This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft File: 6eybY31F3ICc9SE_ZXpjWpDjFx4.mft (raw, json) Hash identifier: I58FKchHpey4oAz1JLcNvnsI6kOmoNRs2yqxWqP6f9A= Subject key identifier: 4F:72:15:AA:21:35:7C:46:91:D5:75:4A:CA:CC:18:14:4E:2A:57:B7 Authority key identifier: E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E Certificate issuer: /CN=e9ec9b637d45dc809cf5213f657a635a90e3171e Certificate serial: 019B3BD97C7118EDD9782BBE88D3253825FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft Manifest number: 0B9B Signing time: Sat 20 Dec 2025 13:01:07 +0000 Manifest this update: Sat 20 Dec 2025 13:01:07 +0000 Manifest next update: Sun 21 Dec 2025 13:01:07 +0000 Files and hashes: 1: 6eybY31F3ICc9SE_ZXpjWpDjFx4.crl (hash: 2/t5x7gYDeAhaWKMySVjNxmfGJKPdlgnxeaTrwQ/rJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:7c:71:18:ed:d9:78:2b:be:88:d3:25:38:25:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9ec9b637d45dc809cf5213f657a635a90e3171e Validity Not Before: Dec 20 13:01:07 2025 GMT Not After : Dec 21 13:01:07 2025 GMT Subject: CN=4f7215aa21357c4691d5754acacc18144e2a57b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:ff:80:ef:a2:39:2a:c9:4f:f7:ad:64:8d: ae:c3:cd:d0:d0:85:3f:26:4d:df:35:b0:5d:20:42: 05:e6:9d:6a:63:65:7e:77:bf:90:46:12:92:4e:9b: 62:c1:c3:76:f0:ff:88:7b:36:1d:86:e4:99:ab:5d: 2b:62:76:af:12:d7:30:93:34:56:57:51:85:75:b1: c1:68:6b:4c:cb:a1:5c:99:b7:d7:3b:c6:94:4d:ce: 3d:1f:32:d4:0b:a7:c0:47:3b:60:1c:be:ff:dc:13: 93:2f:22:db:58:ea:4d:4d:2d:3e:4b:31:25:d1:45: b1:d4:2c:60:7b:67:3e:4e:8f:f6:73:56:6b:e5:17: fe:c3:23:be:91:19:99:5a:1f:51:30:79:48:87:7d: e5:32:fa:e2:c1:3a:60:a4:3d:69:3b:65:27:35:5e: a1:20:52:40:a8:eb:3c:3c:ae:ba:88:11:54:81:d5: 07:64:6b:96:12:ff:df:fc:c2:4c:50:15:ef:84:57: ac:51:9d:9b:a2:22:57:55:2d:92:c6:f5:66:b1:14: d6:02:ef:1e:0a:d9:a8:43:9c:1d:55:b8:a8:ad:7d: e5:b1:0f:da:a3:e1:52:05:90:e9:45:4b:97:93:cd: d4:fb:28:fa:bc:4f:aa:60:91:5d:a9:62:0a:55:61: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:72:15:AA:21:35:7C:46:91:D5:75:4A:CA:CC:18:14:4E:2A:57:B7 X509v3 Authority Key Identifier: keyid:E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1b:8e:5e:7a:a5:40:aa:50:48:84:78:19:15:26:f1:10:94: a5:20:f4:57:06:dd:cb:9a:d1:07:a3:de:06:17:96:84:6a:84: 45:e1:7a:2e:bd:aa:88:de:a4:dc:aa:54:25:11:3c:0e:d1:44: 78:f2:70:84:23:13:3a:60:b5:cf:71:5d:5b:c1:f4:73:d0:3d: f8:6a:84:83:d3:2b:b7:6a:62:ea:0f:a2:e9:8b:42:66:a3:75: 8b:ca:fa:76:a0:82:91:fd:9c:3f:41:94:9f:80:76:58:04:8e: 21:96:03:39:67:d9:87:94:bc:13:30:f7:3d:8a:81:30:59:b0: 97:f4:36:a3:31:98:c8:24:80:ab:bc:40:21:5c:6c:5e:f2:db: aa:12:4c:28:94:0e:70:0e:21:23:ee:fb:64:7c:35:65:2d:cc: d0:57:50:c0:d5:cf:53:8d:91:2f:34:cb:ad:0f:2c:3a:89:5b: a4:c8:db:4f:ef:dc:1c:f7:65:f0:2b:5c:6e:b9:60:44:a6:82: 8a:3e:a7:62:b6:02:83:f5:47:11:76:09:3b:97:00:ed:63:6f: b1:6b:a5:b8:56:47:db:ba:1a:8c:cf:91:89:92:69:59:f2:77: a0:45:fc:d9:ee:1e:b4:12:02:b4:45:0c:4e:0f:7e:d1:af:57: 3d:d4:80:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XxxGO3ZeCu+iNMlOCX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZWM5YjYzN2Q0NWRjODA5Y2Y1MjEzZjY1N2E2MzVhOTBl MzE3MWUwHhcNMjUxMjIwMTMwMTA3WhcNMjUxMjIxMTMwMTA3WjAzMTEwLwYDVQQD Eyg0ZjcyMTVhYTIxMzU3YzQ2OTFkNTc1NGFjYWNjMTgxNDRlMmE1N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLr/gO+iOSrJT/etZI2uw83Q0IU/ Jk3fNbBdIEIF5p1qY2V+d7+QRhKSTptiwcN28P+IezYdhuSZq10rYnavEtcwkzRW V1GFdbHBaGtMy6FcmbfXO8aUTc49HzLUC6fARztgHL7/3BOTLyLbWOpNTS0+SzEl 0UWx1Cxge2c+To/2c1Zr5Rf+wyO+kRmZWh9RMHlIh33lMvriwTpgpD1pO2UnNV6h IFJAqOs8PK66iBFUgdUHZGuWEv/f/MJMUBXvhFesUZ2boiJXVS2SxvVmsRTWAu8e CtmoQ5wdVbiorX3lsQ/ao+FSBZDpRUuXk83U+yj6vE+qYJFdqWIKVWFzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9yFaohNXxGkdV1SsrMGBROKle3MB8GA1UdIwQY MBaAFOnsm2N9RdyAnPUhP2V6Y1qQ4xceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmV5YlkzMUYzSUNjOVNFX1pYcGpXcERqRng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOWFiYWUtNzAwNS00YjM1LTlkOGEt N2Q3ZDU1NWE0NDNkLzEvNmV5YlkzMUYzSUNjOVNFX1pYcGpXcERqRng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mOWFiYWUtNzAwNS00YjM1LTlkOGEtN2Q3ZDU1NWE0NDNk LzEvNmV5YlkzMUYzSUNjOVNFX1pYcGpXcERqRng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARuOXnql QKpQSIR4GRUm8RCUpSD0Vwbdy5rRB6PeBheWhGqEReF6Lr2qiN6k3KpUJRE8DtFE ePJwhCMTOmC1z3FdW8H0c9A9+GqEg9Mrt2pi6g+i6YtCZqN1i8r6dqCCkf2cP0GU n4B2WASOIZYDOWfZh5S8EzD3PYqBMFmwl/Q2ozGYyCSAq7xAIVxsXvLbqhJMKJQO cA4hI+77ZHw1ZS3M0FdQwNXPU42RLzTLrQ8sOolbpMjbT+/cHPdl8CtcbrlgRKaC ij6nYrYCg/VHEXYJO5cA7WNvsWuluFZH27oajM+RiZJpWfJ3oEX82e4etBICtEUM Tg9+0a9XPdSAFg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:15 2025 by rpki-client