This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft File: 6W0H10zRSlpDn0g3WMQk260zl3o.mft (raw, json) Hash identifier: R3Cr9uhxX0AJJyRht0Ts90H+A3y5aWSALRKz56HouPI= Subject key identifier: 58:07:68:1B:26:22:10:2A:6B:29:25:A3:C8:A2:CF:01:CE:CD:0B:7F Authority key identifier: E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A Certificate issuer: /CN=e96d07d74cd14a5a439f483758c424dbad33977a Certificate serial: 019B1014BB13CDF7399E7328D3AB037AE0B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft Manifest number: 10D2 Signing time: Fri 12 Dec 2025 01:02:32 +0000 Manifest this update: Fri 12 Dec 2025 01:02:32 +0000 Manifest next update: Sat 13 Dec 2025 01:02:32 +0000 Files and hashes: 1: 6W0H10zRSlpDn0g3WMQk260zl3o.crl (hash: 85PbXhepel0qCbeMJNMdbYkYUZDJdn9v5LfGHZJ7QfI=) 2: cWBtpv0lbtjjKIiQC4VphdrpJsI.roa (hash: 53d/EkPX5lZbgRgCOrdlmmeWh1Ezm+rcdsaRC9uISUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:bb:13:cd:f7:39:9e:73:28:d3:ab:03:7a:e0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d07d74cd14a5a439f483758c424dbad33977a Validity Not Before: Dec 12 01:02:32 2025 GMT Not After : Dec 13 01:02:32 2025 GMT Subject: CN=5807681b2622102a6b2925a3c8a2cf01cecd0b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:be:99:7e:6f:cc:29:99:1c:94:11:75:c2: 40:70:6e:5e:d3:b4:c9:9a:9a:bc:ed:28:e5:08:07: 56:bd:f2:1f:5b:17:2a:0f:60:5d:ac:fb:ce:f9:57: 3d:c0:4e:25:38:25:0d:2a:42:70:95:09:21:36:2c: 4a:93:9f:1f:5d:a4:05:92:47:44:09:f6:4f:12:9f: 1f:df:10:c1:75:8f:11:b1:28:d3:a4:70:e0:e8:4c: 76:c9:45:96:32:34:d5:33:83:65:4c:8d:36:80:fa: 13:07:72:a1:9e:c7:26:ac:06:8c:17:39:52:d1:07: 5b:f6:1d:3b:65:de:4a:1e:d1:dc:86:10:bd:c4:a1: c8:c3:90:81:01:0b:5e:97:09:af:e9:7a:33:6b:51: 48:88:a6:e2:24:6c:ac:ff:3a:1f:10:f1:4b:a9:52: c3:ad:2c:eb:0d:9b:e0:f7:3e:ad:21:bb:a5:4d:50: 78:e8:f6:5f:2f:b7:f5:74:64:36:ae:52:42:08:87: 8d:e1:ac:b5:59:ae:f7:16:3d:0d:ef:d9:60:10:5c: 5d:02:82:34:14:6a:82:c3:9c:9a:c6:fb:e7:b2:ee: ed:c3:b0:5a:9f:c1:8a:8a:ea:f2:f1:a4:65:95:b6: 04:68:a0:75:a1:8c:ce:83:c6:cf:e5:4f:32:b2:4b: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:07:68:1B:26:22:10:2A:6B:29:25:A3:C8:A2:CF:01:CE:CD:0B:7F X509v3 Authority Key Identifier: keyid:E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:75:11:d8:82:38:f0:dd:67:d1:28:a7:57:32:de:f2:f2:21: b4:a4:26:23:70:38:c4:9e:a4:ed:ff:50:08:18:b5:d7:4b:85: 47:04:5e:c4:b3:35:be:bf:e6:69:1d:90:29:b7:87:a2:e3:cd: de:44:f1:b1:c7:ad:b4:82:86:81:fd:87:4c:08:9f:2a:a2:a2: 99:7a:89:42:f5:47:02:9e:ac:d7:32:34:96:b1:c2:16:3c:63: f5:ca:f6:e2:68:29:1c:eb:de:81:9a:4e:e2:e6:28:46:34:65: a7:0e:65:d1:1d:af:e2:3c:35:05:cf:e7:7e:0b:88:83:d6:ca: 2e:4a:19:6b:9f:96:b6:35:84:a0:bc:c6:b0:0a:f5:8a:59:14: e7:6e:36:19:33:c3:2c:0d:39:c4:4a:51:1b:ef:21:0c:75:dc: d2:ae:35:44:1b:c8:d3:ca:eb:81:ba:b3:87:25:fd:04:22:5b: 90:11:51:22:67:51:e3:2c:fb:9f:d9:d9:4f:8f:51:71:d6:dc: 5a:59:af:fa:fe:cc:79:09:4a:8c:71:c0:50:94:55:d7:03:d2: b2:11:5e:fe:80:6f:31:06:f5:f6:fc:76:17:de:bc:91:cd:bf: 3b:70:37:c1:ac:9a:f4:b0:8b:8a:42:03:e5:60:0e:88:05:ef: 6c:4f:fc:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFLsTzfc5nnMo06sDeuC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmQwN2Q3NGNkMTRhNWE0MzlmNDgzNzU4YzQyNGRiYWQz Mzk3N2EwHhcNMjUxMjEyMDEwMjMyWhcNMjUxMjEzMDEwMjMyWjAzMTEwLwYDVQQD Eyg1ODA3NjgxYjI2MjIxMDJhNmIyOTI1YTNjOGEyY2YwMWNlY2QwYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx++mX5vzCmZHJQRdcJAcG5e07TJ mpq87SjlCAdWvfIfWxcqD2BdrPvO+Vc9wE4lOCUNKkJwlQkhNixKk58fXaQFkkdE CfZPEp8f3xDBdY8RsSjTpHDg6Ex2yUWWMjTVM4NlTI02gPoTB3KhnscmrAaMFzlS 0Qdb9h07Zd5KHtHchhC9xKHIw5CBAQtelwmv6Xoza1FIiKbiJGys/zofEPFLqVLD rSzrDZvg9z6tIbulTVB46PZfL7f1dGQ2rlJCCIeN4ay1Wa73Fj0N79lgEFxdAoI0 FGqCw5yaxvvnsu7tw7Ban8GKiury8aRllbYEaKB1oYzOg8bP5U8ysks8LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgHaBsmIhAqayklo8iizwHOzQt/MB8GA1UdIwQY MBaAFOltB9dM0UpaQ59IN1jEJNutM5d6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjgyNGEtZGE2MS00Y2IzLWFhNzgt YTBlMjQxMGYwMWU5LzEvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNjgyNGEtZGE2MS00Y2IzLWFhNzgtYTBlMjQxMGYwMWU5 LzEvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnUR2II4 8N1n0SinVzLe8vIhtKQmI3A4xJ6k7f9QCBi110uFRwRexLM1vr/maR2QKbeHouPN 3kTxscettIKGgf2HTAifKqKimXqJQvVHAp6s1zI0lrHCFjxj9cr24mgpHOvegZpO 4uYoRjRlpw5l0R2v4jw1Bc/nfguIg9bKLkoZa5+WtjWEoLzGsAr1ilkU5242GTPD LA05xEpRG+8hDHXc0q41RBvI08rrgbqzhyX9BCJbkBFRImdR4yz7n9nZT49Rcdbc Wlmv+v7MeQlKjHHAUJRV1wPSshFe/oBvMQb19vx2F968kc2/O3A3waya9LCLikID 5WAOiAXvbE/8+A== -----END CERTIFICATE-----Generated at Fri Dec 12 06:29:41 2025 by rpki-client