This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json) Hash identifier: y50glIh3KWTyQ7v7Z6UDmTDw4LSSfpX4P6bgglHpg2M= Subject key identifier: D5:9B:9A:E8:5B:58:EC:39:21:3B:E4:48:10:00:95:7F:AD:42:D7:89 Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00 Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00 Certificate serial: 019B27E45EF24D34C3B10B5216994D1F4C47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft Manifest number: 12B9 Signing time: Tue 16 Dec 2025 16:00:36 +0000 Manifest this update: Tue 16 Dec 2025 16:00:36 +0000 Manifest next update: Wed 17 Dec 2025 16:00:36 +0000 Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: EPKQzUkCw3x913x+f1VurmOELL+lElYd1nJfLjNbgJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:5e:f2:4d:34:c3:b1:0b:52:16:99:4d:1f:4c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00 Validity Not Before: Dec 16 16:00:36 2025 GMT Not After : Dec 17 16:00:36 2025 GMT Subject: CN=d59b9ae85b58ec39213be4481000957fad42d789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:bb:5b:7e:e1:90:07:8e:ba:4d:72:c5:84: 1c:3f:47:52:35:12:13:fe:5e:29:cb:13:83:56:a9: 77:6a:8f:67:d5:28:68:c6:b4:3e:26:0a:d8:3a:e8: 61:52:e2:56:a3:76:8d:6d:f2:2d:19:bb:8a:71:46: 8b:9a:66:c1:14:95:27:a1:35:89:80:24:c7:b1:0b: a9:7a:0b:88:fe:ac:cf:97:8c:38:c8:fb:b1:ec:6e: 4e:14:97:83:d8:3b:4a:d1:31:9e:15:6b:3d:09:c3: 4d:09:09:0c:39:5a:da:fe:bc:1c:07:42:b9:05:bd: a1:d7:72:ae:d9:b5:f2:d7:3b:0f:a3:4d:8c:3f:71: b1:eb:03:7b:73:ba:c3:60:55:6b:af:ff:ba:68:cb: f9:26:97:80:c2:9a:ca:17:69:3d:2f:f2:fe:bd:83: 40:42:b4:12:16:51:aa:93:dc:52:64:6a:7d:f9:43: eb:90:88:60:5d:18:d0:ce:47:3c:75:83:0a:bf:04: bb:dc:f0:09:3a:3b:b5:b9:e6:1b:86:8f:73:24:18: f8:f3:7d:9c:b1:cb:ab:ac:0d:30:3a:b4:f8:6d:13: 97:9c:bf:2d:4d:64:a4:f8:c9:b4:33:d1:12:7f:f5: d3:bd:85:ef:80:04:1f:04:15:42:18:01:d7:3f:72: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9B:9A:E8:5B:58:EC:39:21:3B:E4:48:10:00:95:7F:AD:42:D7:89 X509v3 Authority Key Identifier: keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d3:7a:d2:ac:c7:39:98:6d:84:f3:19:82:a5:41:60:0b:45: 9d:dc:15:d6:0d:70:a9:15:a8:e1:9d:ce:da:0d:3f:fb:b6:28: 40:d2:f5:3c:e6:87:cb:4a:a3:6f:61:0a:4e:ce:50:b8:2e:2d: 65:e6:19:df:9a:f2:5f:e7:c3:44:74:2d:dc:df:7e:b5:34:85: ab:2f:1f:a9:9f:0b:ae:bb:50:0b:59:77:97:e8:8d:6d:b0:2f: 43:08:c6:b0:1d:bf:39:37:11:c4:2b:17:72:6a:b9:64:0b:b0: 38:58:10:af:41:2a:ec:d4:44:ca:f4:5e:d8:93:a6:e1:8c:68: a2:df:d6:d0:2a:40:3e:ff:fc:ba:80:5e:e0:49:2b:6c:84:63: 46:12:49:a3:90:05:f0:48:c9:e0:48:c0:e9:58:b6:f7:0e:88: b3:61:c2:1c:3b:35:d2:3a:25:7c:99:04:07:e6:1e:cf:73:a4: dd:24:7e:8b:63:03:1a:89:b4:20:50:0b:f0:63:22:93:ab:30: 66:2a:90:37:76:7a:97:80:0f:37:cc:3a:cb:7c:57:11:62:ca: cb:2f:be:50:18:5e:15:90:2f:2b:3f:bf:82:7d:9c:4e:02:6c: 77:a5:be:ab:93:f9:8f:c2:44:a4:33:c2:ca:2e:cd:d1:df:d7: 90:c3:1a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5F7yTTTDsQtSFplNH0xHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzQ4M2I3NWMyZGIxY2Y5ZmY0ZTk0YzdhMGZkZjBkYjAw MDBmMDAwHhcNMjUxMjE2MTYwMDM2WhcNMjUxMjE3MTYwMDM2WjAzMTEwLwYDVQQD EyhkNTliOWFlODViNThlYzM5MjEzYmU0NDgxMDAwOTU3ZmFkNDJkNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniC7W37hkAeOuk1yxYQcP0dSNRIT /l4pyxODVql3ao9n1ShoxrQ+JgrYOuhhUuJWo3aNbfItGbuKcUaLmmbBFJUnoTWJ gCTHsQupeguI/qzPl4w4yPux7G5OFJeD2DtK0TGeFWs9CcNNCQkMOVra/rwcB0K5 Bb2h13Ku2bXy1zsPo02MP3Gx6wN7c7rDYFVrr/+6aMv5JpeAwprKF2k9L/L+vYNA QrQSFlGqk9xSZGp9+UPrkIhgXRjQzkc8dYMKvwS73PAJOju1ueYbho9zJBj4832c scurrA0wOrT4bROXnL8tTWSk+Mm0M9ESf/XTvYXvgAQfBBVCGAHXP3InMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWbmuhbWOw5ITvkSBAAlX+tQteJMB8GA1UdIwQY MBaAFOjEg7dcLbHPn/TpTHoP3w2wAA8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTIt ZWIzNWJmYTA2NWFkLzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTItZWIzNWJmYTA2NWFk LzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9N60qzH OZhthPMZgqVBYAtFndwV1g1wqRWo4Z3O2g0/+7YoQNL1POaHy0qjb2EKTs5QuC4t ZeYZ35ryX+fDRHQt3N9+tTSFqy8fqZ8LrrtQC1l3l+iNbbAvQwjGsB2/OTcRxCsX cmq5ZAuwOFgQr0Eq7NREyvRe2JOm4Yxoot/W0CpAPv/8uoBe4EkrbIRjRhJJo5AF 8EjJ4EjA6Vi29w6Is2HCHDs10jolfJkEB+Yez3Ok3SR+i2MDGom0IFAL8GMik6sw ZiqQN3Z6l4APN8w6y3xXEWLKyy++UBheFZAvKz+/gn2cTgJsd6W+q5P5j8JEpDPC yi7N0d/XkMMapg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:23:57 2025 by rpki-client