This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json) Hash identifier: Xd2lUvjovF7H5i/BzobGf3viEi7GQLWBm6oWxFPT6RE= Subject key identifier: 6A:15:62:30:6F:37:9A:6F:8B:46:B7:53:5E:A8:E7:63:DA:75:67:B5 Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Certificate serial: 019AF50B187F03DD0315D710BA45C8640F01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 19:02:16 +0000 Manifest this update: Sat 06 Dec 2025 19:02:16 +0000 Manifest next update: Sun 07 Dec 2025 19:02:16 +0000 Files and hashes: 1: 4q5yWs-H0Iayb3QOvX6WcRBdwlw.roa (hash: qEBn/vQGgrtsIFTxVIm7czvnIpSpWJ9zYm+dXfDvi4A=) 2: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: rs8q/yHjuDrR6qfz9ohow3uOcwAti6mjgt5/noNHiXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:18:7f:03:dd:03:15:d7:10:ba:45:c8:64:0f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Validity Not Before: Dec 6 19:02:16 2025 GMT Not After : Dec 7 19:02:16 2025 GMT Subject: CN=6a1562306f379a6f8b46b7535ea8e763da7567b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:65:9c:3e:01:4d:45:51:ae:71:d0:0a:44: c0:3b:b5:74:e9:44:8d:e8:7c:d2:6d:f3:59:64:9c: b3:e1:ff:d1:a9:38:fd:84:7c:4e:67:98:aa:10:07: 4a:dd:d9:25:8b:c7:03:46:c0:3c:c1:61:85:5d:89: 98:45:e1:6b:16:12:ec:04:94:ab:fa:cd:3a:5b:c2: f8:52:e5:0e:43:ff:cb:05:e2:a2:63:b9:da:15:da: e5:df:b1:18:da:50:ef:1b:82:2f:a8:ec:4b:6f:1f: ca:6f:ed:5c:48:d9:ce:9c:06:92:8e:48:0c:db:7d: 85:d5:23:0c:20:be:c2:e2:2f:b8:ac:32:a6:05:d0: 3e:ae:67:28:ee:ed:37:93:bc:2b:ca:ea:17:db:8c: 9b:ea:ff:9c:48:7d:5c:11:94:43:d4:da:0d:10:6a: d8:1b:43:d6:69:28:67:c2:cc:1c:9d:cf:c7:f1:46: 6e:0c:6e:55:97:4e:3b:ad:7f:38:1e:f2:b4:24:87: 66:f4:53:3b:c3:15:d7:ef:b3:7c:17:69:fc:21:9c: c2:78:0b:4a:cd:00:16:d0:ee:41:d8:d6:8e:fa:54: 9f:22:83:b4:5e:6a:28:75:9d:68:50:dc:54:35:a0: aa:5f:94:4a:b8:63:dd:19:fd:7c:e5:f9:da:c6:bc: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:15:62:30:6F:37:9A:6F:8B:46:B7:53:5E:A8:E7:63:DA:75:67:B5 X509v3 Authority Key Identifier: keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:7d:c9:60:5f:21:2f:ef:0a:2b:bd:f2:3b:88:65:da:3f: ef:a7:93:01:d0:cc:31:72:9a:da:df:5f:ad:ae:98:52:69:94: 97:4b:83:d4:ce:b0:fc:30:6c:8b:7f:8e:ca:49:00:33:c5:fc: f4:f5:03:3d:9a:ab:82:d0:3a:ef:58:87:64:56:26:32:1a:34: 6a:cb:4e:c8:d7:2b:1b:76:af:e2:84:2d:8b:38:96:6a:b8:88: c7:1b:8f:f3:35:6a:6d:de:c0:63:86:69:af:c3:0b:9a:03:f9: 02:7e:65:44:f2:3e:c3:c5:b9:0a:fe:e7:04:ee:f7:a0:03:37: a6:5b:3c:1a:ca:a1:28:fd:e7:97:2d:80:3d:1c:ff:58:4e:2a: 3f:63:37:d7:1f:4e:5e:bb:db:96:91:67:3c:ad:df:a0:5e:40: 29:f6:02:0a:1f:47:84:b9:d9:1a:ef:00:24:4a:d5:04:d1:dc: 04:26:6e:5e:cf:57:21:7b:d4:07:d7:9b:50:43:c0:2e:3e:fc: 91:49:03:ea:12:99:b7:e2:53:ce:29:13:d9:80:c1:96:68:54: d4:90:22:81:82:4b:13:ec:7e:aa:51:a8:1c:17:16:da:b3:91: b4:61:4f:0d:0d:97:3f:85:7e:27:1a:a6:59:c9:6c:18:51:9e: 9e:5e:17:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cxh/A90DFdcQukXIZA8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMzRmYTUzZDFkODRkYmFiZTY5OGQ1YmJjY2FlZGYxMDlk MTU3YWUwHhcNMjUxMjA2MTkwMjE2WhcNMjUxMjA3MTkwMjE2WjAzMTEwLwYDVQQD Eyg2YTE1NjIzMDZmMzc5YTZmOGI0NmI3NTM1ZWE4ZTc2M2RhNzU2N2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWRlnD4BTUVRrnHQCkTAO7V06USN 6HzSbfNZZJyz4f/RqTj9hHxOZ5iqEAdK3dkli8cDRsA8wWGFXYmYReFrFhLsBJSr +s06W8L4UuUOQ//LBeKiY7naFdrl37EY2lDvG4IvqOxLbx/Kb+1cSNnOnAaSjkgM 232F1SMMIL7C4i+4rDKmBdA+rmco7u03k7wryuoX24yb6v+cSH1cEZRD1NoNEGrY G0PWaShnwswcnc/H8UZuDG5Vl047rX84HvK0JIdm9FM7wxXX77N8F2n8IZzCeAtK zQAW0O5B2NaO+lSfIoO0XmoodZ1oUNxUNaCqX5RKuGPdGf185fnaxry1CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoVYjBvN5pvi0a3U16o52PadWe1MB8GA1UdIwQY MBaAFGs0+lPR2E26vmmNW7zK7fEJ0VeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2Ut ZmZhYWEyOTlhZjYxLzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2UtZmZhYWEyOTlhZjYx LzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNF9yWBf IS/vCiu98juIZdo/76eTAdDMMXKa2t9fra6YUmmUl0uD1M6w/DBsi3+OykkAM8X8 9PUDPZqrgtA671iHZFYmMho0astOyNcrG3av4oQtiziWariIxxuP8zVqbd7AY4Zp r8MLmgP5An5lRPI+w8W5Cv7nBO73oAM3pls8GsqhKP3nly2APRz/WE4qP2M31x9O XrvblpFnPK3foF5AKfYCCh9HhLnZGu8AJErVBNHcBCZuXs9XIXvUB9ebUEPALj78 kUkD6hKZt+JTzikT2YDBlmhU1JAigYJLE+x+qlGoHBcW2rORtGFPDQ2XP4V+Jxqm WclsGFGenl4X8A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:32 2025 by rpki-client