This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json) Hash identifier: JPvM9XMDFrYe/OAMCnpce5a0GgXXdut/xpGMdRcOJKk= Subject key identifier: 01:06:A9:E7:A2:1E:DA:0C:7C:B7:08:9D:3A:40:92:F9:E4:9E:F1:93 Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd Certificate serial: 019B36B481C0A437BC14FB93B1B490528FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft Manifest number: 07DC Signing time: Fri 19 Dec 2025 13:02:37 +0000 Manifest this update: Fri 19 Dec 2025 13:02:37 +0000 Manifest next update: Sat 20 Dec 2025 13:02:37 +0000 Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: nK5tBrVsGrYecc2E1d0fQ7395Rm1OKKAKYfqwxQsniI=) 2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:81:c0:a4:37:bc:14:fb:93:b1:b4:90:52:8f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd Validity Not Before: Dec 19 13:02:37 2025 GMT Not After : Dec 20 13:02:37 2025 GMT Subject: CN=0106a9e7a21eda0c7cb7089d3a4092f9e49ef193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:eb:cb:75:77:f1:52:7b:65:5e:ea:84:99: 2b:64:32:8f:4e:40:11:79:44:ff:2b:44:b5:26:ef: 1d:ff:b0:c0:62:70:f2:71:e9:e4:3d:6c:36:f3:08: 4f:d2:0f:14:93:59:30:e8:f8:21:d1:12:4b:8a:e5: 3f:51:cf:e9:4e:cd:5b:92:79:03:82:b2:f3:70:b5: 57:8f:66:d9:c4:7d:4e:c4:e3:21:86:c9:04:84:e1: e3:d9:d3:db:0e:a9:69:6b:b2:47:79:bf:92:c4:cc: 9d:4e:33:8c:27:f9:84:d2:a4:29:12:cb:fb:8e:fa: 6b:5d:5a:14:19:cd:2a:b8:9c:4f:e8:8c:0c:b9:29: 84:e5:36:85:61:d4:b1:91:14:4a:29:e4:65:0d:e3: 0b:36:27:70:eb:df:3b:75:47:4d:f2:24:10:cc:53: 46:9e:f5:7e:eb:c7:90:e6:3c:ad:76:81:5f:f0:91: 65:4e:ba:76:d4:d3:71:1d:2d:f3:18:40:8f:57:39: 05:97:a3:6b:3d:ac:a4:ed:8f:82:ce:f9:7e:a0:94: f3:99:1b:48:5c:b5:22:7f:b3:f4:a4:7c:fd:45:61: 3e:15:f2:8d:d2:a0:42:f2:f0:eb:58:4d:b1:15:5a: be:c5:60:ca:47:16:97:49:b9:cb:4b:2c:6e:f9:60: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:A9:E7:A2:1E:DA:0C:7C:B7:08:9D:3A:40:92:F9:E4:9E:F1:93 X509v3 Authority Key Identifier: keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ea:5b:9a:df:cb:a6:74:72:01:77:28:87:96:f8:5c:ea:27: 3b:df:76:a9:41:8d:2d:5d:22:ce:21:96:8d:81:f0:7b:e2:f8: 60:31:c0:fc:8c:2a:c3:67:08:a9:bf:9c:af:5d:e6:1c:b4:65: d1:4e:38:e7:de:1d:eb:8b:73:fd:63:40:25:b1:6f:91:9d:a4: ff:fe:77:c0:3a:aa:3a:b7:23:c8:96:49:fc:74:39:22:47:d2: 47:fe:3f:97:f6:73:3f:c3:5f:df:e4:7a:66:d0:f1:48:f8:25: a0:71:72:1c:9b:7b:6c:c3:01:b7:95:2f:2f:f0:a5:62:66:e9: a3:52:ad:f6:38:19:32:65:e0:03:42:21:67:64:65:39:9d:c0: 17:cf:57:65:a9:59:44:97:17:ff:1d:13:8c:fe:0e:f4:1f:8b: 1e:72:c2:31:67:66:bd:2b:c7:73:8f:8d:30:1b:99:cc:b0:e3: b2:66:2c:2e:5e:db:8c:0d:64:ca:04:8b:dd:d4:8e:de:09:f1: 0e:e1:ce:98:63:77:08:d1:22:0a:c7:ff:0a:00:4a:ff:d5:b6: 86:3d:7c:c0:4d:6a:cb:40:8f:03:c3:02:b6:7a:25:e1:4b:6c: 3a:8a:40:2c:9e:15:86:d5:c9:37:00:51:18:15:33:21:bc:e2: bb:6d:cb:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tIHApDe8FPuTsbSQUo/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3 MGUwY2QwHhcNMjUxMjE5MTMwMjM3WhcNMjUxMjIwMTMwMjM3WjAzMTEwLwYDVQQD EygwMTA2YTllN2EyMWVkYTBjN2NiNzA4OWQzYTQwOTJmOWU0OWVmMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodvry3V38VJ7ZV7qhJkrZDKPTkAR eUT/K0S1Ju8d/7DAYnDycenkPWw28whP0g8Uk1kw6Pgh0RJLiuU/Uc/pTs1bknkD grLzcLVXj2bZxH1OxOMhhskEhOHj2dPbDqlpa7JHeb+SxMydTjOMJ/mE0qQpEsv7 jvprXVoUGc0quJxP6IwMuSmE5TaFYdSxkRRKKeRlDeMLNidw6987dUdN8iQQzFNG nvV+68eQ5jytdoFf8JFlTrp21NNxHS3zGECPVzkFl6NrPayk7Y+Czvl+oJTzmRtI XLUif7P0pHz9RWE+FfKN0qBC8vDrWE2xFVq+xWDKRxaXSbnLSyxu+WD/hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEGqeeiHtoMfLcInTpAkvnknvGTMB8GA1UdIwQY MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt Yzk5NWQyZWM5ZTk0LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0 LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOpbmt/L pnRyAXcoh5b4XOonO992qUGNLV0iziGWjYHwe+L4YDHA/Iwqw2cIqb+cr13mHLRl 0U44594d64tz/WNAJbFvkZ2k//53wDqqOrcjyJZJ/HQ5IkfSR/4/l/ZzP8Nf3+R6 ZtDxSPgloHFyHJt7bMMBt5UvL/ClYmbpo1Kt9jgZMmXgA0IhZ2RlOZ3AF89XZalZ RJcX/x0TjP4O9B+LHnLCMWdmvSvHc4+NMBuZzLDjsmYsLl7bjA1kygSL3dSO3gnx DuHOmGN3CNEiCsf/CgBK/9W2hj18wE1qy0CPA8MCtnol4UtsOopALJ4VhtXJNwBR GBUzIbziu23Lfg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:07:33 2025 by rpki-client