This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft File: 6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json) Hash identifier: r8CFoGt6izAZLWchq1tRQIWddC4Q1wXayLgBl2jYVXY= Subject key identifier: 5F:60:DE:66:65:BF:97:8A:11:9E:63:DC:86:FE:4D:26:A6:2E:87:6F Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 Certificate issuer: /CN=e9f4510444a17add7327146152943495ababb968 Certificate serial: 019B0F008798D056EF98A1466C33539BAE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft Manifest number: 0ECA Signing time: Thu 11 Dec 2025 20:00:51 +0000 Manifest this update: Thu 11 Dec 2025 20:00:51 +0000 Manifest next update: Fri 12 Dec 2025 20:00:51 +0000 Files and hashes: 1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: N3yDv3xupuHLWVVbJBAdpk2F1N6nqu4OGwc951lo/ik=) 2: Uw2HhLlb12QdlcnO10bcifYvljg.roa (hash: EG7NygDJOn+EsjphNy2/UMJJcrFk3icM7+6Z8Bfo4BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:87:98:d0:56:ef:98:a1:46:6c:33:53:9b:ae:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9f4510444a17add7327146152943495ababb968 Validity Not Before: Dec 11 20:00:51 2025 GMT Not After : Dec 12 20:00:51 2025 GMT Subject: CN=5f60de6665bf978a119e63dc86fe4d26a62e876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:88:1b:d6:55:9d:6d:f8:7f:e7:1a:ce:ff:42: f2:e2:c0:9d:bc:a5:a8:b4:63:88:21:5f:16:e4:bb: 21:08:6e:e2:f3:65:ff:f3:50:e5:c3:93:6a:f5:d3: bd:5a:ca:88:96:5f:15:d2:00:dd:6c:51:bf:c7:f2: 1a:21:9c:f9:a6:f7:9b:8b:ab:a9:50:d5:6c:a6:f9: a8:55:7c:fd:f5:47:09:0e:0d:a4:44:0e:f5:6c:11: 5f:ad:3b:77:96:e1:ca:22:3c:e5:18:67:f9:c9:9c: d6:f1:8e:4b:dc:a0:9d:9e:57:cd:14:8a:74:7c:a0: 63:f0:37:dc:52:1b:77:1f:31:8c:27:eb:f6:95:8a: 6e:58:1c:3b:63:5a:6f:f4:55:c5:0a:59:ff:6b:36: b9:ae:a1:7b:26:e6:17:37:ff:ee:17:1e:e2:60:e2: 0a:ae:20:bd:23:93:dc:f3:8a:e4:a5:70:3c:2b:46: f0:48:77:dd:77:ab:5c:80:0f:dc:3b:bc:c9:8e:71: 93:54:5f:8c:3e:14:b7:29:89:3f:d5:26:d1:9a:97: cd:76:69:34:5b:71:9a:8f:ea:cd:98:77:b6:5c:da: 0d:5c:c7:90:fb:73:4a:ff:11:24:4d:6b:91:69:eb: 96:c1:32:94:16:4f:ba:80:82:8d:e2:1e:83:df:c7: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:60:DE:66:65:BF:97:8A:11:9E:63:DC:86:FE:4D:26:A6:2E:87:6F X509v3 Authority Key Identifier: keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:05:da:22:ea:bc:e7:92:6d:92:7e:91:02:ab:26:c3:25:57: 94:ee:43:2b:3f:7a:7a:1d:24:ae:e6:3f:8e:c6:13:d0:37:0a: 30:7c:cb:8e:ec:65:f7:ec:38:40:46:37:c3:40:57:16:b3:8d: 4b:f5:2c:95:b2:8d:c3:a4:46:e2:10:4f:77:27:59:43:1c:0a: c7:49:2f:a0:aa:90:14:1c:bb:65:a9:99:38:0b:4a:dc:b8:de: 36:b5:a3:74:86:4d:3d:7b:52:4a:fb:9c:3d:b2:07:97:f3:35: 7c:f4:00:9a:69:0f:54:68:be:ce:f2:bb:ff:d7:ba:5f:68:2b: f0:23:43:80:a4:27:63:09:5b:a1:b2:32:e9:38:ee:19:e2:94: dd:92:d4:c8:d8:e3:53:22:94:59:11:2c:fe:cb:2b:57:ce:49: 36:9e:44:f2:29:b2:4f:13:d3:ee:76:3e:93:81:88:7a:b2:e1: 27:7a:47:03:3b:0e:0c:a3:dd:57:81:fd:98:8d:08:c0:87:46: 04:7d:38:40:36:88:b6:e9:a2:5f:43:43:03:6b:f6:e6:9f:e6: 1a:c0:20:1b:e8:b6:6c:94:2c:21:12:50:ec:03:60:1d:65:6f: 48:16:43:c4:52:ca:73:18:00:ab:23:57:f8:0b:e6:12:28:5e: 24:7f:51:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAIeY0FbvmKFGbDNTm66MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZjQ1MTA0NDRhMTdhZGQ3MzI3MTQ2MTUyOTQzNDk1YWJh YmI5NjgwHhcNMjUxMjExMjAwMDUxWhcNMjUxMjEyMjAwMDUxWjAzMTEwLwYDVQQD Eyg1ZjYwZGU2NjY1YmY5NzhhMTE5ZTYzZGM4NmZlNGQyNmE2MmU4NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4gb1lWdbfh/5xrO/0Ly4sCdvKWo tGOIIV8W5LshCG7i82X/81Dlw5Nq9dO9WsqIll8V0gDdbFG/x/IaIZz5pvebi6up UNVspvmoVXz99UcJDg2kRA71bBFfrTt3luHKIjzlGGf5yZzW8Y5L3KCdnlfNFIp0 fKBj8DfcUht3HzGMJ+v2lYpuWBw7Y1pv9FXFCln/aza5rqF7JuYXN//uFx7iYOIK riC9I5Pc84rkpXA8K0bwSHfdd6tcgA/cO7zJjnGTVF+MPhS3KYk/1SbRmpfNdmk0 W3Gaj+rNmHe2XNoNXMeQ+3NK/xEkTWuRaeuWwTKUFk+6gIKN4h6D38eS/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9g3mZlv5eKEZ5j3Ib+TSamLodvMB8GA1UdIwQY MBaAFOn0UQREoXrdcycUYVKUNJWrq7loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQt YTI3NmVkMGJhMWJjLzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQtYTI3NmVkMGJhMWJj LzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwXaIuq8 55Jtkn6RAqsmwyVXlO5DKz96eh0kruY/jsYT0DcKMHzLjuxl9+w4QEY3w0BXFrON S/UslbKNw6RG4hBPdydZQxwKx0kvoKqQFBy7ZamZOAtK3LjeNrWjdIZNPXtSSvuc PbIHl/M1fPQAmmkPVGi+zvK7/9e6X2gr8CNDgKQnYwlbobIy6TjuGeKU3ZLUyNjj UyKUWREs/ssrV85JNp5E8imyTxPT7nY+k4GIerLhJ3pHAzsODKPdV4H9mI0IwIdG BH04QDaItumiX0NDA2v25p/mGsAgG+i2bJQsIRJQ7ANgHWVvSBZDxFLKcxgAqyNX +AvmEiheJH9RUw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:58:17 2025 by rpki-client