This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json) Hash identifier: c1QNHMoF2N6Jh3eWuVVig1OxRvG9u1KxIoSii/li5zw= Subject key identifier: B1:C9:5B:33:18:56:6B:EC:58:55:A2:CB:95:4D:71:E4:93:6F:3B:53 Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c Certificate serial: 019AF12CF9F13A1246D6FA22645808591F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft Manifest number: 1241 Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: Tr0Nl6Sh7ZIRg2PWXECIbbULepLdtlNDgbiJalsjW1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f9:f1:3a:12:46:d6:fa:22:64:58:08:59:1f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=b1c95b3318566bec5855a2cb954d71e4936f3b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:12:2f:f1:6f:6e:74:80:ad:ab:a7:10:83: 50:c7:6f:ea:51:8c:b0:17:da:35:2e:0d:52:01:6c: 62:ba:0b:5e:3b:1d:b9:fa:0e:d3:cc:2d:ba:a2:1a: f7:17:e4:5f:f5:1c:a4:82:77:2d:45:f8:19:66:f3: d0:a8:6f:ba:55:8b:07:8c:83:e9:09:4a:91:71:fe: aa:dc:7c:12:1b:da:83:db:e9:f1:51:4d:dd:85:5a: 63:29:56:4d:85:e4:a7:ac:5b:8f:de:27:19:39:37: 0c:c0:46:c2:cf:b7:17:c1:60:25:ea:f1:1b:16:1f: a1:f8:53:97:06:f0:97:ae:93:e0:71:c6:68:78:d0: 8b:61:88:2e:d5:e4:27:8f:c7:d2:48:5f:af:b8:0b: fe:81:13:df:17:0f:7d:b3:ba:a7:02:ce:9f:e8:46: d5:73:8b:2e:49:ec:84:cf:a9:cb:95:c6:fb:64:6b: 61:c2:ed:0a:f1:eb:f9:9e:99:bf:a8:22:85:c7:5b: 77:bd:2e:4a:35:8b:1f:7f:06:bf:36:cf:0c:aa:6a: 6e:0b:59:aa:df:62:4d:8c:f0:5b:70:cb:2e:08:9b: 99:7c:09:e1:c2:9d:82:3a:66:08:3d:9a:e7:38:67: a3:71:23:a2:b2:d0:e4:67:bc:cf:6f:89:e6:9c:5a: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C9:5B:33:18:56:6B:EC:58:55:A2:CB:95:4D:71:E4:93:6F:3B:53 X509v3 Authority Key Identifier: keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b6:4b:5e:9b:bb:2b:9e:aa:8e:06:49:75:5c:de:22:35:0e: 26:68:94:22:3e:5c:72:7c:95:8d:cd:02:e8:14:ff:8f:cb:2a: da:f3:7d:6e:53:9c:82:8b:14:bc:91:14:da:eb:99:82:65:3b: 2d:13:e1:00:a1:1e:20:d3:f2:cb:2a:83:3d:10:f4:87:bd:88: 74:8a:4a:82:70:59:30:80:a2:9c:be:9a:cd:74:98:16:ca:e0: ce:a0:1f:0d:5b:d1:20:89:e3:23:27:d7:3e:8f:99:78:6d:7a: 7d:52:7d:93:0a:57:12:57:3d:6c:fa:bb:a4:98:f0:d1:59:93: 8e:aa:73:b1:9f:8f:07:4b:8c:81:d1:79:df:53:e3:5e:54:12: b8:65:00:10:0e:86:4c:c0:89:31:91:be:af:1a:91:f3:55:c8: 62:ee:4e:51:de:2e:b3:bf:3d:a5:7c:c7:c4:78:64:be:d0:9b: 01:e2:f7:a0:47:94:39:63:96:85:d7:d3:ad:14:c7:58:64:72: 28:da:a2:5f:12:8f:62:71:71:07:e1:9a:e4:b5:f9:79:be:57: 1d:17:6d:27:21:e5:31:d1:3b:9b:9a:5e:ec:08:f8:80:dc:e1: 6a:e7:5d:fe:35:95:96:ac:af:d7:8f:4b:35:1f:03:48:81:39: a6:a2:91:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPnxOhJG1voiZFgIWR83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTAxYTY4ZDkxMDkzZTdkZWYyZjRlMDMxMDMxZDExNGQ0 M2JhM2MwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EyhiMWM5NWIzMzE4NTY2YmVjNTg1NWEyY2I5NTRkNzFlNDkzNmYzYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JASL/FvbnSAraunEINQx2/qUYyw F9o1Lg1SAWxiugteOx25+g7TzC26ohr3F+Rf9RykgnctRfgZZvPQqG+6VYsHjIPp CUqRcf6q3HwSG9qD2+nxUU3dhVpjKVZNheSnrFuP3icZOTcMwEbCz7cXwWAl6vEb Fh+h+FOXBvCXrpPgccZoeNCLYYgu1eQnj8fSSF+vuAv+gRPfFw99s7qnAs6f6EbV c4suSeyEz6nLlcb7ZGthwu0K8ev5npm/qCKFx1t3vS5KNYsffwa/Ns8MqmpuC1mq 32JNjPBbcMsuCJuZfAnhwp2COmYIPZrnOGejcSOistDkZ7zPb4nmnFqEiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHJWzMYVmvsWFWiy5VNceSTbztTMB8GA1UdIwQY MBaAFOpQGmjZEJPn3vL04DEDHRFNQ7o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjIt MzQ1ZTE3ZjlkNjMyLzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjItMzQ1ZTE3ZjlkNjMy LzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbZLXpu7 K56qjgZJdVzeIjUOJmiUIj5ccnyVjc0C6BT/j8sq2vN9blOcgosUvJEU2uuZgmU7 LRPhAKEeINPyyyqDPRD0h72IdIpKgnBZMICinL6azXSYFsrgzqAfDVvRIInjIyfX Po+ZeG16fVJ9kwpXElc9bPq7pJjw0VmTjqpzsZ+PB0uMgdF531PjXlQSuGUAEA6G TMCJMZG+rxqR81XIYu5OUd4us789pXzHxHhkvtCbAeL3oEeUOWOWhdfTrRTHWGRy KNqiXxKPYnFxB+Ga5LX5eb5XHRdtJyHlMdE7m5pe7Aj4gNzhaudd/jWVlqyv149L NR8DSIE5pqKRdw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:25 2025 by rpki-client