This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft File: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json) Hash identifier: dcnBzx/DpgBEoy1+oQ68r4HDPlYgB/oR4gTtgGseXWk= Subject key identifier: BF:C5:71:E9:BC:A5:04:60:14:3D:A2:1F:D3:81:46:50:69:A0:54:07 Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 Certificate issuer: /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Certificate serial: 019B21761358F22403C0DA8DB8CDC7B7AAC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft Manifest number: 16A1 Signing time: Mon 15 Dec 2025 10:02:24 +0000 Manifest this update: Mon 15 Dec 2025 10:02:24 +0000 Manifest next update: Tue 16 Dec 2025 10:02:24 +0000 Files and hashes: 1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: Tj5+SvJeQksD6prAFG3+mLe7pGsNkfYb7B/yF69mZSY=) 2: bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa (hash: vARwTHDByRNch/FCMqW59p/LzP0CiF5frUcfc8ikvnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:13:58:f2:24:03:c0:da:8d:b8:cd:c7:b7:aa:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Validity Not Before: Dec 15 10:02:24 2025 GMT Not After : Dec 16 10:02:24 2025 GMT Subject: CN=bfc571e9bca50460143da21fd381465069a05407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:17:e9:e9:a3:d5:2e:95:4a:70:8c:bd:ca: 26:cf:7a:13:ad:f5:38:79:b0:45:76:5b:2e:00:0d: 50:72:b9:73:36:74:fe:59:70:bd:2f:0b:f5:ad:fb: cb:b6:5c:73:67:74:99:bd:43:11:49:d8:93:99:5c: 38:96:08:89:89:66:f2:2e:bd:d4:4d:60:ad:27:c0: ea:5d:dc:0f:d4:b5:23:af:4a:ca:20:0d:26:13:78: 7e:bd:ab:67:81:f3:16:6c:48:fb:0b:f4:02:08:0e: 68:5e:57:2b:b4:48:b2:77:78:3f:2e:e1:b0:a6:a9: 8d:e0:42:0d:2a:7a:ee:ab:b6:fe:49:82:af:7e:8b: e2:e2:06:6e:c7:ce:bf:71:f4:70:58:2e:05:3c:30: f4:04:a8:8a:3c:3a:7f:1f:bb:8b:7d:18:7c:5d:5d: d5:12:d0:af:cc:e4:39:00:4e:8f:32:1d:0a:7b:41: ec:1c:9f:12:da:bb:c2:f1:a3:e4:60:64:f8:2a:fb: 5b:39:06:21:54:15:21:c2:59:95:7c:84:93:08:98: 53:ff:4e:77:aa:c8:67:91:ff:06:6d:4d:5f:78:71: e6:12:79:51:9f:b5:aa:09:eb:44:1e:70:15:9d:29: ee:e1:78:04:7b:d4:dc:2e:99:ac:db:f7:7b:31:6b: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C5:71:E9:BC:A5:04:60:14:3D:A2:1F:D3:81:46:50:69:A0:54:07 X509v3 Authority Key Identifier: keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c8:bc:45:aa:8c:dd:32:bc:8a:be:f7:be:f3:d8:ea:61:a5: 17:d9:7f:ba:bf:fc:41:bb:08:88:cb:2e:9a:ec:58:36:d2:47: 0f:ff:2e:b5:cd:6e:d9:03:35:1a:1b:00:43:72:a7:bc:46:36: 28:c9:0c:79:df:62:97:b9:0c:e8:e8:ec:47:e9:98:77:2d:2d: 50:b2:e0:23:76:5b:13:db:e8:7f:5b:63:62:ac:18:fa:54:dc: 86:1f:f3:aa:a0:13:b0:0c:60:12:06:68:98:76:0b:67:00:51: 99:05:ec:dc:5c:49:de:ad:47:33:17:55:4b:0d:c3:99:fc:9f: e8:dd:31:0e:29:d2:0d:a7:2d:b8:03:9e:90:af:59:bd:c0:8c: 04:bc:be:3c:de:37:8d:ed:31:4e:ad:a6:f3:48:67:a1:8f:6c: b7:b5:89:a4:10:ce:df:85:16:d0:ee:e1:77:3c:01:ec:0e:2b: 88:71:37:0d:76:21:6a:cf:58:9e:81:3c:60:74:d8:64:c2:85: 28:df:57:90:e9:9d:43:42:9a:dd:1c:db:2f:2f:36:86:18:49: 56:4c:24:04:ae:67:d3:cb:62:54:fd:df:d1:c6:96:8b:20:00: 28:c3:f5:f1:1d:45:a3:3c:ec:69:a0:bf:6f:f7:8a:b6:b5:2b: c2:08:7b:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdhNY8iQDwNqNuM3Ht6rGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzM0NjFlOWQyYmRhZmNjMjlhZDkxODlmYjBhY2YxZjMz OTYwYTkwHhcNMjUxMjE1MTAwMjI0WhcNMjUxMjE2MTAwMjI0WjAzMTEwLwYDVQQD EyhiZmM1NzFlOWJjYTUwNDYwMTQzZGEyMWZkMzgxNDY1MDY5YTA1NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZEX6emj1S6VSnCMvcomz3oTrfU4 ebBFdlsuAA1QcrlzNnT+WXC9Lwv1rfvLtlxzZ3SZvUMRSdiTmVw4lgiJiWbyLr3U TWCtJ8DqXdwP1LUjr0rKIA0mE3h+vatngfMWbEj7C/QCCA5oXlcrtEiyd3g/LuGw pqmN4EINKnruq7b+SYKvfovi4gZux86/cfRwWC4FPDD0BKiKPDp/H7uLfRh8XV3V EtCvzOQ5AE6PMh0Ke0HsHJ8S2rvC8aPkYGT4KvtbOQYhVBUhwlmVfISTCJhT/053 qshnkf8GbU1feHHmEnlRn7WqCetEHnAVnSnu4XgEe9TcLpms2/d7MWupowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/Fcem8pQRgFD2iH9OBRlBpoFQHMB8GA1UdIwQY MBaAFOgzRh6dK9r8wprZGJ+wrPHzOWCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMt YWVmZThkMTc4ZTZhLzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMtYWVmZThkMTc4ZTZh LzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsi8RaqM 3TK8ir73vvPY6mGlF9l/ur/8QbsIiMsumuxYNtJHD/8utc1u2QM1GhsAQ3KnvEY2 KMkMed9il7kM6OjsR+mYdy0tULLgI3ZbE9vof1tjYqwY+lTchh/zqqATsAxgEgZo mHYLZwBRmQXs3FxJ3q1HMxdVSw3Dmfyf6N0xDinSDactuAOekK9ZvcCMBLy+PN43 je0xTq2m80hnoY9st7WJpBDO34UW0O7hdzwB7A4riHE3DXYhas9YnoE8YHTYZMKF KN9XkOmdQ0Ka3RzbLy82hhhJVkwkBK5n08tiVP3f0caWiyAAKMP18R1FozzsaaC/ b/eKtrUrwgh7Bw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:36:18 2025 by rpki-client