This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json) Hash identifier: PK8FNVTxDlSULPia3hOrQD07ay8ItbxNGiiQ7IJlzpk= Subject key identifier: 68:94:A5:D8:98:53:1B:3B:9C:3A:E0:3F:31:7B:2F:91:77:69:A5:C5 Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Certificate serial: 019B3E6C2F7C95A8B630E7195DBC3BE125C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft Manifest number: 0A92 Signing time: Sun 21 Dec 2025 01:00:35 +0000 Manifest this update: Sun 21 Dec 2025 01:00:35 +0000 Manifest next update: Mon 22 Dec 2025 01:00:35 +0000 Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: OaWKffj5MXm56egGAC+oUW29cVsiWRngDsgNf/zPA4g=) 2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:2f:7c:95:a8:b6:30:e7:19:5d:bc:3b:e1:25:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Validity Not Before: Dec 21 01:00:35 2025 GMT Not After : Dec 22 01:00:35 2025 GMT Subject: CN=6894a5d898531b3b9c3ae03f317b2f917769a5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:54:6a:0f:3b:f5:59:d0:df:37:da:7f:24: 6f:ed:6b:d7:64:73:e9:48:6d:23:44:b0:04:ec:93: 7e:b7:7a:48:ed:8d:66:c6:87:22:40:1b:8a:f0:90: 33:b6:3e:d5:37:d5:2e:2a:15:64:9c:f1:2c:0c:cb: 5d:71:89:39:41:b3:ba:a2:22:c7:40:e1:7b:4c:24: fe:74:d8:df:3c:05:88:c5:b8:0a:06:16:9f:70:8f: df:aa:34:82:13:97:97:d2:f0:90:c7:bc:c9:39:4c: 8a:e2:f4:bd:3d:4f:af:d1:da:ff:d8:32:68:3d:df: 68:22:b4:4d:4f:be:8b:bb:85:34:f8:e3:6a:e8:4c: 60:59:99:f3:5f:da:2e:a2:bf:91:5e:7c:95:f2:33: ae:17:4e:33:6a:6f:79:67:d8:56:5d:9f:4a:65:a8: 4d:72:f2:4f:1d:e4:1a:bb:06:5b:ae:c6:c9:e0:78: 09:e2:6b:5e:36:b8:48:08:ad:4c:ec:25:ef:6d:63: 77:e3:72:3f:e8:dc:4e:f5:c0:a6:2e:e6:58:92:ce: 6d:ab:c9:bb:4b:6d:19:8d:90:14:ec:32:3a:bb:b7: c4:c2:f6:2d:3b:94:7e:96:61:94:d8:2d:90:c9:9f: 5e:27:52:55:16:3b:d6:87:17:6a:39:8c:cb:42:a3: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:94:A5:D8:98:53:1B:3B:9C:3A:E0:3F:31:7B:2F:91:77:69:A5:C5 X509v3 Authority Key Identifier: keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:50:66:0c:e4:94:94:9f:4a:d2:3f:da:4a:8d:c0:a7:8b:2d: e5:90:63:a6:08:95:04:b9:9c:d8:dd:d4:5a:7c:06:9f:43:95: 8b:2b:1a:1a:88:ab:1e:2c:8a:14:1d:c5:01:c4:44:61:5c:ce: 32:f0:42:c7:89:e2:ed:9c:5e:7e:9e:4c:41:0b:46:7a:ed:4d: ca:9a:13:25:7d:8d:34:b7:62:81:fd:f4:26:c3:f6:c7:e6:a6: 5a:3c:ce:0a:85:c6:0b:e0:cd:36:5c:37:d9:ba:f6:62:aa:56: 9a:f8:3c:8d:11:cf:9f:68:17:02:27:55:02:a8:d3:c7:9c:ce: 7e:bf:86:bf:2b:86:82:61:c8:3b:0a:5f:8c:2c:c5:56:f4:99: 28:fe:87:57:ad:28:98:6f:6c:ee:34:23:c4:f6:e7:15:6d:4f: ca:9b:61:94:d8:51:d5:28:2e:40:68:ad:90:66:ae:7d:5a:14: 92:1c:50:cc:e5:0a:6a:bb:66:14:06:d4:0f:0c:23:e4:76:20: bc:90:fc:27:7e:89:ed:7a:88:b2:20:31:dc:01:e6:e2:b7:c5: 84:a1:b5:1e:1a:fb:c7:8e:38:f8:b9:a7:c1:b2:c5:bf:ee:01: c3:ae:64:87:c2:dd:0b:0f:ef:e5:70:a8:c0:48:df:5a:43:35: 94:7b:bf:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bC98lai2MOcZXbw74SXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm MDliYzkwHhcNMjUxMjIxMDEwMDM1WhcNMjUxMjIyMDEwMDM1WjAzMTEwLwYDVQQD Eyg2ODk0YTVkODk4NTMxYjNiOWMzYWUwM2YzMTdiMmY5MTc3NjlhNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ5Uag879VnQ3zfafyRv7WvXZHPp SG0jRLAE7JN+t3pI7Y1mxociQBuK8JAztj7VN9UuKhVknPEsDMtdcYk5QbO6oiLH QOF7TCT+dNjfPAWIxbgKBhafcI/fqjSCE5eX0vCQx7zJOUyK4vS9PU+v0dr/2DJo Pd9oIrRNT76Lu4U0+ONq6ExgWZnzX9ouor+RXnyV8jOuF04zam95Z9hWXZ9KZahN cvJPHeQauwZbrsbJ4HgJ4mteNrhICK1M7CXvbWN343I/6NxO9cCmLuZYks5tq8m7 S20ZjZAU7DI6u7fEwvYtO5R+lmGU2C2QyZ9eJ1JVFjvWhxdqOYzLQqM67wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiUpdiYUxs7nDrgPzF7L5F3aaXFMB8GA1UdIwQY MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVBmDOSU lJ9K0j/aSo3Ap4st5ZBjpgiVBLmc2N3UWnwGn0OViysaGoirHiyKFB3FAcREYVzO MvBCx4ni7Zxefp5MQQtGeu1NypoTJX2NNLdigf30JsP2x+amWjzOCoXGC+DNNlw3 2br2YqpWmvg8jRHPn2gXAidVAqjTx5zOfr+GvyuGgmHIOwpfjCzFVvSZKP6HV60o mG9s7jQjxPbnFW1PypthlNhR1SguQGitkGaufVoUkhxQzOUKartmFAbUDwwj5HYg vJD8J36J7XqIsiAx3AHm4rfFhKG1Hhr7x444+LmnwbLFv+4Bw65kh8LdCw/v5XCo wEjfWkM1lHu/Tw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:28:31 2025 by rpki-client