This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft File: 6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json) Hash identifier: XJHbGM8tMG60lQMXNBicHvkccVfGsDHZYe+SR/YANeY= Subject key identifier: 94:0F:41:BC:02:01:4F:F5:78:A4:D0:2F:11:BF:13:1C:00:23:3D:1E Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D Certificate issuer: /CN=e83f8370b15cb917965503ca00373232d857aa9d Certificate serial: 019B3C7E9A149528A506125EB9D95E47D490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft Manifest number: 127B Signing time: Sat 20 Dec 2025 16:01:28 +0000 Manifest this update: Sat 20 Dec 2025 16:01:28 +0000 Manifest next update: Sun 21 Dec 2025 16:01:28 +0000 Files and hashes: 1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: 2Z2J1sGt+nBBYnovWGxhEsHwz6bOV+6nAVOlbP3jjPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:9a:14:95:28:a5:06:12:5e:b9:d9:5e:47:d4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d Validity Not Before: Dec 20 16:01:28 2025 GMT Not After : Dec 21 16:01:28 2025 GMT Subject: CN=940f41bc02014ff578a4d02f11bf131c00233d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:7c:8b:71:46:85:b7:ed:69:2c:5b:6f:cb: d6:c0:29:04:9f:75:2b:61:71:58:36:29:51:79:c2: ff:a2:25:c7:46:c7:e4:7a:65:c9:a9:7d:47:63:77: 76:cf:1e:86:de:b0:13:da:e6:0a:1e:89:69:d2:f1: 64:88:df:72:ed:ad:99:d7:2e:a7:64:8f:a2:2d:3d: bc:3a:bb:be:16:44:73:79:91:49:98:71:cb:6a:65: 51:1b:d3:5f:50:c6:f1:99:90:eb:af:8e:c9:2a:42: 22:a9:c6:b5:2a:e7:6c:53:9d:c8:39:c7:93:3a:4b: 28:9c:7b:45:7d:e4:d7:84:ab:76:90:07:49:91:09: f7:f5:8d:95:14:96:30:49:cf:2e:8d:83:10:06:3e: a7:5b:09:7e:14:09:52:e6:95:61:39:54:b6:b1:c0: e7:3d:e4:3a:8d:f7:a7:99:a8:1d:bb:8c:98:c8:3b: e1:23:52:8b:87:25:62:27:b8:39:cf:ef:7b:4c:a0: c1:85:25:ad:ad:10:3f:5c:bd:9a:45:a7:cb:f7:42: 83:cb:87:cf:ee:2e:c3:4a:56:be:39:a2:0f:65:54: 1f:06:73:c8:6b:f6:fd:e5:86:07:92:c7:f2:d7:19: 8b:01:46:bd:09:cf:e0:8e:3b:7a:a5:34:a5:6a:f0: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0F:41:BC:02:01:4F:F5:78:A4:D0:2F:11:BF:13:1C:00:23:3D:1E X509v3 Authority Key Identifier: keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f9:5d:aa:fd:ba:c7:f8:de:81:64:9b:00:b2:6d:89:ed:ad: 74:4b:49:c1:63:96:38:40:19:cc:00:2f:1d:4b:4b:e7:d4:e9: 9c:58:7c:ed:42:b7:e5:4f:ec:b4:c6:7c:2e:6f:dd:9c:26:44: f3:88:c8:66:71:72:57:44:6c:d3:af:f4:bb:19:62:bf:0a:58: 5b:fd:6c:93:e5:23:d9:4a:96:fd:34:44:97:9d:7b:50:06:de: dd:04:87:ad:5c:08:b3:51:94:96:10:50:cb:b2:bf:eb:bc:de: ee:e1:3f:87:24:97:0c:63:66:cb:1f:8d:54:91:57:08:40:27: 16:42:fe:aa:31:d3:35:06:fc:e3:ab:69:0a:aa:73:02:85:3b: e0:11:4d:c9:2d:d7:dc:50:a7:5e:c0:39:0c:47:15:d0:d9:d4: 53:c2:ac:27:1b:d3:9d:d8:5a:07:51:24:a1:dd:0a:09:f8:58: 0e:45:c4:3b:bd:e5:97:ed:b8:02:24:c0:95:ed:4b:34:10:ad: 94:2e:ca:31:89:af:1a:3c:a5:03:0c:a3:50:d1:fc:32:2e:90: 97:86:a8:51:a1:b9:8a:ea:e7:53:42:f7:e1:88:f5:e0:65:6e: 88:8b:f0:58:b7:07:5e:07:46:d7:5f:e7:c7:33:61:66:c3:20: 9b:fa:57:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fpoUlSilBhJeudleR9SQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4M2Y4MzcwYjE1Y2I5MTc5NjU1MDNjYTAwMzczMjMyZDg1 N2FhOWQwHhcNMjUxMjIwMTYwMTI4WhcNMjUxMjIxMTYwMTI4WjAzMTEwLwYDVQQD Eyg5NDBmNDFiYzAyMDE0ZmY1NzhhNGQwMmYxMWJmMTMxYzAwMjMzZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZ8i3FGhbftaSxbb8vWwCkEn3Ur YXFYNilRecL/oiXHRsfkemXJqX1HY3d2zx6G3rAT2uYKHolp0vFkiN9y7a2Z1y6n ZI+iLT28Oru+FkRzeZFJmHHLamVRG9NfUMbxmZDrr47JKkIiqca1KudsU53IOceT OksonHtFfeTXhKt2kAdJkQn39Y2VFJYwSc8ujYMQBj6nWwl+FAlS5pVhOVS2scDn PeQ6jfenmagdu4yYyDvhI1KLhyViJ7g5z+97TKDBhSWtrRA/XL2aRafL90KDy4fP 7i7DSla+OaIPZVQfBnPIa/b95YYHksfy1xmLAUa9Cc/gjjt6pTSlavA3CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQPQbwCAU/1eKTQLxG/ExwAIz0eMB8GA1UdIwQY MBaAFOg/g3CxXLkXllUDygA3MjLYV6qdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEt MzY4Y2I5NWQxOGNhLzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEtMzY4Y2I5NWQxOGNh LzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevldqv26 x/jegWSbALJtie2tdEtJwWOWOEAZzAAvHUtL59TpnFh87UK35U/stMZ8Lm/dnCZE 84jIZnFyV0Rs06/0uxlivwpYW/1sk+Uj2UqW/TREl517UAbe3QSHrVwIs1GUlhBQ y7K/67ze7uE/hySXDGNmyx+NVJFXCEAnFkL+qjHTNQb846tpCqpzAoU74BFNyS3X 3FCnXsA5DEcV0NnUU8KsJxvTndhaB1Ekod0KCfhYDkXEO73ll+24AiTAle1LNBCt lC7KMYmvGjylAwyjUNH8Mi6Ql4aoUaG5iurnU0L34Yj14GVuiIvwWLcHXgdG11/n xzNhZsMgm/pXgA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:26 2025 by rpki-client