This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json) Hash identifier: Jt+40BxseLcMrebzXHZH4hsSsKIQT0DZCMs8C3G3mVs= Subject key identifier: C8:D3:F6:38:72:F2:FA:70:32:F6:10:35:32:33:F7:10:F9:C7:0A:BA Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Certificate serial: 019B104A5B808CB930BBEB64638D3265C55B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft Manifest number: 0F0F Signing time: Fri 12 Dec 2025 02:01:07 +0000 Manifest this update: Fri 12 Dec 2025 02:01:07 +0000 Manifest next update: Sat 13 Dec 2025 02:01:07 +0000 Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: EPXWMpWomUnSs6kzOlljCBOh95USf6xyMt6PZAbhnO0=) 2: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (hash: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:5b:80:8c:b9:30:bb:eb:64:63:8d:32:65:c5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Validity Not Before: Dec 12 02:01:07 2025 GMT Not After : Dec 13 02:01:07 2025 GMT Subject: CN=c8d3f63872f2fa7032f610353233f710f9c70aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:4d:d6:92:8e:f2:03:81:e7:3c:57:e5:c0: 25:fb:7a:22:8e:e2:ae:fe:51:bf:1f:8d:a4:ac:6d: 95:95:80:db:d1:ee:07:01:1a:97:a8:9e:5c:87:f7: 7e:5b:32:e1:3b:48:35:3c:6a:2f:47:82:0f:89:56: 69:e9:e3:68:bc:46:89:c4:0c:44:61:2b:6e:00:67: 2e:b2:7c:87:fe:40:b5:6b:c1:28:db:e6:be:16:74: d2:0e:65:ab:c3:b3:2d:2b:27:f9:87:bd:84:47:98: 64:e4:e7:d8:3f:76:d9:df:b5:f8:ec:75:6a:92:74: 24:52:0f:a6:99:a8:47:9a:48:90:ee:0c:a0:0d:e3: aa:aa:1b:1e:1f:a8:a0:46:12:9f:eb:1f:05:9f:5e: 94:29:10:d7:48:64:ef:c2:d2:93:76:78:b0:bb:f5: c0:72:72:c6:29:7b:b8:cf:4d:91:1b:b3:c2:8c:ef: b8:95:af:0a:c0:65:72:a8:54:42:7d:2f:c8:83:8f: 5d:8f:03:8d:da:7d:15:45:22:7a:ac:27:d7:8e:52: ab:33:d2:9c:1b:13:49:87:c8:1d:4d:2b:50:1d:30: 04:37:c3:eb:2f:27:fc:65:ea:14:b1:db:02:7e:ac: 42:4e:4b:b2:54:a1:18:fe:74:0e:fb:02:37:f5:9e: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:F6:38:72:F2:FA:70:32:F6:10:35:32:33:F7:10:F9:C7:0A:BA X509v3 Authority Key Identifier: keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7c:fc:21:52:01:85:a2:54:ec:0b:25:ec:24:70:82:7b:97: 28:6a:bc:cd:b5:47:82:63:d3:6f:dc:60:30:98:2e:ff:2e:b5: ba:fa:41:b7:31:e2:07:f7:83:8e:59:00:bf:07:42:b9:99:39: b9:10:f6:fa:d2:f7:2a:5b:c3:0d:fa:d9:c6:8f:23:8a:4c:b8: d9:b9:4a:36:a2:8c:a6:e8:0e:bb:84:72:65:4f:59:6e:1c:fe: 7c:5c:93:a2:56:e7:23:c5:fe:e9:05:5c:3e:0c:e5:a9:e8:46: c7:9a:1e:5c:5e:08:11:1d:1d:ee:7b:50:b1:d0:34:eb:3b:ee: 6a:48:9d:4d:3f:a9:8a:cf:c1:30:92:3a:64:57:40:98:16:98: 9a:ab:47:2e:a5:8d:d4:ec:fb:c5:1a:e4:86:2c:68:2b:fb:25: 6f:bc:19:a9:58:9a:0d:a2:c7:c9:ea:b8:3f:a4:a9:94:8a:b2: 60:eb:bb:bd:a6:b6:38:e9:fb:38:61:8e:f1:68:dc:23:bb:9c: 32:1f:60:05:18:59:48:a6:f8:50:83:b5:7e:99:1c:2f:b1:9b: 2b:f5:ea:f2:dc:2a:b5:30:f5:25:aa:c7:67:97:d9:cf:44:01: 8e:e2:a3:85:5e:a5:aa:4d:37:9e:6c:41:ce:a2:b1:97:80:68: 9d:e5:a9:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSluAjLkwu+tkY40yZcVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDFkMTVmNTkxMWQ0OGQxYzU5ZWVmMzc0ZjdiMzdmNzFk NGViYmYwHhcNMjUxMjEyMDIwMTA3WhcNMjUxMjEzMDIwMTA3WjAzMTEwLwYDVQQD EyhjOGQzZjYzODcyZjJmYTcwMzJmNjEwMzUzMjMzZjcxMGY5YzcwYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDNN1pKO8gOB5zxX5cAl+3oijuKu /lG/H42krG2VlYDb0e4HARqXqJ5ch/d+WzLhO0g1PGovR4IPiVZp6eNovEaJxAxE YStuAGcusnyH/kC1a8Eo2+a+FnTSDmWrw7MtKyf5h72ER5hk5OfYP3bZ37X47HVq knQkUg+mmahHmkiQ7gygDeOqqhseH6igRhKf6x8Fn16UKRDXSGTvwtKTdniwu/XA cnLGKXu4z02RG7PCjO+4la8KwGVyqFRCfS/Ig49djwON2n0VRSJ6rCfXjlKrM9Kc GxNJh8gdTStQHTAEN8PrLyf8ZeoUsdsCfqxCTkuyVKEY/nQO+wI39Z4zuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjT9jhy8vpwMvYQNTIz9xD5xwq6MB8GA1UdIwQY MBaAFOjR0V9ZEdSNHFnu83T3s39x1Ou/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEt NjZmOGI2ZTE2YjhhLzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEtNjZmOGI2ZTE2Yjhh LzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHz8IVIB haJU7Asl7CRwgnuXKGq8zbVHgmPTb9xgMJgu/y61uvpBtzHiB/eDjlkAvwdCuZk5 uRD2+tL3KlvDDfrZxo8jiky42blKNqKMpugOu4RyZU9Zbhz+fFyTolbnI8X+6QVc PgzlqehGx5oeXF4IER0d7ntQsdA06zvuakidTT+pis/BMJI6ZFdAmBaYmqtHLqWN 1Oz7xRrkhixoK/slb7wZqViaDaLHyeq4P6SplIqyYOu7vaa2OOn7OGGO8WjcI7uc Mh9gBRhZSKb4UIO1fpkcL7GbK/Xq8twqtTD1JarHZ5fZz0QBjuKjhV6lqk03nmxB zqKxl4BoneWpJA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:04:24 2025 by rpki-client