This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json) Hash identifier: dUdAgDiYsu3+5sC8/KRIHZqTugvNALNAMRfA6P0Pm4I= Subject key identifier: A7:31:43:65:66:26:23:AA:E0:7D:94:28:AF:86:22:82:CD:93:5A:F4 Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47 Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47 Certificate serial: 019B631F1D5F4CD5CF0556390C99692DD896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft Manifest number: 0FC3 Signing time: Sun 28 Dec 2025 04:02:22 +0000 Manifest this update: Sun 28 Dec 2025 04:02:22 +0000 Manifest next update: Mon 29 Dec 2025 04:02:22 +0000 Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: nppQ5kCMlYwiQ2CdD+Y7Rknag65pVMfLN/+CJQD55Is=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:1d:5f:4c:d5:cf:05:56:39:0c:99:69:2d:d8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47 Validity Not Before: Dec 28 04:02:22 2025 GMT Not After : Dec 29 04:02:22 2025 GMT Subject: CN=a7314365662623aae07d9428af862282cd935af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:84:c9:6a:dc:24:f1:8a:d9:b6:7d:86:7d: ce:db:15:8a:75:2b:bf:60:87:e6:f4:5e:48:50:21: 99:33:be:94:35:c0:88:5e:38:b2:7a:cc:8c:6f:40: 5d:b6:fe:cd:35:e4:63:fb:b2:1e:1a:b1:7c:5c:c9: 70:d7:53:0b:d8:1c:b3:fe:d9:29:20:6c:b3:2d:0a: 05:e6:93:a3:80:a8:b7:5f:b3:52:db:4f:5e:9c:ab: 60:b2:9c:38:24:82:0f:6f:c7:e2:f4:e0:89:04:6c: 6c:75:fe:31:4a:3e:91:61:54:14:ee:fb:d1:c2:89: de:39:4f:ae:7d:8a:c2:61:1f:36:27:98:6c:53:28: 18:74:68:d0:72:8a:61:cf:82:24:c7:d9:ca:90:3f: 4a:8e:92:6f:1c:cb:78:1f:37:c2:61:4b:73:95:94: f4:3d:75:e9:d9:24:70:2a:9f:d6:fd:b9:3f:84:24: bb:f5:62:4c:af:fa:96:ec:8d:0f:75:c3:b3:f4:ab: 45:c5:64:02:1c:b7:3d:2b:ad:2a:9a:7a:3c:ac:6e: 48:e9:d3:e0:c8:4f:c1:72:e5:d3:0e:4e:13:a1:db: d1:b3:57:c5:97:02:a8:1d:c8:40:f3:4e:4b:62:d2: 75:88:ed:49:56:f5:6a:8a:58:da:f4:c4:00:7e:8b: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:43:65:66:26:23:AA:E0:7D:94:28:AF:86:22:82:CD:93:5A:F4 X509v3 Authority Key Identifier: keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:af:e8:fd:c7:7b:84:29:16:57:35:f6:fa:de:4e:ab:d4:26: cd:d4:3f:ab:c1:5b:2c:59:03:df:64:56:ef:10:0c:b8:c0:52: e8:42:73:4a:0b:bc:7e:72:fa:3e:63:7e:2b:2a:6c:12:da:0c: dc:79:e5:61:d4:5f:59:17:c8:a7:13:c8:8c:2a:ac:01:5b:bd: a0:46:d1:c8:38:3d:dd:55:5c:97:0a:a7:5a:4c:de:bc:b9:c6: 6e:ae:18:e3:de:f4:4f:18:dd:98:06:60:66:a7:8f:b5:79:f3: 15:cd:1d:9e:e2:0a:a6:5d:a2:fc:69:a1:0a:73:6b:0a:ee:dd: 26:17:2a:0f:d4:86:15:e5:72:c8:75:e4:81:37:d0:98:48:80: be:44:04:3c:f1:6c:8d:5b:46:bb:04:09:1f:f9:f2:a3:8e:0c: c5:26:e8:04:64:26:15:49:97:c9:65:69:2e:5c:30:e6:88:e0: 0a:d0:77:47:54:a5:3c:ff:32:5a:5f:7c:1c:0c:01:1d:80:8b: e7:82:ec:d2:24:73:6e:60:14:70:40:f4:7c:7e:77:73:80:c8: c8:a7:53:30:ce:3f:65:32:83:f0:db:b4:ef:65:80:c2:a9:96: c2:a9:af:d2:b9:79:2a:d6:fd:df:02:f2:b2:66:15:b1:00:8f: b6:a1:76:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHx1fTNXPBVY5DJlpLdiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmJlYTAwYjU3ZDBiOWE4Y2FmMTlmNmRmZTRkZDMwYTRm ZTZjNDcwHhcNMjUxMjI4MDQwMjIyWhcNMjUxMjI5MDQwMjIyWjAzMTEwLwYDVQQD EyhhNzMxNDM2NTY2MjYyM2FhZTA3ZDk0MjhhZjg2MjI4MmNkOTM1YWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHiEyWrcJPGK2bZ9hn3O2xWKdSu/ YIfm9F5IUCGZM76UNcCIXjiyesyMb0Bdtv7NNeRj+7IeGrF8XMlw11ML2Byz/tkp IGyzLQoF5pOjgKi3X7NS209enKtgspw4JIIPb8fi9OCJBGxsdf4xSj6RYVQU7vvR woneOU+ufYrCYR82J5hsUygYdGjQcophz4Ikx9nKkD9KjpJvHMt4HzfCYUtzlZT0 PXXp2SRwKp/W/bk/hCS79WJMr/qW7I0PdcOz9KtFxWQCHLc9K60qmno8rG5I6dPg yE/BcuXTDk4TodvRs1fFlwKoHchA805LYtJ1iO1JVvVqilja9MQAfotm8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcxQ2VmJiOq4H2UKK+GIoLNk1r0MB8GA1UdIwQY MBaAFOhr6gC1fQuajK8Z9t/k3TCk/mxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGIt YzdmNTY2NWNiOTE4LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGItYzdmNTY2NWNiOTE4 LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6/o/cd7 hCkWVzX2+t5Oq9QmzdQ/q8FbLFkD32RW7xAMuMBS6EJzSgu8fnL6PmN+KypsEtoM 3HnlYdRfWRfIpxPIjCqsAVu9oEbRyDg93VVclwqnWkzevLnGbq4Y4970TxjdmAZg ZqePtXnzFc0dnuIKpl2i/GmhCnNrCu7dJhcqD9SGFeVyyHXkgTfQmEiAvkQEPPFs jVtGuwQJH/nyo44MxSboBGQmFUmXyWVpLlww5ojgCtB3R1SlPP8yWl98HAwBHYCL 54Ls0iRzbmAUcED0fH53c4DIyKdTMM4/ZTKD8Nu072WAwqmWwqmv0rl5Ktb93wLy smYVsQCPtqF2hg== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:38 2025 by rpki-client