This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft File: 6RWHvbAFQCxqRx-yQ3WyJtoticU.mft (raw, json) Hash identifier: OS+CICVpsq0C1EUFIVp30y1t2AookfyleGAJzhax65o= Subject key identifier: 45:7B:16:6B:53:C4:BB:3F:55:53:A0:AB:8F:9D:BE:94:1F:48:3A:24 Authority key identifier: E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5 Certificate issuer: /CN=e91587bdb005402c6a471fb24375b226da2d89c5 Certificate serial: 019B5A884D4FA2CA53F8AE93C62C924F4DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft Manifest number: 024A Signing time: Fri 26 Dec 2025 12:00:40 +0000 Manifest this update: Fri 26 Dec 2025 12:00:40 +0000 Manifest next update: Sat 27 Dec 2025 12:00:40 +0000 Files and hashes: 1: 6RWHvbAFQCxqRx-yQ3WyJtoticU.crl (hash: oyt8eW2yb0uOvjRNyBA715LOtHj/ZkTcgbiPcLq1Wus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:4d:4f:a2:ca:53:f8:ae:93:c6:2c:92:4f:4d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91587bdb005402c6a471fb24375b226da2d89c5 Validity Not Before: Dec 26 12:00:40 2025 GMT Not After : Dec 27 12:00:40 2025 GMT Subject: CN=457b166b53c4bb3f5553a0ab8f9dbe941f483a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:bb:c3:70:e0:57:5e:88:64:87:a2:c9:32: 54:e9:cb:20:d9:71:a3:a4:9f:52:61:47:b7:f2:bd: 95:03:ad:fd:2d:9e:4b:07:43:a8:72:da:ca:d3:95: 7b:da:b8:b8:a4:70:56:fb:a2:78:7d:54:8c:3e:b2: b9:b1:e6:62:f9:33:37:89:5b:c4:ca:7d:ad:37:2c: 98:69:23:65:24:a8:18:a1:26:98:86:ca:58:a3:ad: 7a:41:db:d8:68:ca:bc:73:dc:4c:21:92:4f:44:bf: ad:0c:88:d6:0b:f3:37:53:35:ba:62:1c:b6:45:4f: 30:9d:56:8f:9e:93:7c:29:2f:ed:fc:14:89:93:fd: 83:9e:f8:e0:a3:0d:eb:db:55:a5:b0:29:ec:30:1e: 24:ea:68:1c:d4:27:02:7c:e2:e4:40:54:6d:93:60: 5a:0d:e8:64:45:2a:f5:df:f5:03:d3:6b:5e:85:8c: dc:b3:d0:9a:74:7f:0e:b0:ac:33:10:52:3d:05:c8: cb:47:21:ec:37:a2:e2:ad:dc:84:32:c3:8e:3a:20: 3e:b5:56:4f:17:fe:b1:27:ff:a0:b2:b9:b6:3f:78: 33:6c:77:ab:a8:72:23:49:73:b5:e0:a3:4e:7f:80: 5d:01:9e:a2:c3:c1:3d:1e:10:09:24:d5:42:6c:fc: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:16:6B:53:C4:BB:3F:55:53:A0:AB:8F:9D:BE:94:1F:48:3A:24 X509v3 Authority Key Identifier: keyid:E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cc:50:84:d0:81:fa:61:03:f6:f7:6a:75:3d:1e:55:91:de: 71:e3:13:3f:20:72:e2:78:ed:ec:1a:9b:8e:84:1d:34:b5:28: 05:1d:9a:60:74:35:2d:aa:35:f7:4f:87:3c:80:94:ba:ab:da: 54:57:66:d6:92:1d:42:b9:e4:b0:d1:be:78:77:30:10:1c:6a: 35:db:e0:f1:0e:ac:34:74:f6:fd:c7:da:7b:2d:99:28:ac:8e: 2c:d4:72:eb:6a:58:0f:0f:56:eb:49:e3:68:e5:a2:56:30:ee: 88:2c:65:87:4c:89:c3:4f:2a:e9:df:8f:82:bc:5c:9b:e9:47: f6:db:39:bc:ea:b5:4c:ec:cc:b3:5c:2c:29:39:e2:db:47:2d: 86:58:89:ab:12:48:f7:93:96:25:f3:5c:c7:2c:eb:a6:f3:93: 12:48:45:98:9b:67:4e:ad:c5:d5:12:56:ab:9f:c1:85:06:07: 62:fd:89:8a:d9:be:fe:ac:6d:86:84:8f:a4:43:06:05:4c:a8: ea:3f:e3:8a:78:c2:4f:5c:ff:d9:7e:35:7c:a7:d9:99:19:99: f0:b9:84:00:21:d6:ba:a7:97:27:89:2b:7e:bb:9f:e0:44:f4: 2f:72:1a:36:0d:55:61:ec:d1:de:79:84:6d:48:e4:b8:55:31: 55:e5:c5:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiE1PospT+K6TxiyST03aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MTU4N2JkYjAwNTQwMmM2YTQ3MWZiMjQzNzViMjI2ZGEy ZDg5YzUwHhcNMjUxMjI2MTIwMDQwWhcNMjUxMjI3MTIwMDQwWjAzMTEwLwYDVQQD Eyg0NTdiMTY2YjUzYzRiYjNmNTU1M2EwYWI4ZjlkYmU5NDFmNDgzYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN67w3DgV16IZIeiyTJU6csg2XGj pJ9SYUe38r2VA639LZ5LB0OoctrK05V72ri4pHBW+6J4fVSMPrK5seZi+TM3iVvE yn2tNyyYaSNlJKgYoSaYhspYo616QdvYaMq8c9xMIZJPRL+tDIjWC/M3UzW6Yhy2 RU8wnVaPnpN8KS/t/BSJk/2Dnvjgow3r21WlsCnsMB4k6mgc1CcCfOLkQFRtk2Ba DehkRSr13/UD02tehYzcs9CadH8OsKwzEFI9BcjLRyHsN6LirdyEMsOOOiA+tVZP F/6xJ/+gsrm2P3gzbHerqHIjSXO14KNOf4BdAZ6iw8E9HhAJJNVCbPyMOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEV7FmtTxLs/VVOgq4+dvpQfSDokMB8GA1UdIwQY MBaAFOkVh72wBUAsakcfskN1sibaLYnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlJXSHZiQUZRQ3hxUngteVEzV3lKdG90aWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85YmFhZTAtNTJmZS00MjUzLTg5YmIt ZTM2MWJiZWFmNzg2LzEvNlJXSHZiQUZRQ3hxUngteVEzV3lKdG90aWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85YmFhZTAtNTJmZS00MjUzLTg5YmItZTM2MWJiZWFmNzg2 LzEvNlJXSHZiQUZRQ3hxUngteVEzV3lKdG90aWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMxQhNCB +mED9vdqdT0eVZHeceMTPyBy4njt7BqbjoQdNLUoBR2aYHQ1Lao190+HPICUuqva VFdm1pIdQrnksNG+eHcwEBxqNdvg8Q6sNHT2/cfaey2ZKKyOLNRy62pYDw9W60nj aOWiVjDuiCxlh0yJw08q6d+Pgrxcm+lH9ts5vOq1TOzMs1wsKTni20cthliJqxJI 95OWJfNcxyzrpvOTEkhFmJtnTq3F1RJWq5/BhQYHYv2Jitm+/qxthoSPpEMGBUyo 6j/jinjCT1z/2X41fKfZmRmZ8LmEACHWuqeXJ4krfruf4ET0L3IaNg1VYezR3nmE bUjkuFUxVeXFhQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:56 2025 by rpki-client