This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft File: 6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json) Hash identifier: gkDhJF1XQwW/L/9RAjnF/eEWVO3qVJzbMpVDOoF7BCU= Subject key identifier: AE:2E:1D:8B:BA:E0:B2:50:7C:1C:38:7F:14:5A:5C:E6:3D:0A:BA:BB Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 Certificate issuer: /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Certificate serial: 019AF3892CD4237717D1FC3110A18C9F5093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft Manifest number: 0275 Signing time: Sat 06 Dec 2025 12:00:44 +0000 Manifest this update: Sat 06 Dec 2025 12:00:44 +0000 Manifest next update: Sun 07 Dec 2025 12:00:44 +0000 Files and hashes: 1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: u3JgIHi12n8Kz3T5tNF+tqFW/eGfPSqZvQD4Ur6WQQo=) 2: Z6Ua_m1uC5vkIPTZcIRy60EkawI.roa (hash: MctTd7jsNaKXKyaY6wZK28mWbw3asQJpuRF6a3Ofl8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:2c:d4:23:77:17:d1:fc:31:10:a1:8c:9f:50:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Validity Not Before: Dec 6 12:00:44 2025 GMT Not After : Dec 7 12:00:44 2025 GMT Subject: CN=ae2e1d8bbae0b2507c1c387f145a5ce63d0ababb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:8f:87:4c:a4:ef:fc:cb:e2:76:62:79:90: 1c:28:47:10:c5:0f:00:a5:b3:0e:4e:28:50:68:56: 58:98:c9:a0:47:28:0e:b2:35:f2:d4:10:73:99:74: 1e:28:60:28:dd:09:d5:40:43:a6:7b:bb:97:1d:ff: b1:a8:33:51:09:31:fe:d6:db:7b:7e:d8:41:77:a7: 95:ac:ee:6b:22:d4:e0:13:ff:b9:24:62:ac:f4:96: 75:af:6e:66:53:a0:0e:22:6e:a8:10:62:d4:95:d2: ba:8a:4a:0c:74:f9:fc:c6:19:3d:75:1e:bb:43:d3: e1:95:99:62:24:57:5e:27:65:7d:d9:1e:58:de:37: 66:bd:6f:63:e3:56:41:5c:c6:72:9f:9b:c9:3f:ae: 55:8b:8a:69:49:23:d0:88:bd:f1:56:03:0e:a9:17: 14:e8:75:c3:78:33:d8:72:6e:8f:42:b7:b8:48:ed: e9:be:42:1a:4e:f1:80:00:14:08:fb:46:6a:89:ce: 14:35:10:41:b2:40:c7:ec:5c:c4:88:fe:d7:e9:ad: 13:b7:3f:ff:28:9d:d2:d4:8d:1c:db:b0:af:4b:76: 3a:53:9c:cc:e1:7c:01:5f:54:f1:85:ba:7d:b6:58: 51:e8:95:b5:30:d6:69:07:ed:87:5b:49:85:d9:de: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2E:1D:8B:BA:E0:B2:50:7C:1C:38:7F:14:5A:5C:E6:3D:0A:BA:BB X509v3 Authority Key Identifier: keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:70:66:55:7f:4b:a6:17:e8:4e:f7:b7:fc:75:bd:49:a3:ab: 0d:d2:05:a4:c3:69:30:12:25:ec:11:80:85:e9:f6:fc:b6:97: ab:84:e2:29:75:48:2d:cd:69:60:b1:20:34:46:4c:53:f7:65: 7c:5a:8f:d0:a3:df:4a:72:50:d6:cd:6c:4c:db:04:82:95:57: 0f:dc:e4:df:66:a7:60:0a:bf:64:81:50:b2:66:53:da:64:47: 2c:ef:71:54:70:54:7d:da:6d:fc:c9:40:68:b9:c9:5b:05:df: 6e:6f:cc:61:67:1f:e7:c3:c0:9a:e4:7d:0d:5a:e9:0d:90:6a: 39:9d:1f:13:6b:b0:78:45:9f:b5:a2:23:fb:b7:3a:8a:05:9a: 21:60:67:32:68:4f:23:c3:2e:e9:c5:6c:3b:6a:97:9f:90:f3: df:ab:bd:12:d8:2c:4e:1c:c3:c6:3f:47:c5:11:e7:4f:f9:92: 2e:89:47:65:87:a7:78:33:9a:ea:47:a3:53:8f:15:7b:24:b5: 58:33:78:b2:21:df:7b:99:49:fb:98:15:ca:8c:72:60:94:4e: cd:58:99:1a:e0:ba:c9:18:ae:ba:bc:ec:e4:46:fc:f6:40:2f: 5d:2e:69:47:84:ba:39:b6:00:30:e3:2f:c7:df:2a:68:cb:2f: 2e:c5:18:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSzUI3cX0fwxEKGMn1CTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4 YTZlODAwHhcNMjUxMjA2MTIwMDQ0WhcNMjUxMjA3MTIwMDQ0WjAzMTEwLwYDVQQD EyhhZTJlMWQ4YmJhZTBiMjUwN2MxYzM4N2YxNDVhNWNlNjNkMGFiYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+ePh0yk7/zL4nZieZAcKEcQxQ8A pbMOTihQaFZYmMmgRygOsjXy1BBzmXQeKGAo3QnVQEOme7uXHf+xqDNRCTH+1tt7 fthBd6eVrO5rItTgE/+5JGKs9JZ1r25mU6AOIm6oEGLUldK6ikoMdPn8xhk9dR67 Q9PhlZliJFdeJ2V92R5Y3jdmvW9j41ZBXMZyn5vJP65Vi4ppSSPQiL3xVgMOqRcU 6HXDeDPYcm6PQre4SO3pvkIaTvGAABQI+0Zqic4UNRBBskDH7FzEiP7X6a0Ttz// KJ3S1I0c27CvS3Y6U5zM4XwBX1Txhbp9tlhR6JW1MNZpB+2HW0mF2d5FxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4uHYu64LJQfBw4fxRaXOY9Crq7MB8GA1UdIwQY MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt NzFiOTM4YWU0Y2NkLzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXBmVX9L phfoTve3/HW9SaOrDdIFpMNpMBIl7BGAhen2/LaXq4TiKXVILc1pYLEgNEZMU/dl fFqP0KPfSnJQ1s1sTNsEgpVXD9zk32anYAq/ZIFQsmZT2mRHLO9xVHBUfdpt/MlA aLnJWwXfbm/MYWcf58PAmuR9DVrpDZBqOZ0fE2uweEWftaIj+7c6igWaIWBnMmhP I8Mu6cVsO2qXn5Dz36u9EtgsThzDxj9HxRHnT/mSLolHZYeneDOa6kejU48VeyS1 WDN4siHfe5lJ+5gVyoxyYJROzViZGuC6yRiuurzs5Eb89kAvXS5pR4S6ObYAMOMv x98qaMsvLsUYWg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:10:12 2025 by rpki-client