This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json) Hash identifier: i03itVOVST9PxHrUBkfRmnpuiAFpk/RH/Ywyn5HVhkk= Subject key identifier: 02:48:20:15:E8:67:61:DE:C2:10:54:9B:D8:44:F9:9A:46:F1:FB:60 Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2 Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2 Certificate serial: 019B4B831DAFA52B5760E9E2D90EC93F217A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft Manifest number: 051B Signing time: Tue 23 Dec 2025 14:00:42 +0000 Manifest this update: Tue 23 Dec 2025 14:00:42 +0000 Manifest next update: Wed 24 Dec 2025 14:00:42 +0000 Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: NwAXilJQwqOoIIfTvuaYJnLQKujd5q0L5Jr2BDJmgPI=) 2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:1d:af:a5:2b:57:60:e9:e2:d9:0e:c9:3f:21:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2 Validity Not Before: Dec 23 14:00:42 2025 GMT Not After : Dec 24 14:00:42 2025 GMT Subject: CN=02482015e86761dec210549bd844f99a46f1fb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:23:26:68:5d:f8:82:5a:b7:3b:f1:19:b5: 7e:bc:4e:50:3a:14:88:40:95:75:aa:43:6b:5d:51: 40:82:74:05:50:f2:60:5d:a0:22:f4:6d:1b:c3:d7: 81:8b:b8:71:60:1e:18:25:04:f8:22:46:77:af:c5: f3:54:57:13:98:af:43:29:80:66:db:32:00:c2:ce: 75:62:08:2c:eb:7e:34:d4:d3:63:cc:4a:cd:9d:72: 5d:60:86:d1:83:db:cd:05:be:98:22:6d:9d:29:4f: 22:7a:26:34:e0:b1:1b:3c:74:44:3e:9a:2d:3b:71: 0b:e2:e4:33:e3:60:9d:29:90:9b:88:17:11:c8:8e: 3a:2a:e0:f0:6c:1d:97:58:c2:9e:6c:98:f2:2b:da: c3:b0:f4:e8:d3:e5:f6:ef:54:74:fd:7e:fb:f4:1e: 2d:e4:96:11:eb:62:e7:55:c2:97:63:e7:d8:c4:29: e2:c9:57:b7:09:5c:b6:91:f0:bf:03:4d:ec:5c:3a: 25:cf:ec:72:68:16:b3:55:e1:fb:34:62:f0:12:6f: ee:50:bd:c6:1b:e0:10:f0:21:fd:75:f4:41:c2:6a: c8:d6:d7:1c:1e:fa:7e:af:3f:34:d8:8d:c5:8a:a2: e4:5f:52:6f:f3:26:11:77:05:8a:69:9c:af:47:d0: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:48:20:15:E8:67:61:DE:C2:10:54:9B:D8:44:F9:9A:46:F1:FB:60 X509v3 Authority Key Identifier: keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:df:fb:38:2d:00:3f:6f:75:80:53:c6:be:82:98:82:29:51: 70:1a:20:bb:d4:64:fd:fe:2d:60:da:34:cb:e8:fa:87:ab:28: 22:7c:01:7d:73:f9:d9:d9:5b:6a:1a:ae:dd:4b:91:7a:cc:94: f7:51:ba:22:4c:aa:b6:29:c7:0f:63:5d:7a:ad:09:0c:08:78: 22:21:8d:32:ed:d0:fb:88:b1:7e:77:5c:d8:b0:f1:5c:40:75: 71:4f:9d:37:4f:af:8b:06:57:e7:2a:a3:49:1a:1e:09:b9:8e: 0c:24:d4:37:ad:14:7d:43:3e:69:de:44:8f:c2:26:bb:3d:c3: 54:b1:36:11:62:56:56:40:65:0f:14:c8:04:f6:bd:46:83:a0: 91:f8:c5:6d:ec:24:c2:20:f1:38:4e:fa:73:1b:27:75:65:f5: d0:84:92:61:c0:d8:62:3e:29:a9:46:08:43:58:77:ca:58:37: 77:4e:76:f5:5a:e6:48:8c:84:28:15:b0:8c:57:c8:ed:77:5d: 94:15:10:81:77:66:db:03:14:f4:62:76:4c:98:f2:c7:98:4f: 2d:00:d6:d8:56:08:5a:bc:a1:5e:e0:38:11:11:8c:ea:d5:45: 84:8c:e3:9b:61:54:8c:da:27:a7:a7:e4:9f:83:3f:d4:b5:01: b6:dd:04:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgx2vpStXYOni2Q7JPyF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZmM2YzgxNjYzY2Y2ZmNlOTJlODNlNWQ2NjI4YmMwZWI2 YTk0ZDIwHhcNMjUxMjIzMTQwMDQyWhcNMjUxMjI0MTQwMDQyWjAzMTEwLwYDVQQD EygwMjQ4MjAxNWU4Njc2MWRlYzIxMDU0OWJkODQ0Zjk5YTQ2ZjFmYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlcjJmhd+IJatzvxGbV+vE5QOhSI QJV1qkNrXVFAgnQFUPJgXaAi9G0bw9eBi7hxYB4YJQT4IkZ3r8XzVFcTmK9DKYBm 2zIAws51Yggs63401NNjzErNnXJdYIbRg9vNBb6YIm2dKU8ieiY04LEbPHREPpot O3EL4uQz42CdKZCbiBcRyI46KuDwbB2XWMKebJjyK9rDsPTo0+X271R0/X779B4t 5JYR62LnVcKXY+fYxCniyVe3CVy2kfC/A03sXDolz+xyaBazVeH7NGLwEm/uUL3G G+AQ8CH9dfRBwmrI1tccHvp+rz802I3FiqLkX1Jv8yYRdwWKaZyvR9Aj8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJIIBXoZ2HewhBUm9hE+ZpG8ftgMB8GA1UdIwQY MBaAFOn8bIFmPPb86S6D5dZii8DrapTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUt NTBlZjcyNmE5MTM2LzEvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUtNTBlZjcyNmE5MTM2 LzEvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9/7OC0A P291gFPGvoKYgilRcBogu9Rk/f4tYNo0y+j6h6soInwBfXP52dlbahqu3UuResyU 91G6IkyqtinHD2Ndeq0JDAh4IiGNMu3Q+4ixfndc2LDxXEB1cU+dN0+viwZX5yqj SRoeCbmODCTUN60UfUM+ad5Ej8Imuz3DVLE2EWJWVkBlDxTIBPa9RoOgkfjFbewk wiDxOE76cxsndWX10ISSYcDYYj4pqUYIQ1h3ylg3d0529VrmSIyEKBWwjFfI7Xdd lBUQgXdm2wMU9GJ2TJjyx5hPLQDW2FYIWryhXuA4ERGM6tVFhIzjm2FUjNonp6fk n4M/1LUBtt0EwA== -----END CERTIFICATE-----Generated at Tue Dec 23 16:23:26 2025 by rpki-client