This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft File: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json) Hash identifier: V7khIZw75nKI242/uLradk21FmAFgk3/sr9RPj6x0xA= Subject key identifier: E0:68:AE:29:F8:EB:C5:49:58:D0:56:F5:3D:57:E9:73:47:78:EB:4F Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED Certificate issuer: /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Certificate serial: 019B24E3AFD8D0FC7D15277B98419B73309C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft Manifest number: 0D Signing time: Tue 16 Dec 2025 02:01:00 +0000 Manifest this update: Tue 16 Dec 2025 02:01:00 +0000 Manifest next update: Wed 17 Dec 2025 02:01:00 +0000 Files and hashes: 1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: IN5gTObdUZCrV6eI/+pFnYgXUNWcVGZKp8QJtIgzd14=) 2: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (hash: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:af:d8:d0:fc:7d:15:27:7b:98:41:9b:73:30:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Validity Not Before: Dec 16 02:01:00 2025 GMT Not After : Dec 17 02:01:00 2025 GMT Subject: CN=e068ae29f8ebc54958d056f53d57e9734778eb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:38:6b:2f:1a:b5:db:29:9b:2a:5c:7c:71: 31:a8:0e:5b:b1:7d:d3:81:28:c6:ab:6a:85:4b:e1: c1:35:87:91:c9:e6:c7:b5:9d:1d:1a:65:a6:74:f9: 3a:ce:9b:e7:6a:b4:36:7b:f2:a2:99:2d:de:fd:80: ed:9b:f3:94:61:06:27:32:b6:92:1a:ea:0e:d2:85: b6:fd:61:16:b7:3d:0e:4b:38:1f:df:a0:3f:ef:fc: ac:38:ce:07:f0:fb:74:fa:27:55:ea:a3:19:c7:aa: c1:21:cd:d2:35:43:33:df:d5:b7:41:c1:58:56:e2: 0b:b7:67:7f:61:3b:4f:cd:ed:00:a3:65:a3:96:2e: 18:f6:f9:9b:48:67:65:1d:17:1d:a1:93:db:19:a5: 0b:76:3a:71:cc:1c:c5:27:3e:b2:48:95:fa:64:5d: 9a:28:eb:52:79:55:5a:0a:09:71:86:a6:df:86:ce: 63:84:df:14:ee:8c:36:05:12:da:60:0d:77:f7:b8: 8d:76:4b:0a:d8:c0:1c:f0:c5:67:51:91:6b:22:65: e6:1b:3c:ed:0a:56:05:e0:9a:e6:bd:d5:3c:a3:eb: bd:75:e7:bf:55:55:d3:8a:81:3c:c4:e6:9a:9d:b6: 75:f2:7a:35:07:37:66:b1:53:3a:72:65:b4:a4:8d: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:AE:29:F8:EB:C5:49:58:D0:56:F5:3D:57:E9:73:47:78:EB:4F X509v3 Authority Key Identifier: keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:cb:7c:46:04:24:71:66:28:3c:b2:e2:66:ad:df:cb:e9:68: 05:9e:64:7d:7a:ea:15:14:ca:52:f3:f4:6b:d1:d7:0f:db:a9: bc:1d:1a:69:49:f2:d7:e1:69:fa:ac:5f:80:58:f7:12:3c:99: a9:41:57:ce:e8:48:30:31:70:e5:b7:1d:e7:88:23:82:72:26: 20:81:f5:97:51:ab:b6:c2:5c:2a:7c:ca:a9:02:6e:41:69:5e: ac:62:07:8b:0f:f7:3f:48:d2:d6:40:04:7e:5f:f8:15:c6:5f: af:df:d3:40:30:62:cb:50:68:80:de:ad:07:90:0d:43:e5:a1: f8:3d:24:48:e5:cd:bd:d0:f2:00:16:8f:a5:44:5e:b9:61:1e: aa:a7:09:f4:99:5f:f1:11:3f:1a:bc:3e:4d:f4:2e:82:9a:eb: e3:91:ce:b9:f5:93:76:ab:4e:0e:3a:dc:0a:0d:e4:aa:64:b9: 6c:11:5d:76:07:56:24:2f:f3:0c:8b:43:be:fa:2d:00:0c:b6: 45:b7:46:59:b0:cc:7f:5f:2d:5b:68:64:1c:14:ac:6a:1f:c8: ca:6d:f1:5e:8b:d4:ac:3d:81:e8:e0:7c:69:1e:b0:35:1a:48: db:b9:47:ce:e8:c5:79:28:3d:f5:1a:26:46:e8:bd:3b:fc:06: 3d:9e:70:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk46/Y0Px9FSd7mEGbczCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmJjMWU1MzdlMmYzZDFlNGRhYjI4MzJhZTYyNGI1ZDYz NzllZWQwHhcNMjUxMjE2MDIwMTAwWhcNMjUxMjE3MDIwMTAwWjAzMTEwLwYDVQQD EyhlMDY4YWUyOWY4ZWJjNTQ5NThkMDU2ZjUzZDU3ZTk3MzQ3NzhlYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L44ay8atdspmypcfHExqA5bsX3T gSjGq2qFS+HBNYeRyebHtZ0dGmWmdPk6zpvnarQ2e/KimS3e/YDtm/OUYQYnMraS GuoO0oW2/WEWtz0OSzgf36A/7/ysOM4H8Pt0+idV6qMZx6rBIc3SNUMz39W3QcFY VuILt2d/YTtPze0Ao2Wjli4Y9vmbSGdlHRcdoZPbGaULdjpxzBzFJz6ySJX6ZF2a KOtSeVVaCglxhqbfhs5jhN8U7ow2BRLaYA1397iNdksK2MAc8MVnUZFrImXmGzzt ClYF4JrmvdU8o+u9dee/VVXTioE8xOaanbZ18no1BzdmsVM6cmW0pI11twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBorin468VJWNBW9T1X6XNHeOtPMB8GA1UdIwQY MBaAFOi7weU34vPR5NqygyrmJLXWN57tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDkt OTYzNmUyMzMwZDdlLzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDktOTYzNmUyMzMwZDdl LzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMt8RgQk cWYoPLLiZq3fy+loBZ5kfXrqFRTKUvP0a9HXD9upvB0aaUny1+Fp+qxfgFj3EjyZ qUFXzuhIMDFw5bcd54gjgnImIIH1l1GrtsJcKnzKqQJuQWlerGIHiw/3P0jS1kAE fl/4FcZfr9/TQDBiy1BogN6tB5ANQ+Wh+D0kSOXNvdDyABaPpUReuWEeqqcJ9Jlf 8RE/Grw+TfQugprr45HOufWTdqtODjrcCg3kqmS5bBFddgdWJC/zDItDvvotAAy2 RbdGWbDMf18tW2hkHBSsah/Iym3xXovUrD2B6OB8aR6wNRpI27lHzujFeSg99Rom Rui9O/wGPZ5wUQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:41:38 2025 by rpki-client