This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft File: 6O49Zbp3JHe5IjKroRTJtnDa38A.mft (raw, json) Hash identifier: NZLpXqGiPD8RoIY6uKDFRLOApiGKrLs//Gt00+nixE0= Subject key identifier: 30:EB:4C:E0:68:9F:D3:01:D2:4A:75:D6:07:A8:92:BE:38:1F:55:60 Authority key identifier: E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0 Certificate issuer: /CN=e8ee3d65ba772477b92232aba114c9b670dadfc0 Certificate serial: 019B59E4492318A39CA15D51BFB080602204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft Manifest number: 0130 Signing time: Fri 26 Dec 2025 09:01:31 +0000 Manifest this update: Fri 26 Dec 2025 09:01:31 +0000 Manifest next update: Sat 27 Dec 2025 09:01:31 +0000 Files and hashes: 1: 6O49Zbp3JHe5IjKroRTJtnDa38A.crl (hash: TQArXV6wzhL5+4kcDS6rZDBGlfoRzbsrNIjvd2dGQWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:49:23:18:a3:9c:a1:5d:51:bf:b0:80:60:22:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ee3d65ba772477b92232aba114c9b670dadfc0 Validity Not Before: Dec 26 09:01:31 2025 GMT Not After : Dec 27 09:01:31 2025 GMT Subject: CN=30eb4ce0689fd301d24a75d607a892be381f5560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:5f:d5:4e:6a:65:fb:1c:31:e9:ef:40:9e: 82:23:39:5d:e5:3b:5d:45:dc:a8:09:7b:22:1d:93: 87:4f:52:12:85:85:dd:19:31:23:44:5e:32:ac:4b: 63:85:c7:49:53:6c:f0:d1:25:c2:59:56:a4:3a:9b: 58:ae:83:2e:59:f0:78:2f:60:51:d9:f1:13:78:af: 48:54:79:a2:69:25:df:cf:56:a3:03:19:48:29:73: 3e:67:de:9d:98:72:2e:c8:37:b7:78:25:d1:00:1b: 67:9a:12:82:e8:6d:db:73:5c:e0:02:6d:10:49:5a: 35:46:9b:5a:b0:53:59:38:92:7b:ba:28:82:b4:84: 10:d8:f3:ad:06:cb:68:85:b8:9b:3d:35:10:58:07: 91:a5:e1:b3:db:71:4d:62:08:89:56:23:25:92:6c: f2:37:46:ff:e7:24:a9:c3:ac:1e:80:a8:6f:89:9f: 0f:cf:41:90:ae:f4:51:89:25:b1:28:ca:46:72:27: a3:ad:85:6c:93:35:55:8e:b4:ab:d7:23:90:9a:f5: 32:fd:b5:35:85:4c:90:d9:80:cb:15:fa:cc:81:8e: 04:36:06:b3:13:10:9c:85:b5:18:8e:72:d5:d2:24: 46:fc:02:38:86:3f:f4:56:55:14:e8:ba:93:09:97: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EB:4C:E0:68:9F:D3:01:D2:4A:75:D6:07:A8:92:BE:38:1F:55:60 X509v3 Authority Key Identifier: keyid:E8:EE:3D:65:BA:77:24:77:B9:22:32:AB:A1:14:C9:B6:70:DA:DF:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O49Zbp3JHe5IjKroRTJtnDa38A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4bb038-ece1-453f-bc8b-65dad41037a5/1/6O49Zbp3JHe5IjKroRTJtnDa38A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:cf:bd:7b:51:e2:f7:3f:5b:d0:61:a6:37:8f:0a:16:4f:07: ac:7b:18:86:d2:c4:8d:8b:06:54:79:9c:5f:e7:aa:2e:31:de: 93:ea:82:5e:06:ac:6f:b8:aa:b0:a2:d6:8e:8e:e7:86:9a:9e: af:9c:e4:80:02:5e:1f:0e:8f:e1:81:d4:e9:2c:9f:7c:d7:ca: 70:f6:33:aa:3e:3d:8c:1b:62:bb:c5:c3:69:5e:19:ca:ea:40: 56:c0:c2:7e:16:05:78:ae:aa:43:eb:96:8a:ad:9e:74:f9:c8: 54:f3:f9:98:cf:12:f3:c4:22:22:d1:41:df:51:dc:63:f7:66: 50:56:74:16:9f:cd:3a:bc:12:5e:78:4d:98:1a:d3:bf:30:55: 5a:13:dd:ae:76:7a:26:8e:8f:da:82:7c:e4:fb:fb:9e:f2:4a: 07:ba:54:e6:4a:06:4c:2c:e2:50:38:7e:86:8a:9c:f9:b2:e1: 3a:22:f9:d2:b6:58:e0:6f:a4:95:57:d0:ad:0e:82:4f:0a:5e: 60:98:95:d1:87:af:e2:2c:61:7d:3f:16:55:5e:14:a2:62:46: 52:7e:92:fa:c8:87:8d:71:e3:5d:47:07:14:11:9f:07:20:59: d3:66:20:cc:ae:6f:2c:b0:b5:1a:7d:8e:24:54:14:8c:2f:69: 39:e0:2f:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EkjGKOcoV1Rv7CAYCIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWUzZDY1YmE3NzI0NzdiOTIyMzJhYmExMTRjOWI2NzBk YWRmYzAwHhcNMjUxMjI2MDkwMTMxWhcNMjUxMjI3MDkwMTMxWjAzMTEwLwYDVQQD EygzMGViNGNlMDY4OWZkMzAxZDI0YTc1ZDYwN2E4OTJiZTM4MWY1NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaJf1U5qZfscMenvQJ6CIzld5Ttd RdyoCXsiHZOHT1IShYXdGTEjRF4yrEtjhcdJU2zw0SXCWVakOptYroMuWfB4L2BR 2fETeK9IVHmiaSXfz1ajAxlIKXM+Z96dmHIuyDe3eCXRABtnmhKC6G3bc1zgAm0Q SVo1RptasFNZOJJ7uiiCtIQQ2POtBstohbibPTUQWAeRpeGz23FNYgiJViMlkmzy N0b/5ySpw6wegKhviZ8Pz0GQrvRRiSWxKMpGciejrYVskzVVjrSr1yOQmvUy/bU1 hUyQ2YDLFfrMgY4ENgazExCchbUYjnLV0iRG/AI4hj/0VlUU6LqTCZeiAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDrTOBon9MB0kp11geokr44H1VgMB8GA1UdIwQY MBaAFOjuPWW6dyR3uSIyq6EUybZw2t/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk80OVpicDNKSGU1SWpLcm9SVEp0bkRhMzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80YmIwMzgtZWNlMS00NTNmLWJjOGIt NjVkYWQ0MTAzN2E1LzEvNk80OVpicDNKSGU1SWpLcm9SVEp0bkRhMzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80YmIwMzgtZWNlMS00NTNmLWJjOGItNjVkYWQ0MTAzN2E1 LzEvNk80OVpicDNKSGU1SWpLcm9SVEp0bkRhMzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM+9e1Hi 9z9b0GGmN48KFk8HrHsYhtLEjYsGVHmcX+eqLjHek+qCXgasb7iqsKLWjo7nhpqe r5zkgAJeHw6P4YHU6SyffNfKcPYzqj49jBtiu8XDaV4ZyupAVsDCfhYFeK6qQ+uW iq2edPnIVPP5mM8S88QiItFB31HcY/dmUFZ0Fp/NOrwSXnhNmBrTvzBVWhPdrnZ6 Jo6P2oJ85Pv7nvJKB7pU5koGTCziUDh+hoqc+bLhOiL50rZY4G+klVfQrQ6CTwpe YJiV0Yev4ixhfT8WVV4UomJGUn6S+siHjXHjXUcHFBGfByBZ02YgzK5vLLC1Gn2O JFQUjC9pOeAvsQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:33 2025 by rpki-client