This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft File: e6g1J3sxmmnH9usa1IsJ1mMv090.mft (raw, json) Hash identifier: 4VvpowdKfL/GmTjJIQ/ukldnP+TGUPGBdxewcftyjWY= Subject key identifier: C5:06:85:65:B4:FE:CC:6A:12:47:AD:8E:07:03:E7:89:07:C8:98:28 Authority key identifier: 7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD Certificate issuer: /CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd Certificate serial: 019AF31B5207809C0846A5C583556CC05AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft Manifest number: 0613 Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: e6g1J3sxmmnH9usa1IsJ1mMv090.crl (hash: ASiK2LD25ryVT0jp+qktmd1o5p7dN7CEae0i7pDMEm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:52:07:80:9c:08:46:a5:c5:83:55:6c:c0:5a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=c5068565b4fecc6a1247ad8e0703e78907c89828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:80:0d:e3:ee:6b:f2:98:2e:d8:89:d3:89: 3c:0e:67:90:ab:c8:d1:18:73:03:44:94:35:3d:47: 1b:7d:40:26:b9:76:56:7e:af:89:79:76:67:8f:ff: 0c:b0:ba:7c:17:ae:a2:70:db:e3:e8:b8:10:9e:a8: 2a:5b:06:eb:5d:24:ec:8b:63:1f:c4:18:7d:19:21: f3:92:03:84:39:dc:84:d8:33:ed:bc:60:3e:c6:b4: a5:60:e5:9e:5c:31:e9:88:66:88:94:a3:21:61:e1: dd:56:b1:ea:8b:c8:01:05:36:d6:40:c2:a0:fa:69: 6a:72:b9:c5:15:37:08:02:9a:5a:fd:9a:17:c9:de: c5:d3:4b:db:ba:a2:51:23:05:e6:ac:77:2d:f4:ff: 60:0a:6c:c1:03:cc:17:f4:39:69:26:cc:9c:c7:4b: 40:3b:18:d9:a6:a6:19:80:61:54:2e:e8:e2:f4:61: b4:67:10:de:72:80:e1:da:0d:ad:7c:d0:47:15:12: 70:f8:4e:01:a1:8e:6e:f3:c6:7b:70:b2:ab:23:0e: a1:6a:6e:df:f2:3b:c4:48:18:94:b7:d1:a2:5e:5d: ae:84:c1:7a:57:d7:65:e2:3e:11:51:7f:90:b5:f3: fc:59:f7:50:7f:89:02:ae:07:85:57:78:73:47:aa: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:06:85:65:B4:FE:CC:6A:12:47:AD:8E:07:03:E7:89:07:C8:98:28 X509v3 Authority Key Identifier: keyid:7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:17:f2:2b:8f:cf:cd:70:cf:5e:36:ea:02:ae:07:76:01:4b: d5:a6:c3:e3:af:98:50:64:25:e9:42:27:dd:37:9d:66:bf:93: 5f:c3:4f:6e:ea:c2:99:80:16:80:f2:fc:c2:c0:06:73:ec:b1: 23:96:41:d9:89:b2:68:f3:83:b4:36:75:25:5a:97:73:20:cc: a0:08:39:e1:32:6a:cd:5c:16:5b:b4:47:08:d7:81:4f:d6:e4: a5:e2:37:dc:41:2e:c9:22:9f:67:0d:48:12:8f:0b:68:74:42: cd:72:cd:03:89:99:45:89:33:b4:6c:a3:e7:a0:ab:ce:c4:d2: dc:09:f7:6d:54:c2:73:0e:f3:f3:50:1a:4d:30:db:0e:ce:d9: 2a:36:3d:95:05:31:04:76:31:09:80:46:49:c8:4a:b8:77:6c: 1a:a2:c2:f3:53:db:e2:49:83:ad:59:22:ed:55:dc:f7:ab:ea: 8b:3f:b5:c6:38:33:3f:bc:61:86:56:a0:a2:ad:f9:38:f5:3e: 8e:fa:07:7c:bc:30:2b:ab:99:b3:40:bc:c2:af:ec:b7:bd:ae: e6:1d:80:67:5a:83:f4:8b:5d:8f:bb:cb:59:90:13:74:d9:e0: 48:1f:d5:26:db:d1:0f:26:1c:31:79:15:cc:ef:f5:26:f2:ef: a9:11:33:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1IHgJwIRqXFg1VswFqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTgzNTI3N2IzMTlhNjljN2Y2ZWIxYWQ0OGIwOWQ2NjMy ZmQzZGQwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD EyhjNTA2ODU2NWI0ZmVjYzZhMTI0N2FkOGUwNzAzZTc4OTA3Yzg5ODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr6ADePua/KYLtiJ04k8DmeQq8jR GHMDRJQ1PUcbfUAmuXZWfq+JeXZnj/8MsLp8F66icNvj6LgQnqgqWwbrXSTsi2Mf xBh9GSHzkgOEOdyE2DPtvGA+xrSlYOWeXDHpiGaIlKMhYeHdVrHqi8gBBTbWQMKg +mlqcrnFFTcIAppa/ZoXyd7F00vbuqJRIwXmrHct9P9gCmzBA8wX9DlpJsycx0tA OxjZpqYZgGFULuji9GG0ZxDecoDh2g2tfNBHFRJw+E4BoY5u88Z7cLKrIw6ham7f 8jvESBiUt9GiXl2uhMF6V9dl4j4RUX+QtfP8WfdQf4kCrgeFV3hzR6r+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUGhWW0/sxqEketjgcD54kHyJgoMB8GA1UdIwQY MBaAFHuoNSd7MZppx/brGtSLCdZjL9PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZnMUozc3htbW5IOXVzYTFJc0oxbU12MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yYmVhYjgtZTI5Ny00ZTYzLWJmYmIt NjRhM2QwNzE1NTVhLzEvZTZnMUozc3htbW5IOXVzYTFJc0oxbU12MDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yYmVhYjgtZTI5Ny00ZTYzLWJmYmItNjRhM2QwNzE1NTVh LzEvZTZnMUozc3htbW5IOXVzYTFJc0oxbU12MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRfyK4/P zXDPXjbqAq4HdgFL1abD46+YUGQl6UIn3TedZr+TX8NPburCmYAWgPL8wsAGc+yx I5ZB2YmyaPODtDZ1JVqXcyDMoAg54TJqzVwWW7RHCNeBT9bkpeI33EEuySKfZw1I Eo8LaHRCzXLNA4mZRYkztGyj56CrzsTS3An3bVTCcw7z81AaTTDbDs7ZKjY9lQUx BHYxCYBGSchKuHdsGqLC81Pb4kmDrVki7VXc96vqiz+1xjgzP7xhhlagoq35OPU+ jvoHfLwwK6uZs0C8wq/st72u5h2AZ1qD9Itdj7vLWZATdNngSB/VJtvRDyYcMXkV zO/1JvLvqREzKw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:00 2025 by rpki-client