This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft File: 6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json) Hash identifier: qS8vjB1M51YBWhDk/s42rC6P3qligwhCzDCfZ82evuI= Subject key identifier: A2:A7:27:8F:0D:78:0B:75:C0:3F:43:07:72:94:BF:FD:5C:15:5F:72 Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 Certificate issuer: /CN=e9f4510444a17add7327146152943495ababb968 Certificate serial: 019B31C41FB9D13ED3F481088C9CC4876EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft Manifest number: 0EDC Signing time: Thu 18 Dec 2025 14:01:35 +0000 Manifest this update: Thu 18 Dec 2025 14:01:35 +0000 Manifest next update: Fri 19 Dec 2025 14:01:35 +0000 Files and hashes: 1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: 7ivzqSKYzEiwonhPFp0Kb3s7zKCt1q4XXFlBbvpbOFs=) 2: Uw2HhLlb12QdlcnO10bcifYvljg.roa (hash: EG7NygDJOn+EsjphNy2/UMJJcrFk3icM7+6Z8Bfo4BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:1f:b9:d1:3e:d3:f4:81:08:8c:9c:c4:87:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9f4510444a17add7327146152943495ababb968 Validity Not Before: Dec 18 14:01:35 2025 GMT Not After : Dec 19 14:01:35 2025 GMT Subject: CN=a2a7278f0d780b75c03f43077294bffd5c155f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:87:06:8c:a2:9d:62:df:49:c9:82:7d:22: 8d:39:36:3c:d7:f6:37:47:33:10:cb:15:e4:99:99: c3:27:03:c0:37:55:4c:c0:68:79:1c:5d:62:d6:6d: 9c:69:c8:99:e2:a6:3d:35:b8:f1:b1:39:cf:6d:b9: 05:92:f9:10:d1:59:b0:95:ce:1e:52:a1:f0:28:83: 44:1f:47:5f:e4:88:1a:dc:d0:6f:83:86:44:de:d4: d7:a4:7e:95:0d:d3:25:0b:27:75:1d:22:c8:ca:c0: dc:97:f0:37:c7:53:1f:53:19:1e:f0:4d:17:cf:92: cb:d6:db:93:85:66:28:a9:cf:96:a9:8c:22:c8:58: 5d:31:74:fb:4f:fd:ff:58:d1:1e:8e:fe:cb:1a:44: 31:53:77:79:33:c0:d0:b6:e5:4b:84:0c:1d:9e:dd: e6:38:95:97:64:b2:99:cb:e3:12:80:61:db:6b:fc: 1e:df:d2:53:e8:64:aa:04:34:dd:33:2b:68:a5:f8: 64:e0:f5:14:3d:8e:64:90:fe:65:df:85:09:20:70: 6a:53:5a:59:13:33:36:b0:f9:17:2f:20:34:ac:4d: 8a:26:03:ed:21:90:25:3f:b0:31:7e:2d:e8:00:e0: 07:8d:e6:b4:6a:d2:6c:89:65:07:03:0d:e4:f8:ac: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:27:8F:0D:78:0B:75:C0:3F:43:07:72:94:BF:FD:5C:15:5F:72 X509v3 Authority Key Identifier: keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6f:42:0f:24:9a:0f:10:75:6e:b8:22:fb:8c:40:88:60:2b: c7:dc:94:da:44:8d:a4:3c:c2:71:3f:7a:b8:71:84:8f:89:3f: 03:89:07:f4:db:30:28:76:77:fc:19:64:57:3c:8f:bb:2e:e3: 6b:90:f0:40:79:e3:42:a4:d8:94:fc:1b:c3:4e:97:2e:fc:45: cb:ae:20:5e:ab:7f:84:da:77:b6:f1:4f:7b:f5:76:43:03:7b: d3:d3:9c:a2:e9:0d:98:b7:7e:92:35:98:db:4c:49:94:80:9f: 22:3c:47:d7:4a:db:0e:93:d4:ac:c3:24:8c:a6:7b:79:95:f8: 2f:fe:e4:92:b4:fc:53:76:0b:c7:47:fc:17:25:bb:1d:a2:b4: c3:7e:f5:90:18:9b:3d:d9:a6:7b:c1:9d:3b:b5:2c:49:da:3d: 29:bd:10:b9:8d:da:d5:05:80:82:06:25:6b:e4:de:e4:d2:35: 08:98:21:a5:85:2a:bb:03:e2:e1:9a:d3:52:bc:ec:51:3b:aa: 89:3f:21:1a:c0:68:65:cf:b0:ec:4b:8c:65:98:94:4b:fc:40: 19:43:99:87:1b:d4:88:16:d1:65:bf:65:d0:35:06:bb:ec:03: a0:b6:1c:59:bd:e8:da:2e:a3:9d:74:c8:86:b0:7b:5b:cb:b4: 96:19:54:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxB+50T7T9IEIjJzEh27gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZjQ1MTA0NDRhMTdhZGQ3MzI3MTQ2MTUyOTQzNDk1YWJh YmI5NjgwHhcNMjUxMjE4MTQwMTM1WhcNMjUxMjE5MTQwMTM1WjAzMTEwLwYDVQQD EyhhMmE3Mjc4ZjBkNzgwYjc1YzAzZjQzMDc3Mjk0YmZmZDVjMTU1ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH6HBoyinWLfScmCfSKNOTY81/Y3 RzMQyxXkmZnDJwPAN1VMwGh5HF1i1m2caciZ4qY9NbjxsTnPbbkFkvkQ0Vmwlc4e UqHwKINEH0df5Iga3NBvg4ZE3tTXpH6VDdMlCyd1HSLIysDcl/A3x1MfUxke8E0X z5LL1tuThWYoqc+WqYwiyFhdMXT7T/3/WNEejv7LGkQxU3d5M8DQtuVLhAwdnt3m OJWXZLKZy+MSgGHba/we39JT6GSqBDTdMytopfhk4PUUPY5kkP5l34UJIHBqU1pZ EzM2sPkXLyA0rE2KJgPtIZAlP7Axfi3oAOAHjea0atJsiWUHAw3k+Kz4CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKnJ48NeAt1wD9DB3KUv/1cFV9yMB8GA1UdIwQY MBaAFOn0UQREoXrdcycUYVKUNJWrq7loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQt YTI3NmVkMGJhMWJjLzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQtYTI3NmVkMGJhMWJj LzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG9CDySa DxB1brgi+4xAiGArx9yU2kSNpDzCcT96uHGEj4k/A4kH9NswKHZ3/BlkVzyPuy7j a5DwQHnjQqTYlPwbw06XLvxFy64gXqt/hNp3tvFPe/V2QwN709OcoukNmLd+kjWY 20xJlICfIjxH10rbDpPUrMMkjKZ7eZX4L/7kkrT8U3YLx0f8FyW7HaK0w371kBib Pdmme8GdO7UsSdo9Kb0QuY3a1QWAggYla+Te5NI1CJghpYUquwPi4ZrTUrzsUTuq iT8hGsBoZc+w7EuMZZiUS/xAGUOZhxvUiBbRZb9l0DUGu+wDoLYcWb3o2i6jnXTI hrB7W8u0lhlUiA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:26:24 2025 by rpki-client