This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json) Hash identifier: FmMOu0hpc/xdRQLaxjvtmfeRVdystlQLwJCwko8VmXc= Subject key identifier: 33:83:D8:77:79:AE:77:EB:F8:FA:DD:01:EE:35:59:E4:40:D8:30:58 Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Certificate serial: 019B30E80615329D923E41A5565503CBBBEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 10:01:10 +0000 Manifest this update: Thu 18 Dec 2025 10:01:10 +0000 Manifest next update: Fri 19 Dec 2025 10:01:10 +0000 Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: yVmMEANiYawLIKcrZ5GtRMKZ49Tw2uKcUOxqvi+uH0U=) 2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=) 3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:06:15:32:9d:92:3e:41:a5:56:55:03:cb:bb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Validity Not Before: Dec 18 10:01:10 2025 GMT Not After : Dec 19 10:01:10 2025 GMT Subject: CN=3383d87779ae77ebf8fadd01ee3559e440d83058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:0b:28:8f:ea:5d:4c:5f:29:1c:14:57:52: 75:3f:96:2f:a2:64:0d:f2:ba:9b:49:2c:04:06:21: 38:de:28:78:22:bd:05:e9:9f:ac:32:50:4c:aa:6b: 86:80:cd:a9:c2:d0:d1:b9:bf:49:a6:75:26:1e:e2: f0:da:05:7a:32:0d:ef:b8:d3:9e:4d:b7:f0:bb:fe: b6:0a:48:3e:0c:d9:a8:87:fc:70:a3:b3:b5:e7:98: 27:34:e6:20:4c:d5:81:75:9b:4b:ca:92:85:98:2f: 38:23:47:5d:4e:94:ee:5f:d7:b8:0d:d2:bb:2f:aa: 4c:f2:16:29:6e:94:e8:68:ca:7b:ea:0e:6f:7a:35: 89:fa:3a:65:92:ee:42:b3:13:81:d4:f3:0f:b9:61: fe:1c:80:31:bb:da:d9:4f:cd:94:81:a3:96:55:45: f8:dc:78:e5:19:3a:f4:ce:07:59:4c:b9:8c:00:c6: 9e:8b:df:1b:39:90:30:81:24:0a:07:31:a5:68:8e: e1:be:fa:96:dd:4f:3f:d8:0d:ce:0d:4d:88:41:0b: e1:c5:4d:36:77:a3:ce:66:54:35:52:29:b6:cc:0d: 95:95:87:a5:e5:f2:ed:35:4d:b7:d3:74:3d:0f:e0: 97:ff:aa:a8:31:ad:f0:3a:52:bd:c6:3b:81:c2:ec: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:83:D8:77:79:AE:77:EB:F8:FA:DD:01:EE:35:59:E4:40:D8:30:58 X509v3 Authority Key Identifier: keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f0:3a:86:27:d8:e5:6d:57:f8:25:dd:07:9b:6c:70:f5:1c: dd:d0:38:1c:53:15:e9:d4:ba:28:90:66:eb:8b:c3:db:9b:b1: 81:0e:c3:2e:bc:44:69:be:fc:8a:de:fa:d2:0e:ec:eb:29:06: d3:43:ac:0c:f4:7e:3d:80:c7:a7:33:7d:55:4f:56:1f:0f:22: 5b:d9:79:3f:46:89:45:f5:0b:5c:4d:d1:26:56:e6:0e:d5:41: f3:e3:35:12:bf:24:3e:90:ac:02:38:86:a4:2c:25:0c:db:28: 63:ee:57:a9:7e:55:25:5b:f4:25:50:b2:12:4c:7b:2d:ce:80: 52:36:ce:8e:49:c5:6d:06:9c:52:75:aa:ba:20:49:4e:93:bf: 24:39:09:15:50:a6:0d:e3:3f:96:12:0d:e4:7a:3b:51:1f:fe: d3:62:5f:0a:06:d0:9d:5c:d4:32:16:77:86:b1:dd:a3:3d:b0: 04:f0:63:0d:96:67:47:aa:ed:48:68:6a:6b:d3:20:a7:61:77: 37:26:66:a9:63:26:94:f8:81:50:2b:37:83:1c:98:86:f8:90: 4d:c6:12:1d:4c:d0:95:e7:d1:ae:e8:d1:42:40:87:93:fc:8c: f4:4b:e3:c0:f4:57:93:08:1e:5b:72:e5:00:6d:60:9c:2e:e6: a6:d7:2d:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6AYVMp2SPkGlVlUDy7vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm YTI4NjYwHhcNMjUxMjE4MTAwMTEwWhcNMjUxMjE5MTAwMTEwWjAzMTEwLwYDVQQD EygzMzgzZDg3Nzc5YWU3N2ViZjhmYWRkMDFlZTM1NTllNDQwZDgzMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0QLKI/qXUxfKRwUV1J1P5YvomQN 8rqbSSwEBiE43ih4Ir0F6Z+sMlBMqmuGgM2pwtDRub9JpnUmHuLw2gV6Mg3vuNOe Tbfwu/62Ckg+DNmoh/xwo7O155gnNOYgTNWBdZtLypKFmC84I0ddTpTuX9e4DdK7 L6pM8hYpbpToaMp76g5vejWJ+jplku5CsxOB1PMPuWH+HIAxu9rZT82UgaOWVUX4 3HjlGTr0zgdZTLmMAMaei98bOZAwgSQKBzGlaI7hvvqW3U8/2A3ODU2IQQvhxU02 d6POZlQ1Uim2zA2VlYel5fLtNU2303Q9D+CX/6qoMa3wOlK9xjuBwuzS8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOD2Hd5rnfr+PrdAe41WeRA2DBYMB8GA1UdIwQY MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvA6hifY 5W1X+CXdB5tscPUc3dA4HFMV6dS6KJBm64vD25uxgQ7DLrxEab78it760g7s6ykG 00OsDPR+PYDHpzN9VU9WHw8iW9l5P0aJRfULXE3RJlbmDtVB8+M1Er8kPpCsAjiG pCwlDNsoY+5XqX5VJVv0JVCyEkx7Lc6AUjbOjknFbQacUnWquiBJTpO/JDkJFVCm DeM/lhIN5Ho7UR/+02JfCgbQnVzUMhZ3hrHdoz2wBPBjDZZnR6rtSGhqa9Mgp2F3 NyZmqWMmlPiBUCs3gxyYhviQTcYSHUzQlefRrujRQkCHk/yM9EvjwPRXkwgeW3Ll AG1gnC7mptctVg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:35:29 2025 by rpki-client