This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft File: 6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json) Hash identifier: vTTyR/f0+o573Kq53dV9FXpXor3uUJO5yCFqU7b/XE4= Subject key identifier: E9:57:4C:33:25:02:90:C3:C5:DD:84:96:BA:A3:FE:0F:0E:41:87:5C Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05 Certificate issuer: /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05 Certificate serial: 019B4BF2179A3C27C154CD562D8786A3A913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft Manifest number: 1494 Signing time: Tue 23 Dec 2025 16:01:55 +0000 Manifest this update: Tue 23 Dec 2025 16:01:55 +0000 Manifest next update: Wed 24 Dec 2025 16:01:55 +0000 Files and hashes: 1: 1-8bpJP4ldVymn01b0Lydy-jjhME.roa (hash: 0hHPnyQchhVyljrO2jyFNJVSYpCf6WjQrLOAi1ffRPU=) 2: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: wfD+CrFzgyht62uvzBLHhV4qPfZonrjGUQOTAbYoAOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:17:9a:3c:27:c1:54:cd:56:2d:87:86:a3:a9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05 Validity Not Before: Dec 23 16:01:55 2025 GMT Not After : Dec 24 16:01:55 2025 GMT Subject: CN=e9574c33250290c3c5dd8496baa3fe0f0e41875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:2e:cd:eb:9f:0c:a3:d3:35:f1:92:15:57: 87:0a:69:f1:26:af:fd:60:b5:74:0d:4b:03:22:73: 73:83:df:c1:7d:65:18:fb:47:4e:6c:8f:17:6b:78: 7f:62:c6:7e:23:84:a3:eb:c3:16:81:5a:cd:12:be: 2e:24:bc:ca:fd:d4:02:77:9e:89:45:86:44:da:bc: cb:f5:ae:33:7c:df:d3:62:84:fb:21:11:86:24:3e: ec:30:82:3e:79:e5:ba:6b:13:b5:69:5f:40:89:cb: fa:ab:6c:d5:6d:a1:6c:89:ee:fb:74:b6:69:e8:8d: d6:3e:72:3c:c5:22:76:19:d8:6d:af:91:9e:de:9e: 19:f3:67:a1:8e:48:4b:a1:87:1a:70:b7:83:af:46: a7:7a:4e:06:01:b1:63:56:52:1e:0a:90:f3:5b:87: 29:60:9e:9c:53:97:a1:03:b8:4f:45:09:d7:7b:55: 15:a2:04:8a:bc:df:70:58:34:cd:79:af:13:20:f6: b7:bf:41:cf:33:f4:f5:25:8a:c5:46:59:9f:ec:a9: 87:15:7e:b8:98:69:7c:b1:ab:db:43:30:f1:5d:84: 47:4b:75:fe:32:7c:9f:d6:e3:1b:5c:b5:34:a0:aa: af:bf:00:de:eb:a5:83:6f:5a:d7:e2:e4:f9:a1:41: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:57:4C:33:25:02:90:C3:C5:DD:84:96:BA:A3:FE:0F:0E:41:87:5C X509v3 Authority Key Identifier: keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:49:f0:5f:27:6e:5e:c0:1e:3a:05:34:2e:d3:cd:24:bb: 62:2b:c1:61:3b:de:6f:4a:f0:09:14:13:ba:a0:53:b8:73:71: c1:d4:52:6e:de:49:c5:a4:bb:bf:75:c5:ed:13:98:ee:d1:b9: 7a:7d:1a:41:d7:4c:94:72:f3:b9:18:d4:21:a1:0e:c6:d3:99: 01:fd:cb:61:83:25:7d:df:33:0f:be:bd:f1:3f:67:1f:b3:21: 0d:af:74:4e:bf:50:2d:7b:ef:10:d7:7e:ff:79:30:44:c2:fd: 03:87:10:fb:15:3e:cd:f2:cd:ad:33:70:e8:b6:ba:59:54:0c: 35:d8:31:10:47:dc:7f:bc:dc:91:cd:0e:b2:72:70:ed:a5:5b: 97:b7:8a:dd:c6:d8:d5:5f:64:8a:3e:ee:51:c7:93:94:d0:b2: 77:c8:7f:b6:b7:44:b9:b1:4e:0f:f9:b4:b0:02:4a:fd:77:04: 12:33:2d:eb:43:33:b0:ae:4e:da:1a:fa:ef:40:b5:3e:9f:22: 81:3c:b7:91:91:45:c2:de:02:b6:3f:ad:1c:0a:44:fc:47:17: 27:7f:a1:51:02:c2:18:07:6c:9a:59:00:77:4d:36:dd:fe:bd: 41:a3:79:4c:ec:d5:07:25:38:85:87:95:fe:f0:a7:94:1e:c7: 01:60:0c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8heaPCfBVM1WLYeGo6kTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGY3NjI4MmRmNTMyMDlhNThjMDMwMmU3NGY4YTk3Y2Ez YWZmMDUwHhcNMjUxMjIzMTYwMTU1WhcNMjUxMjI0MTYwMTU1WjAzMTEwLwYDVQQD EyhlOTU3NGMzMzI1MDI5MGMzYzVkZDg0OTZiYWEzZmUwZjBlNDE4NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBkuzeufDKPTNfGSFVeHCmnxJq/9 YLV0DUsDInNzg9/BfWUY+0dObI8Xa3h/YsZ+I4Sj68MWgVrNEr4uJLzK/dQCd56J RYZE2rzL9a4zfN/TYoT7IRGGJD7sMII+eeW6axO1aV9Aicv6q2zVbaFsie77dLZp 6I3WPnI8xSJ2Gdhtr5Ge3p4Z82ehjkhLoYcacLeDr0anek4GAbFjVlIeCpDzW4cp YJ6cU5ehA7hPRQnXe1UVogSKvN9wWDTNea8TIPa3v0HPM/T1JYrFRlmf7KmHFX64 mGl8savbQzDxXYRHS3X+Mnyf1uMbXLU0oKqvvwDe66WDb1rX4uT5oUH3KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlXTDMlApDDxd2Elrqj/g8OQYdcMB8GA1UdIwQY MBaAFOoPdigt9TIJpYwDAudPipfKOv8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2ZhNTUtNTkyNS00YmE5LWFkMzgt YmU3YzgxOTQ4MzI0LzEvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lN2ZhNTUtNTkyNS00YmE5LWFkMzgtYmU3YzgxOTQ4MzI0 LzEvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjZJ8F8n bl7AHjoFNC7TzSS7YivBYTveb0rwCRQTuqBTuHNxwdRSbt5JxaS7v3XF7ROY7tG5 en0aQddMlHLzuRjUIaEOxtOZAf3LYYMlfd8zD7698T9nH7MhDa90Tr9QLXvvENd+ /3kwRML9A4cQ+xU+zfLNrTNw6La6WVQMNdgxEEfcf7zckc0OsnJw7aVbl7eK3cbY 1V9kij7uUceTlNCyd8h/trdEubFOD/m0sAJK/XcEEjMt60MzsK5O2hr670C1Pp8i gTy3kZFFwt4Ctj+tHApE/EcXJ3+hUQLCGAdsmlkAd0023f69QaN5TOzVByU4hYeV /vCnlB7HAWAMog== -----END CERTIFICATE-----Generated at Tue Dec 23 18:55:06 2025 by rpki-client