This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft File: d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json) Hash identifier: f4sRsvWenGKiAFh2ijYWHhSDweHU5mf3we2hp7zU9qA= Subject key identifier: D1:56:10:53:FE:D5:52:36:5F:2D:14:E9:9E:4A:51:47:8F:C1:7F:E8 Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0 Certificate issuer: /CN=77a53d2e97704dbea831a6440072904ee91a71b0 Certificate serial: 019AF1D1C8759A5CDBA47B8C626E49323582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft Manifest number: 1440 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: Y8jhOEu/g4/7iWsRGH5D7/TO2004upijuGmQqSiq51Q=) 2: mygXRxPx2D1UXJyXM04ODWybylU.roa (hash: H0IWRuq52mUhkCTHvw9eNNClwcqWk5xJXDx9B164fD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c8:75:9a:5c:db:a4:7b:8c:62:6e:49:32:35:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=d1561053fed552365f2d14e99e4a51478fc17fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:80:5e:b9:8b:42:30:e5:19:d9:62:4d:11: 5d:9c:31:b5:d3:34:fa:b1:9f:72:3e:35:9a:99:f3: a5:75:4b:2b:7f:be:02:7b:59:05:64:8a:f5:76:43: f4:a5:69:14:eb:83:13:82:8b:28:10:fb:bf:c7:2e: cf:31:6d:d9:a1:25:11:eb:80:cc:44:72:28:95:39: bd:bb:56:eb:ba:eb:98:8b:43:e0:4b:64:f1:e0:d5: 09:f7:77:99:ea:bc:1c:f1:9a:3a:8d:9c:4d:de:f6: 6f:b9:80:18:24:af:f8:b2:17:2c:cd:46:6c:98:ce: 74:1b:b6:07:cd:78:d2:94:16:0d:bf:43:47:53:be: 56:29:d8:e0:dd:32:bf:42:7d:f6:fa:47:9b:65:3c: a2:b9:53:e8:3c:4f:86:f6:fd:8c:85:9a:91:91:0f: 7a:01:51:3b:40:62:c9:8b:ae:10:4c:2a:99:a5:0b: 73:42:cc:f9:a4:b8:cf:a6:ff:d6:9f:62:09:6b:8e: ae:18:b5:a7:ea:65:e2:b3:a6:17:31:75:e4:f1:48: 9f:e3:26:db:eb:b3:8b:c7:f2:12:0c:a0:e7:8c:35: 09:05:57:5b:2d:44:69:87:2c:9c:7c:85:44:ac:19: 5a:05:bb:32:8a:77:df:fb:41:a6:ed:84:ee:d0:41: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:10:53:FE:D5:52:36:5F:2D:14:E9:9E:4A:51:47:8F:C1:7F:E8 X509v3 Authority Key Identifier: keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ce:f5:8d:c9:fa:7f:a7:6d:38:d7:98:52:58:11:de:f8:d8: 6c:e3:32:f0:ab:27:5f:f7:07:15:6e:85:a0:ab:29:6a:37:9e: b3:63:6a:dc:5c:e1:45:b0:3e:e1:45:8c:b4:79:95:22:ec:2d: 27:34:4b:08:b4:0c:89:8c:b8:46:c9:1b:83:b0:b8:40:95:63: ac:64:28:82:10:b6:3c:42:6f:f2:e1:17:aa:f6:fe:ac:df:28: 3f:dd:18:92:bf:ea:63:3e:3d:77:1e:40:fb:10:26:56:94:0f: e1:ed:26:79:14:04:ca:37:fd:bc:d9:aa:29:58:d6:5e:7e:fe: b0:9e:87:b7:3f:69:b7:0f:1e:f0:da:d4:7b:b2:66:8f:24:70: a3:c3:11:51:92:52:22:6c:94:0b:7f:7c:ce:cd:ce:df:41:29: 2a:61:69:ac:1e:36:86:19:c9:94:d5:4f:0e:2c:97:a2:f0:1e: 8e:bd:7c:ef:28:c6:f3:5d:2f:1d:63:bc:d1:fa:dd:4f:e1:45: 0c:54:00:74:65:74:b3:d6:36:76:7a:33:fb:41:37:45:ba:80: b3:28:5b:75:07:45:66:8a:bb:d1:0f:b1:96:51:9a:45:71:37: 1f:04:79:d3:19:4b:75:32:28:d6:2c:a4:78:f9:23:1d:db:6a: a4:7b:87:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ch1mlzbpHuMYm5JMjWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTUzZDJlOTc3MDRkYmVhODMxYTY0NDAwNzI5MDRlZTkx YTcxYjAwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EyhkMTU2MTA1M2ZlZDU1MjM2NWYyZDE0ZTk5ZTRhNTE0NzhmYzE3ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzduAXrmLQjDlGdliTRFdnDG10zT6 sZ9yPjWamfOldUsrf74Ce1kFZIr1dkP0pWkU64MTgosoEPu/xy7PMW3ZoSUR64DM RHIolTm9u1bruuuYi0PgS2Tx4NUJ93eZ6rwc8Zo6jZxN3vZvuYAYJK/4shcszUZs mM50G7YHzXjSlBYNv0NHU75WKdjg3TK/Qn32+kebZTyiuVPoPE+G9v2MhZqRkQ96 AVE7QGLJi64QTCqZpQtzQsz5pLjPpv/Wn2IJa46uGLWn6mXis6YXMXXk8Uif4ybb 67OLx/ISDKDnjDUJBVdbLURphyycfIVErBlaBbsyinff+0Gm7YTu0EHgxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFWEFP+1VI2Xy0U6Z5KUUePwX/oMB8GA1UdIwQY MBaAFHelPS6XcE2+qDGmRABykE7pGnGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUt ZDNjOGE0OGY3YTMyLzEvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUtZDNjOGE0OGY3YTMy LzEvZDZVOUxwZHdUYjZvTWFaRUFIS1FUdWthY2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc71jcn6 f6dtONeYUlgR3vjYbOMy8KsnX/cHFW6FoKspajees2Nq3FzhRbA+4UWMtHmVIuwt JzRLCLQMiYy4Rskbg7C4QJVjrGQoghC2PEJv8uEXqvb+rN8oP90Ykr/qYz49dx5A +xAmVpQP4e0meRQEyjf9vNmqKVjWXn7+sJ6Htz9ptw8e8NrUe7JmjyRwo8MRUZJS ImyUC398zs3O30EpKmFprB42hhnJlNVPDiyXovAejr187yjG810vHWO80frdT+FF DFQAdGV0s9Y2dnoz+0E3RbqAsyhbdQdFZoq70Q+xllGaRXE3HwR50xlLdTIo1iyk ePkjHdtqpHuHAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:11 2025 by rpki-client