This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json) Hash identifier: uoyHdz9ax0u+/R68dOJ1UpACWa1yDeUiCZtrTlNQjUc= Subject key identifier: 64:5D:B7:3A:F0:CD:E6:AD:15:AD:67:3E:80:2A:B5:38:9F:54:22:F3 Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Certificate serial: 019B0E24E1DBF9C5A68DA90727BCCDE2FD30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft Manifest number: 0A79 Signing time: Thu 11 Dec 2025 16:00:56 +0000 Manifest this update: Thu 11 Dec 2025 16:00:56 +0000 Manifest next update: Fri 12 Dec 2025 16:00:56 +0000 Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: dJ3eEhV5kvkVQOOwfpgVD1q12K6p9rKGFIQ1weX0NKY=) 2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:e1:db:f9:c5:a6:8d:a9:07:27:bc:cd:e2:fd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Validity Not Before: Dec 11 16:00:56 2025 GMT Not After : Dec 12 16:00:56 2025 GMT Subject: CN=645db73af0cde6ad15ad673e802ab5389f5422f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:db:07:ae:f2:72:2f:7a:95:32:c6:ee:29:d4: 6f:e4:02:61:e0:b3:4e:3e:5c:74:47:75:d6:7f:2d: 0d:e8:59:1b:a4:56:4b:2c:8e:31:c4:03:26:d3:c3: 67:2e:c5:22:a3:5a:0c:6a:69:4d:e9:79:81:5a:79: 8f:1b:33:72:8d:86:63:46:76:fd:db:65:d2:c0:0d: b6:e1:cb:f2:01:c5:ab:28:10:98:3c:df:32:d2:41: da:ff:39:48:0b:e9:9c:01:50:09:40:cb:33:3a:51: 33:61:d1:dd:51:04:42:35:7b:31:c2:5c:b7:c6:77: 61:75:47:61:21:3d:eb:c1:06:2f:6d:d0:e8:d4:13: d3:ba:d5:fd:5b:a6:b4:77:28:f5:e2:be:1c:9b:3d: cd:d4:14:78:61:3c:27:a5:a6:e9:c4:ef:07:57:d4: f0:81:32:97:49:a8:d3:85:76:73:64:f1:f3:d2:de: 4c:1c:c3:4b:97:5d:8b:4f:a7:ff:fd:7d:07:12:0f: e3:b8:86:cd:f7:47:70:17:e1:ba:4c:c1:c4:33:cb: a8:ab:32:49:cb:dd:88:94:77:9e:07:bd:62:0f:cb: 54:86:fb:13:50:a7:c4:aa:77:3e:2e:cd:72:3f:0a: 77:cb:de:6b:d5:ed:25:c0:1e:ce:60:b3:d7:27:09: e7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:B7:3A:F0:CD:E6:AD:15:AD:67:3E:80:2A:B5:38:9F:54:22:F3 X509v3 Authority Key Identifier: keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2c:ed:06:14:47:a6:db:4f:e6:c5:aa:f2:4b:76:c5:91:6a: 3a:10:1b:0b:cc:05:c8:99:46:59:54:78:1d:73:08:f2:2f:6b: bc:29:7f:11:cb:db:67:be:e1:ca:fb:4a:a4:94:6d:a0:63:d4: d8:ec:3d:2c:69:98:e4:2e:67:9e:51:6c:d4:db:fd:60:ee:c9: 31:e0:c4:92:80:d7:65:cb:94:6f:24:83:5d:f7:fc:bd:0f:ce: 35:66:8e:59:d2:1e:c9:22:eb:e3:bc:7c:0f:bc:2f:d3:65:17: 77:4c:fb:2c:a9:78:d0:d3:9b:b2:f2:23:3f:fc:c0:fe:11:90: a7:81:3c:82:ff:a8:0b:45:62:a3:d7:f7:a0:0d:9e:91:37:38: a3:d1:55:b0:96:7e:ae:6e:33:5c:27:08:36:b4:95:6a:77:fe: 6e:c3:6e:58:ac:a5:1f:df:d7:9b:83:c8:69:08:b9:6c:bd:fa: 19:f1:a4:76:74:0f:48:49:75:cd:58:c2:6a:14:e9:71:c6:87: 8c:d0:45:ea:c2:9f:63:ba:8b:1e:fb:76:c9:43:52:76:89:28: 10:ca:bf:ae:62:1f:97:b7:f3:08:6b:47:4b:bd:61:32:35:cb: 85:fd:76:42:4f:37:be:f3:d5:8a:c0:b2:bd:b4:bd:11:7b:19: 20:66:b5:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJOHb+cWmjakHJ7zN4v0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm MDliYzkwHhcNMjUxMjExMTYwMDU2WhcNMjUxMjEyMTYwMDU2WjAzMTEwLwYDVQQD Eyg2NDVkYjczYWYwY2RlNmFkMTVhZDY3M2U4MDJhYjUzODlmNTQyMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dsHrvJyL3qVMsbuKdRv5AJh4LNO Plx0R3XWfy0N6FkbpFZLLI4xxAMm08NnLsUio1oMamlN6XmBWnmPGzNyjYZjRnb9 22XSwA224cvyAcWrKBCYPN8y0kHa/zlIC+mcAVAJQMszOlEzYdHdUQRCNXsxwly3 xndhdUdhIT3rwQYvbdDo1BPTutX9W6a0dyj14r4cmz3N1BR4YTwnpabpxO8HV9Tw gTKXSajThXZzZPHz0t5MHMNLl12LT6f//X0HEg/juIbN90dwF+G6TMHEM8uoqzJJ y92IlHeeB71iD8tUhvsTUKfEqnc+Ls1yPwp3y95r1e0lwB7OYLPXJwnnFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRdtzrwzeatFa1nPoAqtTifVCLzMB8GA1UdIwQY MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSztBhRH pttP5sWq8kt2xZFqOhAbC8wFyJlGWVR4HXMI8i9rvCl/EcvbZ77hyvtKpJRtoGPU 2Ow9LGmY5C5nnlFs1Nv9YO7JMeDEkoDXZcuUbySDXff8vQ/ONWaOWdIeySLr47x8 D7wv02UXd0z7LKl40NObsvIjP/zA/hGQp4E8gv+oC0Vio9f3oA2ekTc4o9FVsJZ+ rm4zXCcINrSVanf+bsNuWKylH9/Xm4PIaQi5bL36GfGkdnQPSEl1zVjCahTpccaH jNBF6sKfY7qLHvt2yUNSdokoEMq/rmIfl7fzCGtHS71hMjXLhf12Qk83vvPVisCy vbS9EXsZIGa1iA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:38 2025 by rpki-client