This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json) Hash identifier: Y7yipOs6IRts+mPXmgfSPDrKWjfPIpPf0E5+JvyKrHk= Subject key identifier: D8:1C:66:11:E1:A4:11:C2:5E:AF:D0:1B:16:88:E1:A2:F2:15:B5:40 Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59 Certificate serial: 019B40C8D34BC340499109FF9E214E34079E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft Manifest number: 0332 Signing time: Sun 21 Dec 2025 12:01:01 +0000 Manifest this update: Sun 21 Dec 2025 12:01:01 +0000 Manifest next update: Mon 22 Dec 2025 12:01:01 +0000 Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: NRvdcmGvsH/Jm14ZTNDBYfuUqu0JO6L6YkUYSDOmNNU=) 2: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (hash: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:d3:4b:c3:40:49:91:09:ff:9e:21:4e:34:07:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e979403cd68c98df738e31062903a0b322600b59 Validity Not Before: Dec 21 12:01:01 2025 GMT Not After : Dec 22 12:01:01 2025 GMT Subject: CN=d81c6611e1a411c25eafd01b1688e1a2f215b540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:bd:76:42:0b:54:05:1d:a7:74:79:e6:74: 02:8d:41:ca:71:e9:de:e0:b4:1f:7f:10:56:77:94: 79:de:58:cf:a9:1f:2d:bd:47:f7:71:ed:44:66:f4: d2:3d:64:1a:f2:90:e5:f0:c4:dd:09:d9:cf:86:dc: 2e:2f:68:f2:ee:ec:22:4d:81:15:0d:ca:71:3d:56: 60:f7:69:7e:f9:f5:cb:97:10:98:32:f5:30:51:2d: d5:e7:be:f7:1e:eb:75:74:1f:45:3e:a7:9e:8f:21: 2d:d6:3b:57:29:6f:7f:0e:bb:1c:f3:2d:34:e0:db: dd:8e:11:e8:ac:31:70:e1:35:11:a7:0e:8a:f9:71: 26:ac:77:ae:84:a6:e0:cc:09:48:46:a6:ef:e8:eb: 62:16:88:76:8b:71:2d:b7:94:8b:ba:0f:4a:1b:1d: 59:a3:47:56:f6:1b:12:a7:7a:be:57:06:81:3a:9a: ad:c8:75:ae:ef:7c:d5:6a:48:06:cb:40:bc:ca:4e: 47:1d:a9:94:52:b3:28:06:07:a5:3b:28:4b:dc:f9: c5:80:3a:63:3d:c6:7e:37:49:50:cc:0e:69:4c:63: 72:8a:fc:d8:11:e3:85:f3:04:97:56:2e:c5:f8:93: a9:32:87:25:47:ba:cf:1b:ae:79:80:1d:cc:fd:13: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:66:11:E1:A4:11:C2:5E:AF:D0:1B:16:88:E1:A2:F2:15:B5:40 X509v3 Authority Key Identifier: keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:fd:b3:44:2a:77:24:78:5f:b1:30:23:43:1c:f5:8b:0c:ce: 89:7c:e8:30:26:c0:fb:e1:04:2a:df:d0:87:46:be:88:41:38: a7:9b:bd:17:1a:1e:70:38:2b:e5:ca:3e:71:61:9e:d8:ab:fc: 22:67:80:5b:b3:84:6f:6e:b3:09:a7:83:70:70:ca:e3:47:e5: 88:df:13:b7:66:f8:04:82:e4:8f:72:d1:7c:ff:26:be:5e:6e: 8e:1b:90:a8:d4:94:8a:de:98:4f:db:0f:d4:a9:d5:cb:e0:46: 5d:31:2f:b4:f5:39:9a:42:f1:7a:bf:59:1f:eb:ad:5e:cc:4a: 1d:4f:50:89:82:1e:4a:ae:ff:36:d6:cf:62:7f:f6:14:1b:ee: 2a:5e:60:b9:a8:b9:dc:fe:82:bb:41:dd:01:5a:ed:fc:9a:bd: 95:2c:cf:7b:8e:2f:58:f3:f4:12:3c:33:2e:31:8d:93:2f:7e: 77:e4:0e:c4:4d:ff:e7:7c:de:f8:92:89:c5:8d:16:36:e4:ec: e1:97:28:e2:64:38:e5:90:31:c0:7f:80:9a:93:f4:75:0c:8b: d0:72:9d:d1:5b:9f:a3:af:67:6a:c2:e3:6b:e4:81:ad:9f:62: d3:a8:a7:0f:ca:b2:de:e2:f0:52:68:5f:d0:60:ef:39:0e:89: 8c:37:e6:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyNNLw0BJkQn/niFONAeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2 MDBiNTkwHhcNMjUxMjIxMTIwMTAxWhcNMjUxMjIyMTIwMTAxWjAzMTEwLwYDVQQD EyhkODFjNjYxMWUxYTQxMWMyNWVhZmQwMWIxNjg4ZTFhMmYyMTViNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz29dkILVAUdp3R55nQCjUHKcene 4LQffxBWd5R53ljPqR8tvUf3ce1EZvTSPWQa8pDl8MTdCdnPhtwuL2jy7uwiTYEV DcpxPVZg92l++fXLlxCYMvUwUS3V5773Hut1dB9FPqeejyEt1jtXKW9/Drsc8y00 4NvdjhHorDFw4TURpw6K+XEmrHeuhKbgzAlIRqbv6OtiFoh2i3Ett5SLug9KGx1Z o0dW9hsSp3q+VwaBOpqtyHWu73zVakgGy0C8yk5HHamUUrMoBgelOyhL3PnFgDpj PcZ+N0lQzA5pTGNyivzYEeOF8wSXVi7F+JOpMoclR7rPG655gB3M/RNnSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgcZhHhpBHCXq/QGxaI4aLyFbVAMB8GA1UdIwQY MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt ZTgxNjIxYjYxZDY1LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1 LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/2zRCp3 JHhfsTAjQxz1iwzOiXzoMCbA++EEKt/Qh0a+iEE4p5u9FxoecDgr5co+cWGe2Kv8 ImeAW7OEb26zCaeDcHDK40fliN8Tt2b4BILkj3LRfP8mvl5ujhuQqNSUit6YT9sP 1KnVy+BGXTEvtPU5mkLxer9ZH+utXsxKHU9QiYIeSq7/NtbPYn/2FBvuKl5guai5 3P6Cu0HdAVrt/Jq9lSzPe44vWPP0EjwzLjGNky9+d+QOxE3/53ze+JKJxY0WNuTs 4Zco4mQ45ZAxwH+AmpP0dQyL0HKd0Vufo69nasLja+SBrZ9i06inD8qy3uLwUmhf 0GDvOQ6JjDfm8A== -----END CERTIFICATE-----Generated at Sun Dec 21 17:29:16 2025 by rpki-client