This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json) Hash identifier: pAckg7dH9xFrJ91x1JWMLeHvvDPNTB9r2irnlt5KKV4= Subject key identifier: 11:B1:C4:36:AD:50:9A:14:09:C5:E3:8E:D5:48:17:F4:9B:19:F6:24 Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c Certificate serial: 019B38A1729BD1B7615C8861A3E322AC5800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft Manifest number: 0E57 Signing time: Fri 19 Dec 2025 22:01:03 +0000 Manifest this update: Fri 19 Dec 2025 22:01:03 +0000 Manifest next update: Sat 20 Dec 2025 22:01:03 +0000 Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: KYAsyvmGwCHn0aILgbKjyR79t4Ame4EAevlF1GnjvWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:72:9b:d1:b7:61:5c:88:61:a3:e3:22:ac:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c Validity Not Before: Dec 19 22:01:03 2025 GMT Not After : Dec 20 22:01:03 2025 GMT Subject: CN=11b1c436ad509a1409c5e38ed54817f49b19f624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:48:30:b9:35:cf:22:a4:93:c3:2d:6a:05: 65:0e:94:96:0c:17:f2:99:eb:51:af:14:ce:49:d0: 6a:68:39:51:91:bc:13:61:f5:72:71:da:45:8b:e5: 89:56:b3:a2:60:ef:d4:52:8c:d0:7b:72:3b:a4:f3: b0:24:ba:0f:58:71:9f:24:64:22:b8:5b:3e:a5:14: 74:74:7b:c2:98:8a:04:f3:9d:65:9b:0b:38:7e:b2: 68:9b:ce:46:da:64:20:1e:ba:2b:2b:90:e4:fe:ca: a3:e1:54:a9:cf:24:4d:08:1c:fa:b5:53:55:92:79: a5:79:fb:99:d2:2f:0e:98:5d:db:90:0e:7b:15:cd: fb:83:3b:03:c4:25:31:73:77:e6:54:bb:45:8f:d8: e5:84:fb:ee:65:22:d7:95:cf:59:80:c5:a9:c0:47: 17:10:31:05:9b:ab:ee:90:4e:fc:e8:d2:18:af:14: 8d:57:7c:e6:7f:5e:f2:36:52:97:90:dc:6b:61:da: a8:53:f4:6c:63:17:bc:10:d9:51:38:85:4c:71:08: 63:e8:66:12:66:06:0e:46:49:89:8e:ba:14:2f:d7: 6b:fd:05:29:6c:a6:28:6c:4a:ac:db:14:be:f6:d6: 37:85:56:0a:15:f3:4c:1f:39:a5:de:b8:c5:8d:9b: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B1:C4:36:AD:50:9A:14:09:C5:E3:8E:D5:48:17:F4:9B:19:F6:24 X509v3 Authority Key Identifier: keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:53:16:f0:f2:1c:73:fd:c1:1d:bb:c0:73:06:9d:78:b2:cb: 39:15:f0:f9:51:2c:2d:ef:13:f6:33:49:6d:ff:3f:07:28:40: f3:57:9b:ab:cf:08:a5:49:df:7e:a1:15:c9:ec:f9:0c:8c:a3: 00:57:ce:ad:18:3b:3e:90:57:a6:bc:17:71:a0:5f:7f:e0:a0: fc:1a:0c:dd:11:23:14:d2:f4:46:24:0b:43:10:f8:3c:d9:7e: ac:84:74:e0:48:74:1e:39:0c:d1:0b:99:8d:60:6e:1f:c2:08: ab:eb:3d:04:78:6a:18:1f:bc:0a:ca:4c:c5:51:da:ec:83:0e: c8:b7:51:ca:ae:3a:68:a4:fa:56:c8:74:23:b6:da:4d:d7:27: 4b:3c:11:56:fd:a2:67:f0:c2:aa:ba:3c:58:52:55:66:9e:04: 1e:38:2e:d2:15:84:0b:2a:93:bd:b4:82:0b:bf:17:69:a0:29: 03:18:ff:d6:1d:76:77:d0:aa:99:bb:6c:4a:b5:c8:98:6a:74: 99:be:23:4e:92:e8:ca:08:43:b0:bf:61:73:90:b4:97:d8:e6: 28:7b:77:66:3a:c3:f5:b5:68:b7:99:81:b6:8b:4d:2e:14:54: 99:b7:7c:04:2d:19:20:fd:ea:c4:7b:b2:c5:79:35:5b:82:aa: 24:f5:16:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oXKb0bdhXIhho+MirFgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2 OTljOGMwHhcNMjUxMjE5MjIwMTAzWhcNMjUxMjIwMjIwMTAzWjAzMTEwLwYDVQQD EygxMWIxYzQzNmFkNTA5YTE0MDljNWUzOGVkNTQ4MTdmNDliMTlmNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygJIMLk1zyKkk8MtagVlDpSWDBfy metRrxTOSdBqaDlRkbwTYfVycdpFi+WJVrOiYO/UUozQe3I7pPOwJLoPWHGfJGQi uFs+pRR0dHvCmIoE851lmws4frJom85G2mQgHrorK5Dk/sqj4VSpzyRNCBz6tVNV knmlefuZ0i8OmF3bkA57Fc37gzsDxCUxc3fmVLtFj9jlhPvuZSLXlc9ZgMWpwEcX EDEFm6vukE786NIYrxSNV3zmf17yNlKXkNxrYdqoU/RsYxe8ENlROIVMcQhj6GYS ZgYORkmJjroUL9dr/QUpbKYobEqs2xS+9tY3hVYKFfNMHzml3rjFjZuUnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGxxDatUJoUCcXjjtVIF/SbGfYkMB8GA1UdIwQY MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVMW8PIc c/3BHbvAcwadeLLLORXw+VEsLe8T9jNJbf8/ByhA81ebq88IpUnffqEVyez5DIyj AFfOrRg7PpBXprwXcaBff+Cg/BoM3REjFNL0RiQLQxD4PNl+rIR04Eh0HjkM0QuZ jWBuH8IIq+s9BHhqGB+8CspMxVHa7IMOyLdRyq46aKT6Vsh0I7baTdcnSzwRVv2i Z/DCqro8WFJVZp4EHjgu0hWECyqTvbSCC78XaaApAxj/1h12d9CqmbtsSrXImGp0 mb4jTpLoyghDsL9hc5C0l9jmKHt3ZjrD9bVot5mBtotNLhRUmbd8BC0ZIP3qxHuy xXk1W4KqJPUWjw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:12 2025 by rpki-client