This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json) Hash identifier: NQ4Aqt69Ylkj5Kq+p0n9i7OFAc0nnxLo3/J1+7AW6hA= Subject key identifier: D6:90:10:03:34:D8:F9:21:6B:A8:58:C7:EF:F7:17:43:C9:30:FF:A8 Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1 Certificate serial: 019B0DB7389E424D4870B677DCDD3E32F704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft Manifest number: 0EEA Signing time: Thu 11 Dec 2025 14:01:09 +0000 Manifest this update: Thu 11 Dec 2025 14:01:09 +0000 Manifest next update: Fri 12 Dec 2025 14:01:09 +0000 Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: VRDRou/kJRYLFzJJhCsPo8YvaF+iq8991yUEH9WGU5o=) 2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:38:9e:42:4d:48:70:b6:77:dc:dd:3e:32:f7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96a769beca3b1932955158135596365c43c83b1 Validity Not Before: Dec 11 14:01:09 2025 GMT Not After : Dec 12 14:01:09 2025 GMT Subject: CN=d690100334d8f9216ba858c7eff71743c930ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:eb:0f:aa:c7:d2:37:31:93:6a:e4:30:82: 40:19:3a:54:3a:bb:d2:d5:81:17:46:93:91:57:81: 19:bd:f8:89:b8:df:ea:4b:61:83:8d:2b:2b:92:9c: 61:ac:de:f5:1f:b2:7e:bb:82:f7:0d:ec:0a:ef:54: b8:fc:8c:bc:f7:35:1d:23:d8:31:e4:cf:ae:df:8e: 1e:af:3f:ab:2f:fc:b5:4f:2e:c7:6d:1e:51:51:3f: 3b:d5:2c:53:93:fc:97:49:a1:b1:b3:1f:ed:7c:39: 9c:5e:3b:42:78:dd:a8:99:74:d9:83:39:63:8b:9c: 99:8a:20:70:ca:c9:92:6f:97:90:ac:e5:9e:86:aa: e8:09:67:4e:5c:97:5e:01:57:2a:01:5f:51:07:f0: ba:80:0c:b3:1d:9f:ff:8f:fd:25:da:8d:ec:fc:53: 16:d9:19:03:06:8c:a2:80:c9:21:ff:e1:bf:de:0b: d4:05:eb:3b:c1:4a:79:fc:8c:86:f1:dd:ce:5c:dd: 46:24:45:51:de:8f:9d:65:c8:b2:6d:45:42:a0:88: 42:26:7f:ab:91:fd:af:e5:cd:37:ee:b9:b2:d7:7a: e7:b8:43:5d:2b:40:fe:71:4d:9e:f5:e1:5e:59:20: e5:f6:f4:fc:6c:d6:51:2f:9d:3c:ea:45:0f:d3:af: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:90:10:03:34:D8:F9:21:6B:A8:58:C7:EF:F7:17:43:C9:30:FF:A8 X509v3 Authority Key Identifier: keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:86:1a:74:01:f7:d1:e5:0d:40:53:64:ba:cc:5c:c9:af:1a: f0:f1:6e:9a:d7:f4:8b:20:46:d8:7d:ee:8b:56:13:92:19:a9: 4e:86:4a:df:15:f9:8d:98:1f:ab:c9:fc:99:c9:a3:5b:49:1f: eb:f2:1b:d1:6b:13:b6:51:1e:47:5e:0f:6e:3f:89:f7:99:25: 98:28:10:6a:f8:a7:0d:11:8f:54:fd:18:2b:02:73:a9:84:9d: 6e:37:b4:3f:68:ed:3d:73:df:12:01:3e:77:5e:5b:95:9e:2b: 4f:97:89:34:d4:66:0c:d8:e3:c8:be:7e:4a:3d:77:02:05:9e: b4:45:96:52:f4:b2:8c:db:7c:6b:20:01:88:97:27:4b:3f:d6: de:ad:86:8f:51:6d:4a:3d:42:a8:19:dd:3f:31:52:66:80:82: 61:93:c6:1f:f5:0c:a7:6d:62:45:57:ae:34:1f:60:76:8b:55: a5:22:37:5a:63:bc:af:33:5b:51:bc:e7:1c:22:1f:8c:be:75: 5c:e1:b0:bb:3e:3c:b1:3c:10:25:13:ac:04:9f:af:31:7b:54: b1:94:17:76:4a:32:18:4d:d5:af:18:04:91:58:55:aa:b8:12: 67:4e:c0:57:2c:6f:bf:74:34:17:51:0c:e2:b5:b7:d5:85:9b: cc:ff:0c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtzieQk1IcLZ33N0+MvcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmE3NjliZWNhM2IxOTMyOTU1MTU4MTM1NTk2MzY1YzQz YzgzYjEwHhcNMjUxMjExMTQwMTA5WhcNMjUxMjEyMTQwMTA5WjAzMTEwLwYDVQQD EyhkNjkwMTAwMzM0ZDhmOTIxNmJhODU4YzdlZmY3MTc0M2M5MzBmZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2frD6rH0jcxk2rkMIJAGTpUOrvS 1YEXRpORV4EZvfiJuN/qS2GDjSsrkpxhrN71H7J+u4L3DewK71S4/Iy89zUdI9gx 5M+u344erz+rL/y1Ty7HbR5RUT871SxTk/yXSaGxsx/tfDmcXjtCeN2omXTZgzlj i5yZiiBwysmSb5eQrOWehqroCWdOXJdeAVcqAV9RB/C6gAyzHZ//j/0l2o3s/FMW 2RkDBoyigMkh/+G/3gvUBes7wUp5/IyG8d3OXN1GJEVR3o+dZciybUVCoIhCJn+r kf2v5c037rmy13rnuENdK0D+cU2e9eFeWSDl9vT8bNZRL5086kUP06/OkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaQEAM02Pkha6hYx+/3F0PJMP+oMB8GA1UdIwQY MBaAFOlqdpvso7GTKVUVgTVZY2XEPIOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQt NTUxMThmOGJkNWYyLzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQtNTUxMThmOGJkNWYy LzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYYadAH3 0eUNQFNkusxcya8a8PFumtf0iyBG2H3ui1YTkhmpToZK3xX5jZgfq8n8mcmjW0kf 6/Ib0WsTtlEeR14Pbj+J95klmCgQavinDRGPVP0YKwJzqYSdbje0P2jtPXPfEgE+ d15blZ4rT5eJNNRmDNjjyL5+Sj13AgWetEWWUvSyjNt8ayABiJcnSz/W3q2Gj1Ft Sj1CqBndPzFSZoCCYZPGH/UMp21iRVeuNB9gdotVpSI3WmO8rzNbUbznHCIfjL51 XOGwuz48sTwQJROsBJ+vMXtUsZQXdkoyGE3VrxgEkVhVqrgSZ07AVyxvv3Q0F1EM 4rW31YWbzP8MhQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:43 2025 by rpki-client