This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft File: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json) Hash identifier: eY7BlrOP9kPK7DthVBLzPwK4ZxwQ9z2OqvE2Ln3P5CA= Subject key identifier: F8:D8:9C:B2:86:18:15:41:0B:1D:AB:0B:FE:08:0F:23:B7:EF:01:43 Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED Certificate issuer: /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Certificate serial: 019B28C0A911B50603C6F964DD7110B2188F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft Manifest number: 0F Signing time: Tue 16 Dec 2025 20:01:13 +0000 Manifest this update: Tue 16 Dec 2025 20:01:13 +0000 Manifest next update: Wed 17 Dec 2025 20:01:13 +0000 Files and hashes: 1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: QuR6K4Y0dk8SjutKsTgLnM74kArl1uo7Skma/YM8hk4=) 2: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (hash: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:a9:11:b5:06:03:c6:f9:64:dd:71:10:b2:18:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Validity Not Before: Dec 16 20:01:13 2025 GMT Not After : Dec 17 20:01:13 2025 GMT Subject: CN=f8d89cb2861815410b1dab0bfe080f23b7ef0143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:59:9b:46:41:9f:0a:ae:df:d2:0b:72:3f: 6c:d3:d1:a1:0e:9f:61:1d:9b:d6:47:31:b8:aa:2e: f1:42:f4:58:eb:17:dc:4b:a0:87:22:49:97:62:e8: 64:f2:ff:b4:7b:01:20:3d:85:63:4c:bc:20:88:5c: de:38:6a:7e:f8:06:a2:61:c2:21:b6:f0:70:d2:d8: bc:d7:e9:a9:b0:10:a5:e9:d4:f4:7e:2b:21:01:ce: 07:bb:15:ed:ff:e7:68:64:75:88:30:44:36:f3:87: 9d:4a:a3:c4:69:97:de:10:18:dc:c9:81:96:9d:43: c5:44:1e:62:c4:12:f7:c6:b5:74:85:49:60:c2:d1: 8e:da:32:62:8b:8b:2f:65:8f:fe:5f:a5:e5:93:0c: 4a:86:78:d4:fa:c6:bc:5d:11:c9:93:1b:bd:96:a7: e6:56:e1:aa:6b:8f:a7:fb:1e:d7:f0:06:bb:31:5b: dc:5c:9f:6d:2a:13:f8:d4:f2:9a:f2:c5:84:1d:22: e2:50:9f:de:58:74:77:ab:7a:f7:b4:89:75:7d:bb: 8e:38:d6:b5:e9:cf:55:d0:c9:1b:fa:57:77:d9:ad: b9:0e:96:db:77:31:3a:94:80:5b:01:bb:b1:3c:af: 0b:a2:ee:37:8e:ef:3c:f1:8f:1b:0b:88:d9:fb:0d: 54:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D8:9C:B2:86:18:15:41:0B:1D:AB:0B:FE:08:0F:23:B7:EF:01:43 X509v3 Authority Key Identifier: keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:18:9f:20:96:25:82:1a:07:e1:1f:32:5e:1d:a8:a7:ac:cf: d6:44:2c:b1:1e:b5:74:9b:4f:5e:03:b6:d8:8d:7a:a3:59:fe: f2:15:55:e2:86:bb:27:b0:54:5d:8d:d3:5b:30:79:1b:be:cb: 53:c8:14:39:f0:44:f8:ad:3b:c0:e5:4e:63:50:8e:2d:c8:8c: ef:a6:d3:02:22:7e:75:65:19:cb:ec:46:09:d0:c5:b5:11:ec: aa:dc:b8:a6:d8:dc:11:12:a4:35:21:14:7b:09:b6:4f:60:8f: 7f:c1:58:5a:b3:07:fd:7e:5e:56:21:18:9c:d7:ac:36:29:5a: 1c:35:94:28:12:0a:80:79:88:56:a4:ac:f7:33:b8:c5:ad:d2: 94:d9:5b:7f:42:03:35:24:a2:69:e3:2f:ca:8b:65:e0:a4:7d: 95:6f:a0:d0:8a:49:b7:61:7c:d2:9a:1a:bb:1d:bc:f1:e5:03: f4:e6:0a:c4:45:b5:0a:18:b8:10:46:8f:1d:7d:ec:39:d5:68: b1:30:8a:71:a7:cd:a0:1f:51:1d:fc:56:91:27:32:8b:e2:0e: 97:f3:32:e0:3b:c9:2d:f6:57:5f:70:55:06:98:38:86:34:0d: ce:25:7f:a9:b9:54:e4:a9:18:61:eb:4b:40:8a:9c:ec:91:4f: 36:be:e6:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowKkRtQYDxvlk3XEQshiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmJjMWU1MzdlMmYzZDFlNGRhYjI4MzJhZTYyNGI1ZDYz NzllZWQwHhcNMjUxMjE2MjAwMTEzWhcNMjUxMjE3MjAwMTEzWjAzMTEwLwYDVQQD EyhmOGQ4OWNiMjg2MTgxNTQxMGIxZGFiMGJmZTA4MGYyM2I3ZWYwMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfRZm0ZBnwqu39ILcj9s09GhDp9h HZvWRzG4qi7xQvRY6xfcS6CHIkmXYuhk8v+0ewEgPYVjTLwgiFzeOGp++AaiYcIh tvBw0ti81+mpsBCl6dT0fishAc4HuxXt/+doZHWIMEQ284edSqPEaZfeEBjcyYGW nUPFRB5ixBL3xrV0hUlgwtGO2jJii4svZY/+X6XlkwxKhnjU+sa8XRHJkxu9lqfm VuGqa4+n+x7X8Aa7MVvcXJ9tKhP41PKa8sWEHSLiUJ/eWHR3q3r3tIl1fbuOONa1 6c9V0Mkb+ld32a25DpbbdzE6lIBbAbuxPK8Lou43ju888Y8bC4jZ+w1UAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjYnLKGGBVBCx2rC/4IDyO37wFDMB8GA1UdIwQY MBaAFOi7weU34vPR5NqygyrmJLXWN57tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDkt OTYzNmUyMzMwZDdlLzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDktOTYzNmUyMzMwZDdl LzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBifIJYl ghoH4R8yXh2op6zP1kQssR61dJtPXgO22I16o1n+8hVV4oa7J7BUXY3TWzB5G77L U8gUOfBE+K07wOVOY1COLciM76bTAiJ+dWUZy+xGCdDFtRHsqty4ptjcERKkNSEU ewm2T2CPf8FYWrMH/X5eViEYnNesNilaHDWUKBIKgHmIVqSs9zO4xa3SlNlbf0ID NSSiaeMvyotl4KR9lW+g0IpJt2F80poaux288eUD9OYKxEW1Chi4EEaPHX3sOdVo sTCKcafNoB9RHfxWkScyi+IOl/My4DvJLfZXX3BVBpg4hjQNziV/qblU5KkYYetL QIqc7JFPNr7m1Q== -----END CERTIFICATE-----Generated at Wed Dec 17 06:38:42 2025 by rpki-client