This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft File: e6g1J3sxmmnH9usa1IsJ1mMv090.mft (raw, json) Hash identifier: 08NffV7h9Nx3Ji5V0GbZXsTrdtXLRhMs3SMLFWHE7N8= Subject key identifier: 8A:E5:45:4F:E5:BD:E1:49:8E:84:D5:BF:20:D4:59:19:A2:76:FB:66 Authority key identifier: 7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD Certificate issuer: /CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd Certificate serial: 019B3C7DFCE2F411CBA8074B26B64E1AD567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft Manifest number: 0639 Signing time: Sat 20 Dec 2025 16:00:48 +0000 Manifest this update: Sat 20 Dec 2025 16:00:48 +0000 Manifest next update: Sun 21 Dec 2025 16:00:48 +0000 Files and hashes: 1: e6g1J3sxmmnH9usa1IsJ1mMv090.crl (hash: DgUXDBtS6Jjkzn+cAF4ScQ6igCATdcI7M39qx5yVQEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:fc:e2:f4:11:cb:a8:07:4b:26:b6:4e:1a:d5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd Validity Not Before: Dec 20 16:00:48 2025 GMT Not After : Dec 21 16:00:48 2025 GMT Subject: CN=8ae5454fe5bde1498e84d5bf20d45919a276fb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:2f:92:65:b6:2f:42:a8:aa:41:dc:8c:f6: 09:07:ca:4e:95:7d:fd:c2:c3:c4:a7:2a:55:30:08: e5:db:a4:6b:a4:46:8f:00:b5:70:c2:85:c8:42:8d: 09:a0:21:98:4f:0a:32:be:23:c4:f1:9f:5d:a1:82: f6:f5:d5:cc:86:c8:44:36:89:52:0d:f3:a5:ff:db: 0b:3d:79:a3:0c:dd:e1:16:d1:a6:a8:0c:e2:cc:0a: ab:9a:7e:fb:c2:bf:12:b1:a9:e4:02:d9:5c:ff:bc: 05:e1:ef:57:c9:d4:9e:f0:a5:e8:7c:35:37:cb:02: a1:48:8e:f3:20:01:c4:94:8e:2a:71:71:cf:79:65: 69:1d:c4:c6:a4:e9:9a:dd:c5:17:77:8d:51:55:c8: ce:c2:70:39:6d:e6:37:85:1a:5a:b2:32:34:f4:b3: 58:b8:38:ca:99:f7:40:99:e6:02:ee:ba:50:64:c4: 78:41:73:3c:3d:29:f0:48:f5:ec:c2:d9:8b:2a:a9: 4b:72:22:62:e1:a1:15:e7:e2:8d:ce:c0:41:61:89: a0:84:60:15:02:cf:f2:9e:77:b0:34:46:63:4f:95: 2e:4a:d7:37:a5:00:e5:ac:65:20:9a:e3:50:30:6c: bf:4b:78:38:8b:ef:dc:82:34:ba:4a:78:4c:f2:96: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E5:45:4F:E5:BD:E1:49:8E:84:D5:BF:20:D4:59:19:A2:76:FB:66 X509v3 Authority Key Identifier: keyid:7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:29:b1:98:ba:5d:14:46:99:a9:69:01:d1:fc:43:67:a9:d7: b8:6e:4d:64:73:9d:ef:c0:09:53:db:e1:f4:f0:60:48:fc:76: c5:9f:f2:b1:55:e3:27:32:27:a6:9c:f7:ec:9a:ab:e3:0e:ca: eb:2e:e5:52:d2:b9:07:9a:2b:27:36:4b:f8:8d:15:c7:19:7a: 8f:4a:88:b2:a8:9c:7f:c1:7d:f0:94:2e:d1:d8:5d:30:5f:ac: 5a:39:dd:fb:bf:7e:8a:49:bc:f9:97:58:14:48:b6:a4:b4:4c: b1:14:46:7f:56:45:8a:18:46:40:c9:37:df:d3:9f:3a:55:c6: 31:63:b5:8b:52:9b:1e:9a:94:b5:9f:a3:6a:ea:78:0f:71:b9: b8:ff:1b:6f:0c:e2:82:e1:08:eb:c0:4f:de:bc:8b:c6:91:fb: dd:c6:32:dd:db:01:7b:85:9e:08:e5:44:b4:e4:93:0a:bb:32: 16:d2:41:b2:97:10:95:fc:50:10:f8:62:97:8e:ff:d0:6f:f8: 9b:cf:74:2b:09:1b:1b:13:9c:98:e3:53:be:50:52:96:33:4f: dc:c0:8b:57:6b:2d:84:df:a5:da:1a:f8:f0:f8:3d:07:b3:e2: 55:51:bf:12:da:d9:eb:4e:95:47:96:19:10:fe:e9:6c:c2:e4: d6:dd:d1:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffzi9BHLqAdLJrZOGtVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTgzNTI3N2IzMTlhNjljN2Y2ZWIxYWQ0OGIwOWQ2NjMy ZmQzZGQwHhcNMjUxMjIwMTYwMDQ4WhcNMjUxMjIxMTYwMDQ4WjAzMTEwLwYDVQQD Eyg4YWU1NDU0ZmU1YmRlMTQ5OGU4NGQ1YmYyMGQ0NTkxOWEyNzZmYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX0vkmW2L0KoqkHcjPYJB8pOlX39 wsPEpypVMAjl26RrpEaPALVwwoXIQo0JoCGYTwoyviPE8Z9doYL29dXMhshENolS DfOl/9sLPXmjDN3hFtGmqAzizAqrmn77wr8SsankAtlc/7wF4e9XydSe8KXofDU3 ywKhSI7zIAHElI4qcXHPeWVpHcTGpOma3cUXd41RVcjOwnA5beY3hRpasjI09LNY uDjKmfdAmeYC7rpQZMR4QXM8PSnwSPXswtmLKqlLciJi4aEV5+KNzsBBYYmghGAV As/ynnewNEZjT5UuStc3pQDlrGUgmuNQMGy/S3g4i+/cgjS6SnhM8paOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrlRU/lveFJjoTVvyDUWRmidvtmMB8GA1UdIwQY MBaAFHuoNSd7MZppx/brGtSLCdZjL9PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZnMUozc3htbW5IOXVzYTFJc0oxbU12MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yYmVhYjgtZTI5Ny00ZTYzLWJmYmIt NjRhM2QwNzE1NTVhLzEvZTZnMUozc3htbW5IOXVzYTFJc0oxbU12MDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yYmVhYjgtZTI5Ny00ZTYzLWJmYmItNjRhM2QwNzE1NTVh LzEvZTZnMUozc3htbW5IOXVzYTFJc0oxbU12MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSmxmLpd FEaZqWkB0fxDZ6nXuG5NZHOd78AJU9vh9PBgSPx2xZ/ysVXjJzInppz37Jqr4w7K 6y7lUtK5B5orJzZL+I0Vxxl6j0qIsqicf8F98JQu0dhdMF+sWjnd+79+ikm8+ZdY FEi2pLRMsRRGf1ZFihhGQMk339OfOlXGMWO1i1KbHpqUtZ+jaup4D3G5uP8bbwzi guEI68BP3ryLxpH73cYy3dsBe4WeCOVEtOSTCrsyFtJBspcQlfxQEPhil47/0G/4 m890KwkbGxOcmONTvlBSljNP3MCLV2sthN+l2hr48Pg9B7PiVVG/EtrZ606VR5YZ EP7pbMLk1t3R0w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:15 2025 by rpki-client