This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json) Hash identifier: UHV0D3CuN0xnMKSGhgjhxc9bHnvr/+niS3FITqAZceQ= Subject key identifier: B6:56:CB:D3:DE:96:7C:83:E7:5E:9A:55:0C:1D:DA:45:70:8F:D1:05 Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0 Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0 Certificate serial: 019AF3F7972CBA7DE2853FEFB48613BC6CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft Manifest number: 0517 Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: /pg7XUXZn+vSlwMIWfI4y6e2XRU/iSaHU/KFn1NJagQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:97:2c:ba:7d:e2:85:3f:ef:b4:86:13:bc:6c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=b656cbd3de967c83e75e9a550c1dda45708fd105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:9d:96:13:36:e4:05:f3:5c:f1:52:13:d9: fa:d1:5d:c6:3f:f7:38:f7:7c:55:12:29:99:2c:93: fa:47:24:62:78:b3:ad:fe:cb:09:88:f1:18:82:6f: 4e:f2:bd:e6:47:d0:41:48:b6:ed:4e:8c:0e:ce:70: 8e:a9:78:aa:05:78:7b:5c:cd:33:45:b6:54:ac:0b: f2:bb:a8:82:6d:9c:8f:2e:da:67:a5:29:08:4a:c2: a2:4a:2c:18:84:1a:ec:2d:c6:dd:90:38:63:6d:fb: b5:32:3b:5a:15:fb:dd:9e:68:75:f2:d6:42:53:7a: 87:78:7c:4f:51:cd:fc:27:55:4d:80:fa:e6:66:42: be:da:67:34:33:5b:dc:85:b6:ef:76:37:20:92:04: 06:96:bc:a6:a2:ec:8e:27:11:9d:e6:d5:cb:a7:0a: 55:c6:e0:ec:8c:f7:d6:6b:d5:5f:5b:80:7e:df:44: 20:1b:48:db:c8:11:09:99:59:91:71:fb:10:ff:69: 7a:eb:b6:85:a7:f4:3f:18:01:ca:fe:c0:03:9c:a4: 12:47:6b:27:24:88:83:5c:0c:ac:99:d7:f7:ba:11: 9c:d4:98:55:72:c5:4c:6b:fe:9f:ad:8a:bb:f0:73: f9:aa:b3:70:ab:1f:4a:03:2c:95:b1:db:b4:4b:fc: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:56:CB:D3:DE:96:7C:83:E7:5E:9A:55:0C:1D:DA:45:70:8F:D1:05 X509v3 Authority Key Identifier: keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b0:4d:d8:0a:e6:59:ae:57:71:1b:21:5f:62:55:f3:fa:a5: e5:0a:9f:fb:3f:44:f0:4d:41:e6:cd:85:ff:e0:30:92:7c:9f: bb:00:67:ca:85:c5:2b:f0:1d:dc:73:2a:8a:9e:83:f0:b3:b0: 27:22:80:f6:9d:4d:71:f8:d3:14:4d:76:b8:8c:93:91:bb:d1: 24:82:38:cd:7d:16:a8:25:ad:0e:f2:e6:61:70:56:89:af:0d: d7:ac:ca:30:18:7b:04:8b:a3:73:2b:f2:ef:91:dc:51:a7:21: 6f:25:6d:57:6e:3e:20:0a:e3:6c:de:8c:52:f5:30:56:c8:28: 51:4f:8a:f8:c6:c8:cb:5d:78:12:72:43:d6:0a:20:f0:b2:28: 50:57:58:e0:52:02:00:aa:96:70:4e:da:ed:eb:7c:54:61:71: dd:b5:48:95:74:f5:13:24:b7:40:47:41:77:13:1d:26:e2:16: aa:3e:af:b1:cc:e8:62:97:02:d2:c0:83:ad:47:76:70:da:e6: ee:c8:e7:c6:84:25:78:f9:39:13:10:fb:36:77:d5:bf:98:11: 88:6e:4b:d1:d8:50:e6:58:a2:8a:85:d3:4d:2d:74:ec:74:6b: cf:52:c0:08:58:25:05:6e:e4:12:c4:bf:2d:95:64:d3:db:ee: 8f:c7:0d:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95csun3ihT/vtIYTvGzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1N2ViZmE5OWNmNWQzNjgwMThmYTdmZTBjMTEyMzQxZjVk MzY1YzAwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EyhiNjU2Y2JkM2RlOTY3YzgzZTc1ZTlhNTUwYzFkZGE0NTcwOGZkMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ+dlhM25AXzXPFSE9n60V3GP/c4 93xVEimZLJP6RyRieLOt/ssJiPEYgm9O8r3mR9BBSLbtTowOznCOqXiqBXh7XM0z RbZUrAvyu6iCbZyPLtpnpSkISsKiSiwYhBrsLcbdkDhjbfu1MjtaFfvdnmh18tZC U3qHeHxPUc38J1VNgPrmZkK+2mc0M1vchbbvdjcgkgQGlrymouyOJxGd5tXLpwpV xuDsjPfWa9VfW4B+30QgG0jbyBEJmVmRcfsQ/2l667aFp/Q/GAHK/sADnKQSR2sn JIiDXAysmdf3uhGc1JhVcsVMa/6frYq78HP5qrNwqx9KAyyVsdu0S/wtEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZWy9PelnyD516aVQwd2kVwj9EFMB8GA1UdIwQY MBaAFEV+v6mc9dNoAY+n/gwRI0H102XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlg2X3FaejEwMmdCajZmLURCRWpRZlhUWmNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjE1OWYtOTk1Yy00OTc0LWE3NjQt M2JjYzUyZjk0Y2EwLzEvUlg2X3FaejEwMmdCajZmLURCRWpRZlhUWmNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jYjE1OWYtOTk1Yy00OTc0LWE3NjQtM2JjYzUyZjk0Y2Ew LzEvUlg2X3FaejEwMmdCajZmLURCRWpRZlhUWmNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrBN2Arm Wa5XcRshX2JV8/ql5Qqf+z9E8E1B5s2F/+AwknyfuwBnyoXFK/Ad3HMqip6D8LOw JyKA9p1NcfjTFE12uIyTkbvRJII4zX0WqCWtDvLmYXBWia8N16zKMBh7BIujcyvy 75HcUachbyVtV24+IArjbN6MUvUwVsgoUU+K+MbIy114EnJD1gog8LIoUFdY4FIC AKqWcE7a7et8VGFx3bVIlXT1EyS3QEdBdxMdJuIWqj6vsczoYpcC0sCDrUd2cNrm 7sjnxoQlePk5ExD7NnfVv5gRiG5L0dhQ5liiioXTTS107HRrz1LACFglBW7kEsS/ LZVk09vuj8cNkA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:34 2025 by rpki-client