This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json) Hash identifier: QqRKSFGNBmowrfS9Id7JQtSY1FbBuRQzw8167VRD4bI= Subject key identifier: E1:87:51:D7:EA:FF:65:AE:AE:62:D2:C2:04:9A:1B:29:FF:FC:B6:E0 Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98 Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898 Certificate serial: 019B0F377AE683FBEA7647846B3761FA240D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft Manifest number: 1523 Signing time: Thu 11 Dec 2025 21:00:52 +0000 Manifest this update: Thu 11 Dec 2025 21:00:52 +0000 Manifest next update: Fri 12 Dec 2025 21:00:52 +0000 Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: HRt6hm0eDWsinARgiGQzNkla2LeMYDEycsRkYY8UImE=) 2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:7a:e6:83:fb:ea:76:47:84:6b:37:61:fa:24:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898 Validity Not Before: Dec 11 21:00:52 2025 GMT Not After : Dec 12 21:00:52 2025 GMT Subject: CN=e18751d7eaff65aeae62d2c2049a1b29fffcb6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:1b:cb:a3:4b:89:f9:69:07:58:61:2c:bc: a4:ac:8e:80:61:35:84:bc:a6:b1:f1:3d:26:30:43: 95:4d:9e:53:ea:b9:49:df:6f:66:1c:a4:d7:c8:37: 81:64:fd:e6:1f:16:76:80:c1:38:30:82:c3:89:58: ed:76:fe:fd:32:62:7a:47:d5:38:f4:45:81:78:69: 27:2f:86:0b:95:8a:bb:9a:ee:9a:09:83:48:68:66: 10:24:70:4c:6e:09:c0:3c:c5:74:8c:c2:3e:0c:93: 8d:bc:90:ca:87:3d:cd:90:1a:6c:8e:45:e8:36:b1: 43:b3:f2:c5:e9:7d:c8:b8:16:ea:67:30:6d:50:4f: 08:60:15:db:18:9a:45:e6:04:03:1c:7f:92:3f:b5: 8c:b8:15:2c:93:5a:34:f3:11:1e:cc:03:3d:95:c9: ce:3e:cb:a1:82:18:8a:f3:d9:1b:d6:05:7e:5e:fb: 4e:13:3d:eb:0c:3f:bd:ad:98:62:8b:7c:56:65:96: 6d:d8:21:92:95:a0:ed:82:73:fc:55:9e:a8:64:dd: bd:c6:f0:79:93:c3:21:f4:31:c5:e6:72:43:df:25: c8:3b:de:90:bc:88:4c:e3:d1:fe:64:5d:5c:9d:11: 4e:e5:8a:d8:27:30:85:b1:95:8d:88:58:e7:a6:34: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:51:D7:EA:FF:65:AE:AE:62:D2:C2:04:9A:1B:29:FF:FC:B6:E0 X509v3 Authority Key Identifier: keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:12:81:0b:2c:c7:ec:9a:ae:72:07:37:1c:21:71:83:cb:0e: 6e:30:74:88:04:47:ab:41:83:aa:c5:74:c2:23:2a:ce:e7:f9: 48:0a:f4:83:9a:f1:5d:ec:40:86:3b:6c:22:35:ff:6c:49:cc: 92:61:22:92:99:06:7d:44:60:24:3b:75:f3:28:f3:67:50:8f: 13:ae:5b:4d:d6:c2:f0:42:bf:4d:2e:7e:f7:6a:5c:ff:48:f4: 06:94:ae:cc:01:2b:9e:a0:64:3a:ef:78:5c:24:59:76:97:09: 6a:c3:13:6d:b2:49:a1:e7:b9:09:a7:91:13:2e:72:26:ff:02: 5d:16:5e:95:7c:90:98:fd:2a:3b:ea:cb:98:da:d1:64:ab:c0: d3:c5:c5:ca:cf:a2:b6:e6:ec:91:91:fb:19:b8:4c:9f:45:32: 33:fe:38:25:29:33:68:d1:c1:d3:e5:e4:7b:65:5d:76:3c:48: aa:33:4f:4a:af:20:f5:da:fa:b7:8c:ca:55:a1:4e:59:9f:90: 11:33:b7:1f:4a:c4:b1:5e:35:aa:29:4b:61:62:7e:fe:90:b0: 02:a4:6b:15:35:a8:f1:54:4e:36:87:ff:4a:56:21:e7:f2:10: 51:13:31:e8:77:86:c9:e0:8e:2b:bb:dc:24:2e:11:12:b3:2f: ec:ef:e4:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3rmg/vqdkeEazdh+iQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNWRhMWRhMWZhMWQ0MjVjZjFkYzllODI2ZDY1ZWRhZWQ2 Y2Q4OTgwHhcNMjUxMjExMjEwMDUyWhcNMjUxMjEyMjEwMDUyWjAzMTEwLwYDVQQD EyhlMTg3NTFkN2VhZmY2NWFlYWU2MmQyYzIwNDlhMWIyOWZmZmNiNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNsby6NLiflpB1hhLLykrI6AYTWE vKax8T0mMEOVTZ5T6rlJ329mHKTXyDeBZP3mHxZ2gME4MILDiVjtdv79MmJ6R9U4 9EWBeGknL4YLlYq7mu6aCYNIaGYQJHBMbgnAPMV0jMI+DJONvJDKhz3NkBpsjkXo NrFDs/LF6X3IuBbqZzBtUE8IYBXbGJpF5gQDHH+SP7WMuBUsk1o08xEezAM9lcnO PsuhghiK89kb1gV+XvtOEz3rDD+9rZhii3xWZZZt2CGSlaDtgnP8VZ6oZN29xvB5 k8Mh9DHF5nJD3yXIO96QvIhM49H+ZF1cnRFO5YrYJzCFsZWNiFjnpjQ8YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGHUdfq/2WurmLSwgSaGyn//LbgMB8GA1UdIwQY MBaAFOtdodofodQlzx3J6CbWXtrtbNiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmFlNTQtZWQ2Ny00MDFhLTg4ZjMt N2Y4Yzk4M2YxNGE0LzEvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNmFlNTQtZWQ2Ny00MDFhLTg4ZjMtN2Y4Yzk4M2YxNGE0 LzEvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhKBCyzH 7Jqucgc3HCFxg8sObjB0iARHq0GDqsV0wiMqzuf5SAr0g5rxXexAhjtsIjX/bEnM kmEikpkGfURgJDt18yjzZ1CPE65bTdbC8EK/TS5+92pc/0j0BpSuzAErnqBkOu94 XCRZdpcJasMTbbJJoee5CaeREy5yJv8CXRZelXyQmP0qO+rLmNrRZKvA08XFys+i tubskZH7GbhMn0UyM/44JSkzaNHB0+Xke2VddjxIqjNPSq8g9dr6t4zKVaFOWZ+Q ETO3H0rEsV41qilLYWJ+/pCwAqRrFTWo8VRONof/SlYh5/IQURMx6HeGyeCOK7vc JC4RErMv7O/k4A== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:32 2025 by rpki-client