This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json) Hash identifier: Knk4ubMwAy8NIBQ607YSJNWysWNKc2QggRIfJ01fdcI= Subject key identifier: B3:88:1A:C4:29:E4:38:8A:58:E0:04:47:7E:16:37:C0:7F:23:EE:2F Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9 Certificate serial: 019AF19B5B638B38F593A2E7805590251836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft Manifest number: 12DA Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: XGYSLOgmu5+/3TqhZyzBIN9fmkZrd1C7q7piR9t0pso=) 2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5b:63:8b:38:f5:93:a2:e7:80:55:90:25:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9 Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=b3881ac429e4388a58e004477e1637c07f23ee2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:79:1e:02:9a:e9:dc:34:b7:15:dc:2f:d6: db:2b:b6:09:31:66:9e:49:3d:89:4e:28:e9:36:cc: bb:cc:af:fb:07:52:74:2d:f1:c0:fb:76:1b:d3:0d: 14:93:68:ac:d3:8d:82:b3:d4:7f:ff:07:55:10:9e: 86:b8:3d:fe:e1:5c:fa:1d:75:07:d8:9f:cd:65:4c: 13:f3:8b:04:be:2e:68:47:88:84:01:4f:b2:ee:75: 17:f0:13:56:bf:06:a9:86:c9:48:39:1b:b9:e4:2d: 55:97:67:6f:ec:ad:9a:f4:30:23:45:fe:f5:1a:1c: 45:2a:9f:ec:f6:24:d7:6d:6a:69:a1:f3:fd:64:9c: a2:f7:af:d6:ba:0e:d2:3b:1e:e4:7e:15:c4:a2:eb: 14:47:02:4c:44:68:e4:6f:4d:01:d6:f1:da:6f:8b: cd:e1:33:76:28:29:c4:ce:57:b4:5e:c6:e5:ea:2d: 84:7a:cb:66:10:80:2d:b8:3b:80:75:a9:16:a1:b6: c3:54:3a:bc:48:3c:ba:43:19:da:fa:0d:70:68:87: e3:1f:49:47:5a:87:3d:dd:af:57:20:de:29:ae:d7: 38:1f:53:dc:91:dd:a7:ff:4d:2b:a9:aa:27:55:64: 84:e8:58:a5:db:6b:81:42:73:2e:04:31:f2:0f:dc: 88:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:1A:C4:29:E4:38:8A:58:E0:04:47:7E:16:37:C0:7F:23:EE:2F X509v3 Authority Key Identifier: keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:21:fd:33:34:cb:f3:ab:c8:9f:15:53:f1:b4:e9:a7:eb:67: 8c:5a:32:9d:37:97:00:eb:06:53:e1:2e:65:85:13:76:5e:83: 89:74:f6:c4:66:b0:18:60:c9:2a:8f:ab:37:83:cc:20:db:04: fa:31:41:eb:f8:6d:0a:3a:e0:21:9e:7d:f5:10:1c:ed:cb:7f: d3:30:e1:ea:d1:ba:88:d5:56:9f:1a:b6:da:d5:93:8f:ad:6b: 2d:28:23:4c:9f:3e:56:6f:b9:44:11:85:72:ac:24:33:6f:1f: dc:b7:5d:0d:db:75:1d:67:8d:2d:08:b8:55:cd:86:ec:ca:ce: c5:8c:33:8d:7d:61:4a:4f:bb:a7:e1:30:a8:2e:08:a6:f1:38: 05:5c:f7:22:84:68:9c:19:f5:d7:1d:a9:dd:2c:12:fa:3d:c0: 20:b0:4d:93:1d:29:ad:86:ff:70:e3:a8:f6:62:c3:1b:ab:24: 9f:13:a9:bf:f2:6b:8f:fe:af:be:21:0b:23:8e:7f:32:78:dc: 7d:62:14:c2:bc:8e:ca:bf:9a:02:be:1d:12:4d:1e:4c:7f:93: c0:91:13:64:5f:f7:07:5d:1d:1a:5d:9b:19:ef:51:6a:77:79: 24:ed:9a:53:54:5e:cc:a5:4d:5c:6a:24:26:d2:c6:84:7b:2c: 49:41:98:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1tjizj1k6LngFWQJRg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MTA3NGUzMjgyMmM4YmVmM2E3ZGNiMzEyODA4MjViZDI3 NTQ1YzkwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD EyhiMzg4MWFjNDI5ZTQzODhhNThlMDA0NDc3ZTE2MzdjMDdmMjNlZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2955HgKa6dw0txXcL9bbK7YJMWae ST2JTijpNsy7zK/7B1J0LfHA+3Yb0w0Uk2is042Cs9R//wdVEJ6GuD3+4Vz6HXUH 2J/NZUwT84sEvi5oR4iEAU+y7nUX8BNWvwaphslIORu55C1Vl2dv7K2a9DAjRf71 GhxFKp/s9iTXbWppofP9ZJyi96/Wug7SOx7kfhXEousURwJMRGjkb00B1vHab4vN 4TN2KCnEzle0Xsbl6i2EestmEIAtuDuAdakWobbDVDq8SDy6Qxna+g1waIfjH0lH Woc93a9XIN4prtc4H1Pckd2n/00rqaonVWSE6Fil22uBQnMuBDHyD9yIYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOIGsQp5DiKWOAER34WN8B/I+4vMB8GA1UdIwQY MBaAFOgQdOMoIsi+86fcsxKAglvSdUXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQt M2U0ZTg0ZjM1Y2QwLzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQtM2U0ZTg0ZjM1Y2Qw LzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyH9MzTL 86vInxVT8bTpp+tnjFoynTeXAOsGU+EuZYUTdl6DiXT2xGawGGDJKo+rN4PMINsE +jFB6/htCjrgIZ599RAc7ct/0zDh6tG6iNVWnxq22tWTj61rLSgjTJ8+Vm+5RBGF cqwkM28f3LddDdt1HWeNLQi4Vc2G7MrOxYwzjX1hSk+7p+EwqC4IpvE4BVz3IoRo nBn11x2p3SwS+j3AILBNkx0prYb/cOOo9mLDG6sknxOpv/Jrj/6vviELI45/Mnjc fWIUwryOyr+aAr4dEk0eTH+TwJETZF/3B10dGl2bGe9Rand5JO2aU1RezKVNXGok JtLGhHssSUGYxg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:55 2025 by rpki-client