This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft File: 6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json) Hash identifier: wrUtL1uSFkil8VwW/HQd2Hd9oLsTo/C5e2+sZdRCJmc= Subject key identifier: 85:89:C1:E9:A0:62:D8:5F:ED:78:CD:26:8D:F6:62:CA:14:B7:8B:B5 Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F Certificate issuer: /CN=ea1beaa64f37033c68093540b5cd9ce33747286f Certificate serial: 019B597640014B6A48A6BBC5126D6A308212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft Manifest number: 1018 Signing time: Fri 26 Dec 2025 07:01:20 +0000 Manifest this update: Fri 26 Dec 2025 07:01:20 +0000 Manifest next update: Sat 27 Dec 2025 07:01:20 +0000 Files and hashes: 1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: XtouqBKXl+5wzaLBLwgoYYWovt5ZrPDtivpLYdp9br4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:40:01:4b:6a:48:a6:bb:c5:12:6d:6a:30:82:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f Validity Not Before: Dec 26 07:01:20 2025 GMT Not After : Dec 27 07:01:20 2025 GMT Subject: CN=8589c1e9a062d85fed78cd268df662ca14b78bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:ec:e2:51:85:cf:54:e6:ec:aa:b1:7b:10: cf:f9:3f:f3:6c:32:2e:c0:66:d4:5a:b7:6e:b0:7d: 92:7a:2c:e4:ac:e1:95:c3:b6:b7:e7:3f:96:48:8e: ca:f1:41:35:f1:37:35:20:a6:af:dd:41:cb:43:3c: be:9f:29:8c:fc:93:98:ea:74:d2:d7:c5:c1:bf:cb: 74:20:9b:da:3c:4f:97:49:fc:92:9c:57:f5:3f:8c: f0:1f:be:70:ca:60:98:17:8c:85:a3:cb:00:32:e8: 7c:2a:f5:73:e8:1d:36:e5:66:f9:6e:e3:f1:67:f8: 5a:9e:be:1f:ad:66:91:ab:36:a5:32:94:46:1b:6a: c8:df:a7:4e:98:f2:9c:33:06:df:70:1c:b4:6c:0b: 1d:30:0f:9d:85:a7:99:b6:39:34:9e:00:1a:cf:92: 82:5e:4b:c4:fc:a4:96:b2:9b:32:30:de:1f:af:82: b6:fd:0d:7e:fa:24:73:ad:5a:1b:f4:96:9f:09:c5: a6:35:a0:df:71:2c:5d:c0:3d:6b:18:01:15:40:e4: 5f:95:2c:e3:72:31:32:89:80:d7:a1:f6:a4:03:55: ab:39:8a:04:09:ac:e2:d7:1e:2b:3b:35:fd:6c:7e: e0:90:7f:ee:19:d2:5b:d0:47:96:f1:7b:61:a0:2b: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:C1:E9:A0:62:D8:5F:ED:78:CD:26:8D:F6:62:CA:14:B7:8B:B5 X509v3 Authority Key Identifier: keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5d:c5:5c:4a:8f:66:a8:6f:30:47:55:f2:5b:04:22:5b:d4: b7:5f:19:d6:5c:9c:79:c5:39:11:d8:2f:aa:06:c7:c8:48:2d: 0c:f4:8a:ad:95:63:47:9f:9f:6d:90:c1:93:a9:09:15:93:a7: ad:7a:e0:5c:80:4d:e2:23:43:46:d8:1c:e9:74:da:5d:cd:2f: 9f:9c:a3:f5:1c:8f:a4:bb:f8:8b:4e:59:8d:2c:ad:2e:51:21: bd:2c:18:41:6c:b0:30:09:6c:17:e7:b7:db:e8:f6:d3:97:b3: c6:f7:3a:6e:c0:13:b5:ee:39:c2:3d:56:f7:e5:59:e2:fe:d9: b4:d0:ab:21:32:65:47:74:26:cf:e4:a3:d6:d4:a0:83:7b:0f: 3f:ba:5e:0e:59:57:be:8f:70:5f:95:a8:29:eb:68:74:2d:5f: 15:88:44:eb:24:b9:26:5d:2a:af:40:5d:1b:dd:e0:48:5a:9b: d4:a2:ba:64:78:59:73:21:5c:f2:90:cb:40:07:6d:f6:c8:7d: c0:56:d3:c3:43:23:98:55:82:9c:30:ce:26:90:db:bf:a4:c5: 91:ae:b6:46:b4:1b:95:c8:72:2a:92:7f:df:f3:56:f8:fb:d5: a4:ba:31:a4:7d:27:98:7c:4d:4b:f1:b9:69:a6:c8:6a:f6:06: 66:85:ef:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkABS2pIprvFEm1qMIISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMWJlYWE2NGYzNzAzM2M2ODA5MzU0MGI1Y2Q5Y2UzMzc0 NzI4NmYwHhcNMjUxMjI2MDcwMTIwWhcNMjUxMjI3MDcwMTIwWjAzMTEwLwYDVQQD Eyg4NTg5YzFlOWEwNjJkODVmZWQ3OGNkMjY4ZGY2NjJjYTE0Yjc4YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC3s4lGFz1Tm7KqxexDP+T/zbDIu wGbUWrdusH2SeizkrOGVw7a35z+WSI7K8UE18Tc1IKav3UHLQzy+nymM/JOY6nTS 18XBv8t0IJvaPE+XSfySnFf1P4zwH75wymCYF4yFo8sAMuh8KvVz6B025Wb5buPx Z/hanr4frWaRqzalMpRGG2rI36dOmPKcMwbfcBy0bAsdMA+dhaeZtjk0ngAaz5KC XkvE/KSWspsyMN4fr4K2/Q1++iRzrVob9JafCcWmNaDfcSxdwD1rGAEVQORflSzj cjEyiYDXofakA1WrOYoECazi1x4rOzX9bH7gkH/uGdJb0EeW8XthoCtwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWJwemgYthf7XjNJo32YsoUt4u1MB8GA1UdIwQY MBaAFOob6qZPNwM8aAk1QLXNnOM3RyhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQt YzVkZWY3YmM2YTEzLzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQtYzVkZWY3YmM2YTEz LzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV3FXEqP ZqhvMEdV8lsEIlvUt18Z1lycecU5EdgvqgbHyEgtDPSKrZVjR5+fbZDBk6kJFZOn rXrgXIBN4iNDRtgc6XTaXc0vn5yj9RyPpLv4i05ZjSytLlEhvSwYQWywMAlsF+e3 2+j205ezxvc6bsATte45wj1W9+VZ4v7ZtNCrITJlR3Qmz+Sj1tSgg3sPP7peDllX vo9wX5WoKetodC1fFYhE6yS5Jl0qr0BdG93gSFqb1KK6ZHhZcyFc8pDLQAdt9sh9 wFbTw0MjmFWCnDDOJpDbv6TFka62RrQblchyKpJ/3/NW+PvVpLoxpH0nmHxNS/G5 aabIavYGZoXvnA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:06 2025 by rpki-client