This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json) Hash identifier: qNdbDj45Y3r0O0JSlj1P6qJ9+k6csi0W3ft4qKqawfw= Subject key identifier: 95:60:BB:3B:F6:29:70:97:CE:2B:9C:D8:F4:82:D3:A7:D1:79:33:96 Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb Certificate serial: 019B668C70B0D2BA91E59DA64CFE1CC8CC22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft Manifest number: 0B86 Signing time: Sun 28 Dec 2025 20:00:38 +0000 Manifest this update: Sun 28 Dec 2025 20:00:38 +0000 Manifest next update: Mon 29 Dec 2025 20:00:38 +0000 Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: ArE1rl9T+mAnhqZtsHCLWnqWVGKGp+HT+7gkdzvc4Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:70:b0:d2:ba:91:e5:9d:a6:4c:fe:1c:c8:cc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb Validity Not Before: Dec 28 20:00:38 2025 GMT Not After : Dec 29 20:00:38 2025 GMT Subject: CN=9560bb3bf6297097ce2b9cd8f482d3a7d1793396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:21:a2:1d:c7:ba:b1:25:22:54:bd:13:04: 33:27:3a:7a:1b:58:6d:68:52:41:cf:94:f8:b0:fe: d7:e4:c4:09:24:8b:f1:22:53:66:f6:56:1b:42:f9: 7d:cf:e6:6f:e7:88:dc:be:5e:63:c4:73:87:f9:2b: 26:9a:85:c0:c1:b6:e9:a9:9e:a3:31:d5:14:ad:b5: 8f:28:69:69:c0:fd:c6:db:0a:6c:65:c0:7c:eb:26: 3a:a4:e5:3b:38:a7:b8:53:0f:e7:e7:f3:d3:9a:6d: e6:cb:2f:0b:ff:18:25:0c:f2:69:b8:b5:9b:20:d9: 2c:47:8f:22:cb:a0:80:72:6f:e0:c5:1e:c9:90:b6: a5:da:29:85:e1:47:e2:dd:f2:51:e6:68:da:82:a1: 7b:bc:75:94:75:c8:92:e5:f3:e2:1c:32:b4:24:40: 1b:67:1f:0a:6c:5b:6c:47:c8:96:a3:68:bd:90:db: 94:d7:b4:03:98:42:6c:b4:0d:fb:5f:cc:a5:c6:6d: 84:33:05:25:de:9c:84:5d:eb:4e:a9:7d:c1:8f:32: 63:7d:3e:69:39:ad:de:85:df:6a:25:a6:72:20:25: c2:9f:c9:90:f4:5b:81:c4:79:f6:80:a7:6c:a3:8b: e6:9f:79:69:f2:d2:62:b2:97:b3:cc:fd:46:9b:23: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:60:BB:3B:F6:29:70:97:CE:2B:9C:D8:F4:82:D3:A7:D1:79:33:96 X509v3 Authority Key Identifier: keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c2:90:77:a9:2e:2d:cf:be:36:a1:81:74:21:69:16:a8:d4: 55:3c:3c:21:97:92:09:ed:ce:0d:7a:32:af:40:0b:24:35:62: 2e:fa:6d:02:3c:41:1d:c7:5f:ed:4f:53:2f:04:5c:80:99:97: ef:ff:21:e8:63:37:87:61:e9:b2:f7:b8:fe:85:a0:90:ed:55: 24:8d:00:d9:6f:cc:59:f4:c4:a7:c3:fa:41:b1:69:5e:10:21: af:53:5e:00:1f:af:13:64:dd:da:d5:b2:35:1d:8d:47:6c:d8: 07:cc:6a:0e:09:ae:f9:6f:40:cb:cb:dc:0f:10:90:c7:37:61: c5:48:16:e0:bf:9e:be:7a:a6:51:87:5b:53:04:55:ca:95:6e: ad:79:4f:46:b3:54:29:82:08:fa:64:32:7f:5f:23:24:90:9e: 75:42:14:e2:90:12:79:f2:c3:30:77:a9:e4:c9:92:36:a5:8b: 90:52:e2:dc:15:35:32:48:4e:bc:ce:c3:20:19:36:58:a2:25: 97:69:42:1f:b7:b2:8e:6b:85:b5:2b:ee:6a:cd:03:34:d8:a4: f0:99:92:fd:e2:13:cb:75:6a:ea:e5:ff:8c:c9:6d:17:8b:c4: 14:f0:65:a0:71:2e:05:96:e5:ac:78:61:19:14:67:c3:91:c5: c8:aa:0c:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjHCw0rqR5Z2mTP4cyMwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YWJlYzA0ZmQ1Mjk5OTRmNTQ1NmExM2E4Yjg4ZjEzZmRl MTJhYmIwHhcNMjUxMjI4MjAwMDM4WhcNMjUxMjI5MjAwMDM4WjAzMTEwLwYDVQQD Eyg5NTYwYmIzYmY2Mjk3MDk3Y2UyYjljZDhmNDgyZDNhN2QxNzkzMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCUhoh3HurElIlS9EwQzJzp6G1ht aFJBz5T4sP7X5MQJJIvxIlNm9lYbQvl9z+Zv54jcvl5jxHOH+SsmmoXAwbbpqZ6j MdUUrbWPKGlpwP3G2wpsZcB86yY6pOU7OKe4Uw/n5/PTmm3myy8L/xglDPJpuLWb INksR48iy6CAcm/gxR7JkLal2imF4Ufi3fJR5mjagqF7vHWUdciS5fPiHDK0JEAb Zx8KbFtsR8iWo2i9kNuU17QDmEJstA37X8ylxm2EMwUl3pyEXetOqX3BjzJjfT5p Oa3ehd9qJaZyICXCn8mQ9FuBxHn2gKdso4vmn3lp8tJispezzP1GmyNncQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVguzv2KXCXziuc2PSC06fReTOWMB8GA1UdIwQY MBaAFOir7AT9UpmU9UVqE6i4jxP94Sq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkt2c0JQMVNtWlQxUldvVHFMaVBFXzNoS3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMGVlZmUtYWJjZS00Mzg3LWJlMzgt NWZlMjJiOTgzYjllLzEvNkt2c0JQMVNtWlQxUldvVHFMaVBFXzNoS3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMGVlZmUtYWJjZS00Mzg3LWJlMzgtNWZlMjJiOTgzYjll LzEvNkt2c0JQMVNtWlQxUldvVHFMaVBFXzNoS3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8KQd6ku Lc++NqGBdCFpFqjUVTw8IZeSCe3ODXoyr0ALJDViLvptAjxBHcdf7U9TLwRcgJmX 7/8h6GM3h2Hpsve4/oWgkO1VJI0A2W/MWfTEp8P6QbFpXhAhr1NeAB+vE2Td2tWy NR2NR2zYB8xqDgmu+W9Ay8vcDxCQxzdhxUgW4L+evnqmUYdbUwRVypVurXlPRrNU KYII+mQyf18jJJCedUIU4pASefLDMHep5MmSNqWLkFLi3BU1MkhOvM7DIBk2WKIl l2lCH7eyjmuFtSvuas0DNNik8JmS/eITy3Vq6uX/jMltF4vEFPBloHEuBZblrHhh GRRnw5HFyKoMmQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:00 2025 by rpki-client