This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft File: 6vl4jJlRMNcOrEbAayJmctJdQYU.mft (raw, json) Hash identifier: U8r0c/sy7NkhUnUwpMAekcBVS1w39GqtUBIBwqrxW7o= Subject key identifier: B9:B0:D6:2C:EB:57:DB:36:61:0D:B3:78:4D:98:BB:BD:D0:42:F6:51 Authority key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 Certificate issuer: /CN=eaf9788c995130d70eac46c06b226672d25d4185 Certificate serial: 019AF31BA11C7DD785619DC53A070AEDC9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft Manifest number: 0CA9 Signing time: Sat 06 Dec 2025 10:01:05 +0000 Manifest this update: Sat 06 Dec 2025 10:01:05 +0000 Manifest next update: Sun 07 Dec 2025 10:01:05 +0000 Files and hashes: 1: 6vl4jJlRMNcOrEbAayJmctJdQYU.crl (hash: KQVpQU1f843dtj6Ea6GHLizfZjTOfuqgpYrf36z1qBY=) 2: CQQ3Z2zA6nIR1Bc5302cbzfvf2Q.roa (hash: fqcNc1mJfaykXu7IOGpmWN0xqLSHMqYySIqnsZGy/CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a1:1c:7d:d7:85:61:9d:c5:3a:07:0a:ed:c9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9788c995130d70eac46c06b226672d25d4185 Validity Not Before: Dec 6 10:01:05 2025 GMT Not After : Dec 7 10:01:05 2025 GMT Subject: CN=b9b0d62ceb57db36610db3784d98bbbdd042f651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ea:ad:9e:ab:d0:6c:65:83:f8:f4:cb:48:b8: e8:bc:2f:b1:82:75:dc:4a:ab:58:6f:8a:08:3b:42: 00:3b:3d:6b:86:f7:89:45:9e:73:11:b2:d3:86:a1: c0:2e:aa:89:ca:64:18:71:71:66:ad:b9:36:05:4a: 70:2f:2f:06:6a:4d:2b:70:3d:d1:46:81:5b:3b:ae: 97:d0:6e:42:36:c8:dd:07:3d:75:a3:ac:56:ab:f4: dc:4f:bf:c7:4a:78:89:84:b6:3c:8c:fc:dd:61:ab: 7c:24:42:49:95:75:b7:4c:19:91:cb:7b:1b:2d:86: 21:e1:78:26:ca:18:6d:b5:d8:a1:59:e3:74:40:33: 06:17:9b:0e:db:4b:46:09:5e:f5:6e:0d:9e:7f:7b: 26:45:3d:97:27:c4:7f:f1:8c:29:00:10:8a:dc:80: 0a:0f:83:99:77:83:f2:b4:6f:3f:40:f8:0e:fd:dc: 58:84:24:b4:81:fc:17:d2:a1:ac:a4:36:9a:f1:a5: 31:aa:ca:3e:fd:d4:30:d8:e5:00:a9:6d:66:b3:4c: 4d:15:ec:bb:1b:1e:29:5c:fa:34:e8:e2:16:5d:78: ed:59:cf:73:66:8d:da:9b:5c:85:d6:bc:14:90:93: e1:21:94:90:b6:fe:8a:d6:ef:7f:96:7e:5e:39:18: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B0:D6:2C:EB:57:DB:36:61:0D:B3:78:4D:98:BB:BD:D0:42:F6:51 X509v3 Authority Key Identifier: keyid:EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d8:c4:a9:03:06:04:9d:32:bd:2e:fa:5f:62:b7:79:57:45: 47:e4:20:67:3d:b8:9a:8e:37:e7:e3:c2:3a:58:ff:58:cc:79: ea:d8:e2:b5:3b:08:79:25:fb:88:ea:be:70:98:4a:68:1c:e8: d7:a7:a3:69:06:75:17:7e:15:27:98:16:a9:70:2a:58:1b:5d: d4:36:67:33:ac:ef:26:a0:b7:5c:a8:8c:81:59:7a:14:67:d8: df:08:4c:40:e4:9b:14:95:23:41:7d:cc:d0:6d:b5:06:10:73: 38:8d:06:ef:9b:95:9f:76:f7:a8:c4:1e:ed:ef:f7:9b:37:76: 66:1e:8d:5f:d3:74:19:b9:ae:08:df:6f:30:4c:07:81:4c:a6: 10:14:8c:d6:85:69:66:c7:ce:e4:21:32:3a:cc:dd:8c:1b:9b: dc:df:b1:2d:2f:41:cf:37:39:4a:c7:9c:60:5c:2d:79:af:e7: 4f:9d:82:b3:50:d9:79:0f:4b:f0:14:d9:7c:61:6c:ca:e6:d1: 99:6f:f6:ed:81:4a:1c:de:04:17:5e:f5:7a:fc:c6:06:cb:8f: 04:26:85:57:1d:d4:68:d0:12:45:f0:d4:e0:9a:ef:79:02:90: 69:b8:a4:cf:f7:5f:66:81:f3:e8:a2:06:97:4d:16:91:45:6c: 62:4f:58:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6EcfdeFYZ3FOgcK7cnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZjk3ODhjOTk1MTMwZDcwZWFjNDZjMDZiMjI2NjcyZDI1 ZDQxODUwHhcNMjUxMjA2MTAwMTA1WhcNMjUxMjA3MTAwMTA1WjAzMTEwLwYDVQQD EyhiOWIwZDYyY2ViNTdkYjM2NjEwZGIzNzg0ZDk4YmJiZGQwNDJmNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+qtnqvQbGWD+PTLSLjovC+xgnXc SqtYb4oIO0IAOz1rhveJRZ5zEbLThqHALqqJymQYcXFmrbk2BUpwLy8Gak0rcD3R RoFbO66X0G5CNsjdBz11o6xWq/TcT7/HSniJhLY8jPzdYat8JEJJlXW3TBmRy3sb LYYh4XgmyhhttdihWeN0QDMGF5sO20tGCV71bg2ef3smRT2XJ8R/8YwpABCK3IAK D4OZd4PytG8/QPgO/dxYhCS0gfwX0qGspDaa8aUxqso+/dQw2OUAqW1ms0xNFey7 Gx4pXPo06OIWXXjtWc9zZo3am1yF1rwUkJPhIZSQtv6K1u9/ln5eORhPBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmw1izrV9s2YQ2zeE2Yu73QQvZRMB8GA1UdIwQY MBaAFOr5eIyZUTDXDqxGwGsiZnLSXUGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUt MGZlN2EwZWU2YmQzLzEvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUtMGZlN2EwZWU2YmQz LzEvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9jEqQMG BJ0yvS76X2K3eVdFR+QgZz24mo435+PCOlj/WMx56tjitTsIeSX7iOq+cJhKaBzo 16ejaQZ1F34VJ5gWqXAqWBtd1DZnM6zvJqC3XKiMgVl6FGfY3whMQOSbFJUjQX3M 0G21BhBzOI0G75uVn3b3qMQe7e/3mzd2Zh6NX9N0GbmuCN9vMEwHgUymEBSM1oVp ZsfO5CEyOszdjBub3N+xLS9Bzzc5SsecYFwtea/nT52Cs1DZeQ9L8BTZfGFsyubR mW/27YFKHN4EF171evzGBsuPBCaFVx3UaNASRfDU4JrveQKQabikz/dfZoHz6KIG l00WkUVsYk9Ymw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:04 2025 by rpki-client