This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft File: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json) Hash identifier: /TAKe0+c+We+JzNVAK+NKy2gJebOea9lQ5MUKuAN7Es= Subject key identifier: 47:49:A6:AF:7D:C1:74:3E:7B:FD:50:94:8F:1E:04:81:B9:32:C3:83 Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F Certificate issuer: /CN=e8a247598cc32160328417a1b10db67fdf59f10f Certificate serial: 019AF0BF68CA95BE7FB92FBAA0D892402483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft Manifest number: 3C Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: F05/iBHkZJnt6I6DG/Ffx2cdcOZQNnIhJBZk7IhjA30=) 2: AV8wo7IcGhoDNh45lsVAfOCmZyE.roa (hash: xfFdNGYBpXcUrobp7nBFSY8sabsVXKXuRVyeR5Zfluo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:68:ca:95:be:7f:b9:2f:ba:a0:d8:92:40:24:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=4749a6af7dc1743e7bfd50948f1e0481b932c383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:b4:0f:23:c4:0e:55:80:7f:2e:cd:ff:8c: aa:9a:cb:b9:65:f0:d4:13:de:e1:5e:ca:b7:4b:b9: f2:3e:76:b6:2e:42:b5:c1:a4:10:39:ff:e8:cb:54: 2a:02:dc:a0:70:2e:aa:cf:b5:f1:e1:b4:f8:48:b4: 8f:1a:9c:28:71:18:f1:62:3a:50:35:06:96:ee:90: 2d:56:d4:f8:f8:bb:dc:70:d9:fd:00:5a:ad:76:cc: fa:59:2e:f9:84:3a:a3:99:a7:64:93:45:37:f0:1a: c1:aa:64:9c:ca:d8:df:48:1f:5f:f7:bf:81:e0:db: be:88:c7:a5:1c:65:c9:f1:0a:34:a3:24:b3:15:9a: 06:df:e8:54:92:16:29:07:93:cf:11:14:c5:88:dd: 2e:46:07:bd:d8:36:c9:c9:f8:9f:be:cd:ff:23:4e: 09:30:14:e8:18:9c:2d:ae:ef:29:01:e0:af:2b:07: e5:99:66:71:0f:a1:29:b5:22:cb:28:5f:2d:ff:62: c2:12:15:9d:e1:b4:3f:3d:d5:3f:a9:17:e4:0f:58: 7f:ff:a5:8d:3e:ac:b3:b3:15:50:e2:78:75:51:3a: f6:cc:88:2a:e3:a9:1e:73:41:ad:88:5d:09:74:3e: 82:3e:8a:03:66:e3:93:58:10:d0:16:65:c4:83:2b: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:49:A6:AF:7D:C1:74:3E:7B:FD:50:94:8F:1E:04:81:B9:32:C3:83 X509v3 Authority Key Identifier: keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ff:b7:9e:3b:79:93:ec:51:b2:18:55:25:d0:09:58:f0:92: 45:84:60:41:3c:a9:b0:c9:25:60:30:23:b0:72:07:36:c9:28: 5d:6d:9e:03:a3:5d:59:77:9d:8b:5a:d6:94:ad:3d:58:62:73: 96:45:93:cb:24:d6:a4:29:4b:8b:bd:15:c5:4f:c3:84:08:c9: 67:54:b1:57:fa:ad:21:c3:3f:69:c9:c0:ab:bc:75:48:d3:97: e2:59:8e:b5:db:04:cb:39:0c:63:60:d1:de:1f:3e:e9:cf:a8: 59:2f:10:c8:71:c2:21:09:6d:48:67:30:b9:24:5b:0c:a3:7d: 83:19:ae:4d:37:21:44:d0:ba:43:03:15:8c:e9:4d:7f:ef:f7: 00:bc:b8:4f:77:a4:54:d7:79:6e:48:65:6a:2f:63:b9:20:64: ab:a1:5f:9a:96:8d:5b:0b:cb:9c:38:b4:bd:5c:c6:00:cc:df: 71:71:40:4b:82:35:4c:28:70:69:93:a2:e3:e9:12:2c:29:0e: fc:a5:24:5c:d2:01:ef:19:6b:f4:cb:96:bd:21:95:09:37:19: 68:b1:6b:1f:fc:da:67:1c:a2:05:fa:5e:23:b8:88:d8:64:11: b2:47:9d:f8:43:d3:d3:c2:a3:3b:23:59:85:90:8c:86:72:aa: bd:50:21:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2jKlb5/uS+6oNiSQCSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTI0NzU5OGNjMzIxNjAzMjg0MTdhMWIxMGRiNjdmZGY1 OWYxMGYwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD Eyg0NzQ5YTZhZjdkYzE3NDNlN2JmZDUwOTQ4ZjFlMDQ4MWI5MzJjMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw60DyPEDlWAfy7N/4yqmsu5ZfDU E97hXsq3S7nyPna2LkK1waQQOf/oy1QqAtygcC6qz7Xx4bT4SLSPGpwocRjxYjpQ NQaW7pAtVtT4+LvccNn9AFqtdsz6WS75hDqjmadkk0U38BrBqmScytjfSB9f97+B 4Nu+iMelHGXJ8Qo0oySzFZoG3+hUkhYpB5PPERTFiN0uRge92DbJyfifvs3/I04J MBToGJwtru8pAeCvKwflmWZxD6EptSLLKF8t/2LCEhWd4bQ/PdU/qRfkD1h//6WN PqyzsxVQ4nh1UTr2zIgq46kec0GtiF0JdD6CPooDZuOTWBDQFmXEgysN3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdJpq99wXQ+e/1QlI8eBIG5MsODMB8GA1UdIwQY MBaAFOiiR1mMwyFgMoQXobENtn/fWfEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt ODE5NjgwZGI0MzU4LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4 LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmP+3njt5 k+xRshhVJdAJWPCSRYRgQTypsMklYDAjsHIHNskoXW2eA6NdWXedi1rWlK09WGJz lkWTyyTWpClLi70VxU/DhAjJZ1SxV/qtIcM/acnAq7x1SNOX4lmOtdsEyzkMY2DR 3h8+6c+oWS8QyHHCIQltSGcwuSRbDKN9gxmuTTchRNC6QwMVjOlNf+/3ALy4T3ek VNd5bkhlai9juSBkq6FfmpaNWwvLnDi0vVzGAMzfcXFAS4I1TChwaZOi4+kSLCkO /KUkXNIB7xlr9MuWvSGVCTcZaLFrH/zaZxyiBfpeI7iI2GQRsked+EPT08KjOyNZ hZCMhnKqvVAhjw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:04 2025 by rpki-client