This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft File: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json) Hash identifier: 55Rjll4+eA+PVfAwXLm+3ee/vq5JCZslGiOF+pBi9ZI= Subject key identifier: 21:FE:52:8E:4A:C5:4C:61:3A:F2:B1:3E:47:88:47:A2:A4:E2:D3:22 Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Certificate serial: 019AF19BABC6CE5FC2A4C6FA1DD67F4AA44A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 03:01:42 +0000 Manifest this update: Sat 06 Dec 2025 03:01:42 +0000 Manifest next update: Sun 07 Dec 2025 03:01:42 +0000 Files and hashes: 1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: QvCQdxdtyNyIi0VRFgHTVPH8OLf3bgHOXdBWpbuhSgw=) 2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ab:c6:ce:5f:c2:a4:c6:fa:1d:d6:7f:4a:a4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Validity Not Before: Dec 6 03:01:42 2025 GMT Not After : Dec 7 03:01:42 2025 GMT Subject: CN=21fe528e4ac54c613af2b13e478847a2a4e2d322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:11:34:b8:f5:bf:e6:b4:f2:c8:75:56:26: f6:ff:ad:da:2d:5a:c4:fc:3d:4e:21:1a:ab:ba:a2: 85:de:3f:8d:ba:cc:a7:1d:07:c7:76:01:b5:ce:8b: e1:2e:9f:7e:1c:4f:e3:5c:d0:1b:b7:16:31:ff:ac: 6b:91:40:5e:16:1c:3d:5c:36:a9:e0:2d:e3:e9:2a: f6:4e:ef:4f:94:a2:15:02:72:b6:74:78:86:b2:6b: 38:5b:6e:12:d7:9b:4e:b4:af:79:c9:3a:11:98:ad: 7d:b7:d2:ab:90:61:5b:da:31:85:4c:e6:0d:25:2d: ea:a3:b8:88:32:f8:db:81:04:71:7e:0c:17:d0:1b: ea:cd:f6:94:7c:34:40:1c:62:00:18:e9:38:27:0d: 83:ec:78:e9:52:9b:63:f5:ef:df:a8:c5:a9:89:06: 9e:ed:37:6e:fd:fd:5d:07:9a:39:14:bb:5c:66:81: 59:f6:1e:55:8f:75:86:d7:02:3f:18:f1:80:e1:31: 70:ad:0a:d6:97:88:27:5f:37:b8:3d:bb:21:f7:36: f5:f2:6a:8a:a0:f2:ab:90:e6:5b:e6:76:5b:2d:7a: f4:32:f4:17:49:88:86:81:bc:a6:af:c9:a8:8a:06: 13:d0:e7:9c:e6:d3:fe:4c:75:43:69:b7:db:a5:72: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:52:8E:4A:C5:4C:61:3A:F2:B1:3E:47:88:47:A2:A4:E2:D3:22 X509v3 Authority Key Identifier: keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:13:a7:47:b5:1d:45:cf:06:7b:6c:20:ad:50:ef:50:1a:48: 9f:13:da:57:29:47:f9:ef:43:fa:a4:43:33:68:bc:7b:e1:0e: 08:1f:46:90:70:91:33:a7:ad:27:3b:10:de:23:0f:6d:8c:d1: 75:da:44:ae:75:c6:95:5c:39:5d:e9:0e:0a:30:66:1c:82:c0: 74:5f:9a:ea:da:55:e3:3f:fb:56:56:64:de:40:fa:70:7b:f8: 26:09:cb:36:92:a1:89:30:dc:7a:a0:a3:78:64:80:18:3f:68: 5e:ed:e4:a2:28:b8:d3:11:93:fc:7b:63:68:d4:da:67:af:20: a2:88:e7:6c:f0:e1:1d:66:ca:d2:ca:8a:c7:ae:ec:02:54:f2: 44:aa:2a:0d:f0:e4:2e:4a:0f:08:75:82:08:a0:33:95:01:0b: 7d:f9:2d:f0:82:0c:ce:42:dc:f9:aa:17:a3:bd:c8:1a:d3:2f: cd:ae:6b:b9:dd:e7:c2:02:64:e3:55:7f:af:b2:02:bb:11:f0: 84:ec:66:b9:5d:40:93:b7:71:c4:de:17:be:cc:65:ba:c4:d3: 16:ab:c4:11:83:6f:2f:b5:22:f6:fc:17:09:9d:50:59:00:b7: 63:d0:59:c9:22:fc:52:db:61:10:80:87:f7:ec:95:0f:6d:06: e7:d2:74:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6vGzl/CpMb6HdZ/SqRKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy ODM2ZGMwHhcNMjUxMjA2MDMwMTQyWhcNMjUxMjA3MDMwMTQyWjAzMTEwLwYDVQQD EygyMWZlNTI4ZTRhYzU0YzYxM2FmMmIxM2U0Nzg4NDdhMmE0ZTJkMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vkRNLj1v+a08sh1Vib2/63aLVrE /D1OIRqruqKF3j+NusynHQfHdgG1zovhLp9+HE/jXNAbtxYx/6xrkUBeFhw9XDap 4C3j6Sr2Tu9PlKIVAnK2dHiGsms4W24S15tOtK95yToRmK19t9KrkGFb2jGFTOYN JS3qo7iIMvjbgQRxfgwX0BvqzfaUfDRAHGIAGOk4Jw2D7HjpUptj9e/fqMWpiQae 7Tdu/f1dB5o5FLtcZoFZ9h5Vj3WG1wI/GPGA4TFwrQrWl4gnXze4Pbsh9zb18mqK oPKrkOZb5nZbLXr0MvQXSYiGgbymr8moigYT0Oec5tP+THVDabfbpXI9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH+Uo5KxUxhOvKxPkeIR6Kk4tMiMB8GA1UdIwQY MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt MDY1ZWQ0ZDg0NDFmLzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhOnR7Ud Rc8Ge2wgrVDvUBpInxPaVylH+e9D+qRDM2i8e+EOCB9GkHCRM6etJzsQ3iMPbYzR ddpErnXGlVw5XekOCjBmHILAdF+a6tpV4z/7VlZk3kD6cHv4JgnLNpKhiTDceqCj eGSAGD9oXu3koii40xGT/HtjaNTaZ68goojnbPDhHWbK0sqKx67sAlTyRKoqDfDk LkoPCHWCCKAzlQELffkt8IIMzkLc+aoXo73IGtMvza5rud3nwgJk41V/r7ICuxHw hOxmuV1Ak7dxxN4XvsxlusTTFqvEEYNvL7Ui9vwXCZ1QWQC3Y9BZySL8UtthEICH 9+yVD20G59J0fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:23 2025 by rpki-client