This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json) Hash identifier: EwmXZRJsEOHKqdS+uJCsRqzuJUGNiVuy9k03NY02COU= Subject key identifier: F2:7B:6B:3A:D3:1C:7C:6B:F4:13:2C:5B:A4:80:4E:9F:BC:C4:C5:62 Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Certificate serial: 019AF35219F464DC6AE9D055872CE6C04FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 11:00:35 +0000 Manifest this update: Sat 06 Dec 2025 11:00:35 +0000 Manifest next update: Sun 07 Dec 2025 11:00:35 +0000 Files and hashes: 1: 1favdYYY_m115fJbPCqnNQTQC-4.roa (hash: JqdrpIAPsvsNkIpUiM7hC8jOVuzgCWUVOGVp30lphlM=) 2: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: mzJRAfdq5TdP8Y29kZ5ZeUREutKkqCPQuj33Z1k/Avo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:19:f4:64:dc:6a:e9:d0:55:87:2c:e6:c0:4f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Validity Not Before: Dec 6 11:00:35 2025 GMT Not After : Dec 7 11:00:35 2025 GMT Subject: CN=f27b6b3ad31c7c6bf4132c5ba4804e9fbcc4c562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:36:b1:f9:8b:ca:fc:9f:2e:9f:d5:c2:d4: 64:a3:ac:a1:45:ab:bd:ae:fc:d0:ef:7a:2b:31:81: 8b:ad:f3:20:d4:92:3b:ba:88:e9:f2:6d:d8:fa:5a: bd:e6:a9:53:3f:4d:a4:d0:32:7c:39:03:c5:5b:a0: c2:03:24:78:41:d3:f6:6b:dc:62:70:ed:cb:07:bc: 69:5b:55:c9:9d:0c:37:b1:24:14:5b:32:48:10:c1: f2:6c:b3:d9:ad:9e:91:63:8b:87:e0:13:21:82:fc: 53:44:61:64:79:9e:e0:08:bf:14:26:82:d7:ff:10: 72:3a:6b:c0:57:f3:e7:66:1e:30:71:92:c5:32:b7: e1:5b:5e:68:56:e5:2a:ca:05:7f:c7:9b:7e:a5:b6: 2e:4e:59:ca:9a:a2:ef:ab:98:c3:92:8e:ba:f4:e2: fc:61:a7:61:23:6c:54:b2:5e:bf:0b:25:e8:43:a9: fd:da:25:f9:77:85:b1:50:e9:c0:81:d3:5f:49:f4: 9a:fd:fb:f1:46:91:b4:5a:5e:6a:1d:a1:88:24:46: 07:e5:b5:0e:7f:cf:96:a8:5e:80:ca:77:69:54:d4: f2:4f:7c:48:25:cf:77:fe:ab:99:fe:89:36:94:74: 6f:a8:ae:4a:49:fc:b1:09:33:c1:1f:b0:0e:4f:65: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7B:6B:3A:D3:1C:7C:6B:F4:13:2C:5B:A4:80:4E:9F:BC:C4:C5:62 X509v3 Authority Key Identifier: keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:69:7c:96:ce:4f:37:b9:16:88:c8:40:eb:ab:0c:91:c0:d3: da:2b:80:9f:62:cf:d3:6b:98:43:a7:2e:e0:29:8e:b9:f6:ff: 99:9c:45:4f:63:68:13:31:70:fd:01:81:83:c4:82:6c:5d:0b: 71:d4:0e:c1:d3:18:7c:38:10:56:d0:a5:7d:4f:bb:45:ac:3e: 93:ed:0f:ae:f5:09:92:c9:50:c7:69:d4:d4:4b:b9:d2:0b:cc: 71:d4:7d:42:c2:e6:27:ef:6c:4e:20:9a:91:64:a4:09:77:3d: b3:1a:5c:b3:20:0e:08:e4:1f:2b:d9:6a:69:7c:ee:c8:b4:6e: 22:07:19:bb:7d:30:e6:00:1d:b0:26:83:d3:e6:ac:36:fb:90: 78:2c:16:3e:39:81:b7:a2:cf:2d:eb:41:16:06:38:81:1a:60: 2d:c4:a8:8d:54:f2:7c:b2:17:79:71:1d:a5:73:fa:f2:22:75: dc:66:fc:da:6d:dd:0e:d1:90:37:c5:26:28:31:bb:42:cb:84: 96:f2:26:cd:db:9f:96:6f:33:41:a7:77:cb:84:ce:bd:df:3d: 4b:6f:f2:4f:c7:03:29:ee:8e:8b:3f:7b:84:4e:a0:80:32:bd: cb:0a:59:56:9c:e9:c1:ad:9d:25:20:bb:76:9d:50:6c:3f:d1: c1:f5:a2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhn0ZNxq6dBVhyzmwE+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2 MTg3Y2MwHhcNMjUxMjA2MTEwMDM1WhcNMjUxMjA3MTEwMDM1WjAzMTEwLwYDVQQD EyhmMjdiNmIzYWQzMWM3YzZiZjQxMzJjNWJhNDgwNGU5ZmJjYzRjNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq02sfmLyvyfLp/VwtRko6yhRau9 rvzQ73orMYGLrfMg1JI7uojp8m3Y+lq95qlTP02k0DJ8OQPFW6DCAyR4QdP2a9xi cO3LB7xpW1XJnQw3sSQUWzJIEMHybLPZrZ6RY4uH4BMhgvxTRGFkeZ7gCL8UJoLX /xByOmvAV/PnZh4wcZLFMrfhW15oVuUqygV/x5t+pbYuTlnKmqLvq5jDko669OL8 YadhI2xUsl6/CyXoQ6n92iX5d4WxUOnAgdNfSfSa/fvxRpG0Wl5qHaGIJEYH5bUO f8+WqF6AyndpVNTyT3xIJc93/quZ/ok2lHRvqK5KSfyxCTPBH7AOT2XJJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJ7azrTHHxr9BMsW6SATp+8xMViMB8GA1UdIwQY MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt MjI5YWU5ZjcyOGQ2LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2 LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2l8ls5P N7kWiMhA66sMkcDT2iuAn2LP02uYQ6cu4CmOufb/mZxFT2NoEzFw/QGBg8SCbF0L cdQOwdMYfDgQVtClfU+7Raw+k+0PrvUJkslQx2nU1Eu50gvMcdR9QsLmJ+9sTiCa kWSkCXc9sxpcsyAOCOQfK9lqaXzuyLRuIgcZu30w5gAdsCaD0+asNvuQeCwWPjmB t6LPLetBFgY4gRpgLcSojVTyfLIXeXEdpXP68iJ13Gb82m3dDtGQN8UmKDG7QsuE lvImzduflm8zQad3y4TOvd89S2/yT8cDKe6Oiz97hE6ggDK9ywpZVpzpwa2dJSC7 dp1QbD/RwfWiTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:17 2025 by rpki-client