This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft File: 6RWHvbAFQCxqRx-yQ3WyJtoticU.mft (raw, json) Hash identifier: Ua7HVdX3VRatJQBQ0gw/t03Ejf2k99Ar6M7fvxs2jIo= Subject key identifier: 78:16:F1:05:BE:84:BB:69:5F:D3:9B:30:3D:D0:BE:AE:B2:38:17:06 Authority key identifier: E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5 Certificate issuer: /CN=e91587bdb005402c6a471fb24375b226da2d89c5 Certificate serial: 019AF23FFF96B2543961CE8F6DEA0186D652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft Manifest number: 0214 Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: 6RWHvbAFQCxqRx-yQ3WyJtoticU.crl (hash: G69vv9Z/Ow7bixqKtSs83Ty1lZue+evtYNN88WEek4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ff:96:b2:54:39:61:ce:8f:6d:ea:01:86:d6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91587bdb005402c6a471fb24375b226da2d89c5 Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=7816f105be84bb695fd39b303dd0beaeb2381706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:e6:1e:42:7b:6e:a9:f7:3d:40:96:3e:7e: 7a:a0:1f:5a:29:13:de:eb:bb:7e:81:0c:63:ca:8d: c0:89:7b:de:e2:68:e2:cb:80:32:ab:97:a0:2e:af: b7:d9:60:5e:f5:ab:ce:42:b9:a5:77:7a:40:a4:da: cd:59:a2:fc:27:9b:e3:19:18:34:22:d9:42:89:ed: 66:45:8e:d2:bc:62:f3:3f:42:f0:04:9e:dc:36:22: 4e:53:06:d2:90:76:f8:1d:20:3c:e9:20:f2:e7:5b: 63:80:00:95:74:f6:d5:13:8e:d2:08:bd:dc:65:39: 52:ba:fa:e0:77:01:0c:7b:45:9f:3e:a0:23:d0:b6: 02:e1:c7:c9:32:11:2e:cc:58:87:55:e2:18:07:74: a7:59:a5:28:29:b4:01:d1:45:93:c8:9c:71:e7:58: 7e:d8:1a:ab:fa:ef:76:fa:95:d3:82:6c:f8:a5:75: 84:c9:2d:62:d8:d5:e4:9c:fa:ce:48:79:a7:98:1c: f1:7b:42:3d:00:6f:5d:1b:ed:66:85:2e:f8:53:e0: f0:32:1d:9d:2e:af:cf:81:d3:74:d6:ff:bd:5d:ea: d0:dd:1b:40:1b:e3:cd:43:0b:45:91:cb:d0:21:2f: ee:9b:10:6f:2a:63:8b:f2:24:5d:48:e2:1d:d4:c8: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:16:F1:05:BE:84:BB:69:5F:D3:9B:30:3D:D0:BE:AE:B2:38:17:06 X509v3 Authority Key Identifier: keyid:E9:15:87:BD:B0:05:40:2C:6A:47:1F:B2:43:75:B2:26:DA:2D:89:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RWHvbAFQCxqRx-yQ3WyJtoticU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/6RWHvbAFQCxqRx-yQ3WyJtoticU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:45:75:26:17:f6:47:7f:7b:81:06:f2:86:b0:aa:31:20:b6: 96:e0:bc:15:5c:dc:65:6d:25:9c:84:6c:46:4a:87:1f:86:7f: ea:13:a9:a2:9e:88:5a:ec:08:62:54:0e:42:1d:b8:13:71:bb: af:c7:02:13:4a:77:f1:59:37:01:98:e6:7a:5d:a0:e2:4f:3d: 52:fa:33:57:18:c9:0b:42:17:28:36:44:d5:20:12:05:b8:00: 12:b0:41:98:76:ea:a4:64:08:14:a8:9e:f1:10:dc:46:2f:da: 27:2c:ae:11:d6:88:52:09:fb:09:bf:75:44:d6:e2:90:81:14: b8:97:50:79:29:7f:ba:0c:02:35:56:22:a3:02:a8:53:f3:64: 9d:af:94:88:66:0c:29:b3:e4:01:62:31:be:08:69:4f:7a:f0: 6d:f9:e4:38:cf:b6:e9:cd:92:17:ae:ec:82:12:62:dd:2d:6a: bb:01:05:53:f3:11:3a:65:7e:b4:4e:21:b0:05:de:d0:47:fb: ee:1d:7c:c9:5c:d1:3d:f4:34:48:cf:25:fa:7b:5e:c4:02:3c: cb:e1:2b:16:6d:f1:5c:1a:a0:b2:86:1f:8a:13:c7:f4:8b:13: a3:24:66:6e:4d:62:47:fa:fb:f6:cd:42:d0:04:e5:84:63:7d: ed:6b:19:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/+WslQ5Yc6PbeoBhtZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MTU4N2JkYjAwNTQwMmM2YTQ3MWZiMjQzNzViMjI2ZGEy ZDg5YzUwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD Eyg3ODE2ZjEwNWJlODRiYjY5NWZkMzliMzAzZGQwYmVhZWIyMzgxNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12DmHkJ7bqn3PUCWPn56oB9aKRPe 67t+gQxjyo3AiXve4mjiy4Ayq5egLq+32WBe9avOQrmld3pApNrNWaL8J5vjGRg0 ItlCie1mRY7SvGLzP0LwBJ7cNiJOUwbSkHb4HSA86SDy51tjgACVdPbVE47SCL3c ZTlSuvrgdwEMe0WfPqAj0LYC4cfJMhEuzFiHVeIYB3SnWaUoKbQB0UWTyJxx51h+ 2Bqr+u92+pXTgmz4pXWEyS1i2NXknPrOSHmnmBzxe0I9AG9dG+1mhS74U+DwMh2d Lq/PgdN01v+9XerQ3RtAG+PNQwtFkcvQIS/umxBvKmOL8iRdSOId1MjgZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgW8QW+hLtpX9ObMD3Qvq6yOBcGMB8GA1UdIwQY MBaAFOkVh72wBUAsakcfskN1sibaLYnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlJXSHZiQUZRQ3hxUngteVEzV3lKdG90aWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85YmFhZTAtNTJmZS00MjUzLTg5YmIt ZTM2MWJiZWFmNzg2LzEvNlJXSHZiQUZRQ3hxUngteVEzV3lKdG90aWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85YmFhZTAtNTJmZS00MjUzLTg5YmItZTM2MWJiZWFmNzg2 LzEvNlJXSHZiQUZRQ3hxUngteVEzV3lKdG90aWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0V1Jhf2 R397gQbyhrCqMSC2luC8FVzcZW0lnIRsRkqHH4Z/6hOpop6IWuwIYlQOQh24E3G7 r8cCE0p38Vk3AZjmel2g4k89UvozVxjJC0IXKDZE1SASBbgAErBBmHbqpGQIFKie 8RDcRi/aJyyuEdaIUgn7Cb91RNbikIEUuJdQeSl/ugwCNVYiowKoU/Nkna+UiGYM KbPkAWIxvghpT3rwbfnkOM+26c2SF67sghJi3S1quwEFU/MROmV+tE4hsAXe0Ef7 7h18yVzRPfQ0SM8l+ntexAI8y+ErFm3xXBqgsoYfihPH9IsToyRmbk1iR/r79s1C 0ATlhGN97WsZhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:01 2025 by rpki-client