This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json) Hash identifier: 1T4Shw1FPxBTe2ZyXSqAL17qhO+mR7hS9q/M9GMANTQ= Subject key identifier: A4:7A:32:CF:9F:D0:C3:F9:68:9A:32:C3:2D:9B:CE:25:98:2A:34:98 Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36 Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336 Certificate serial: 019B2176899683C13F9A2978E3A0921E9534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft Manifest number: 170C Signing time: Mon 15 Dec 2025 10:02:55 +0000 Manifest this update: Mon 15 Dec 2025 10:02:55 +0000 Manifest next update: Tue 16 Dec 2025 10:02:55 +0000 Files and hashes: 1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: TnYNXTVyLvQPkw45ze4INdhi9y2UeQbo2Bp77Mc+vrc=) 2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:89:96:83:c1:3f:9a:29:78:e3:a0:92:1e:95:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336 Validity Not Before: Dec 15 10:02:55 2025 GMT Not After : Dec 16 10:02:55 2025 GMT Subject: CN=a47a32cf9fd0c3f9689a32c32d9bce25982a3498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:3a:df:f1:e1:0a:79:61:32:34:32:fe:0b: 52:04:74:c5:49:2c:68:e7:16:27:f4:73:f4:24:ce: 04:78:44:dc:92:81:3f:b8:bd:ff:17:cd:25:de:f5: 5a:8e:37:8d:9d:88:16:cd:35:00:2e:eb:8b:73:51: 50:d6:14:5a:db:21:8d:d5:f2:75:db:c8:b1:07:f3: cc:7e:cb:60:bb:75:ce:fb:2a:a2:b3:5f:0c:bf:90: f8:69:b9:92:f1:0e:1b:24:ab:8c:cc:ee:fb:dc:53: 7a:f3:13:27:57:97:a7:e3:05:e3:6c:e6:74:38:61: a8:4b:ec:00:55:0e:b6:de:71:d2:ab:dd:fe:5b:73: 3b:4e:82:03:50:c1:de:24:e2:13:3f:05:e9:61:5b: 23:be:2c:7d:f2:a7:65:19:a4:b2:4f:11:a6:58:58: 51:bd:2e:d1:96:46:24:4a:5f:30:d7:85:ab:b2:74: 5a:0d:e8:e4:61:69:a4:68:78:04:08:0c:52:c0:ba: 17:51:47:8d:69:36:32:db:27:79:c1:25:da:80:d8: 3c:1d:e8:7b:3e:95:aa:78:ac:0a:cf:58:b2:68:ba: 55:5d:2c:d2:09:64:27:3d:b6:e1:1a:d1:32:e6:3f: 9a:a0:17:70:9b:f3:82:ec:2c:b4:73:f7:b1:ae:5c: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7A:32:CF:9F:D0:C3:F9:68:9A:32:C3:2D:9B:CE:25:98:2A:34:98 X509v3 Authority Key Identifier: keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d2:f1:54:5d:a7:48:6a:db:e2:bf:8d:48:f2:67:df:66:ed: 0a:c8:c5:d3:79:97:f3:f8:43:35:9b:0b:7e:c0:79:9a:11:74: 37:c2:d2:e8:ef:3a:83:37:9b:b5:22:d6:17:f0:97:f0:54:a9: ab:4d:bf:bc:3f:a6:13:83:91:4a:57:7b:88:ac:aa:19:a8:37: 9a:04:a6:8d:b9:b6:32:d7:dd:76:90:e0:dd:05:62:cf:50:1c: 53:2e:9f:84:de:9a:39:1f:b5:9e:e2:3e:5e:0b:85:49:9c:00: 8f:ec:81:02:ad:1e:6f:09:2f:07:c3:ac:46:41:d2:67:86:20: 64:f4:9f:39:23:f4:9e:da:7d:e7:5b:5b:ca:a1:6b:3d:2a:76: f0:a7:8b:e8:02:24:64:9b:b6:96:82:ac:6a:de:fa:9b:87:ea: e1:c6:21:3a:84:25:74:d8:f4:e7:68:8e:33:bf:47:90:4f:a9: 7a:b4:f1:15:e6:d1:d5:3f:13:40:ba:e6:de:0d:3c:a3:b5:bf: de:87:f5:6f:95:e2:1d:c7:91:10:d0:20:4d:6c:ea:5c:d4:9d: ff:36:1f:76:c4:ce:73:2a:e0:2b:8a:d1:b3:32:39:15:de:88: d7:5a:96:97:e2:8e:30:87:d4:12:43:ce:33:2a:3c:9f:20:45: 18:e7:71:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdomWg8E/mil446CSHpU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi MTEzMzYwHhcNMjUxMjE1MTAwMjU1WhcNMjUxMjE2MTAwMjU1WjAzMTEwLwYDVQQD EyhhNDdhMzJjZjlmZDBjM2Y5Njg5YTMyYzMyZDliY2UyNTk4MmEzNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3063/HhCnlhMjQy/gtSBHTFSSxo 5xYn9HP0JM4EeETckoE/uL3/F80l3vVajjeNnYgWzTUALuuLc1FQ1hRa2yGN1fJ1 28ixB/PMfstgu3XO+yqis18Mv5D4abmS8Q4bJKuMzO773FN68xMnV5en4wXjbOZ0 OGGoS+wAVQ623nHSq93+W3M7ToIDUMHeJOITPwXpYVsjvix98qdlGaSyTxGmWFhR vS7RlkYkSl8w14WrsnRaDejkYWmkaHgECAxSwLoXUUeNaTYy2yd5wSXagNg8Heh7 PpWqeKwKz1iyaLpVXSzSCWQnPbbhGtEy5j+aoBdwm/OC7Cy0c/exrlydfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR6Ms+f0MP5aJoywy2bziWYKjSYMB8GA1UdIwQY MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt MzlmMTNlNzZhZmEzLzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNLxVF2n SGrb4r+NSPJn32btCsjF03mX8/hDNZsLfsB5mhF0N8LS6O86gzebtSLWF/CX8FSp q02/vD+mE4ORSld7iKyqGag3mgSmjbm2MtfddpDg3QViz1AcUy6fhN6aOR+1nuI+ XguFSZwAj+yBAq0ebwkvB8OsRkHSZ4YgZPSfOSP0ntp951tbyqFrPSp28KeL6AIk ZJu2loKsat76m4fq4cYhOoQldNj052iOM79HkE+perTxFebR1T8TQLrm3g08o7W/ 3of1b5XiHceRENAgTWzqXNSd/zYfdsTOcyrgK4rRszI5Fd6I11qWl+KOMIfUEkPO Myo8nyBFGOdx1w== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:15 2025 by rpki-client