This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json) Hash identifier: whGZooEwcDHeC7r/L729oiE3ygn7dWuTO1djjYRHcQk= Subject key identifier: 6C:C8:66:0F:D1:EB:98:91:A3:E3:A9:2A:22:35:9A:40:5A:5F:38:DD Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Certificate serial: 019AF23FD7F30CB6C0AD9643E5B4CA96640C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft Manifest number: 0C2B Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: Rc7yEnzcYjvbMiDnRR9DOrXqX9gY0UOARs+nLuBxCOk=) 2: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (hash: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d7:f3:0c:b6:c0:ad:96:43:e5:b4:ca:96:64:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=6cc8660fd1eb9891a3e3a92a22359a405a5f38dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:d8:bf:43:da:c4:00:9a:88:59:5f:18:b7: 10:7c:c3:b8:75:16:8e:55:69:d4:bb:4f:e2:6d:74: de:19:46:78:fb:49:d5:42:0c:e3:5d:88:be:77:df: bd:09:67:ef:c7:65:1d:16:4e:54:7f:89:57:21:ca: dc:c9:cc:7e:c7:be:02:94:ee:fb:99:be:9a:b9:88: 22:ae:31:af:f0:b6:2d:3e:74:84:1a:eb:24:67:06: 1f:86:28:28:d0:f3:3d:d1:d8:82:94:09:08:e9:2f: 62:3e:25:11:f8:80:91:24:b2:19:19:f3:78:8e:2a: 7a:9f:a3:1e:d1:5b:8a:e0:36:f9:53:a9:68:87:05: fe:c7:06:c1:df:97:05:d9:20:06:08:00:57:5d:df: 8b:dd:0a:e6:82:f5:1d:67:d3:22:02:f4:86:98:f6: 3a:cf:7c:77:f8:48:cc:91:36:45:fe:af:79:28:8b: c8:c4:5c:ef:27:30:ae:ba:97:ed:50:76:d1:10:88: 04:c1:61:3c:ce:76:b4:f9:fd:a1:a4:28:0e:5c:e1: 6e:a0:30:9b:8a:82:4b:28:2f:7b:bc:2b:a2:54:d2: 8e:7b:d9:7f:2b:3f:84:58:98:9c:29:84:33:5f:f7: 10:f2:e2:90:c7:84:1a:f7:61:3b:18:74:ad:09:bc: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C8:66:0F:D1:EB:98:91:A3:E3:A9:2A:22:35:9A:40:5A:5F:38:DD X509v3 Authority Key Identifier: keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9a:61:2e:a0:f7:3d:c3:67:f0:2c:a0:65:45:a6:95:6d:01: e7:85:33:2a:ce:61:58:a8:6c:05:f7:11:dd:77:e2:1a:e4:74: 0b:f0:96:f2:8a:39:e4:f1:75:05:b3:d5:cb:d9:91:8b:8f:18: 3f:27:b2:7f:7b:1b:3e:67:72:9d:ea:dd:1e:66:d5:c4:bf:02: 00:de:c2:57:ef:f5:37:d1:b3:08:cb:7b:dd:ac:e2:1f:fc:c1: 12:37:b2:96:0d:86:4d:5a:78:fd:8e:ea:f6:46:bc:ae:f9:19: 97:3a:b6:cc:49:2c:4a:16:be:fa:60:29:ab:19:b5:2c:b8:af: 8d:f6:e3:56:40:bf:0b:a4:db:e9:c1:28:5a:5c:45:81:48:dd: 9e:48:8c:2f:6a:93:72:e5:e6:de:2c:af:6c:a3:4c:61:96:ca: aa:cb:77:aa:48:90:37:3d:b4:70:03:dc:a2:6e:76:88:49:67: 2d:be:8d:c3:91:3d:4f:b3:b3:41:18:bb:46:c5:c0:a5:c3:fd: b6:d0:1b:17:d9:f1:5c:de:d0:12:4a:e0:ba:cf:de:04:7f:7c: 54:2c:8a:93:7c:33:9d:02:1f:6b:35:91:01:71:ae:e7:7f:23: 06:39:44:f0:e0:fe:50:56:c6:ed:ad:62:0a:74:d8:6d:12:de: 1a:14:c7:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9fzDLbArZZD5bTKlmQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz NmVjZDQwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD Eyg2Y2M4NjYwZmQxZWI5ODkxYTNlM2E5MmEyMjM1OWE0MDVhNWYzOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLnYv0PaxACaiFlfGLcQfMO4dRaO VWnUu0/ibXTeGUZ4+0nVQgzjXYi+d9+9CWfvx2UdFk5Uf4lXIcrcycx+x74ClO77 mb6auYgirjGv8LYtPnSEGuskZwYfhigo0PM90diClAkI6S9iPiUR+ICRJLIZGfN4 jip6n6Me0VuK4Db5U6lohwX+xwbB35cF2SAGCABXXd+L3QrmgvUdZ9MiAvSGmPY6 z3x3+EjMkTZF/q95KIvIxFzvJzCuupftUHbREIgEwWE8zna0+f2hpCgOXOFuoDCb ioJLKC97vCuiVNKOe9l/Kz+EWJicKYQzX/cQ8uKQx4Qa92E7GHStCby+mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzIZg/R65iRo+OpKiI1mkBaXzjdMB8GA1UdIwQY MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3 LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5phLqD3 PcNn8CygZUWmlW0B54UzKs5hWKhsBfcR3XfiGuR0C/CW8oo55PF1BbPVy9mRi48Y Pyeyf3sbPmdynerdHmbVxL8CAN7CV+/1N9GzCMt73aziH/zBEjeylg2GTVp4/Y7q 9ka8rvkZlzq2zEksSha++mApqxm1LLivjfbjVkC/C6Tb6cEoWlxFgUjdnkiML2qT cuXm3iyvbKNMYZbKqst3qkiQNz20cAPcom52iElnLb6Nw5E9T7OzQRi7RsXApcP9 ttAbF9nxXN7QEkrgus/eBH98VCyKk3wznQIfazWRAXGu538jBjlE8OD+UFbG7a1i CnTYbRLeGhTHNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:25 2025 by rpki-client