This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft File: j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json) Hash identifier: Wy1YeZMpI85F1felu5a/Q3aS/YmjbvFGtrmQmxfrug4= Subject key identifier: B0:21:C1:8D:61:ED:97:7E:F3:00:02:4C:36:FE:30:21:A0:5C:03:7B Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F Certificate issuer: /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f Certificate serial: 019AF38A0E5208DABB51D39593A36D3401A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft Manifest number: 0C42 Signing time: Sat 06 Dec 2025 12:01:42 +0000 Manifest this update: Sat 06 Dec 2025 12:01:42 +0000 Manifest next update: Sun 07 Dec 2025 12:01:42 +0000 Files and hashes: 1: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: E0/n5jD7HQ9q4LH7+N95uGsV6s1Am/KDuWXLp6ZMgoc=) 2: olor_tHkoN8k1oKb8ve7r7Hwc2c.roa (hash: tMtLnjRmuVNk2beOyn14AwFTbvwBpk2hW+VYjVtGIZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0e:52:08:da:bb:51:d3:95:93:a3:6d:34:01:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f Validity Not Before: Dec 6 12:01:42 2025 GMT Not After : Dec 7 12:01:42 2025 GMT Subject: CN=b021c18d61ed977ef300024c36fe3021a05c037b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:b0:10:df:7c:76:5c:ea:e8:16:a9:8a:10: 8c:13:5c:75:97:a2:4d:80:da:a0:67:b2:3c:7d:91: b9:7f:37:6a:e4:8c:c3:8b:3a:04:8c:ef:b7:a3:54: a1:6a:fa:e2:a7:dd:89:d0:88:5e:88:68:a3:97:c3: f8:0d:c9:51:db:92:ac:93:2c:f3:37:a3:4f:cb:57: d1:15:85:55:99:dc:a3:32:92:b3:d3:71:e5:09:73: c2:9f:27:a2:e7:ca:fe:75:a5:31:60:e1:97:ae:25: 39:e8:7a:17:38:8e:d9:ab:97:23:44:b3:6e:d5:78: 30:36:67:9f:02:f5:12:70:a3:a4:f3:5b:89:66:bc: 5c:9d:30:e0:2f:17:99:48:18:a4:d0:48:be:59:98: 70:13:ce:c5:ff:cc:cc:f8:fc:28:ec:52:11:98:22: 3e:e7:e7:ce:a9:85:83:e3:64:f8:c0:05:d4:0b:26: b6:77:64:eb:ce:53:b7:a6:3a:f9:4f:c0:42:71:3d: a6:c8:6b:59:fc:2d:63:50:0f:c3:6a:73:74:b9:71: e6:68:54:c0:9e:2d:19:51:47:ee:55:8b:d9:94:34: f6:17:92:69:59:f0:31:63:cf:af:73:be:8b:95:71: e9:56:78:7a:5b:f7:1e:3c:4b:80:09:dc:9b:24:9a: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:21:C1:8D:61:ED:97:7E:F3:00:02:4C:36:FE:30:21:A0:5C:03:7B X509v3 Authority Key Identifier: keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6e:fd:d2:09:f9:6f:04:22:7c:5b:f5:30:b8:c9:11:9f:16: cd:83:6e:9d:d0:9b:c3:27:4b:f7:0b:e4:17:ca:c1:6b:c9:33: 38:6c:c8:ad:6a:f5:07:de:f7:c4:89:40:6d:5c:6c:87:18:9f: d8:97:c1:63:99:f5:b8:1a:98:5c:63:81:a3:d5:fd:30:33:89: 81:9d:b5:ef:fb:96:29:76:da:73:87:7b:3c:38:db:e5:a7:b4: 7b:b1:ca:ce:f8:d8:63:a7:51:dd:a6:c8:1a:40:c5:09:2f:f1: 9d:21:8a:fa:af:16:cc:f4:29:ff:a0:f8:cf:5c:ef:9e:54:c4: d5:14:8e:77:00:b9:4d:f7:d5:17:fb:a8:ea:e6:e4:a0:4d:f6: 4d:ed:65:a0:2b:59:b5:88:71:95:a8:8d:50:4a:f1:2c:f4:74: b1:54:29:0b:d4:01:c6:c5:31:12:2e:d7:03:93:80:09:7e:98: 8c:90:e5:ed:ab:ca:a1:e5:ab:a4:97:28:b7:0c:e8:2a:77:2a: 53:12:df:bc:bd:6f:e2:f2:02:db:79:10:75:14:00:e9:26:ff: fa:c7:49:ec:9e:74:94:20:aa:a7:d6:e6:a6:6e:e0:b4:49:48: d6:33:18:9f:c8:33:bf:09:aa:e8:99:90:06:30:25:3d:f5:b6: b4:1d:d3:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzig5SCNq7UdOVk6NtNAGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTczYTdjYzFlNGQzN2Y3NjQwMzY4NzdjNDI4MWRhOGIw MDkwN2YwHhcNMjUxMjA2MTIwMTQyWhcNMjUxMjA3MTIwMTQyWjAzMTEwLwYDVQQD EyhiMDIxYzE4ZDYxZWQ5NzdlZjMwMDAyNGMzNmZlMzAyMWEwNWMwMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6mwEN98dlzq6BapihCME1x1l6JN gNqgZ7I8fZG5fzdq5IzDizoEjO+3o1Shavrip92J0IheiGijl8P4DclR25Kskyzz N6NPy1fRFYVVmdyjMpKz03HlCXPCnyei58r+daUxYOGXriU56HoXOI7Zq5cjRLNu 1XgwNmefAvUScKOk81uJZrxcnTDgLxeZSBik0Ei+WZhwE87F/8zM+Pwo7FIRmCI+ 5+fOqYWD42T4wAXUCya2d2TrzlO3pjr5T8BCcT2myGtZ/C1jUA/DanN0uXHmaFTA ni0ZUUfuVYvZlDT2F5JpWfAxY8+vc76LlXHpVnh6W/cePEuACdybJJoknQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAhwY1h7Zd+8wACTDb+MCGgXAN7MB8GA1UdIwQY MBaAFI+nOnzB5NN/dkA2h3xCgdqLAJB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZjNmZNSGswMzkyUURhSGZFS0Iyb3NBa0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lOTM4MTItMjI3Yi00MDllLWI1NTUt YWZhM2IwYmVhMGI3LzEvajZjNmZNSGswMzkyUURhSGZFS0Iyb3NBa0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lOTM4MTItMjI3Yi00MDllLWI1NTUtYWZhM2IwYmVhMGI3 LzEvajZjNmZNSGswMzkyUURhSGZFS0Iyb3NBa0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW790gn5 bwQifFv1MLjJEZ8WzYNundCbwydL9wvkF8rBa8kzOGzIrWr1B973xIlAbVxshxif 2JfBY5n1uBqYXGOBo9X9MDOJgZ217/uWKXbac4d7PDjb5ae0e7HKzvjYY6dR3abI GkDFCS/xnSGK+q8WzPQp/6D4z1zvnlTE1RSOdwC5TffVF/uo6ubkoE32Te1loCtZ tYhxlaiNUErxLPR0sVQpC9QBxsUxEi7XA5OACX6YjJDl7avKoeWrpJcotwzoKncq UxLfvL1v4vIC23kQdRQA6Sb/+sdJ7J50lCCqp9bmpm7gtElI1jMYn8gzvwmq6JmQ BjAlPfW2tB3TYg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:19 2025 by rpki-client