This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json) Hash identifier: Nxa9vKINAhzZG5+epSsfeyMjfm2i9e3iDEoLXl+ia8Q= Subject key identifier: E8:3F:32:9D:82:48:E7:4D:3D:A8:52:1B:E6:EA:0F:85:12:82:E4:6B Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b Certificate serial: 019AF23FD67127A7BD81EB05FD5642B6F52A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: vm2Poj7ehTGj9gpmfcpobCgXp7qh7oIQ7cwZq6+0IMc=) 2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d6:71:27:a7:bd:81:eb:05:fd:56:42:b6:f5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=e83f329d8248e74d3da8521be6ea0f851282e46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:be:66:a6:a1:be:01:71:de:7c:59:71:cc: f1:ac:84:91:25:ab:08:9a:ed:3b:83:cb:14:25:e5: af:d7:2a:49:e5:ec:2b:5f:57:b5:5c:88:12:71:db: 8f:9b:20:10:0f:72:48:5d:b9:2a:d9:99:78:cf:32: a0:a0:16:9a:b1:8f:0a:de:32:8c:e9:7d:18:7b:3b: c6:9a:20:aa:66:01:fb:00:ef:f7:56:a5:8f:52:81: b9:4c:e3:c9:f2:e1:45:87:44:36:2d:40:24:ef:83: f7:82:67:9c:f4:9b:d5:77:53:d0:ab:66:62:7b:47: 6e:0e:24:ae:d2:8a:40:13:a5:36:12:49:f4:b6:e7: 95:41:1c:b9:c8:c8:20:22:90:18:4d:ca:51:89:e3: 90:99:33:31:1c:72:f8:90:83:18:22:26:c7:58:2f: cc:f7:0d:7b:2b:c1:83:ed:14:78:d3:24:80:96:ce: 2e:1b:cc:db:cb:1f:2a:d6:0a:6f:bf:7d:3a:8d:e3: ab:78:77:6c:5c:54:4f:54:3e:ae:a7:50:a0:89:5f: 95:e2:86:59:f8:5d:85:84:4f:cd:73:f2:0e:20:f9: 20:4f:5b:82:34:3d:c2:7a:30:6a:7e:77:f1:94:55: ed:51:b1:59:89:09:50:e9:91:d1:83:7e:6c:48:76: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:32:9D:82:48:E7:4D:3D:A8:52:1B:E6:EA:0F:85:12:82:E4:6B X509v3 Authority Key Identifier: keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a1:a9:ca:dc:00:0e:28:30:f3:79:22:de:76:1e:2a:73:d8: 11:95:a7:3e:29:ae:8d:36:94:da:d1:aa:03:e7:be:7d:37:cd: fb:4c:a5:21:0d:f3:5b:64:f2:23:03:69:4a:37:2a:32:37:99: 7e:f4:d5:5c:48:b3:db:bc:57:04:86:06:f1:85:69:f7:46:62: c3:bb:16:9a:17:d7:c7:8f:3d:fc:54:41:0a:d9:a4:be:d9:4f: 1f:4c:29:54:ec:55:da:5a:c7:a5:76:5c:c9:06:a1:9d:0c:c2: fa:5a:61:3c:bd:12:11:eb:f1:ac:df:cf:ae:17:7b:35:51:1e: bf:02:d6:9b:62:d0:5c:5d:5f:52:a1:f7:f9:88:ea:08:e2:2c: bd:38:cf:bd:ad:a0:f3:a4:3b:84:a8:96:2b:d7:fb:c0:26:8c: 24:cc:06:64:c5:fb:63:da:25:8c:a6:77:b4:5c:1a:7b:2f:fb: 6b:93:0a:25:d1:4b:d4:a2:b4:a5:32:3a:0a:83:7b:79:40:44: 4c:96:3c:27:5c:08:0d:96:24:dc:27:c9:eb:dd:c1:cc:37:b1: 63:0b:25:2a:02:85:2e:15:fa:86:3b:0c:6e:ee:18:3c:84:89: f6:52:9d:58:6a:ea:5a:6c:bb:18:6e:de:aa:3b:58:0f:1e:db: f9:3f:71:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9ZxJ6e9gesF/VZCtvUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTcwODhlMzllN2FkODgxN2I3ZDEwZWEyYTViOGEwOThh NDdhMGIwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhlODNmMzI5ZDgyNDhlNzRkM2RhODUyMWJlNmVhMGY4NTEyODJlNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZW+ZqahvgFx3nxZcczxrISRJasI mu07g8sUJeWv1ypJ5ewrX1e1XIgScduPmyAQD3JIXbkq2Zl4zzKgoBaasY8K3jKM 6X0YezvGmiCqZgH7AO/3VqWPUoG5TOPJ8uFFh0Q2LUAk74P3gmec9JvVd1PQq2Zi e0duDiSu0opAE6U2Ekn0tueVQRy5yMggIpAYTcpRieOQmTMxHHL4kIMYIibHWC/M 9w17K8GD7RR40ySAls4uG8zbyx8q1gpvv306jeOreHdsXFRPVD6up1CgiV+V4oZZ +F2FhE/Nc/IOIPkgT1uCND3CejBqfnfxlFXtUbFZiQlQ6ZHRg35sSHaUQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOg/Mp2CSOdNPahSG+bqD4USguRrMB8GA1UdIwQY MBaAFCunCI45562IF7fRDqKluKCYpHoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYt NGE2N2U0ZDA1NmFiLzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYtNGE2N2U0ZDA1NmFi LzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaGpytwA Digw83ki3nYeKnPYEZWnPimujTaU2tGqA+e+fTfN+0ylIQ3zW2TyIwNpSjcqMjeZ fvTVXEiz27xXBIYG8YVp90Ziw7sWmhfXx489/FRBCtmkvtlPH0wpVOxV2lrHpXZc yQahnQzC+lphPL0SEevxrN/Prhd7NVEevwLWm2LQXF1fUqH3+YjqCOIsvTjPva2g 86Q7hKiWK9f7wCaMJMwGZMX7Y9oljKZ3tFwaey/7a5MKJdFL1KK0pTI6CoN7eUBE TJY8J1wIDZYk3CfJ693BzDexYwslKgKFLhX6hjsMbu4YPISJ9lKdWGrqWmy7GG7e qjtYDx7b+T9xcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:37 2025 by rpki-client