This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json) Hash identifier: 2xVyD2HdyTsWavnAKRHK61CR4k8+kAugkRnQCyOq4SQ= Subject key identifier: A4:1E:1C:F4:2F:8C:92:64:8A:CA:FA:9E:26:5B:16:AA:EA:95:E9:E8 Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c Certificate serial: 019B04EB29760E4CC5C3CD4955DDB03A4CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft Manifest number: 0406 Signing time: Tue 09 Dec 2025 21:01:18 +0000 Manifest this update: Tue 09 Dec 2025 21:01:18 +0000 Manifest next update: Wed 10 Dec 2025 21:01:18 +0000 Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: WJ5hfCKcX6+j6HgyFWVhJKT+Hc5jD49pl/uwsFt5UGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:eb:29:76:0e:4c:c5:c3:cd:49:55:dd:b0:3a:4c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c Validity Not Before: Dec 9 21:01:18 2025 GMT Not After : Dec 10 21:01:18 2025 GMT Subject: CN=a41e1cf42f8c92648acafa9e265b16aaea95e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:74:d6:53:ef:28:5b:c6:44:50:72:8f:b4: c0:51:63:d3:58:e0:36:18:b3:f3:3f:3b:d9:28:1f: 1b:16:55:a5:4c:84:57:aa:16:60:38:bf:4b:de:0f: 53:46:f3:8e:2d:b2:33:8c:d2:11:01:65:a4:62:c3: e7:90:49:16:fe:f4:d9:d4:7f:b0:95:53:5b:49:c9: fc:94:5a:97:85:1a:20:0e:9a:1c:ff:ef:98:a5:c8: ae:4f:ca:1a:d0:53:ef:3a:41:95:fa:5c:86:4c:ac: d4:73:f2:07:6e:14:af:fa:a4:15:6a:05:ce:56:f0: e6:15:35:1d:0e:e6:73:e8:1c:ec:51:2e:f2:52:a0: ee:e3:63:c8:4b:8d:24:93:15:04:30:71:56:5a:25: 31:75:b6:61:5e:ba:4e:bc:cd:c8:03:b2:ab:f4:c9: 9a:e9:b8:69:c6:8e:b4:e5:49:af:7f:ac:05:c6:ff: 7f:2a:78:c3:a1:8e:06:de:4b:6e:16:57:58:27:b0: dd:2b:1f:45:f8:b8:6e:2a:6d:f7:de:d3:10:fa:24: d7:fe:4b:98:db:3b:b8:16:a6:30:04:00:08:1c:8a: fe:d0:36:0c:64:0b:61:17:d0:ac:b7:e3:06:f6:9b: 7a:d0:32:eb:d1:9f:b5:07:72:32:11:1c:6f:38:f1: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1E:1C:F4:2F:8C:92:64:8A:CA:FA:9E:26:5B:16:AA:EA:95:E9:E8 X509v3 Authority Key Identifier: keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:06:30:58:a5:f4:29:29:3d:d3:98:be:7c:65:cb:6a:e2:80: 6c:65:1d:cb:0d:8b:fb:78:a5:37:c1:32:06:b5:37:a4:d0:ca: 5e:c5:ea:cd:d5:0f:f3:7a:d7:20:39:da:a7:ec:28:79:ae:ad: d7:19:c8:2e:c6:04:6e:09:23:69:77:00:44:19:4e:bc:8c:41: c8:d5:6d:f3:51:07:60:58:d5:79:b9:bc:b9:8e:2c:6c:f6:b7: c2:64:4d:7e:0d:f3:37:44:94:4e:b6:e3:16:66:c0:81:82:7d: 56:0c:4a:01:b6:e5:a5:40:eb:8f:d7:14:f7:85:6b:99:2a:4f: 6b:ba:59:f3:11:6d:d6:3f:f1:13:0e:f6:36:db:98:79:45:6c: 2f:ea:a9:83:c0:58:38:55:26:a6:ee:bd:0c:89:1e:e2:1d:d9: 5e:0c:20:d0:63:f1:f3:2a:ed:51:53:90:c5:05:11:e6:d8:3a: 3c:75:8b:29:8f:3c:93:55:66:b4:95:c3:aa:86:62:a7:1e:45: db:5d:46:88:c8:23:72:4e:21:c4:d2:99:dc:20:c0:71:b0:9c: 5b:ff:c2:c4:9b:20:70:36:4b:f6:f4:e2:9e:c9:07:b3:73:f8: c4:a8:9f:c6:46:d5:3c:80:a7:c1:ce:8f:fc:c6:70:ef:f7:b3: 16:45:15:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsE6yl2DkzFw81JVd2wOkzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZmU5NzE4NGRhODJhMzZkN2ViZTNmODU4NDAzMTViOGFi MjIxNGMwHhcNMjUxMjA5MjEwMTE4WhcNMjUxMjEwMjEwMTE4WjAzMTEwLwYDVQQD EyhhNDFlMWNmNDJmOGM5MjY0OGFjYWZhOWUyNjViMTZhYWVhOTVlOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g101lPvKFvGRFByj7TAUWPTWOA2 GLPzPzvZKB8bFlWlTIRXqhZgOL9L3g9TRvOOLbIzjNIRAWWkYsPnkEkW/vTZ1H+w lVNbScn8lFqXhRogDpoc/++YpciuT8oa0FPvOkGV+lyGTKzUc/IHbhSv+qQVagXO VvDmFTUdDuZz6BzsUS7yUqDu42PIS40kkxUEMHFWWiUxdbZhXrpOvM3IA7Kr9Mma 6bhpxo605Umvf6wFxv9/KnjDoY4G3ktuFldYJ7DdKx9F+LhuKm333tMQ+iTX/kuY 2zu4FqYwBAAIHIr+0DYMZAthF9Cst+MG9pt60DLr0Z+1B3IyERxvOPH4HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQeHPQvjJJkisr6niZbFqrqlenoMB8GA1UdIwQY MBaAFHf+lxhNqCo21+vj+FhAMVuKsiFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF82WEdFMm9LamJYNi1QNFdFQXhXNHF5SVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xNDNiNDAtNTgzYS00YTY0LWJkYjEt YTVlOTdjZjM1MDJkLzEvZF82WEdFMm9LamJYNi1QNFdFQXhXNHF5SVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xNDNiNDAtNTgzYS00YTY0LWJkYjEtYTVlOTdjZjM1MDJk LzEvZF82WEdFMm9LamJYNi1QNFdFQXhXNHF5SVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQYwWKX0 KSk905i+fGXLauKAbGUdyw2L+3ilN8EyBrU3pNDKXsXqzdUP83rXIDnap+woea6t 1xnILsYEbgkjaXcARBlOvIxByNVt81EHYFjVebm8uY4sbPa3wmRNfg3zN0SUTrbj FmbAgYJ9VgxKAbblpUDrj9cU94VrmSpPa7pZ8xFt1j/xEw72NtuYeUVsL+qpg8BY OFUmpu69DIke4h3ZXgwg0GPx8yrtUVOQxQUR5tg6PHWLKY88k1VmtJXDqoZipx5F 211GiMgjck4hxNKZ3CDAcbCcW//CxJsgcDZL9vTinskHs3P4xKifxkbVPICnwc6P /MZw7/ezFkUVgw== -----END CERTIFICATE-----Generated at Wed Dec 10 06:12:18 2025 by rpki-client