This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft File: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json) Hash identifier: wMldEx3X5lw8d0m3MksAzvxH8YNaCCblpjPl4YOdQEI= Subject key identifier: 6D:33:76:C3:D2:E2:55:26:2A:1C:1F:63:F3:AB:93:7C:B8:DE:DE:B4 Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 Certificate issuer: /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Certificate serial: 019B3E6D1347556E817AC843586DD0613E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft Manifest number: 16B0 Signing time: Sun 21 Dec 2025 01:01:34 +0000 Manifest this update: Sun 21 Dec 2025 01:01:34 +0000 Manifest next update: Mon 22 Dec 2025 01:01:34 +0000 Files and hashes: 1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: txUw6XSe8krDWJ4vtqlKnBn7pa6H3E1hrb93mKWJhlw=) 2: bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa (hash: vARwTHDByRNch/FCMqW59p/LzP0CiF5frUcfc8ikvnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:13:47:55:6e:81:7a:c8:43:58:6d:d0:61:3e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Validity Not Before: Dec 21 01:01:34 2025 GMT Not After : Dec 22 01:01:34 2025 GMT Subject: CN=6d3376c3d2e255262a1c1f63f3ab937cb8dedeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:e1:6f:ca:17:19:5e:30:1d:24:ba:14:fc: 11:ef:eb:85:f8:a7:b2:0a:ef:08:ff:1b:e7:8a:9c: 00:ec:28:81:5c:8b:33:81:12:05:ba:6a:7f:81:00: 85:05:d1:53:5c:60:a9:e0:fd:59:b0:0d:16:24:70: 48:d1:f3:a3:fc:67:cd:4b:9b:60:c5:0f:15:85:d4: 5b:2f:71:97:80:26:6b:3b:68:64:27:87:c8:db:b5: a9:4f:1b:e6:f1:a7:3a:58:4f:f3:64:8b:0b:d9:98: 59:c2:0d:7c:67:2f:f3:eb:1a:79:ec:92:ca:70:3c: 59:8b:e0:29:99:70:27:3e:fc:ba:7a:2f:07:63:57: 27:c2:5e:18:c9:a9:75:f5:6c:cf:32:06:9f:6a:10: 39:69:d2:7d:00:4e:0a:f8:80:c7:ef:f3:7d:ee:14: c7:8b:27:b8:55:b4:6a:15:57:6f:6d:c0:eb:86:bf: d2:0c:24:91:6c:0e:3b:65:79:1d:c2:cd:1b:58:1e: 66:d7:b1:aa:e9:aa:33:83:55:cf:c9:a1:79:91:46: 26:df:f1:33:a0:3e:63:36:6b:f7:f3:8f:42:3b:26: 1c:b4:51:88:08:09:70:16:57:18:dc:4e:c0:66:17: 5c:f2:aa:69:e1:33:81:7c:c8:18:24:11:be:4e:73: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:33:76:C3:D2:E2:55:26:2A:1C:1F:63:F3:AB:93:7C:B8:DE:DE:B4 X509v3 Authority Key Identifier: keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:14:3e:52:1a:9b:8c:ff:7f:d5:d4:18:16:cd:6a:b5:9c:ee: ba:07:75:04:d9:52:32:e1:08:77:b1:12:e0:03:65:22:2e:cb: 62:86:56:41:93:a0:c9:fd:a5:4a:4f:8e:c9:a3:20:d8:90:77: 56:56:10:b3:74:42:57:52:97:4a:1a:c6:4f:c6:6d:24:18:cd: 4f:c4:67:0a:90:41:8d:6e:7c:1e:ce:21:30:68:4c:5a:1c:53: 26:20:5f:75:21:b7:ce:ca:d8:30:35:0e:e7:ba:0a:d8:5c:c1: 85:be:48:a3:71:ce:68:a8:ae:a1:1a:9c:71:68:76:f9:9f:5d: 12:e6:50:75:66:a9:8b:67:e8:7a:34:11:62:f5:80:4e:9a:f1: da:ce:72:dd:01:6a:31:16:7e:af:37:3e:a9:48:86:19:28:4f: 39:d0:3e:93:95:31:ad:e4:1e:ae:4f:39:f8:e6:07:3c:7d:dd: ea:44:e5:c6:26:bb:18:7d:1f:0d:3d:8a:7a:da:bf:21:ae:df: c5:ad:c8:02:5c:2a:90:eb:cf:98:30:df:7e:88:55:5d:f7:f9: e1:49:fa:4e:1c:b7:30:e2:b6:ca:1b:38:c4:eb:8e:78:71:69: 2b:0c:a4:99:40:ca:79:50:83:cc:dd:6b:3f:17:e8:10:91:e1: 30:61:42:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRNHVW6BeshDWG3QYT42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzM0NjFlOWQyYmRhZmNjMjlhZDkxODlmYjBhY2YxZjMz OTYwYTkwHhcNMjUxMjIxMDEwMTM0WhcNMjUxMjIyMDEwMTM0WjAzMTEwLwYDVQQD Eyg2ZDMzNzZjM2QyZTI1NTI2MmExYzFmNjNmM2FiOTM3Y2I4ZGVkZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmynhb8oXGV4wHSS6FPwR7+uF+Key Cu8I/xvnipwA7CiBXIszgRIFump/gQCFBdFTXGCp4P1ZsA0WJHBI0fOj/GfNS5tg xQ8VhdRbL3GXgCZrO2hkJ4fI27WpTxvm8ac6WE/zZIsL2ZhZwg18Zy/z6xp57JLK cDxZi+ApmXAnPvy6ei8HY1cnwl4Yyal19WzPMgafahA5adJ9AE4K+IDH7/N97hTH iye4VbRqFVdvbcDrhr/SDCSRbA47ZXkdws0bWB5m17Gq6aozg1XPyaF5kUYm3/Ez oD5jNmv3849COyYctFGICAlwFlcY3E7AZhdc8qpp4TOBfMgYJBG+TnNBPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0zdsPS4lUmKhwfY/Ork3y43t60MB8GA1UdIwQY MBaAFOgzRh6dK9r8wprZGJ+wrPHzOWCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMt YWVmZThkMTc4ZTZhLzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMtYWVmZThkMTc4ZTZh LzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihQ+Uhqb jP9/1dQYFs1qtZzuugd1BNlSMuEId7ES4ANlIi7LYoZWQZOgyf2lSk+OyaMg2JB3 VlYQs3RCV1KXShrGT8ZtJBjNT8RnCpBBjW58Hs4hMGhMWhxTJiBfdSG3zsrYMDUO 57oK2FzBhb5Io3HOaKiuoRqccWh2+Z9dEuZQdWapi2foejQRYvWATprx2s5y3QFq MRZ+rzc+qUiGGShPOdA+k5UxreQerk85+OYHPH3d6kTlxia7GH0fDT2Ketq/Ia7f xa3IAlwqkOvPmDDffohVXff54Un6Thy3MOK2yhs4xOuOeHFpKwykmUDKeVCDzN1r PxfoEJHhMGFCtg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:27 2025 by rpki-client