This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft File: 6eybY31F3ICc9SE_ZXpjWpDjFx4.mft (raw, json) Hash identifier: gfXhfzO2NuzqGb6BxUsJiJKUYC+HTs+9kc5vcE6xt2s= Subject key identifier: 04:7E:52:53:1F:E3:E2:E8:86:D2:AA:F4:C6:A2:62:59:CB:2F:DA:37 Authority key identifier: E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E Certificate issuer: /CN=e9ec9b637d45dc809cf5213f657a635a90e3171e Certificate serial: 019AF27699ED7A72C65F295BDA79F26A0705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft Manifest number: 0B75 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 6eybY31F3ICc9SE_ZXpjWpDjFx4.crl (hash: Z/lgUzalXwlCfe23/qs1gT+ptx0FA5C36nZw+XQW8JI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:99:ed:7a:72:c6:5f:29:5b:da:79:f2:6a:07:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9ec9b637d45dc809cf5213f657a635a90e3171e Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=047e52531fe3e2e886d2aaf4c6a26259cb2fda37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:a9:d9:d7:f1:dd:d5:28:a8:7c:57:02:dd: 77:6b:79:90:48:3b:7a:ec:e2:4b:b5:f6:d6:d9:7b: c7:ea:8d:17:35:77:e3:57:4f:2c:e5:8e:61:9e:f2: b9:4c:98:58:66:5b:ed:e0:87:07:a7:d7:f0:7f:3b: 01:7e:8f:98:82:62:da:c2:9a:b1:7c:39:ec:d3:ea: 2a:a7:39:75:64:f7:31:83:6c:5d:64:2b:a6:32:5b: b3:df:54:ec:b9:38:2c:a2:d9:ca:08:7d:ad:55:77: 18:ad:7e:4a:fe:2d:76:0f:40:5e:6d:00:6e:b6:97: bd:6e:f8:13:73:74:9a:d1:36:2f:07:98:be:d9:55: cf:be:85:7f:91:ba:1d:d1:aa:4f:05:93:ae:cd:a8: 97:59:0f:e4:e2:b7:37:37:a3:a5:d4:2d:04:66:97: 3d:47:92:29:c0:95:32:4f:ef:21:11:c9:33:23:25: 92:ea:52:fd:48:34:b1:3f:47:d4:3f:04:5d:75:a9: 68:73:43:79:ac:31:a3:14:9b:53:10:12:dc:97:09: 77:54:9b:ca:bd:d0:ed:84:5b:d8:e6:e8:7a:28:12: ac:cb:39:4c:4a:64:4f:c0:f1:d2:a0:f0:22:59:9a: 3d:ec:6f:96:e0:aa:41:a0:12:d7:a5:6d:09:08:16: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7E:52:53:1F:E3:E2:E8:86:D2:AA:F4:C6:A2:62:59:CB:2F:DA:37 X509v3 Authority Key Identifier: keyid:E9:EC:9B:63:7D:45:DC:80:9C:F5:21:3F:65:7A:63:5A:90:E3:17:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eybY31F3ICc9SE_ZXpjWpDjFx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9abae-7005-4b35-9d8a-7d7d555a443d/1/6eybY31F3ICc9SE_ZXpjWpDjFx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c8:7f:bb:fa:90:23:eb:94:3a:f5:74:fc:ab:8e:1c:cc:76: 7c:d5:33:be:2f:05:94:46:70:37:de:17:67:76:7b:04:0c:da: bc:f5:8f:16:39:65:df:de:39:da:13:fd:95:f1:d4:f8:3a:17: 0c:76:94:07:46:15:00:77:e7:5a:e6:61:76:8b:4c:34:19:23: 63:40:a2:79:66:25:d8:25:3a:c0:23:26:bb:95:03:eb:4a:ef: ea:01:90:08:3f:ec:41:84:60:05:cb:b4:1b:87:5f:ae:46:88: da:6b:19:31:27:b7:ee:f3:72:62:59:69:d0:b7:47:24:94:6e: 94:ed:fb:74:57:81:09:d1:fa:af:33:04:4f:35:f4:40:bb:1c: ff:0c:f6:8c:47:22:6a:c5:92:4c:a4:f9:11:3a:71:9c:dd:5a: 51:b2:dd:cf:ff:db:84:62:5b:60:c5:fc:41:07:ac:fe:29:a7: 87:a2:85:9e:d0:ad:a2:33:e1:78:b9:81:79:e4:24:18:a7:c1: ce:ad:a0:f9:a7:26:7b:72:d9:01:6a:4c:d8:65:53:26:1c:31: 11:50:b2:81:60:84:7f:0c:a7:89:11:99:f6:a4:4f:23:d9:97: 4c:28:f0:41:bf:2c:e9:7e:a7:ef:8e:7a:3f:77:30:d9:db:56: 8e:be:3a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpntenLGXylb2nnyagcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZWM5YjYzN2Q0NWRjODA5Y2Y1MjEzZjY1N2E2MzVhOTBl MzE3MWUwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygwNDdlNTI1MzFmZTNlMmU4ODZkMmFhZjRjNmEyNjI1OWNiMmZkYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoKp2dfx3dUoqHxXAt13a3mQSDt6 7OJLtfbW2XvH6o0XNXfjV08s5Y5hnvK5TJhYZlvt4IcHp9fwfzsBfo+YgmLawpqx fDns0+oqpzl1ZPcxg2xdZCumMluz31TsuTgsotnKCH2tVXcYrX5K/i12D0BebQBu tpe9bvgTc3Sa0TYvB5i+2VXPvoV/kbod0apPBZOuzaiXWQ/k4rc3N6Ol1C0EZpc9 R5IpwJUyT+8hEckzIyWS6lL9SDSxP0fUPwRddaloc0N5rDGjFJtTEBLclwl3VJvK vdDthFvY5uh6KBKsyzlMSmRPwPHSoPAiWZo97G+W4KpBoBLXpW0JCBYwUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAR+UlMf4+LohtKq9MaiYlnLL9o3MB8GA1UdIwQY MBaAFOnsm2N9RdyAnPUhP2V6Y1qQ4xceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmV5YlkzMUYzSUNjOVNFX1pYcGpXcERqRng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOWFiYWUtNzAwNS00YjM1LTlkOGEt N2Q3ZDU1NWE0NDNkLzEvNmV5YlkzMUYzSUNjOVNFX1pYcGpXcERqRng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mOWFiYWUtNzAwNS00YjM1LTlkOGEtN2Q3ZDU1NWE0NDNk LzEvNmV5YlkzMUYzSUNjOVNFX1pYcGpXcERqRng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsh/u/qQ I+uUOvV0/KuOHMx2fNUzvi8FlEZwN94XZ3Z7BAzavPWPFjll39452hP9lfHU+DoX DHaUB0YVAHfnWuZhdotMNBkjY0CieWYl2CU6wCMmu5UD60rv6gGQCD/sQYRgBcu0 G4dfrkaI2msZMSe37vNyYllp0LdHJJRulO37dFeBCdH6rzMETzX0QLsc/wz2jEci asWSTKT5ETpxnN1aUbLdz//bhGJbYMX8QQes/imnh6KFntCtojPheLmBeeQkGKfB zq2g+acme3LZAWpM2GVTJhwxEVCygWCEfwyniRGZ9qRPI9mXTCjwQb8s6X6n7456 P3cw2dtWjr46zA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:46 2025 by rpki-client