This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft File: 6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json) Hash identifier: vS0mLSZRUl7S+b4NUaScpkwQPSZHdQhCci6i6O922uk= Subject key identifier: 4C:F7:8C:E0:A3:6D:A2:6F:C9:E0:04:D7:50:2B:19:C5:16:58:FB:0C Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25 Certificate issuer: /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525 Certificate serial: 019B5ABF64EE7B0E997F259A8DE5C90DD04F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft Manifest number: 0CF2 Signing time: Fri 26 Dec 2025 13:00:51 +0000 Manifest this update: Fri 26 Dec 2025 13:00:51 +0000 Manifest next update: Sat 27 Dec 2025 13:00:51 +0000 Files and hashes: 1: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: /UFoMqEBmDd0/SWiVNRx/aBX16mMC0t/LIuOGWIPOno=) 2: zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa (hash: us40hEG1NcVWjJDpzrMVHHjC6ox4uAMOwbjwuL6+2HM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:64:ee:7b:0e:99:7f:25:9a:8d:e5:c9:0d:d0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525 Validity Not Before: Dec 26 13:00:51 2025 GMT Not After : Dec 27 13:00:51 2025 GMT Subject: CN=4cf78ce0a36da26fc9e004d7502b19c51658fb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:9a:e2:de:c0:93:1c:28:1f:a9:8e:72:53: 23:5c:98:7c:b1:f8:9c:a7:38:e0:0e:84:54:b9:bd: 9a:5e:81:2a:49:9c:f4:15:14:55:61:22:37:5e:82: 98:37:16:ae:5a:66:bc:8b:60:a8:82:ab:19:ca:da: ba:d1:5c:92:64:b2:c3:a0:3d:8c:75:13:a1:dc:f5: 83:20:d2:f2:82:b8:86:15:5d:38:83:10:c5:39:80: 1b:aa:e2:b1:4a:f3:10:7b:d8:d5:a8:64:9b:e5:8e: 7f:29:c4:74:4d:a7:56:c9:7b:89:a5:70:6f:d8:bc: d7:19:70:4e:d4:22:6a:f8:bd:f5:c3:78:bb:7a:99: dc:0c:ee:c7:16:08:1f:05:95:3f:5e:1b:4f:9b:ce: ff:7a:e9:1f:b5:4f:ec:7f:f2:10:69:ae:8b:3b:2a: 5d:13:a5:4e:c6:d2:f9:9a:d2:e1:40:76:69:17:3e: 20:b4:db:35:2f:37:bf:85:dd:b2:2f:3c:86:6c:7a: 8b:62:76:c9:49:1b:15:7f:06:bd:2a:61:93:56:47: 4e:02:ee:fe:68:ee:b5:f7:90:ad:48:bf:c7:6b:4d: 04:12:85:8c:0f:a0:f6:fa:df:c6:f5:4d:0e:95:80: c6:d8:cb:9e:cf:5a:2e:66:49:71:c6:8a:c2:2c:70: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F7:8C:E0:A3:6D:A2:6F:C9:E0:04:D7:50:2B:19:C5:16:58:FB:0C X509v3 Authority Key Identifier: keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:78:ca:26:c0:68:57:50:91:2f:31:f0:0e:a0:d1:21:9a:34: 67:96:70:65:72:0b:c9:a9:f9:c7:c4:44:0c:ea:fc:2a:51:94: 31:78:b0:6b:ae:25:09:3c:07:b4:21:0d:b8:52:4a:a6:f2:3e: 79:b8:7f:39:88:2f:1e:f8:73:ee:9b:07:7e:f2:60:39:fd:8b: 58:13:9a:a2:d0:80:3b:f4:52:4f:03:ae:09:da:fb:f7:38:c4: 4f:9e:d0:71:58:40:f2:e4:f7:b2:17:0e:43:cf:85:a8:4c:1e: 3c:8d:a7:e9:48:25:4f:77:b2:fe:ae:c7:7c:a0:13:c8:fd:df: 42:27:42:de:c6:30:fa:f5:dc:50:42:d8:58:48:8a:2b:fa:1d: 7b:04:15:33:36:85:bd:b9:8f:59:d4:d0:bb:2e:a3:87:b1:7c: 6b:65:28:a5:d7:7c:6a:ec:b8:03:b3:d7:9b:19:de:fd:a6:d9: d5:41:1f:60:28:12:cb:ac:e3:95:9c:44:84:b2:e0:3c:ea:82: 3c:bf:02:c6:1c:ff:18:25:ff:5d:9c:22:96:87:7c:c6:71:bd: 3d:64:46:d3:21:8a:a4:f1:f7:5b:16:ac:5e:a2:80:24:fe:82: 09:ab:b5:4c:0d:c0:8f:ab:96:53:cd:1e:6b:cf:a6:39:76:fc: 6c:5d:15:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav2Tuew6ZfyWajeXJDdBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2JkNGMyMzA2MmQ2OTUzN2ZiMmU4YThhY2NiZmIwMjdm MmI1MjUwHhcNMjUxMjI2MTMwMDUxWhcNMjUxMjI3MTMwMDUxWjAzMTEwLwYDVQQD Eyg0Y2Y3OGNlMGEzNmRhMjZmYzllMDA0ZDc1MDJiMTljNTE2NThmYjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwKa4t7AkxwoH6mOclMjXJh8sfic pzjgDoRUub2aXoEqSZz0FRRVYSI3XoKYNxauWma8i2CogqsZytq60VySZLLDoD2M dROh3PWDINLygriGFV04gxDFOYAbquKxSvMQe9jVqGSb5Y5/KcR0TadWyXuJpXBv 2LzXGXBO1CJq+L31w3i7epncDO7HFggfBZU/XhtPm87/eukftU/sf/IQaa6LOypd E6VOxtL5mtLhQHZpFz4gtNs1Lze/hd2yLzyGbHqLYnbJSRsVfwa9KmGTVkdOAu7+ aO6195CtSL/Ha00EEoWMD6D2+t/G9U0OlYDG2Muez1ouZklxxorCLHDOwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz3jOCjbaJvyeAE11ArGcUWWPsMMB8GA1UdIwQY MBaAFOjL1MIwYtaVN/suiorMv7An8rUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYt NzgyM2JjY2E1OTcwLzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iNGVmNDgtMzliMy00NjU4LWE3NjYtNzgyM2JjY2E1OTcw LzEvNk12VXdqQmkxcFUzLXk2S2lzeV9zQ2Z5dFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHjKJsBo V1CRLzHwDqDRIZo0Z5ZwZXILyan5x8REDOr8KlGUMXiwa64lCTwHtCENuFJKpvI+ ebh/OYgvHvhz7psHfvJgOf2LWBOaotCAO/RSTwOuCdr79zjET57QcVhA8uT3shcO Q8+FqEwePI2n6UglT3ey/q7HfKATyP3fQidC3sYw+vXcUELYWEiKK/odewQVMzaF vbmPWdTQuy6jh7F8a2Uopdd8auy4A7PXmxne/abZ1UEfYCgSy6zjlZxEhLLgPOqC PL8Cxhz/GCX/XZwilod8xnG9PWRG0yGKpPH3WxasXqKAJP6CCau1TA3Aj6uWU80e a8+mOXb8bF0VOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:33 2025 by rpki-client