This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft File: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft (raw, json) Hash identifier: JQ8qEVTXiy8g8bpdWOjx3LCQrjZvt19uEA3bhzwFp7c= Subject key identifier: 85:2B:6C:15:8D:93:1F:16:D3:BE:A5:B5:58:CF:FE:B1:39:FB:B8:6C Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf Certificate serial: 019B3FECDB99418E5226F8C98C5D979A549A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft Manifest number: 0524 Signing time: Sun 21 Dec 2025 08:00:45 +0000 Manifest this update: Sun 21 Dec 2025 08:00:45 +0000 Manifest next update: Mon 22 Dec 2025 08:00:45 +0000 Files and hashes: 1: 4hrax96C0YsCzZ7N3cD-vhrr54E.roa (hash: p2Xi036U7l5VIBvQc3SfD5E2iNcExLoqMhnCDdE1HDs=) 2: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl (hash: LJNBwRptANXo3ySiZNhMlq2nneKUxJnzCfnTXctKpFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:db:99:41:8e:52:26:f8:c9:8c:5d:97:9a:54:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf Validity Not Before: Dec 21 08:00:45 2025 GMT Not After : Dec 22 08:00:45 2025 GMT Subject: CN=852b6c158d931f16d3bea5b558cffeb139fbb86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a0:ff:a9:d5:ef:51:46:bd:72:b5:28:46:c7: ac:95:06:34:df:29:b2:20:44:0b:f2:e0:b5:6c:a0: 74:84:3a:57:d0:c5:e2:dd:15:b0:79:3b:86:3a:a8: c1:81:11:4a:65:3a:0c:04:aa:0d:19:86:e4:54:55: a4:6a:4f:7d:b2:2b:a4:bd:d5:2c:87:6e:78:a6:8a: f9:e4:57:b5:6b:cb:07:ea:5e:09:3b:8e:27:cc:ae: ac:ea:8a:87:c8:ef:8c:ed:3c:c7:30:cb:9a:7a:7f: b6:94:72:f9:5f:f2:1e:93:ba:7c:85:eb:a6:09:89: ca:55:3f:fc:09:81:ea:86:e2:1c:82:1b:ae:70:23: aa:f4:6f:9a:5b:63:6c:db:95:8c:1b:31:d8:4d:1b: 7d:d7:3f:b5:11:27:b8:2c:9d:5a:6c:08:1f:1b:94: 9b:df:46:4e:8f:eb:ae:58:ab:e9:0a:93:6a:af:9c: 0a:0d:c6:cd:2a:a1:09:0e:74:69:69:45:3f:8a:14: 3d:4e:f4:9d:9e:20:52:30:d7:9a:51:2e:43:b7:e5: 98:74:a5:16:15:f8:aa:ec:67:4c:1c:dd:37:9c:0d: ed:23:82:eb:ac:7b:b5:d8:32:ce:6a:f6:80:d0:9c: 6b:19:cf:7f:9a:03:1c:43:08:92:76:4b:12:c1:4c: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2B:6C:15:8D:93:1F:16:D3:BE:A5:B5:58:CF:FE:B1:39:FB:B8:6C X509v3 Authority Key Identifier: keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7a:8d:5d:5d:03:23:47:5f:ef:06:59:fa:9d:90:40:0f:23: b5:76:f7:4b:68:b0:d1:ef:a1:e7:df:5b:33:7a:a3:af:71:4d: bd:78:50:0b:31:ac:bd:34:ab:80:45:b1:7b:d6:0b:b4:5d:d0: ea:24:dc:62:e3:34:7c:b2:08:4b:87:80:5e:97:11:0f:a0:8c: cb:6a:25:1b:5c:73:f2:27:fb:72:3d:a3:38:72:d1:67:b6:54: 2b:72:52:cc:44:6b:47:86:90:64:04:99:6c:96:fd:5c:c2:e2: b8:ad:d6:21:2a:f2:b5:35:48:62:46:0f:2a:5f:3e:13:d3:c7: c0:cb:db:7a:7a:f2:fa:80:d0:70:0c:1e:9d:c9:46:d8:ae:3d: e9:db:ae:ad:fc:3b:c3:2a:ef:e0:ae:8c:08:e2:1c:32:f7:e4: 55:da:15:89:9c:e3:71:d1:0e:44:06:69:01:af:63:24:d9:ab: 5f:77:11:5e:af:f0:e5:02:93:3d:1a:53:46:a6:2d:79:64:c2: 0f:63:5f:86:0f:1f:95:35:81:22:ba:d5:15:03:05:16:91:22: 25:75:8c:fd:89:e7:b6:76:18:de:17:d1:3c:ab:f5:15:4b:f3: 83:6c:61:c0:59:ff:73:bb:11:1a:03:c6:0c:40:6e:bd:6a:13: 5b:b4:13:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7NuZQY5SJvjJjF2XmlSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Mzk1NDBmZDE2YjYzMzUwMWZiZjc0NDFhNzQ2ZmM1NmY5 ZjU5YmYwHhcNMjUxMjIxMDgwMDQ1WhcNMjUxMjIyMDgwMDQ1WjAzMTEwLwYDVQQD Eyg4NTJiNmMxNThkOTMxZjE2ZDNiZWE1YjU1OGNmZmViMTM5ZmJiODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKD/qdXvUUa9crUoRseslQY03ymy IEQL8uC1bKB0hDpX0MXi3RWweTuGOqjBgRFKZToMBKoNGYbkVFWkak99siukvdUs h254por55Fe1a8sH6l4JO44nzK6s6oqHyO+M7TzHMMuaen+2lHL5X/Iek7p8heum CYnKVT/8CYHqhuIcghuucCOq9G+aW2Ns25WMGzHYTRt91z+1ESe4LJ1abAgfG5Sb 30ZOj+uuWKvpCpNqr5wKDcbNKqEJDnRpaUU/ihQ9TvSdniBSMNeaUS5Dt+WYdKUW Ffiq7GdMHN03nA3tI4LrrHu12DLOavaA0JxrGc9/mgMcQwiSdksSwUwevwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUrbBWNkx8W076ltVjP/rE5+7hsMB8GA1UdIwQY MBaAFOk5VA/Ra2M1Afv3RBp0b8Vvn1m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQt OWY1MmM3MzBhY2RmLzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQtOWY1MmM3MzBhY2Rm LzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXqNXV0D I0df7wZZ+p2QQA8jtXb3S2iw0e+h599bM3qjr3FNvXhQCzGsvTSrgEWxe9YLtF3Q 6iTcYuM0fLIIS4eAXpcRD6CMy2olG1xz8if7cj2jOHLRZ7ZUK3JSzERrR4aQZASZ bJb9XMLiuK3WISrytTVIYkYPKl8+E9PHwMvbenry+oDQcAwenclG2K496duurfw7 wyrv4K6MCOIcMvfkVdoViZzjcdEORAZpAa9jJNmrX3cRXq/w5QKTPRpTRqYteWTC D2Nfhg8flTWBIrrVFQMFFpEiJXWM/YnntnYY3hfRPKv1FUvzg2xhwFn/c7sRGgPG DEBuvWoTW7QTew== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:43 2025 by rpki-client