This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft File: 6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json) Hash identifier: Gb2n1ppYFagKv3SKFgECJPS46eyMITyjiO7kSwL8wDE= Subject key identifier: DD:56:02:87:39:E7:07:8F:2F:9D:8C:5B:65:33:54:42:A5:61:78:16 Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1 Certificate issuer: /CN=eacc3babd53c44cd76145af87d42370317e8d0c1 Certificate serial: 019B23D0C8924BB69DBD45E9433C7737CC75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft Manifest number: 0EC8 Signing time: Mon 15 Dec 2025 21:00:43 +0000 Manifest this update: Mon 15 Dec 2025 21:00:43 +0000 Manifest next update: Tue 16 Dec 2025 21:00:43 +0000 Files and hashes: 1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: LuVz7h0oVCDoD/EWqnI8HF7GWStjkgEx8QrwRd0JMKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:c8:92:4b:b6:9d:bd:45:e9:43:3c:77:37:cc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1 Validity Not Before: Dec 15 21:00:43 2025 GMT Not After : Dec 16 21:00:43 2025 GMT Subject: CN=dd56028739e7078f2f9d8c5b65335442a5617816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:0d:b2:7f:f4:ea:ba:3e:a2:46:d2:56:d0: c0:d1:3d:97:00:ae:fa:85:b3:44:b6:07:70:a2:bb: 14:b4:f1:99:30:a3:cf:c6:e5:ef:fa:36:d5:87:57: 6e:87:60:cf:52:a8:78:cb:09:13:a4:5e:d4:b9:ae: f6:4c:a5:e0:a3:b0:06:e4:13:96:ac:7c:42:5b:a9: cf:bf:c1:64:2e:d7:43:d3:60:2b:b0:4d:34:24:8f: c8:f4:9a:19:aa:79:1f:1f:59:a5:18:58:6b:50:ca: 99:8f:b6:25:c5:45:04:f6:76:93:ec:7e:82:a9:60: a0:99:10:74:ce:b5:b9:cd:85:56:6a:92:b7:b2:4f: e5:b8:96:58:f9:80:03:ed:9d:16:06:d7:a7:c8:10: db:fe:d1:8d:b3:5b:20:29:52:3a:61:ae:50:1a:12: 0a:2d:f8:9d:a4:6d:3f:b2:3b:86:48:d7:79:ea:13: 38:90:57:ad:88:9e:67:88:e7:39:92:12:54:72:48: 23:32:4b:51:a2:23:c4:58:e3:03:aa:85:b9:67:0e: 0c:95:27:f5:d6:65:4d:67:89:8a:7f:ff:d9:a9:3f: f2:07:a0:dd:bc:df:5d:50:a6:d5:cf:d6:b0:9d:b5: 3f:a0:85:e6:fd:f4:1d:12:94:ab:ea:da:b5:e3:bd: 99:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:56:02:87:39:E7:07:8F:2F:9D:8C:5B:65:33:54:42:A5:61:78:16 X509v3 Authority Key Identifier: keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:69:c0:bd:e1:a9:db:8e:99:06:dd:ca:cc:fc:40:e3:22:d2: e2:4a:f9:e5:73:25:c5:09:ad:5c:88:7b:c9:fb:db:73:7f:8e: 0f:e5:9a:0f:ab:47:57:a2:78:e0:2f:18:4b:21:38:d6:05:26: 0b:6f:84:15:31:1a:aa:30:d3:b6:13:23:0e:dc:d3:9a:ff:f1: 9b:73:c9:a1:63:53:1e:71:59:e6:d2:51:bd:00:e0:c8:02:45: ce:2a:75:d2:e0:93:d7:31:17:e8:0d:7f:a7:ac:d2:87:16:0d: c2:3f:f1:5e:e6:5c:c9:dd:91:b3:2a:d6:45:1a:8f:ed:49:9c: 41:78:ce:08:c3:e0:78:0a:5d:75:c7:65:62:8d:16:48:f7:f6: 31:ff:82:24:ab:5a:e2:6a:9c:77:13:ee:4a:3b:fc:5f:35:96: f0:db:f3:e6:32:25:ed:94:95:d4:b2:e2:13:38:d2:c6:a5:38: a1:ef:ea:3d:b1:fc:3c:57:94:5b:bf:46:7f:55:c1:7d:c3:4a: 3f:f5:bb:9a:a4:53:85:a1:43:49:34:8b:53:cf:1f:10:c9:9b: bc:7a:fc:08:15:28:64:80:93:ec:a8:e1:d4:6f:b8:e8:37:56: 8f:88:76:ac:74:20:1b:59:cf:e2:4d:e1:34:3f:e1:af:35:d2: 89:a9:ff:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0MiSS7advUXpQzx3N8x1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2MzYmFiZDUzYzQ0Y2Q3NjE0NWFmODdkNDIzNzAzMTdl OGQwYzEwHhcNMjUxMjE1MjEwMDQzWhcNMjUxMjE2MjEwMDQzWjAzMTEwLwYDVQQD EyhkZDU2MDI4NzM5ZTcwNzhmMmY5ZDhjNWI2NTMzNTQ0MmE1NjE3ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdsNsn/06ro+okbSVtDA0T2XAK76 hbNEtgdworsUtPGZMKPPxuXv+jbVh1duh2DPUqh4ywkTpF7Uua72TKXgo7AG5BOW rHxCW6nPv8FkLtdD02ArsE00JI/I9JoZqnkfH1mlGFhrUMqZj7YlxUUE9naT7H6C qWCgmRB0zrW5zYVWapK3sk/luJZY+YAD7Z0WBtenyBDb/tGNs1sgKVI6Ya5QGhIK LfidpG0/sjuGSNd56hM4kFetiJ5niOc5khJUckgjMktRoiPEWOMDqoW5Zw4MlSf1 1mVNZ4mKf//ZqT/yB6DdvN9dUKbVz9awnbU/oIXm/fQdEpSr6tq1472ZtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1WAoc55wePL52MW2UzVEKlYXgWMB8GA1UdIwQY MBaAFOrMO6vVPETNdhRa+H1CNwMX6NDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUt M2I0YzUwMTkyOWM1LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUtM2I0YzUwMTkyOWM1 LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWnAveGp 246ZBt3KzPxA4yLS4kr55XMlxQmtXIh7yfvbc3+OD+WaD6tHV6J44C8YSyE41gUm C2+EFTEaqjDTthMjDtzTmv/xm3PJoWNTHnFZ5tJRvQDgyAJFzip10uCT1zEX6A1/ p6zShxYNwj/xXuZcyd2RsyrWRRqP7UmcQXjOCMPgeApddcdlYo0WSPf2Mf+CJKta 4mqcdxPuSjv8XzWW8Nvz5jIl7ZSV1LLiEzjSxqU4oe/qPbH8PFeUW79Gf1XBfcNK P/W7mqRThaFDSTSLU88fEMmbvHr8CBUoZICT7Kjh1G+46DdWj4h2rHQgG1nP4k3h ND/hrzXSian/jA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:26:56 2025 by rpki-client