001d57adb3087812179c829228b821 Certificate serial: 019B19BBD592A8E6EC5999D7A06753245E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft Manifest number: 1773 Signing time: Sat 13 Dec 2025 22:01:38 +0000 Manifest this update: Sat 13 Dec 2025 22:01:38 +0000 Manifest next update: Sun 14 Dec 2025 22:01:38 +0000 Files and hashes: 1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: qQgsb2TTvilrxAMwWqssjE8DYYNAsEsIcI9wYY3sX7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:d5:92:a8:e6:ec:59:99:d7:a0:67:53:24:5e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821 Validity Not Before: Dec 13 22:01:38 2025 GMT Not After : Dec 14 22:01:38 2025 GMT Subject: CN=7077cef0862be1df7be0864a588d3f9285c4cf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:da:da:fe:85:3e:c2:70:72:d7:77:0d:53: 80:5e:4c:97:dc:9d:40:a9:2c:16:b5:a7:32:0b:f2: 53:51:71:c8:9f:20:2f:74:13:23:b0:d0:39:ad:35: 49:e7:60:f6:2f:d6:7a:9d:5a:42:01:2d:58:f3:ff: ec:2a:b6:09:b0:3f:95:d6:0b:6b:5d:c0:d4:3a:79: ef:ab:b7:77:c6:ff:d8:10:e0:e7:85:8d:6c:ed:5b: 19:df:6b:a1:92:1f:f5:47:43:3b:f3:3d:30:ee:9b: e7:73:58:e8:ca:9c:ba:41:e7:f1:19:7b:e7:27:c8: 3e:17:5a:db:d4:df:83:b4:87:26:e6:36:84:a3:03: ed:df:e9:9f:3b:31:36:fb:12:03:f8:62:02:1a:f6: 82:cc:ff:dc:94:d6:27:4f:7e:d5:c8:fc:1c:9b:57: dd:17:53:36:38:91:9c:4d:c6:42:82:61:e6:86:28: 89:ef:09:85:84:28:cd:0a:d6:00:e1:b9:d3:0f:c3: 3c:fc:f5:a0:2d:a1:34:c2:f7:a3:8e:f2:f4:09:ff: fa:20:61:61:44:70:2f:4d:81:12:aa:2c:eb:2a:18: 32:33:4c:97:5c:54:dc:7c:db:81:c6:6f:d6:9d:fb: b8:53:de:68:f1:b7:26:d6:31:29:79:d4:7c:11:e9: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:77:CE:F0:86:2B:E1:DF:7B:E0:86:4A:58:8D:3F:92:85:C4:CF:84 X509v3 Authority Key Identifier: keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9d:55:11:8c:97:f0:77:b1:7e:42:d0:71:8a:e6:5e:37:7d: 10:82:1e:bf:d7:d5:a3:9f:d3:af:34:70:5c:4b:ca:c4:ef:23: 7c:07:29:2b:42:29:8d:86:08:e9:b3:5c:76:d0:ea:95:32:e8: cf:af:d5:0b:92:bc:f3:0f:bd:12:e3:cb:15:8c:f8:48:53:34: 37:5c:f4:3d:9e:8b:a6:a0:cb:8a:6a:ad:98:ba:4f:c2:a5:07: e8:d4:6d:30:5f:ec:d8:d6:97:c9:0f:c7:fa:7a:3d:31:0f:90: c9:dc:dc:58:2a:54:a3:9d:86:5f:8e:16:c0:72:7b:6b:5b:b1: 85:97:b7:a6:16:01:8c:95:a8:68:f0:0a:8b:48:7d:21:9b:6c: 9e:62:e0:dd:35:a4:74:c3:d7:ba:e6:ef:2a:5f:74:5a:20:b2: 7e:14:3d:6b:f2:bf:c2:5c:72:9c:93:98:7e:f2:2f:dc:8f:a4: ce:20:af:ec:62:ac:8e:c1:33:6b:c0:c9:51:a8:b0:06:5e:7c: ee:49:f1:e7:3d:e4:9b:a7:d6:f0:79:5c:79:63:fe:b5:1b:2b: d0:61:6b:98:61:7c:62:82:fd:50:73:fc:48:ab:4d:d8:44:17: 49:63:b2:9e:3d:d8:94:bb:33:42:e3:84:50:90:87:99:4c:3b: d3:7b:bf:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu9WSqObsWZnXoGdTJF4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZWVhYjVkM2MwMDFkNTdhZGIzMDg3ODEyMTc5YzgyOTIy OGI4MjEwHhcNMjUxMjEzMjIwMTM4WhcNMjUxMjE0MjIwMTM4WjAzMTEwLwYDVQQD Eyg3MDc3Y2VmMDg2MmJlMWRmN2JlMDg2NGE1ODhkM2Y5Mjg1YzRjZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4Xa2v6FPsJwctd3DVOAXkyX3J1A qSwWtacyC/JTUXHInyAvdBMjsNA5rTVJ52D2L9Z6nVpCAS1Y8//sKrYJsD+V1gtr XcDUOnnvq7d3xv/YEODnhY1s7VsZ32uhkh/1R0M78z0w7pvnc1joypy6QefxGXvn J8g+F1rb1N+DtIcm5jaEowPt3+mfOzE2+xID+GICGvaCzP/clNYnT37VyPwcm1fd F1M2OJGcTcZCgmHmhiiJ7wmFhCjNCtYA4bnTD8M8/PWgLaE0wvejjvL0Cf/6IGFh RHAvTYESqizrKhgyM0yXXFTcfNuBxm/Wnfu4U95o8bcm1jEpedR8EemS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB3zvCGK+Hfe+CGSliNP5KFxM+EMB8GA1UdIwQY MBaAFGruq108AB1XrbMIeBIXnIKSKLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kZmZiOWMtNGYyYy00ODNkLWE2ZjQt MTMzMGY0NGEzOWQ2LzEvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kZmZiOWMtNGYyYy00ODNkLWE2ZjQtMTMzMGY0NGEzOWQ2 LzEvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH51VEYyX 8HexfkLQcYrmXjd9EIIev9fVo5/TrzRwXEvKxO8jfAcpK0IpjYYI6bNcdtDqlTLo z6/VC5K88w+9EuPLFYz4SFM0N1z0PZ6LpqDLimqtmLpPwqUH6NRtMF/s2NaXyQ/H +no9MQ+QydzcWCpUo52GX44WwHJ7a1uxhZe3phYBjJWoaPAKi0h9IZtsnmLg3TWk dMPXuubvKl90WiCyfhQ9a/K/wlxynJOYfvIv3I+kziCv7GKsjsEza8DJUaiwBl58 7knx5z3km6fW8HlceWP+tRsr0GFrmGF8YoL9UHP8SKtN2EQXSWOynj3YlLszQuOE UJCHmUw703u/JQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:45 2025 by rpki-client