This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft File: e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json) Hash identifier: G/JeBMPPTkPvgSiaM+sqn8miUUtfgkN/yUvGpgxiNuw= Subject key identifier: 9F:E0:6E:3B:11:E4:41:9A:4D:2C:C2:8F:17:01:25:DD:73:64:8B:19 Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 Certificate issuer: /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059 Certificate serial: 019B3757E485A1A799519D76B8E19CAF7F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft Manifest number: 075D Signing time: Fri 19 Dec 2025 16:01:05 +0000 Manifest this update: Fri 19 Dec 2025 16:01:05 +0000 Manifest next update: Sat 20 Dec 2025 16:01:05 +0000 Files and hashes: 1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: OXESXhufiv06yLoRFpMmcF2hMDi+wdPvOepiuWQPJuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:e4:85:a1:a7:99:51:9d:76:b8:e1:9c:af:7f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059 Validity Not Before: Dec 19 16:01:05 2025 GMT Not After : Dec 20 16:01:05 2025 GMT Subject: CN=9fe06e3b11e4419a4d2cc28f170125dd73648b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:4f:73:ad:24:71:4e:d4:d6:a0:04:3a:bc: 1d:17:31:92:a4:52:49:d1:1a:4c:15:c9:a5:c7:90: 27:a4:e6:3b:82:34:fc:f7:29:71:ff:eb:a6:67:13: 51:ea:76:29:af:6a:78:70:d0:58:1d:58:07:6d:ac: dc:3b:6e:eb:5e:d3:f7:e2:1e:9c:a6:74:e0:1d:4b: 67:50:2f:e8:61:f4:6b:d2:d8:ca:0c:79:f9:6d:5f: 26:f8:77:d2:77:dd:39:c2:e5:42:da:7b:97:a3:71: e2:2c:6c:da:6e:85:df:71:11:bc:a6:12:70:08:52: ef:86:26:59:21:dd:da:15:47:77:71:9a:51:2f:73: cd:8d:56:3e:4f:a0:6d:29:26:bf:69:05:04:b8:f5: 6c:f2:db:1c:8b:39:36:b7:bf:04:94:67:60:de:ae: cd:c8:01:84:52:d9:e1:1a:88:b6:8d:77:18:64:fc: 1a:d9:91:57:e9:c4:f5:a7:35:67:5f:d6:45:b3:69: 6a:7e:a7:c2:6b:7f:7a:51:8b:88:2e:6c:6f:63:da: 2b:3c:2b:51:32:dc:ae:60:d3:4f:ce:63:6e:c8:42: 45:98:8f:fb:ae:20:7c:0e:28:54:c8:28:c8:b4:b2: e4:23:5c:f6:11:e9:7c:b5:c4:d7:5d:aa:04:7e:1d: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E0:6E:3B:11:E4:41:9A:4D:2C:C2:8F:17:01:25:DD:73:64:8B:19 X509v3 Authority Key Identifier: keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:51:d5:ce:6d:43:4e:72:1f:fa:33:73:8a:e8:dd:1d:d3:92: 35:b1:b5:2e:2e:f3:ea:0c:8d:b6:11:f8:48:bc:6a:e2:3f:a6: 66:2b:c3:f5:ca:9a:12:c8:54:6a:fe:76:89:57:af:b2:b8:d6: ad:e8:2d:52:b0:cd:1e:72:20:a6:e6:5b:aa:40:ce:95:e9:33: 33:b4:84:2d:89:19:fc:c3:c8:fb:67:6e:6e:ab:17:cc:25:af: 5a:96:f3:12:11:8f:e7:15:8f:2b:e7:14:a1:d6:0c:8a:13:f5: 41:b3:09:03:e8:08:43:57:a5:af:1d:3a:ca:ab:03:0c:9b:be: 53:fc:15:50:dc:5d:5d:fe:04:33:f5:6c:b3:19:e0:f4:88:67: 06:54:74:dd:c8:e2:18:ce:32:72:3e:d6:23:0f:e4:f1:c5:9c: ea:e9:29:ed:70:de:2c:96:43:5f:3b:d7:d8:a5:8e:1b:e3:49: 3a:9a:8a:1d:c7:54:3c:1f:ac:a1:f6:32:7b:03:5e:90:83:85: 28:40:51:2a:9d:01:41:00:05:68:03:87:cf:00:4c:df:f7:54: 6b:10:43:f7:eb:1a:18:a2:08:6b:8c:98:58:10:64:bd:ce:68: 62:e4:87:61:db:65:ed:55:d6:da:04:df:23:40:cd:e7:d0:f9: 10:8a:8e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V+SFoaeZUZ12uOGcr38LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTIzMWQyOWM0YTIzYjNlOThiMTQ4MTNkYWMwOTgzZTNh MzQwNTkwHhcNMjUxMjE5MTYwMTA1WhcNMjUxMjIwMTYwMTA1WjAzMTEwLwYDVQQD Eyg5ZmUwNmUzYjExZTQ0MTlhNGQyY2MyOGYxNzAxMjVkZDczNjQ4YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgVPc60kcU7U1qAEOrwdFzGSpFJJ 0RpMFcmlx5AnpOY7gjT89ylx/+umZxNR6nYpr2p4cNBYHVgHbazcO27rXtP34h6c pnTgHUtnUC/oYfRr0tjKDHn5bV8m+HfSd905wuVC2nuXo3HiLGzaboXfcRG8phJw CFLvhiZZId3aFUd3cZpRL3PNjVY+T6BtKSa/aQUEuPVs8tscizk2t78ElGdg3q7N yAGEUtnhGoi2jXcYZPwa2ZFX6cT1pzVnX9ZFs2lqfqfCa396UYuILmxvY9orPCtR MtyuYNNPzmNuyEJFmI/7riB8DihUyCjItLLkI1z2Eel8tcTXXaoEfh28nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/gbjsR5EGaTSzCjxcBJd1zZIsZMB8GA1UdIwQY MBaAFHuiMdKcSiOz6YsUgT2sCYPjo0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGIt NTEyNGU5NTE1YjE0LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGItNTEyNGU5NTE1YjE0 LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVHVzm1D TnIf+jNziujdHdOSNbG1Li7z6gyNthH4SLxq4j+mZivD9cqaEshUav52iVevsrjW regtUrDNHnIgpuZbqkDOlekzM7SELYkZ/MPI+2dubqsXzCWvWpbzEhGP5xWPK+cU odYMihP1QbMJA+gIQ1elrx06yqsDDJu+U/wVUNxdXf4EM/Vssxng9IhnBlR03cji GM4ycj7WIw/k8cWc6ukp7XDeLJZDXzvX2KWOG+NJOpqKHcdUPB+sofYyewNekIOF KEBRKp0BQQAFaAOHzwBM3/dUaxBD9+saGKIIa4yYWBBkvc5oYuSHYdtl7VXW2gTf I0DN59D5EIqOeg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:48 2025 by rpki-client