This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json) Hash identifier: 9U6TQ+jqMxdBy3/6UV1+29Sb92ZSM9T7Aw81SOroGcY= Subject key identifier: E8:CA:83:B3:EE:00:67:CD:D5:9B:51:64:A1:6D:0D:DF:D1:50:60:3B Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c Certificate serial: 019B2EFA9DFB4D27760ED769533FD2E09566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft Manifest number: 1261 Signing time: Thu 18 Dec 2025 01:02:14 +0000 Manifest this update: Thu 18 Dec 2025 01:02:14 +0000 Manifest next update: Fri 19 Dec 2025 01:02:14 +0000 Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: 0KXZo/m70oaz4OEarao8VvbScxLyTC9KFYGhgpIYTrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:9d:fb:4d:27:76:0e:d7:69:53:3f:d2:e0:95:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c Validity Not Before: Dec 18 01:02:14 2025 GMT Not After : Dec 19 01:02:14 2025 GMT Subject: CN=e8ca83b3ee0067cdd59b5164a16d0ddfd150603b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:12:e0:cc:02:a3:23:c3:19:8c:f5:a0:3d:88: 66:e9:41:2d:98:82:82:df:98:c0:88:34:53:11:b5: 09:c6:a3:7b:ff:82:c3:08:09:63:77:20:f0:8f:3f: 4d:f7:20:f5:85:1e:1d:cc:88:7b:b7:17:98:3d:d8: c3:a8:4f:32:de:0a:cf:ba:4e:db:ee:e4:bb:b7:6e: 0b:eb:48:e0:a1:58:09:ce:83:8b:00:1a:b7:c7:29: bd:8e:c9:cc:37:13:83:e6:fa:a1:7f:44:62:98:3b: b6:76:95:39:cd:b7:2c:c7:2c:23:33:48:9c:c1:ad: 05:48:35:bc:66:98:f7:f5:a7:03:ad:20:0f:84:63: ff:71:ac:0f:e7:98:4a:dd:83:81:d5:58:1d:fc:c8: d6:1c:14:35:aa:58:52:3a:d3:29:b8:9d:e5:ec:1b: 08:5a:3e:b8:5f:40:c5:9c:58:5a:f6:29:a4:a5:52: b7:64:0d:f1:c1:45:42:1b:40:23:be:31:bc:8d:ab: f0:fc:88:c2:a1:0c:40:39:de:5d:b0:c9:bb:9a:74: 27:76:73:c9:2f:7f:50:3a:9c:21:eb:ae:fc:3e:3c: 98:31:61:ed:7a:3e:b3:34:e3:67:53:65:b6:79:8f: 14:f1:d0:1d:e1:7e:cc:36:dd:5e:10:8a:20:24:fd: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CA:83:B3:EE:00:67:CD:D5:9B:51:64:A1:6D:0D:DF:D1:50:60:3B X509v3 Authority Key Identifier: keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2f:19:91:69:06:d6:c1:db:bf:18:a4:28:7c:a5:39:4e:c1: 4d:04:6d:03:cd:20:5a:25:f9:d9:22:8a:1a:98:b7:29:78:aa: 12:d3:b9:12:c1:ec:e9:38:8e:c2:bd:d0:54:c6:94:df:19:50: cb:9c:f3:c6:73:8a:df:83:dd:07:41:18:7a:16:88:c4:7c:df: d7:b5:1d:77:3e:5c:e2:91:b6:d4:6c:df:1e:f2:65:81:e9:73: 99:3f:48:69:0c:30:26:50:6c:38:e8:6e:86:19:df:ba:3a:f3: 3f:87:8f:79:29:82:4c:0c:4a:3e:86:87:c9:e6:5d:8e:1e:7e: 52:4a:f7:39:bd:01:5a:a7:b6:92:d8:a8:06:58:37:e8:2c:6a: 63:de:2b:fa:d4:e3:94:05:df:de:67:0b:4e:ab:e9:87:10:e3: 06:5a:e2:c3:4d:4b:e5:cc:ac:c0:40:c0:9e:3c:fe:5b:6a:c7: 74:c0:2c:d8:a3:de:f0:20:20:74:d9:4d:ad:eb:c1:2f:d8:43: 7c:1c:bf:8e:c4:4c:fc:c9:c3:e8:6c:a7:f4:c6:16:75:af:4a: 24:de:2d:da:af:4c:c4:42:c5:8a:a3:01:3a:aa:d6:dd:14:92: d5:b8:f4:f2:d4:50:e8:fe:68:62:51:ed:de:80:8a:a4:48:34: 37:b6:b7:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+p37TSd2DtdpUz/S4JVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTAxYTY4ZDkxMDkzZTdkZWYyZjRlMDMxMDMxZDExNGQ0 M2JhM2MwHhcNMjUxMjE4MDEwMjE0WhcNMjUxMjE5MDEwMjE0WjAzMTEwLwYDVQQD EyhlOGNhODNiM2VlMDA2N2NkZDU5YjUxNjRhMTZkMGRkZmQxNTA2MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxLgzAKjI8MZjPWgPYhm6UEtmIKC 35jAiDRTEbUJxqN7/4LDCAljdyDwjz9N9yD1hR4dzIh7txeYPdjDqE8y3grPuk7b 7uS7t24L60jgoVgJzoOLABq3xym9jsnMNxOD5vqhf0RimDu2dpU5zbcsxywjM0ic wa0FSDW8Zpj39acDrSAPhGP/cawP55hK3YOB1Vgd/MjWHBQ1qlhSOtMpuJ3l7BsI Wj64X0DFnFha9imkpVK3ZA3xwUVCG0AjvjG8javw/IjCoQxAOd5dsMm7mnQndnPJ L39QOpwh6678PjyYMWHtej6zNONnU2W2eY8U8dAd4X7MNt1eEIogJP1NbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjKg7PuAGfN1ZtRZKFtDd/RUGA7MB8GA1UdIwQY MBaAFOpQGmjZEJPn3vL04DEDHRFNQ7o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjIt MzQ1ZTE3ZjlkNjMyLzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjItMzQ1ZTE3ZjlkNjMy LzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACy8ZkWkG 1sHbvxikKHylOU7BTQRtA80gWiX52SKKGpi3KXiqEtO5EsHs6TiOwr3QVMaU3xlQ y5zzxnOK34PdB0EYehaIxHzf17Uddz5c4pG21GzfHvJlgelzmT9IaQwwJlBsOOhu hhnfujrzP4ePeSmCTAxKPoaHyeZdjh5+Ukr3Ob0BWqe2ktioBlg36CxqY94r+tTj lAXf3mcLTqvphxDjBlriw01L5cyswEDAnjz+W2rHdMAs2KPe8CAgdNlNrevBL9hD fBy/jsRM/MnD6Gyn9MYWda9KJN4t2q9MxELFiqMBOqrW3RSS1bj08tRQ6P5oYlHt 3oCKpEg0N7a3DQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:56 2025 by rpki-client