This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft File: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json) Hash identifier: C6XmhaMqFWGtUAcDJ6OZSmQoMisJq/RTwnhLQ+j+0I8= Subject key identifier: 3F:F7:5D:A5:CA:27:E7:19:D1:A2:B0:98:53:02:CA:92:F2:A7:C7:16 Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC Certificate issuer: /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc Certificate serial: 019B5B64CC3EF0B04F078880C02B9FCF07FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft Manifest number: 0F2E Signing time: Fri 26 Dec 2025 16:01:31 +0000 Manifest this update: Fri 26 Dec 2025 16:01:31 +0000 Manifest next update: Sat 27 Dec 2025 16:01:31 +0000 Files and hashes: 1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: t+e1XxjxNmL1RtZH/ACMgY0t8sLhOLq0CHtYyqC9odE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:cc:3e:f0:b0:4f:07:88:80:c0:2b:9f:cf:07:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc Validity Not Before: Dec 26 16:01:31 2025 GMT Not After : Dec 27 16:01:31 2025 GMT Subject: CN=3ff75da5ca27e719d1a2b0985302ca92f2a7c716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:a7:e1:5a:71:be:85:60:22:6e:9f:83:3f: ac:2c:c0:76:b3:a0:39:1d:11:6c:8b:60:f0:8d:f7: 30:0d:aa:8e:71:f4:31:9e:64:4b:87:9f:ea:20:8c: 2b:ab:0a:a5:82:d4:16:29:2a:dd:59:6d:ca:01:02: ae:29:91:7f:ef:e8:87:0a:23:15:53:c7:4f:ca:52: 14:fd:c9:02:89:15:c9:a3:1e:32:75:45:cb:d2:2e: 67:0c:32:b2:63:94:38:ee:da:f3:49:ec:79:6b:de: fc:85:bb:3f:41:78:f6:16:bb:ae:ee:7d:e7:ca:55: 46:bd:2e:c3:3a:38:93:13:eb:97:b4:09:ac:c1:33: 2a:2e:cb:3c:74:05:f6:1c:ff:11:6e:ae:b2:ab:c3: c1:a6:57:8d:de:dc:b7:58:b3:e7:5c:c5:47:eb:59: 92:d6:d0:c7:fb:b0:d2:20:ce:27:50:2c:ee:12:45: 0b:0b:14:02:8c:e0:1b:32:7e:de:e6:e6:c1:bb:79: 3d:c6:9a:44:3c:e5:a9:b6:69:cf:c7:cd:38:1a:ea: 8f:00:d0:53:37:17:f7:db:9b:b4:1e:ed:dc:6e:5a: ea:9b:00:02:77:8a:65:0c:cb:52:28:e1:c2:e8:26: 1a:5b:e3:2d:d8:36:6d:2c:1d:47:d5:ab:cf:99:b2: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F7:5D:A5:CA:27:E7:19:D1:A2:B0:98:53:02:CA:92:F2:A7:C7:16 X509v3 Authority Key Identifier: keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:69:a4:39:b6:66:49:7b:fd:c5:31:ae:e4:c8:a1:57:78: 94:28:16:94:a1:76:61:99:32:3b:18:85:c7:e4:64:8c:c0:34: db:15:31:6f:b6:a7:4f:35:df:8a:21:ac:22:4e:19:e3:dd:5e: de:85:9d:3f:57:fd:8d:e5:75:f8:cc:08:ef:a3:3c:68:5a:98: de:61:cb:1f:c7:3e:1d:62:8a:fe:1c:9c:c9:8b:10:17:50:00: 62:03:ec:57:b1:a8:4e:78:b3:9f:be:42:8a:6a:38:6d:32:f0: 7c:09:d3:c2:64:da:fd:a3:d8:8b:45:01:05:fe:bf:7e:cd:25: 8a:3a:54:75:69:ad:38:f3:86:ae:0a:27:b6:de:94:de:75:44: f4:fe:e2:a8:cb:28:ca:cf:ac:bd:0d:34:dc:1b:65:47:3a:fb: fd:0b:d8:90:2e:dd:1b:37:d5:00:95:1f:51:b4:08:94:fa:49: 6a:31:9e:f0:7d:8b:94:ea:29:02:96:79:72:ac:5d:34:27:4c: f3:ee:ed:06:34:0e:f1:75:1f:b4:b6:70:17:38:f1:9c:e0:6b: 5f:bb:8e:0f:c3:a5:0b:30:e9:44:76:d1:0e:5d:50:85:7f:d3: d2:6d:de:e8:f5:66:f1:06:cf:a2:22:6f:d4:82:01:d2:67:63: eb:a2:f9:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZMw+8LBPB4iAwCufzwf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OTliNWVmMjNiYjQyM2E0N2QyYjhmMjMzZTgyYzM1NDA5 Y2NiZmMwHhcNMjUxMjI2MTYwMTMxWhcNMjUxMjI3MTYwMTMxWjAzMTEwLwYDVQQD EygzZmY3NWRhNWNhMjdlNzE5ZDFhMmIwOTg1MzAyY2E5MmYyYTdjNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z2n4VpxvoVgIm6fgz+sLMB2s6A5 HRFsi2DwjfcwDaqOcfQxnmRLh5/qIIwrqwqlgtQWKSrdWW3KAQKuKZF/7+iHCiMV U8dPylIU/ckCiRXJox4ydUXL0i5nDDKyY5Q47trzSex5a978hbs/QXj2Fruu7n3n ylVGvS7DOjiTE+uXtAmswTMqLss8dAX2HP8Rbq6yq8PBpleN3ty3WLPnXMVH61mS 1tDH+7DSIM4nUCzuEkULCxQCjOAbMn7e5ubBu3k9xppEPOWptmnPx804GuqPANBT Nxf325u0Hu3cblrqmwACd4plDMtSKOHC6CYaW+Mt2DZtLB1H1avPmbL0aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/3XaXKJ+cZ0aKwmFMCypLyp8cWMB8GA1UdIwQY MBaAFOiZte8ju0I6R9K48jPoLDVAnMv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYt ZGIzMjRhN2UyOGU4LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYtZGIzMjRhN2UyOGU4 LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABT1ppDm2 Zkl7/cUxruTIoVd4lCgWlKF2YZkyOxiFx+RkjMA02xUxb7anTzXfiiGsIk4Z491e 3oWdP1f9jeV1+MwI76M8aFqY3mHLH8c+HWKK/hycyYsQF1AAYgPsV7GoTnizn75C imo4bTLwfAnTwmTa/aPYi0UBBf6/fs0lijpUdWmtOPOGrgontt6U3nVE9P7iqMso ys+svQ003BtlRzr7/QvYkC7dGzfVAJUfUbQIlPpJajGe8H2LlOopApZ5cqxdNCdM 8+7tBjQO8XUftLZwFzjxnOBrX7uOD8OlCzDpRHbRDl1QhX/T0m3e6PVm8QbPoiJv 1IIB0mdj66L5gA== -----END CERTIFICATE-----Generated at Fri Dec 26 19:29:45 2025 by rpki-client