This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json) Hash identifier: 6AYyDHw937gPuxWHmQTFxQ+pxJUs7+3tw/HWu96f/I4= Subject key identifier: 1F:4A:D3:66:0C:C1:A9:17:4C:C8:28:E9:70:1F:5D:86:D6:D0:93:2D Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47 Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47 Certificate serial: 019B38A182D7B88467C0ADAAA09F185DC08F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft Manifest number: 0FAD Signing time: Fri 19 Dec 2025 22:01:07 +0000 Manifest this update: Fri 19 Dec 2025 22:01:07 +0000 Manifest next update: Sat 20 Dec 2025 22:01:07 +0000 Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: lOHvB7O8NRPj7He71rscvH5kwoOFI90hSzxsJ973KLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:82:d7:b8:84:67:c0:ad:aa:a0:9f:18:5d:c0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47 Validity Not Before: Dec 19 22:01:07 2025 GMT Not After : Dec 20 22:01:07 2025 GMT Subject: CN=1f4ad3660cc1a9174cc828e9701f5d86d6d0932d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:9c:67:b5:2a:75:82:25:ba:fd:1a:f3:7d: e3:b1:b3:a1:8b:0f:06:4c:9a:41:24:a7:e4:a8:80: ad:90:b0:9d:1b:b2:b6:a2:64:59:d4:94:2a:0f:25: d7:7a:97:14:f2:4d:2c:98:58:9b:44:6f:35:e4:27: b4:81:a2:07:8c:94:6c:61:38:78:19:6c:c1:76:b8: ff:90:69:36:86:11:35:9c:61:48:16:ff:07:bd:b0: 0b:0b:c3:46:2a:9f:03:81:16:57:c8:6e:32:ff:7a: 6a:03:40:55:ed:44:7f:cd:f5:40:b9:fc:70:1b:8e: 10:7e:5f:62:7b:c4:de:6a:12:8e:e1:31:2d:28:86: 7d:c0:81:78:f4:b0:b0:82:86:b5:0e:ee:10:2e:e3: 40:10:2f:32:32:5b:b9:9b:9b:b5:25:62:31:18:10: a9:0f:2d:e6:44:1e:f1:15:81:66:ae:87:33:fe:f7: 16:e6:bc:69:6b:37:c6:7d:97:d9:f3:31:8b:16:bc: b9:ac:6d:58:8e:00:13:02:0c:14:3f:e1:85:08:7f: 46:aa:11:08:82:d7:df:8a:f3:09:6f:e9:d1:07:ce: f7:30:ea:ab:97:a2:06:c4:ee:bc:27:fd:c9:da:a9: c8:e0:6c:03:d1:01:bf:a2:ac:60:c9:66:47:c1:7d: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4A:D3:66:0C:C1:A9:17:4C:C8:28:E9:70:1F:5D:86:D6:D0:93:2D X509v3 Authority Key Identifier: keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:76:eb:ba:69:bf:84:a2:a4:b7:3c:16:d7:42:d3:46:24:34: 5f:4e:8a:e9:a6:85:9f:2d:2d:a6:23:d3:f4:7e:4a:14:42:fc: ba:45:f3:3a:b9:04:b2:a0:42:dd:e5:bd:79:f9:92:a5:69:48: d5:ed:41:19:ad:92:a2:a7:5c:20:d8:d7:9f:4b:1d:69:ef:11: 77:13:b2:df:64:0a:96:11:1a:00:4d:fe:0a:f4:3b:b3:97:29: ff:ff:2b:9f:bf:15:0c:52:4f:97:42:2d:7a:a1:76:8c:67:6d: 89:de:00:c7:cd:10:84:69:e9:bf:b5:10:ce:46:ad:55:d0:3e: 98:74:df:c0:33:fb:80:8a:7f:e8:33:08:d2:a2:f8:1e:5f:06: 39:a3:3d:c8:79:6a:dc:00:7f:75:16:53:80:af:99:e5:a2:7d: cf:72:55:e3:11:46:40:a3:e7:c6:9f:b8:51:a6:d6:ed:82:64: d7:05:74:c2:76:56:cd:74:38:f9:5f:39:70:f4:97:c8:0d:38: 43:01:fc:17:e5:a3:7d:41:06:0a:55:fb:ad:b1:92:f4:9e:de: fc:1e:40:95:a2:98:36:ff:c8:ad:40:a8:1a:a8:21:af:90:ab: 21:5d:73:57:57:2a:31:2c:11:27:ee:ab:50:d0:99:09:ce:f7: 82:a3:94:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oYLXuIRnwK2qoJ8YXcCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmJlYTAwYjU3ZDBiOWE4Y2FmMTlmNmRmZTRkZDMwYTRm ZTZjNDcwHhcNMjUxMjE5MjIwMTA3WhcNMjUxMjIwMjIwMTA3WjAzMTEwLwYDVQQD EygxZjRhZDM2NjBjYzFhOTE3NGNjODI4ZTk3MDFmNWQ4NmQ2ZDA5MzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFmcZ7UqdYIluv0a833jsbOhiw8G TJpBJKfkqICtkLCdG7K2omRZ1JQqDyXXepcU8k0smFibRG815Ce0gaIHjJRsYTh4 GWzBdrj/kGk2hhE1nGFIFv8HvbALC8NGKp8DgRZXyG4y/3pqA0BV7UR/zfVAufxw G44Qfl9ie8TeahKO4TEtKIZ9wIF49LCwgoa1Du4QLuNAEC8yMlu5m5u1JWIxGBCp Dy3mRB7xFYFmrocz/vcW5rxpazfGfZfZ8zGLFry5rG1YjgATAgwUP+GFCH9GqhEI gtffivMJb+nRB873MOqrl6IGxO68J/3J2qnI4GwD0QG/oqxgyWZHwX10vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9K02YMwakXTMgo6XAfXYbW0JMtMB8GA1UdIwQY MBaAFOhr6gC1fQuajK8Z9t/k3TCk/mxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGIt YzdmNTY2NWNiOTE4LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGItYzdmNTY2NWNiOTE4 LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHbrumm/ hKKktzwW10LTRiQ0X06K6aaFny0tpiPT9H5KFEL8ukXzOrkEsqBC3eW9efmSpWlI 1e1BGa2SoqdcINjXn0sdae8RdxOy32QKlhEaAE3+CvQ7s5cp//8rn78VDFJPl0It eqF2jGdtid4Ax80QhGnpv7UQzkatVdA+mHTfwDP7gIp/6DMI0qL4Hl8GOaM9yHlq 3AB/dRZTgK+Z5aJ9z3JV4xFGQKPnxp+4UabW7YJk1wV0wnZWzXQ4+V85cPSXyA04 QwH8F+WjfUEGClX7rbGS9J7e/B5AlaKYNv/IrUCoGqghr5CrIV1zV1cqMSwRJ+6r UNCZCc73gqOUrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:13:10 2025 by rpki-client