This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json) Hash identifier: AZVTX/qdYrng8U95RbRR3NFngt1wGBqTmP3arrr+BJ8= Subject key identifier: BF:66:B9:5E:C6:FF:41:85:62:3C:09:0D:F2:90:E7:95:F6:12:28:53 Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Certificate serial: 019AF42E24FDE6C08001EB872AA8E19858D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft Manifest number: 0E9B Signing time: Sat 06 Dec 2025 15:00:56 +0000 Manifest this update: Sat 06 Dec 2025 15:00:56 +0000 Manifest next update: Sun 07 Dec 2025 15:00:56 +0000 Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=) 2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: j+4MK6JOyHE8l8Nxqko/MsAc9fsQ2/VQ7tnlRATleaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:24:fd:e6:c0:80:01:eb:87:2a:a8:e1:98:58:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Validity Not Before: Dec 6 15:00:56 2025 GMT Not After : Dec 7 15:00:56 2025 GMT Subject: CN=bf66b95ec6ff4185623c090df290e795f6122853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:c6:72:0c:82:83:8b:5c:48:6f:1f:2c:28: ee:ef:24:55:3e:da:db:36:90:b4:0f:52:e9:5f:d5: 62:2e:33:e4:35:92:a1:8b:86:57:3e:0e:73:c3:77: a1:d5:a3:97:c1:6e:c2:e3:a0:e9:22:7d:46:fe:d7: cf:59:72:13:bb:07:c4:65:05:08:8b:be:e3:f9:c3: 4e:00:29:ca:06:af:d6:97:43:b7:de:b2:03:79:02: 0f:77:15:fc:a0:72:c4:88:07:f3:ee:ea:fe:4c:e7: f8:13:7c:ed:e3:3a:23:c5:c7:51:f1:67:8b:01:cc: 97:87:f9:8a:77:02:dc:10:fa:d3:e6:f3:a0:32:c9: 88:83:93:88:01:0a:ab:b3:81:f1:77:87:16:99:3d: 10:c2:a6:5a:f0:c1:87:60:91:57:b9:2b:0c:c6:08: 1a:26:1a:0f:6f:8e:ea:cd:ea:ae:7d:c0:92:8f:d2: 09:e1:09:f1:1e:59:88:48:51:ee:58:5a:19:25:f9: b6:4e:96:1a:1d:3d:4c:70:53:57:9d:2a:04:6e:03: 62:76:0b:64:2f:83:17:93:06:c6:36:06:8e:3f:0b: 22:9b:c7:75:1e:f4:9d:81:8d:3e:3e:d2:f3:ae:9d: eb:ca:b4:f9:e2:7f:9c:57:73:de:60:6d:10:1a:2a: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:B9:5E:C6:FF:41:85:62:3C:09:0D:F2:90:E7:95:F6:12:28:53 X509v3 Authority Key Identifier: keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8d:ba:68:bf:7e:f2:60:c1:8f:2d:10:b9:fb:f8:61:3f:ce: 75:4f:cf:e0:3c:07:41:2d:c7:61:18:7c:c8:cc:f0:8c:5a:6b: 23:95:13:21:d3:d1:bf:cc:a1:80:29:5b:2b:7b:af:5c:c8:17: cf:d2:58:48:e3:ea:4d:d1:f0:cf:fe:77:1f:d2:52:7c:6f:30: 1a:4f:68:c8:83:40:f8:05:f9:e5:db:f8:da:7f:73:3c:cb:a4: eb:40:75:67:9b:37:ef:7f:f8:d7:68:58:90:97:96:2f:d5:09: 97:d2:48:d0:e7:93:9b:2e:9f:cf:f9:e2:d4:df:e0:e4:8d:e8: b8:fb:8d:39:f8:ce:1b:6a:5b:1f:30:f4:08:e7:b1:55:78:36: a2:94:96:8b:8d:9e:24:7a:4c:f5:af:0d:46:94:b2:28:ed:54: 1f:c0:e9:15:cf:54:c8:89:98:ac:31:af:08:ee:6a:fc:99:f5: 5c:67:12:60:bc:fb:72:d1:27:bc:ee:f0:99:35:31:34:11:b7: f0:a0:cd:de:53:96:51:ae:e6:0b:05:4c:7c:4d:3d:3b:9f:a3: bd:ff:18:4c:08:ae:4f:b5:ee:27:81:aa:ac:7e:5e:a2:d4:94: 3a:ac:6d:4b:95:ce:58:d2:50:98:0c:91:70:e5:e2:42:f9:2e: bd:e1:66:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LiT95sCAAeuHKqjhmFjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk OGYzNGUwHhcNMjUxMjA2MTUwMDU2WhcNMjUxMjA3MTUwMDU2WjAzMTEwLwYDVQQD EyhiZjY2Yjk1ZWM2ZmY0MTg1NjIzYzA5MGRmMjkwZTc5NWY2MTIyODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwjGcgyCg4tcSG8fLCju7yRVPtrb NpC0D1LpX9ViLjPkNZKhi4ZXPg5zw3eh1aOXwW7C46DpIn1G/tfPWXITuwfEZQUI i77j+cNOACnKBq/Wl0O33rIDeQIPdxX8oHLEiAfz7ur+TOf4E3zt4zojxcdR8WeL AcyXh/mKdwLcEPrT5vOgMsmIg5OIAQqrs4Hxd4cWmT0QwqZa8MGHYJFXuSsMxgga JhoPb47qzequfcCSj9IJ4QnxHlmISFHuWFoZJfm2TpYaHT1McFNXnSoEbgNidgtk L4MXkwbGNgaOPwsim8d1HvSdgY0+PtLzrp3ryrT54n+cV3PeYG0QGiq9ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9muV7G/0GFYjwJDfKQ55X2EihTMB8GA1UdIwQY MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL426aL9+ 8mDBjy0Qufv4YT/OdU/P4DwHQS3HYRh8yMzwjFprI5UTIdPRv8yhgClbK3uvXMgX z9JYSOPqTdHwz/53H9JSfG8wGk9oyINA+AX55dv42n9zPMuk60B1Z5s373/412hY kJeWL9UJl9JI0OeTmy6fz/ni1N/g5I3ouPuNOfjOG2pbHzD0COexVXg2opSWi42e JHpM9a8NRpSyKO1UH8DpFc9UyImYrDGvCO5q/Jn1XGcSYLz7ctEnvO7wmTUxNBG3 8KDN3lOWUa7mCwVMfE09O5+jvf8YTAiuT7XuJ4GqrH5eotSUOqxtS5XOWNJQmAyR cOXiQvkuveFmLQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:13 2025 by rpki-client