This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json) Hash identifier: qTwkUoBISvQpi4IBhZ8lbXEFR1qAr0Zs22tZta1k5YA= Subject key identifier: 50:1B:8A:D7:5B:36:DD:02:C1:B7:A1:54:10:28:84:86:CD:EA:18:30 Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf Certificate serial: 019B375790103ABDC54364C68EB9DFA2B941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft Manifest number: 0E6A Signing time: Fri 19 Dec 2025 16:00:43 +0000 Manifest this update: Fri 19 Dec 2025 16:00:43 +0000 Manifest next update: Sat 20 Dec 2025 16:00:43 +0000 Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: V8wzbuLb+La6l0UyI2Z4gE1IpWSJOJI7dOLyK/oOICU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:90:10:3a:bd:c5:43:64:c6:8e:b9:df:a2:b9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf Validity Not Before: Dec 19 16:00:43 2025 GMT Not After : Dec 20 16:00:43 2025 GMT Subject: CN=501b8ad75b36dd02c1b7a15410288486cdea1830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:53:a6:c7:5a:fb:35:6f:44:c3:bc:73:72: 3e:be:57:2c:fd:b7:fd:26:2a:5d:8f:5e:f0:83:d7: 79:6b:d6:16:82:61:02:5f:1c:68:5a:68:df:42:21: bf:a7:af:6f:d8:47:7b:4f:5c:84:d1:6f:a9:ae:52: dc:e7:2b:4e:9a:41:fd:c6:38:be:89:2c:39:61:b2: 58:b0:9d:fc:cc:95:26:9c:69:a8:4c:37:e5:a6:44: 1c:43:26:4f:43:44:36:c0:2d:10:76:bd:ca:4c:90: 33:95:1e:83:98:15:7c:51:d0:8d:19:3b:cd:7e:74: 23:37:40:3d:a9:8b:c5:21:09:c4:e9:6a:cd:06:33: 08:5a:6f:be:96:33:ea:2e:a7:53:d2:53:d2:c0:78: 97:93:4e:f6:5b:50:72:cc:db:5e:65:c1:3f:e1:f6: cd:e0:f6:86:ae:27:b0:d3:0d:63:62:de:4c:a7:32: 0e:d5:e1:5f:b3:a8:a5:3d:7f:2a:5a:92:d1:9c:b2: 91:e0:1a:dd:8d:cd:0d:cc:b1:d0:85:13:0b:b2:14: 9d:ed:df:c7:ff:66:73:6d:4f:c3:c1:87:a8:5e:25: fb:9d:06:ce:95:35:aa:0f:09:0e:f2:fb:67:5d:57: d6:bf:86:2d:1f:1f:80:3e:f3:fd:fd:e4:89:51:50: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1B:8A:D7:5B:36:DD:02:C1:B7:A1:54:10:28:84:86:CD:EA:18:30 X509v3 Authority Key Identifier: keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ca:e7:44:77:3a:38:c0:11:74:f0:e2:65:a1:f1:f8:55:7e: 32:6d:4a:70:d2:4a:59:ca:8f:7f:88:df:87:bc:8c:80:d1:fa: 75:7b:18:96:df:86:8b:70:7b:5c:d2:32:59:50:90:88:a7:ae: b5:b6:b2:d1:9f:97:1a:31:f4:76:44:85:5b:14:d8:ae:ef:d1: 97:be:10:d4:39:2e:25:14:c5:e4:ab:d3:f5:06:dc:24:5a:e9: 65:fb:53:71:59:82:f5:71:c8:fd:5c:8e:96:4c:80:c5:78:0b: 6b:71:9c:3c:6a:3c:fd:7a:80:8b:a2:03:21:ae:26:bb:a6:f2: 25:ea:c3:b1:b1:2d:86:76:72:06:a1:ab:dd:d2:99:14:b6:ea: 02:93:c0:a4:42:53:60:74:34:b4:dc:8d:d6:1b:19:83:15:07: 4a:bc:70:6a:f8:6e:c6:b4:a9:ba:07:ca:93:20:82:3b:30:91: 72:9b:23:5c:1e:6d:5f:36:7b:e1:44:fa:34:a5:40:8a:65:04: ad:69:01:7f:6d:c3:bb:44:8e:39:fd:39:23:1b:f4:bb:db:88: d1:40:82:9a:06:c7:dd:c2:15:e4:5e:ae:56:18:3e:3b:99:09: 6a:ba:71:e2:7e:c5:97:c2:99:1a:2f:b9:26:23:04:09:a3:b6: 13:d5:cc:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V5AQOr3FQ2TGjrnforlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl NjE4YmYwHhcNMjUxMjE5MTYwMDQzWhcNMjUxMjIwMTYwMDQzWjAzMTEwLwYDVQQD Eyg1MDFiOGFkNzViMzZkZDAyYzFiN2ExNTQxMDI4ODQ4NmNkZWExODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7JTpsda+zVvRMO8c3I+vlcs/bf9 Jipdj17wg9d5a9YWgmECXxxoWmjfQiG/p69v2Ed7T1yE0W+prlLc5ytOmkH9xji+ iSw5YbJYsJ38zJUmnGmoTDflpkQcQyZPQ0Q2wC0Qdr3KTJAzlR6DmBV8UdCNGTvN fnQjN0A9qYvFIQnE6WrNBjMIWm++ljPqLqdT0lPSwHiXk072W1ByzNteZcE/4fbN 4PaGriew0w1jYt5MpzIO1eFfs6ilPX8qWpLRnLKR4Brdjc0NzLHQhRMLshSd7d/H /2ZzbU/DwYeoXiX7nQbOlTWqDwkO8vtnXVfWv4YtHx+APvP9/eSJUVArdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAbitdbNt0CwbehVBAohIbN6hgwMB8GA1UdIwQY MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcrnRHc6 OMARdPDiZaHx+FV+Mm1KcNJKWcqPf4jfh7yMgNH6dXsYlt+Gi3B7XNIyWVCQiKeu tbay0Z+XGjH0dkSFWxTYru/Rl74Q1DkuJRTF5KvT9QbcJFrpZftTcVmC9XHI/VyO lkyAxXgLa3GcPGo8/XqAi6IDIa4mu6byJerDsbEthnZyBqGr3dKZFLbqApPApEJT YHQ0tNyN1hsZgxUHSrxwavhuxrSpugfKkyCCOzCRcpsjXB5tXzZ74UT6NKVAimUE rWkBf23Du0SOOf05Ixv0u9uI0UCCmgbH3cIV5F6uVhg+O5kJarpx4n7Fl8KZGi+5 JiMECaO2E9XMnA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:48:18 2025 by rpki-client