This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json) Hash identifier: T6ke9gImNWdBgfUAvLfgqmQRQPreiOdrcK46CuOlEKc= Subject key identifier: 4B:AB:EE:17:A5:4A:18:80:CD:55:69:62:E0:18:E3:98:6A:79:08:E0 Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472 Certificate serial: 019B4702068A175BDD073651AB8BE7095478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft Manifest number: 06D6 Signing time: Mon 22 Dec 2025 17:01:13 +0000 Manifest this update: Mon 22 Dec 2025 17:01:13 +0000 Manifest next update: Tue 23 Dec 2025 17:01:13 +0000 Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: 1h8fH+4VL0c1aGxzS/4i43sMX2v7oXOp6S+9O4ghOkc=) 2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:06:8a:17:5b:dd:07:36:51:ab:8b:e7:09:54:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472 Validity Not Before: Dec 22 17:01:13 2025 GMT Not After : Dec 23 17:01:13 2025 GMT Subject: CN=4babee17a54a1880cd556962e018e3986a7908e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:f4:f5:08:c3:c7:fa:a5:fb:b5:de:2d:51: 12:58:7c:e8:d0:aa:ac:13:4d:5a:9b:f4:d7:2a:61: 27:62:17:13:2c:8b:65:4f:2b:a8:8a:f5:1f:b4:8e: 03:95:cc:ab:59:a4:5f:6f:12:a6:15:10:a4:43:d6: 6e:4e:12:d1:33:76:6a:28:72:23:c8:34:ff:8e:a4: 26:78:04:3c:49:56:41:5b:08:4d:4d:fb:f4:5c:86: e6:4f:f5:0b:cc:4a:02:50:4c:11:c7:7d:8c:99:ea: 57:6a:7a:a5:6c:bf:c1:47:6a:76:56:bb:0a:45:fe: 8a:e9:fd:7a:03:0e:05:e8:df:89:5f:6c:42:af:6d: 0e:eb:7a:3f:fc:1f:af:30:ae:7f:91:0d:df:f7:88: 82:00:b9:16:28:ed:d8:45:12:2f:03:6a:5f:41:5d: a4:2c:a0:83:cd:42:96:78:d8:24:5e:b0:70:c0:e1: 3f:cb:34:33:3e:65:26:4d:4e:0d:9b:6a:b5:f7:53: 52:07:ff:11:5f:4c:36:68:fb:47:b0:fa:89:4d:6b: f0:3d:8a:cd:33:ed:75:42:0e:3b:cb:be:b4:e8:15: e0:4b:dd:c3:17:0e:b8:32:10:d7:f0:7e:84:f6:5a: d3:83:54:ae:f6:28:00:f8:2c:cb:f2:cf:d6:8d:85: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AB:EE:17:A5:4A:18:80:CD:55:69:62:E0:18:E3:98:6A:79:08:E0 X509v3 Authority Key Identifier: keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:32:a1:e9:1f:46:95:3f:2f:c7:47:fe:0e:5e:ab:63:dd:5a: 59:6f:31:f0:7e:3f:4b:5a:85:46:7e:2b:8e:12:fc:f7:01:00: 49:87:1c:fb:c3:7b:6c:f5:2b:57:30:d8:8b:6b:c2:0b:e0:5e: b5:70:87:e3:87:9b:28:98:c1:1e:27:34:28:06:fa:86:81:5d: 3c:d0:43:bf:fc:32:83:b0:2f:b2:90:e4:80:3e:b6:b9:cd:67: b1:d3:9e:35:55:0e:ae:a9:29:13:ce:81:5d:f4:12:47:d7:a7: d3:76:5f:3a:42:2e:15:fd:06:66:bc:ca:f7:06:33:ec:77:a3: 4e:d7:27:1e:61:06:2a:ac:62:34:bc:73:be:19:31:f5:90:33: d4:9d:a8:21:4e:b4:86:25:e4:23:dc:22:d0:fb:fd:c6:f2:65: 3e:b1:f7:a9:1c:95:e6:1c:57:8b:ab:fc:d0:ec:1d:92:09:48: 7d:7a:30:ec:56:31:53:3e:c7:0e:87:ca:3c:34:b8:64:c1:f2: 30:ef:16:1d:64:10:0a:27:4b:0a:8d:78:d5:b2:09:51:b5:ef: 2f:8c:39:27:e8:b2:76:0a:97:24:30:e1:6a:64:eb:99:1c:53: 39:88:2b:e0:f7:d5:9d:7e:07:22:72:88:62:41:84:d7:3d:0b: 6c:51:59:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAgaKF1vdBzZRq4vnCVR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDY3MmZhNjBhZWU0YzI3M2ExMTUwN2Y0OWI1ODRkYzU1 MmM0NzIwHhcNMjUxMjIyMTcwMTEzWhcNMjUxMjIzMTcwMTEzWjAzMTEwLwYDVQQD Eyg0YmFiZWUxN2E1NGExODgwY2Q1NTY5NjJlMDE4ZTM5ODZhNzkwOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7z09QjDx/ql+7XeLVESWHzo0Kqs E01am/TXKmEnYhcTLItlTyuoivUftI4DlcyrWaRfbxKmFRCkQ9ZuThLRM3ZqKHIj yDT/jqQmeAQ8SVZBWwhNTfv0XIbmT/ULzEoCUEwRx32MmepXanqlbL/BR2p2VrsK Rf6K6f16Aw4F6N+JX2xCr20O63o//B+vMK5/kQ3f94iCALkWKO3YRRIvA2pfQV2k LKCDzUKWeNgkXrBwwOE/yzQzPmUmTU4Nm2q191NSB/8RX0w2aPtHsPqJTWvwPYrN M+11Qg47y7606BXgS93DFw64MhDX8H6E9lrTg1Su9igA+CzL8s/WjYVuvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEur7helShiAzVVpYuAY45hqeQjgMB8GA1UdIwQY MBaAFOjWcvpgruTCc6EVB/SbWE3FUsRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUt NzUxYWM2ODA3YjA0LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUtNzUxYWM2ODA3YjA0 LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTKh6R9G lT8vx0f+Dl6rY91aWW8x8H4/S1qFRn4rjhL89wEASYcc+8N7bPUrVzDYi2vCC+Be tXCH44ebKJjBHic0KAb6hoFdPNBDv/wyg7AvspDkgD62uc1nsdOeNVUOrqkpE86B XfQSR9en03ZfOkIuFf0GZrzK9wYz7HejTtcnHmEGKqxiNLxzvhkx9ZAz1J2oIU60 hiXkI9wi0Pv9xvJlPrH3qRyV5hxXi6v80OwdkglIfXow7FYxUz7HDofKPDS4ZMHy MO8WHWQQCidLCo141bIJUbXvL4w5J+iydgqXJDDhamTrmRxTOYgr4PfVnX4HInKI YkGE1z0LbFFZpA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:12:57 2025 by rpki-client