This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft File: 6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft (raw, json) Hash identifier: To/ePJY+DSxA5HMaiQYG3FJQHgVan/vIur6e8F5URA8= Subject key identifier: 26:94:FB:B8:CA:E0:06:BD:A9:D0:B3:C5:C6:69:97:AC:B1:D6:43:0E Authority key identifier: EB:24:89:83:06:20:4F:71:AF:D8:76:34:CC:69:55:BF:42:BB:52:44 Certificate issuer: /CN=eb24898306204f71afd87634cc6955bf42bb5244 Certificate serial: 019AF209070C8746EA21D804C776BA783806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft Manifest number: CA Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: 6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.crl (hash: ahiRb3rr8ZnjjcBxjG0b5VnMP9NtgaPTkyFRh5sfWQU=) 2: qO0k87ULVQHqjyZI3z-AzfehUQA.roa (hash: bRSYStNZUlGTKFFQvDFiatgcJ/Z8Rwo+cSilPb5oWow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:07:0c:87:46:ea:21:d8:04:c7:76:ba:78:38:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb24898306204f71afd87634cc6955bf42bb5244 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=2694fbb8cae006bda9d0b3c5c66997acb1d6430e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:e7:b3:13:2f:ac:c9:c3:6d:3e:74:0a:b2: a7:90:e7:c2:24:c5:a7:75:63:be:92:53:88:1c:04: 2d:55:c2:32:ac:d4:84:0f:d7:d1:68:8e:db:1f:36: e8:c4:b2:02:0f:f6:d1:0e:b0:b9:51:00:bc:ce:09: 4a:a2:68:f4:5a:fe:92:1b:de:ae:f2:bd:85:46:af: b4:80:3f:51:d7:5f:8c:d8:6b:8e:42:28:5e:76:dc: e2:c5:65:9c:f3:04:7b:67:e7:3b:cc:0b:30:f6:6b: 58:77:be:82:a4:f4:83:ba:40:68:c6:04:cb:1f:77: 17:c2:f0:e3:bb:a8:e9:03:89:34:42:85:37:24:4a: b0:7c:fa:b7:57:65:15:9f:cc:9b:56:6d:46:5d:98: 7e:28:4b:25:92:03:5b:e2:07:15:5a:66:1d:9a:1c: 80:f3:f8:8d:ca:7d:78:fb:aa:b0:49:8d:ed:d9:32: a6:8f:f0:2e:ac:67:13:d2:92:a1:3b:22:e6:bb:fe: d1:e0:d9:a0:a4:a7:0f:c8:a0:26:3f:39:45:cf:3d: 1c:f2:80:06:d1:79:97:d0:d8:31:5c:82:c6:8e:22: 56:dd:6c:22:ea:38:49:ab:79:5f:e4:7c:c3:6c:93: fd:29:a5:d7:e6:5f:5a:ff:bb:1d:0d:6e:ff:52:98: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:94:FB:B8:CA:E0:06:BD:A9:D0:B3:C5:C6:69:97:AC:B1:D6:43:0E X509v3 Authority Key Identifier: keyid:EB:24:89:83:06:20:4F:71:AF:D8:76:34:CC:69:55:BF:42:BB:52:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/590ed2-1487-4a3a-bdb6-671bc370aa65/1/6ySJgwYgT3Gv2HY0zGlVv0K7UkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:df:bd:7c:9f:da:33:10:46:01:ee:b8:07:83:28:98:f6:f3: 83:a8:43:99:08:bb:50:1c:75:ca:02:a7:7b:f6:fd:a0:60:e7: 91:72:5b:6c:6f:d0:8c:ce:82:16:41:f9:23:00:97:53:ae:98: 6c:85:6e:65:cc:de:7a:70:bb:39:0c:73:d6:60:08:9d:24:08: 75:56:11:5c:8e:d7:da:7b:df:46:5a:c4:8a:63:74:92:4f:a2: 92:14:bb:b5:4c:7d:7e:61:9b:93:78:89:18:ec:b1:c4:18:13: e5:81:be:b7:fe:36:0a:a2:77:fa:02:a0:de:e2:33:69:5a:3a: 2d:e8:73:b6:54:22:1e:12:9b:d2:1d:9a:2d:da:ab:26:8f:e7: ee:07:7b:c2:e7:ba:7a:c1:f9:eb:f9:03:66:66:ad:cd:4a:7e: 26:2e:ec:09:07:92:fb:97:96:98:66:b2:66:8d:37:09:1c:df: a1:00:b3:e7:94:41:c1:7d:86:99:a4:b0:be:1f:8d:84:da:36: b9:eb:4f:71:f8:1c:56:14:10:0e:fa:b6:17:5d:9d:10:34:06: 7a:4d:16:52:7e:3d:39:31:49:39:97:ae:c6:8d:ad:68:c1:19: b9:42:ad:03:a7:11:06:bd:f5:7a:af:d2:85:f4:08:ca:6a:b5: 19:18:69:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQcMh0bqIdgEx3a6eDgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMjQ4OTgzMDYyMDRmNzFhZmQ4NzYzNGNjNjk1NWJmNDJi YjUyNDQwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD EygyNjk0ZmJiOGNhZTAwNmJkYTlkMGIzYzVjNjY5OTdhY2IxZDY0MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQXnsxMvrMnDbT50CrKnkOfCJMWn dWO+klOIHAQtVcIyrNSED9fRaI7bHzboxLICD/bRDrC5UQC8zglKomj0Wv6SG96u 8r2FRq+0gD9R11+M2GuOQihedtzixWWc8wR7Z+c7zAsw9mtYd76CpPSDukBoxgTL H3cXwvDju6jpA4k0QoU3JEqwfPq3V2UVn8ybVm1GXZh+KEslkgNb4gcVWmYdmhyA 8/iNyn14+6qwSY3t2TKmj/AurGcT0pKhOyLmu/7R4NmgpKcPyKAmPzlFzz0c8oAG 0XmX0NgxXILGjiJW3Wwi6jhJq3lf5HzDbJP9KaXX5l9a/7sdDW7/UpiipwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaU+7jK4Aa9qdCzxcZpl6yx1kMOMB8GA1UdIwQY MBaAFOskiYMGIE9xr9h2NMxpVb9Cu1JEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnlTSmd3WWdUM0d2MkhZMHpHbFZ2MEs3VWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81OTBlZDItMTQ4Ny00YTNhLWJkYjYt NjcxYmMzNzBhYTY1LzEvNnlTSmd3WWdUM0d2MkhZMHpHbFZ2MEs3VWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81OTBlZDItMTQ4Ny00YTNhLWJkYjYtNjcxYmMzNzBhYTY1 LzEvNnlTSmd3WWdUM0d2MkhZMHpHbFZ2MEs3VWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9+9fJ/a MxBGAe64B4MomPbzg6hDmQi7UBx1ygKne/b9oGDnkXJbbG/QjM6CFkH5IwCXU66Y bIVuZczeenC7OQxz1mAInSQIdVYRXI7X2nvfRlrEimN0kk+ikhS7tUx9fmGbk3iJ GOyxxBgT5YG+t/42CqJ3+gKg3uIzaVo6LehztlQiHhKb0h2aLdqrJo/n7gd7wue6 esH56/kDZmatzUp+Ji7sCQeS+5eWmGayZo03CRzfoQCz55RBwX2GmaSwvh+NhNo2 uetPcfgcVhQQDvq2F12dEDQGek0WUn49OTFJOZeuxo2taMEZuUKtA6cRBr31eq/S hfQIymq1GRhpRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:52 2025 by rpki-client