This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft File: dg6-87rwwTdAhVCVOQhSzkQlzkw.mft (raw, json) Hash identifier: AMEyP8irqipBUoCJjNFfjvftCVRo33umIV1LvKGmo6w= Subject key identifier: 62:0C:11:E9:1B:2F:CC:58:0B:D6:02:7C:D1:52:29:76:80:EC:76:04 Authority key identifier: 76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C Certificate issuer: /CN=760ebef3baf0c13740855095390852ce4425ce4c Certificate serial: 019B59ACD2F8F914E2C25A85FBCCB3CC92D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft Manifest number: 011E Signing time: Fri 26 Dec 2025 08:00:56 +0000 Manifest this update: Fri 26 Dec 2025 08:00:56 +0000 Manifest next update: Sat 27 Dec 2025 08:00:56 +0000 Files and hashes: 1: dg6-87rwwTdAhVCVOQhSzkQlzkw.crl (hash: /Rm090BSbpzQ6hKbAzcHGu/iIbjSBvn6slgpZdZyhkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:d2:f8:f9:14:e2:c2:5a:85:fb:cc:b3:cc:92:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=760ebef3baf0c13740855095390852ce4425ce4c Validity Not Before: Dec 26 08:00:56 2025 GMT Not After : Dec 27 08:00:56 2025 GMT Subject: CN=620c11e91b2fcc580bd6027cd152297680ec7604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:0d:61:43:1f:2a:58:f1:9e:cb:34:e8:43: c1:48:48:4e:c9:c0:3c:7f:19:db:68:c4:95:8e:b0: ef:3e:fa:f0:35:73:c5:18:33:79:ce:57:f6:60:ab: b8:48:95:28:8e:37:2a:ec:09:f9:37:36:29:e8:13: e7:1a:24:d6:db:08:9c:ff:a4:ff:e2:9a:6f:8d:42: b7:dc:8b:ea:05:7a:8d:43:34:aa:24:74:66:8f:09: 70:71:5b:b4:fe:66:25:2a:d2:6d:5b:b0:18:eb:76: a4:ec:f0:8b:3d:45:a6:02:34:c5:d9:fe:e3:d1:d5: b3:b5:93:07:e4:96:f2:b7:0b:06:ab:3e:5c:f7:e8: 45:b2:6b:d4:56:9b:d0:43:f2:81:6d:2d:37:72:0a: 34:dc:23:fd:00:96:f1:7c:64:e0:fc:93:1e:fc:d9: 72:b7:c4:a1:78:ef:20:8b:c8:b0:be:c5:66:7f:ef: 04:49:42:8f:05:35:d5:71:38:3a:41:10:16:5d:1d: 4d:f8:f2:c9:be:06:a2:0a:f0:9b:12:cb:92:93:a0: 3c:39:79:cf:60:ee:03:bc:7d:61:24:85:3f:db:1b: e1:7b:0b:21:61:cf:71:89:d1:95:6d:04:90:22:0f: 5c:9a:29:71:7c:a9:50:e8:9b:0d:30:b9:6d:09:9b: ab:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0C:11:E9:1B:2F:CC:58:0B:D6:02:7C:D1:52:29:76:80:EC:76:04 X509v3 Authority Key Identifier: keyid:76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:10:22:a2:28:33:f5:ea:57:1b:7d:82:5c:2d:8a:64:bc:cd: 78:6e:7e:34:03:2a:f8:cf:94:b6:e0:d4:aa:8d:52:07:ee:ac: e4:02:46:74:6e:df:71:ca:36:17:eb:ea:8e:31:2b:9b:0a:dd: 85:22:10:68:e9:d7:eb:ca:b8:61:ba:25:78:2d:3b:f5:b2:1c: c9:e9:ca:ce:03:9e:ec:1f:30:87:0b:89:e5:60:a6:ab:79:9a: 63:3f:c8:fb:d7:74:e3:d2:bf:3d:86:71:b1:6b:b3:f5:94:42: cd:16:fb:c1:a5:d8:10:1f:cd:1c:10:00:56:d1:29:fc:5f:64: 59:dc:bf:f4:79:b6:4a:74:6a:f8:80:bf:f3:c1:13:e1:6c:2c: 5a:0e:24:b6:97:90:03:9c:e1:0b:6d:8f:a8:63:1b:b8:66:48: 35:cb:c7:0f:a5:64:d6:97:21:b9:ff:aa:c3:be:b5:24:27:81: 81:bd:10:a1:4d:78:41:4d:8d:1c:f2:7e:7c:37:9e:46:5c:4a: 23:95:07:d9:5b:05:6c:c2:a9:3c:25:d0:d9:ba:9c:49:e0:8b: 3d:14:4b:61:da:0a:18:e7:5a:ca:ca:c8:e5:e1:0a:a7:8e:4b: d7:1f:38:7f:41:31:e9:9a:15:f7:34:fa:ad:c8:41:da:07:6f: d4:02:4f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrNL4+RTiwlqF+8yzzJLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MGViZWYzYmFmMGMxMzc0MDg1NTA5NTM5MDg1MmNlNDQy NWNlNGMwHhcNMjUxMjI2MDgwMDU2WhcNMjUxMjI3MDgwMDU2WjAzMTEwLwYDVQQD Eyg2MjBjMTFlOTFiMmZjYzU4MGJkNjAyN2NkMTUyMjk3NjgwZWM3NjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx28NYUMfKljxnss06EPBSEhOycA8 fxnbaMSVjrDvPvrwNXPFGDN5zlf2YKu4SJUojjcq7An5NzYp6BPnGiTW2wic/6T/ 4ppvjUK33IvqBXqNQzSqJHRmjwlwcVu0/mYlKtJtW7AY63ak7PCLPUWmAjTF2f7j 0dWztZMH5JbytwsGqz5c9+hFsmvUVpvQQ/KBbS03cgo03CP9AJbxfGTg/JMe/Nly t8SheO8gi8iwvsVmf+8ESUKPBTXVcTg6QRAWXR1N+PLJvgaiCvCbEsuSk6A8OXnP YO4DvH1hJIU/2xvhewshYc9xidGVbQSQIg9cmilxfKlQ6JsNMLltCZurjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIMEekbL8xYC9YCfNFSKXaA7HYEMB8GA1UdIwQY MBaAFHYOvvO68ME3QIVQlTkIUs5EJc5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGc2LTg3cnd3VGRBaFZDVk9RaFN6a1Fsemt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWMyOTUtZDRiNS00MDU3LThkYjIt YTMyYjU4ODA2MDcxLzEvZGc2LTg3cnd3VGRBaFZDVk9RaFN6a1Fsemt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kZWMyOTUtZDRiNS00MDU3LThkYjItYTMyYjU4ODA2MDcx LzEvZGc2LTg3cnd3VGRBaFZDVk9RaFN6a1Fsemt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhAioigz 9epXG32CXC2KZLzNeG5+NAMq+M+UtuDUqo1SB+6s5AJGdG7fcco2F+vqjjErmwrd hSIQaOnX68q4YboleC079bIcyenKzgOe7B8whwuJ5WCmq3maYz/I+9d049K/PYZx sWuz9ZRCzRb7waXYEB/NHBAAVtEp/F9kWdy/9Hm2SnRq+IC/88ET4WwsWg4ktpeQ A5zhC22PqGMbuGZINcvHD6Vk1pchuf+qw761JCeBgb0QoU14QU2NHPJ+fDeeRlxK I5UH2VsFbMKpPCXQ2bqcSeCLPRRLYdoKGOdaysrI5eEKp45L1x84f0Ex6ZoV9zT6 rchB2gdv1AJP6Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:35 2025 by rpki-client