This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft File: 6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json) Hash identifier: sXiaUBWxilZSd/2XB/44fzoVq7tF7VO/mIweyhOgHI8= Subject key identifier: 09:7E:5B:4E:6D:BD:77:B8:4E:80:3D:BE:BA:FF:5C:DA:85:EF:77:9C Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12 Certificate issuer: /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112 Certificate serial: 019B19BC2BC72F5E5AAA6725E9D7A6D2A603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft Manifest number: 0C5A Signing time: Sat 13 Dec 2025 22:02:00 +0000 Manifest this update: Sat 13 Dec 2025 22:02:00 +0000 Manifest next update: Sun 14 Dec 2025 22:02:00 +0000 Files and hashes: 1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: y9v9KwSS6HhLROFj5mS/6Vctj2cPe7NaU+XkUISf00s=) 2: gWnW9lnMPM8qZ8END1_wzvVFr0k.roa (hash: c0ARRE6viXKVlOCnUB1u64Fg2irbTI2KZRKH/h8XIAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:2b:c7:2f:5e:5a:aa:67:25:e9:d7:a6:d2:a6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112 Validity Not Before: Dec 13 22:02:00 2025 GMT Not After : Dec 14 22:02:00 2025 GMT Subject: CN=097e5b4e6dbd77b84e803dbebaff5cda85ef779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:02:1d:43:2f:6d:f4:d4:23:c7:38:b8:10: 4b:90:b6:5c:10:8c:1b:6c:55:5c:37:15:1c:c0:6c: 75:d4:6e:de:cf:d3:2f:67:8a:db:f2:7c:78:d9:80: 48:63:bd:40:70:7a:af:f9:e6:42:5c:9f:b0:c1:49: ca:72:21:3b:64:f6:d7:84:0d:a4:da:c1:bb:24:6a: 5f:ed:fc:63:a1:cc:22:82:f5:1b:8d:ff:8a:6d:b4: f4:eb:50:9c:3b:01:79:94:75:52:6b:32:19:b3:51: a4:11:2c:38:91:a5:d0:d0:d8:f9:32:e3:3d:95:f5: 3e:4a:56:98:47:ca:b0:8a:b4:ec:30:cb:25:f2:5b: 74:71:3c:05:77:23:ee:15:3a:3b:4c:77:de:26:62: 55:69:89:e4:f3:ee:ab:83:45:6d:1f:ca:31:f8:b9: cf:85:06:d4:7b:e3:f7:90:a6:d9:6c:2f:29:aa:0d: e7:ef:af:c7:e0:de:74:d9:cf:1a:01:f1:df:4e:87: 74:ab:55:be:7a:ec:8b:e2:a1:fd:e1:32:bc:46:1b: 7e:b4:36:6e:e1:be:be:f1:b1:e3:d8:38:b0:26:50: 72:e1:74:30:b2:87:87:35:a8:54:b0:77:f7:f7:ef: 4f:70:ec:cd:74:e2:d8:de:2f:53:eb:1e:c3:92:cb: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7E:5B:4E:6D:BD:77:B8:4E:80:3D:BE:BA:FF:5C:DA:85:EF:77:9C X509v3 Authority Key Identifier: keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:05:8f:0e:be:26:ee:2c:c1:6c:dc:3a:35:f9:9d:84:a6:fc: b3:5c:8a:60:e7:8e:11:7e:c5:be:dd:8b:f8:81:a7:71:40:ef: e2:03:76:9c:16:50:ba:0e:44:4e:27:10:fe:5a:ee:6b:8a:24: f4:76:15:74:d9:0f:51:0a:77:f4:a1:36:0c:7f:8f:31:2c:5e: 22:53:19:b0:6c:62:d6:f7:6d:40:71:ce:2e:0d:f1:d8:da:bf: ad:2b:33:b8:b1:76:5e:c5:1c:63:76:1f:e2:68:f1:c6:18:ac: eb:85:23:ae:5a:f3:93:aa:a7:45:29:2b:57:19:92:5b:d3:cd: 4d:02:c2:c1:91:65:14:f5:c5:5c:82:50:5b:f0:06:5c:a3:a1: f8:47:3a:e7:72:a9:51:68:81:17:42:3e:20:f8:8e:73:79:d4: a6:bd:f8:62:65:b5:0e:0a:70:56:b5:a8:9d:f7:b2:85:14:94: e5:23:12:0c:ad:35:78:cb:72:3a:61:cc:55:d1:2b:8a:30:83: e2:95:65:ea:66:91:47:af:e5:95:d2:6a:56:eb:9e:2d:88:b4: a9:ba:47:04:83:f1:0d:2a:2a:6c:99:7a:61:cd:a6:66:f0:59: 4c:b2:29:41:82:8d:46:d1:d2:e6:ef:2c:5d:eb:5e:d8:d2:96: 9c:d9:7d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvCvHL15aqmcl6dem0qYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmFkYjIzY2E4ZGYxZTQ3MmMyNTlmNWUwOWNmZTg5YWUy NTAxMTIwHhcNMjUxMjEzMjIwMjAwWhcNMjUxMjE0MjIwMjAwWjAzMTEwLwYDVQQD EygwOTdlNWI0ZTZkYmQ3N2I4NGU4MDNkYmViYWZmNWNkYTg1ZWY3NzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2ICHUMvbfTUI8c4uBBLkLZcEIwb bFVcNxUcwGx11G7ez9MvZ4rb8nx42YBIY71AcHqv+eZCXJ+wwUnKciE7ZPbXhA2k 2sG7JGpf7fxjocwigvUbjf+KbbT061CcOwF5lHVSazIZs1GkESw4kaXQ0Nj5MuM9 lfU+SlaYR8qwirTsMMsl8lt0cTwFdyPuFTo7THfeJmJVaYnk8+6rg0VtH8ox+LnP hQbUe+P3kKbZbC8pqg3n76/H4N502c8aAfHfTod0q1W+euyL4qH94TK8Rht+tDZu 4b6+8bHj2DiwJlBy4XQwsoeHNahUsHf39+9PcOzNdOLY3i9T6x7DkssBqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl+W05tvXe4ToA9vrr/XNqF73ecMB8GA1UdIwQY MBaAFOhq2yPKjfHkcsJZ9eCc/omuJQESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkdyYkk4cU44ZVJ5d2xuMTRKei1pYTRsQVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hMDUxYTgtMzJhOC00NDhmLWEwMzIt OTI2OTY4MjcxZmIyLzEvNkdyYkk4cU44ZVJ5d2xuMTRKei1pYTRsQVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hMDUxYTgtMzJhOC00NDhmLWEwMzItOTI2OTY4MjcxZmIy LzEvNkdyYkk4cU44ZVJ5d2xuMTRKei1pYTRsQVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngWPDr4m 7izBbNw6NfmdhKb8s1yKYOeOEX7Fvt2L+IGncUDv4gN2nBZQug5ETicQ/lrua4ok 9HYVdNkPUQp39KE2DH+PMSxeIlMZsGxi1vdtQHHOLg3x2Nq/rSszuLF2XsUcY3Yf 4mjxxhis64Ujrlrzk6qnRSkrVxmSW9PNTQLCwZFlFPXFXIJQW/AGXKOh+Ec653Kp UWiBF0I+IPiOc3nUpr34YmW1DgpwVrWonfeyhRSU5SMSDK01eMtyOmHMVdErijCD 4pVl6maRR6/lldJqVuueLYi0qbpHBIPxDSoqbJl6Yc2mZvBZTLIpQYKNRtHS5u8s Xete2NKWnNl98A== -----END CERTIFICATE-----Generated at Sun Dec 14 01:03:43 2025 by rpki-client