This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft File: 6ySQqKEzr8STmogtt1JsFfiS6Mg.mft (raw, json) Hash identifier: qYg4rqEv7ao3Amd7WFfWEyp9pnbGOtHtT5yEjxmvv/w= Subject key identifier: 21:33:20:B5:35:CE:E9:FE:57:17:33:96:88:75:3E:F7:F9:6B:D1:D0 Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8 Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8 Certificate serial: 019B5ABF7404E82CE68AD6FC53A7435BEB3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 13:00:55 +0000 Manifest this update: Fri 26 Dec 2025 13:00:55 +0000 Manifest next update: Sat 27 Dec 2025 13:00:55 +0000 Files and hashes: 1: 6ySQqKEzr8STmogtt1JsFfiS6Mg.crl (hash: B267Vq3qPHzn0V1aInMpm6eg4lUyx813uRfai2LfUg0=) 2: dp2EkQj5_zKrlsEr5C_rrbMhRyA.roa (hash: mX2VEnqBHs2wq24qAd7nrxxeH5xEJp3U/9aLReWzccA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:74:04:e8:2c:e6:8a:d6:fc:53:a7:43:5b:eb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8 Validity Not Before: Dec 26 13:00:55 2025 GMT Not After : Dec 27 13:00:55 2025 GMT Subject: CN=213320b535cee9fe5717339688753ef7f96bd1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:23:97:38:80:ca:26:43:90:cf:05:6d:5c: b8:65:82:7c:7d:45:e1:3e:d2:7c:7e:21:b1:21:08: 54:94:de:8a:39:8b:bb:f9:18:37:a6:23:79:f3:b3: c5:6a:b8:bf:a7:3d:95:74:84:e1:0a:e8:dd:c0:7d: d3:af:99:56:19:78:18:88:77:21:71:5c:2b:a0:53: ce:90:6a:67:a8:d4:07:3c:d9:20:56:ba:82:ef:21: b5:13:bb:f1:34:df:f9:97:15:f2:73:54:a4:be:c0: 0e:b3:b2:e5:4a:63:6c:52:6e:dd:3e:0b:53:4f:1e: 77:02:2f:01:35:d3:4a:23:ea:91:c4:7a:a6:47:50: 0e:f4:3d:8c:a1:a0:88:4d:1c:cb:be:aa:ac:1b:ab: 1e:ca:84:90:e1:7e:09:af:b8:1c:4c:28:6f:5b:c7: 94:e7:0a:b4:c3:90:32:b6:8f:56:6d:62:ec:9f:b3: 76:b0:4e:85:d0:a2:ba:e5:f2:d8:84:c6:b7:2e:83: 96:aa:f3:d9:49:8e:75:76:8f:5a:66:40:59:46:f5: 1d:cd:dc:aa:44:8b:28:54:80:a2:56:b9:7b:e6:b4: 8e:72:21:da:b4:69:aa:68:f7:ef:1d:63:bb:80:e3: 27:db:2e:71:62:2d:2b:f5:34:96:f8:1b:48:e5:df: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:33:20:B5:35:CE:E9:FE:57:17:33:96:88:75:3E:F7:F9:6B:D1:D0 X509v3 Authority Key Identifier: keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:36:c6:6a:3b:5d:f9:2a:e2:10:e1:d3:1b:56:69:66:66:88: bc:51:4e:1a:a9:8d:ad:81:c2:93:ce:63:79:8b:4a:83:75:ca: 25:97:e5:2f:79:d6:d7:ea:97:00:a9:e0:46:3d:37:f0:87:7d: f5:ce:90:31:08:e3:77:fc:7b:eb:0b:1a:d5:ce:7d:f2:0e:a2: e7:a4:d0:bc:54:ae:b9:70:7e:da:20:e0:8c:2c:eb:2d:d2:22: eb:8d:dd:67:78:00:1e:85:95:a6:99:4f:6b:bf:5a:76:fa:15: 80:a2:4a:7a:d5:f8:b7:3b:cd:a0:9d:8a:0e:41:99:64:fb:b6: 4d:b5:51:cd:d1:3a:67:8e:8b:48:3b:1c:7b:6a:d8:6a:ce:c6: 1f:7f:b6:80:fb:4b:69:01:3a:76:c9:02:67:89:86:ce:76:45: 50:15:02:b0:d6:d5:b0:43:f2:1f:5b:6f:ae:3d:94:cc:1d:5c: 9d:ad:91:cc:45:83:e9:07:18:b8:b6:cd:10:47:fd:c9:aa:c2: ef:54:db:3e:7f:69:fa:d5:d0:15:1b:ee:68:a2:9e:4f:96:23: 27:25:01:19:ff:44:81:2a:27:f5:46:1a:59:fb:82:5f:b6:69: 5d:60:47:36:ce:ee:fa:b1:f0:17:e2:c5:85:83:f0:fa:7e:12: 38:e9:a0:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3QE6Czmitb8U6dDW+s9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMjQ5MGE4YTEzM2FmYzQ5MzlhODgyZGI3NTI2YzE1Zjg5 MmU4YzgwHhcNMjUxMjI2MTMwMDU1WhcNMjUxMjI3MTMwMDU1WjAzMTEwLwYDVQQD EygyMTMzMjBiNTM1Y2VlOWZlNTcxNzMzOTY4ODc1M2VmN2Y5NmJkMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH8jlziAyiZDkM8FbVy4ZYJ8fUXh PtJ8fiGxIQhUlN6KOYu7+Rg3piN587PFari/pz2VdIThCujdwH3Tr5lWGXgYiHch cVwroFPOkGpnqNQHPNkgVrqC7yG1E7vxNN/5lxXyc1SkvsAOs7LlSmNsUm7dPgtT Tx53Ai8BNdNKI+qRxHqmR1AO9D2MoaCITRzLvqqsG6seyoSQ4X4Jr7gcTChvW8eU 5wq0w5Ayto9WbWLsn7N2sE6F0KK65fLYhMa3LoOWqvPZSY51do9aZkBZRvUdzdyq RIsoVICiVrl75rSOciHatGmqaPfvHWO7gOMn2y5xYi0r9TSW+BtI5d+quwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEzILU1zun+Vxczloh1Pvf5a9HQMB8GA1UdIwQY MBaAFOskkKihM6/Ek5qILbdSbBX4kujIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0Nzkt MzljNTUwZjBhNGU0LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0NzktMzljNTUwZjBhNGU0 LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDbGajtd +SriEOHTG1ZpZmaIvFFOGqmNrYHCk85jeYtKg3XKJZflL3nW1+qXAKngRj038Id9 9c6QMQjjd/x76wsa1c598g6i56TQvFSuuXB+2iDgjCzrLdIi643dZ3gAHoWVpplP a79advoVgKJKetX4tzvNoJ2KDkGZZPu2TbVRzdE6Z46LSDsce2rYas7GH3+2gPtL aQE6dskCZ4mGznZFUBUCsNbVsEPyH1tvrj2UzB1cna2RzEWD6QcYuLbNEEf9yarC 71TbPn9p+tXQFRvuaKKeT5YjJyUBGf9EgSon9UYaWfuCX7ZpXWBHNs7u+rHwF+LF hYPw+n4SOOmg/A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:55 2025 by rpki-client