This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json) Hash identifier: asINzM6F20FEgDFqmXgrfOPcKxxRNzjQN0Hhz0qS/e0= Subject key identifier: 2C:49:3E:28:07:33:86:C6:2C:D8:EB:AE:1D:AF:FE:21:91:A5:BA:C5 Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f Certificate serial: 019B255228972C1F2627F9385FF46A29FCD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft Manifest number: 1749 Signing time: Tue 16 Dec 2025 04:01:39 +0000 Manifest this update: Tue 16 Dec 2025 04:01:39 +0000 Manifest next update: Wed 17 Dec 2025 04:01:39 +0000 Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: PQY6M+w8rr8LG5SPZRpUYnf0Mt6dhhHpyExd/tk8rGs=) 2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:28:97:2c:1f:26:27:f9:38:5f:f4:6a:29:fc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f Validity Not Before: Dec 16 04:01:39 2025 GMT Not After : Dec 17 04:01:39 2025 GMT Subject: CN=2c493e28073386c62cd8ebae1daffe2191a5bac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:f4:14:b9:f3:36:2b:fc:03:73:6d:99:97: 1a:64:82:65:c3:52:ce:be:4e:93:86:fd:14:03:d7: 54:9a:4f:1a:0d:dd:29:4f:84:ae:41:c1:e2:ee:0d: 92:b4:a6:d2:3b:41:1f:ec:0a:53:6d:db:ca:62:15: 94:41:55:1c:38:3b:16:a5:a6:1e:39:8c:aa:a6:02: 96:8f:ed:31:3a:62:ca:d7:98:d6:ef:4d:2e:99:29: d5:b3:05:c6:82:d6:f0:53:04:07:f7:c7:c3:03:75: 60:e9:f7:ae:71:12:00:2c:65:29:18:b9:ae:f6:91: 63:6d:08:d7:53:37:46:fd:e0:c4:34:35:84:94:e6: 5d:4a:0e:0e:63:2a:9c:98:b6:83:ed:11:af:87:f2: 98:c3:32:41:ad:20:92:7f:95:66:93:f3:a6:16:be: 9c:94:d9:62:00:fd:5c:3f:c1:c3:4b:d9:63:cc:85: 55:1f:30:25:20:bf:42:df:41:a8:0b:92:d9:f6:6a: f5:d9:e6:00:31:79:05:77:9a:c8:3d:83:9c:d6:7d: d3:f2:dc:06:04:4c:23:f1:96:28:7a:a5:79:95:f4: d7:87:d7:bb:cb:4e:6f:a9:b1:9e:f8:bc:a7:a4:bd: ff:5a:cc:12:be:d3:0b:42:35:6e:3e:b3:c0:51:73: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:49:3E:28:07:33:86:C6:2C:D8:EB:AE:1D:AF:FE:21:91:A5:BA:C5 X509v3 Authority Key Identifier: keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b4:3b:6c:6d:cb:db:f7:56:35:38:e6:d9:75:44:86:3e:fb: a8:04:12:58:31:d7:0a:b9:d6:ae:27:0a:a1:7f:71:a9:7d:3f: 7f:5f:98:33:e3:63:0c:ff:75:2b:a3:f3:c5:60:6e:2e:ef:d3: a6:8e:70:08:ae:df:46:a8:39:f0:32:da:3b:db:97:73:4a:1b: 49:51:57:34:f1:bd:9a:9e:50:cb:7d:12:6b:23:f7:c9:b6:c4: eb:5d:7a:bc:ea:12:e2:88:3c:7d:df:c0:af:c2:99:7f:62:83: 23:6c:d3:05:84:3c:92:e0:e7:84:66:81:07:ac:b5:e5:d2:c2: 44:c2:b5:5c:60:72:7e:5c:61:02:c6:e1:e5:d1:89:9d:47:b2: 48:a2:65:8e:92:30:6e:50:a8:93:76:1b:fe:a8:68:dd:81:06: a2:40:d3:96:d4:b5:25:a8:75:ca:54:ca:02:f2:2b:89:76:62: 3f:2b:2c:9e:85:81:ab:7b:ae:7c:15:d7:53:f3:2c:1c:40:4e: 41:09:ef:85:8f:59:45:4a:ca:79:01:c1:1b:ea:fe:68:71:0a: ee:82:44:a3:17:78:53:96:6b:58:e1:71:40:80:4f:2f:6e:8f: 01:cd:a3:6f:ed:2b:56:8b:2c:84:3b:23:a1:ec:2f:ff:91:9e: e4:3e:69:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUiiXLB8mJ/k4X/RqKfzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NTgzMzhkZWE2YWU0ZGRiYjI0ODUwYTA3MDdmNDNhYTE3 OTRjM2YwHhcNMjUxMjE2MDQwMTM5WhcNMjUxMjE3MDQwMTM5WjAzMTEwLwYDVQQD EygyYzQ5M2UyODA3MzM4NmM2MmNkOGViYWUxZGFmZmUyMTkxYTViYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPv0FLnzNiv8A3NtmZcaZIJlw1LO vk6Thv0UA9dUmk8aDd0pT4SuQcHi7g2StKbSO0Ef7ApTbdvKYhWUQVUcODsWpaYe OYyqpgKWj+0xOmLK15jW700umSnVswXGgtbwUwQH98fDA3Vg6feucRIALGUpGLmu 9pFjbQjXUzdG/eDENDWElOZdSg4OYyqcmLaD7RGvh/KYwzJBrSCSf5Vmk/OmFr6c lNliAP1cP8HDS9ljzIVVHzAlIL9C30GoC5LZ9mr12eYAMXkFd5rIPYOc1n3T8twG BEwj8ZYoeqV5lfTXh9e7y05vqbGe+LynpL3/WswSvtMLQjVuPrPAUXOzLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxJPigHM4bGLNjrrh2v/iGRpbrFMB8GA1UdIwQY MBaAFOhYM43qauTduySFCgcH9DqheUw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMt YTFkY2U2YWQxNTBjLzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMtYTFkY2U2YWQxNTBj LzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALQ7bG3L 2/dWNTjm2XVEhj77qAQSWDHXCrnWricKoX9xqX0/f1+YM+NjDP91K6PzxWBuLu/T po5wCK7fRqg58DLaO9uXc0obSVFXNPG9mp5Qy30SayP3ybbE6116vOoS4og8fd/A r8KZf2KDI2zTBYQ8kuDnhGaBB6y15dLCRMK1XGByflxhAsbh5dGJnUeySKJljpIw blCok3Yb/qho3YEGokDTltS1Jah1ylTKAvIriXZiPyssnoWBq3uufBXXU/MsHEBO QQnvhY9ZRUrKeQHBG+r+aHEK7oJEoxd4U5ZrWOFxQIBPL26PAc2jb+0rVosshDsj oewv/5Ge5D5pVg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:56:03 2025 by rpki-client