This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft File: 6Ey_buD7yr9563S8Ykjzls8K6uQ.mft (raw, json) Hash identifier: Ay1y7JMtTrVyH8bApczUhYy2qgW93+ndDWJQf55QG+I= Subject key identifier: 2A:FA:BC:08:89:6D:F5:DA:C5:36:6D:27:A0:42:66:CF:13:BA:0A:66 Authority key identifier: E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4 Certificate issuer: /CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4 Certificate serial: 019B43C9A4117DC9242FE7DC40ED3A281C44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft Manifest number: 0A99 Signing time: Mon 22 Dec 2025 02:00:46 +0000 Manifest this update: Mon 22 Dec 2025 02:00:46 +0000 Manifest next update: Tue 23 Dec 2025 02:00:46 +0000 Files and hashes: 1: 6Ey_buD7yr9563S8Ykjzls8K6uQ.crl (hash: OKCt3K84axdIl/Af0PPlh+EZ/gdUJE+cttxhpGSMZFA=) 2: mB31WjQtqMTVmm5ONFKs18JD3Uo.roa (hash: Z6mSYjSXOwJwo9Icil5Sl39+R4LrLCDB6tJ0XOF0rak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:a4:11:7d:c9:24:2f:e7:dc:40:ed:3a:28:1c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4 Validity Not Before: Dec 22 02:00:46 2025 GMT Not After : Dec 23 02:00:46 2025 GMT Subject: CN=2afabc08896df5dac5366d27a04266cf13ba0a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:4e:80:fb:66:7b:6c:ca:d3:1f:da:5e:1c: fa:5b:49:10:b3:ba:22:d4:2b:80:de:cb:dd:ea:20: 7c:7c:90:af:23:02:3d:91:83:db:e3:69:c9:37:08: 1f:6a:4c:fb:6e:cf:b2:67:6f:06:24:92:de:8a:b3: 63:b0:b7:4d:d6:31:0a:dc:53:32:23:b8:fc:5e:4c: de:38:ac:76:9c:4a:81:2b:28:74:27:e8:19:d9:3d: 8b:b2:a0:f9:a5:11:52:03:b9:33:4a:0b:40:4d:4c: 87:a9:d0:73:5f:48:16:77:56:53:8a:93:4f:a2:98: 8b:3f:b3:5e:b4:76:a4:d5:70:66:d9:31:74:46:34: 3a:fe:e1:b2:ce:30:cf:d5:68:5c:e2:cc:d0:92:c2: 44:c3:f0:73:8c:41:1f:fc:70:bb:f2:a5:fe:9b:33: 75:f7:be:c3:aa:ab:00:5a:13:2a:29:82:d0:2d:bc: e3:73:0b:b9:db:aa:77:a8:c6:55:9d:33:a3:6b:59: 69:03:36:6f:ab:45:57:ff:57:f8:e9:86:d3:b2:e5: a2:a4:0e:bc:e5:06:7c:01:2d:7b:c5:96:9a:ea:f0: 7c:a7:5c:0f:be:3f:9b:0b:e2:c6:14:c1:e9:63:57: ec:38:db:14:82:82:0a:55:b1:8c:1e:d5:74:71:de: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FA:BC:08:89:6D:F5:DA:C5:36:6D:27:A0:42:66:CF:13:BA:0A:66 X509v3 Authority Key Identifier: keyid:E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4c:28:f4:81:81:f9:14:38:2a:a2:e7:11:34:08:2d:5b:7e: 91:34:71:04:cc:8a:b9:c2:cf:72:7c:cb:55:03:59:fb:f6:2e: 78:2e:ef:66:6e:77:7e:30:7a:6a:2e:1b:d8:78:96:1b:27:d3: 4b:b1:dd:cc:78:7d:f4:e3:5f:66:33:64:ab:1d:2f:fb:f0:a1: d5:83:36:1c:51:c0:bb:41:a7:fa:14:45:e0:47:53:34:9a:19: 70:f3:08:26:2c:e9:45:10:0c:00:eb:2d:25:b6:82:fe:1f:c9: b0:ea:e5:1c:d7:cd:b5:77:a6:28:d2:47:38:c8:3b:95:a5:d6: 81:48:35:f5:7b:78:06:a9:75:b1:9c:cb:30:0c:2c:26:10:5f: 8e:b7:17:a6:a3:25:bc:aa:51:73:51:4a:0c:a8:85:c7:27:05: 5a:49:05:a8:bb:07:4f:7d:fa:f8:72:37:e5:d6:ae:5f:98:b2: 8a:4a:46:08:10:02:7a:87:49:bb:61:22:d9:cb:74:bb:c4:61: 40:e7:fc:46:d1:75:7e:52:41:18:7f:8b:94:9b:7d:41:24:e4: 99:94:77:c2:cb:b8:41:ec:64:85:eb:5e:d6:fe:a3:18:7f:ef: 0e:0c:71:d9:fb:6f:4a:2f:dd:78:e2:09:ea:6b:e9:1a:cb:68: 97:84:63:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyaQRfckkL+fcQO06KBxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGNiZjZlZTBmYmNhYmY3OWViNzRiYzYyNDhmMzk2Y2Yw YWVhZTQwHhcNMjUxMjIyMDIwMDQ2WhcNMjUxMjIzMDIwMDQ2WjAzMTEwLwYDVQQD EygyYWZhYmMwODg5NmRmNWRhYzUzNjZkMjdhMDQyNjZjZjEzYmEwYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCxOgPtme2zK0x/aXhz6W0kQs7oi 1CuA3svd6iB8fJCvIwI9kYPb42nJNwgfakz7bs+yZ28GJJLeirNjsLdN1jEK3FMy I7j8XkzeOKx2nEqBKyh0J+gZ2T2LsqD5pRFSA7kzSgtATUyHqdBzX0gWd1ZTipNP opiLP7NetHak1XBm2TF0RjQ6/uGyzjDP1Whc4szQksJEw/BzjEEf/HC78qX+mzN1 977DqqsAWhMqKYLQLbzjcwu526p3qMZVnTOja1lpAzZvq0VX/1f46YbTsuWipA68 5QZ8AS17xZaa6vB8p1wPvj+bC+LGFMHpY1fsONsUgoIKVbGMHtV0cd7ZaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr6vAiJbfXaxTZtJ6BCZs8TugpmMB8GA1UdIwQY MBaAFOhMv27g+8q/eet0vGJI85bPCurkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgt ZDNhMzhjNzZhZDRkLzEvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgtZDNhMzhjNzZhZDRk LzEvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkwo9IGB +RQ4KqLnETQILVt+kTRxBMyKucLPcnzLVQNZ+/YueC7vZm53fjB6ai4b2HiWGyfT S7HdzHh99ONfZjNkqx0v+/Ch1YM2HFHAu0Gn+hRF4EdTNJoZcPMIJizpRRAMAOst JbaC/h/JsOrlHNfNtXemKNJHOMg7laXWgUg19Xt4Bql1sZzLMAwsJhBfjrcXpqMl vKpRc1FKDKiFxycFWkkFqLsHT336+HI35dauX5iyikpGCBACeodJu2Ei2ct0u8Rh QOf8RtF1flJBGH+LlJt9QSTkmZR3wsu4Qexkhete1v6jGH/vDgxx2ftvSi/deOIJ 6mvpGstol4RjWQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:33:24 2025 by rpki-client