This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft File: 6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json) Hash identifier: n3uUZFPtjy7Iohsur/Ad0uImg3mxg/368S9zKL3daN4= Subject key identifier: 86:1F:1C:6E:1A:83:AE:45:83:C2:4B:DC:A3:FE:97:4A:0E:3E:2E:B9 Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b Certificate serial: 019AF5AE45ADEFDDC80656E7186F782962A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft Manifest number: 1442 Signing time: Sat 06 Dec 2025 22:00:30 +0000 Manifest this update: Sat 06 Dec 2025 22:00:30 +0000 Manifest next update: Sun 07 Dec 2025 22:00:30 +0000 Files and hashes: 1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: 6OJ18ReHWfYEYYuFxgHSdgwthgI6/yXvHavhjGvSgYo=) 2: uybfY0RvXrEw-JkeccEv0JWQnZw.roa (hash: RH7NzUozOCn71Td3PzUB1BrZzkZCZl07ezpjuP1kCZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:45:ad:ef:dd:c8:06:56:e7:18:6f:78:29:62:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b Validity Not Before: Dec 6 22:00:30 2025 GMT Not After : Dec 7 22:00:30 2025 GMT Subject: CN=861f1c6e1a83ae4583c24bdca3fe974a0e3e2eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:62:4b:9e:3e:9a:48:d9:cf:4a:10:31:05: cd:81:41:5d:19:2f:5c:e6:db:96:b1:29:9d:6b:aa: b4:8f:37:a7:f9:c4:7a:f0:52:e5:1c:8f:b1:b7:d5: 72:12:ac:c9:83:d4:85:80:07:68:e3:fc:93:fb:d0: d4:0f:a0:f4:c7:69:a5:6d:ae:26:c9:fe:29:15:90: d5:06:7c:b9:b5:bf:13:07:5a:ff:c4:5c:5b:a2:3e: 8f:75:8e:19:cd:59:86:81:10:b6:c3:a0:45:db:42: 5d:78:b0:9b:98:ac:80:00:fb:ca:25:1a:0e:0b:5a: 40:98:12:7a:88:db:0d:53:a4:bc:c2:84:b0:82:44: a1:27:cd:89:42:2e:15:24:01:7d:9c:d5:fd:49:d9: fd:8c:01:93:55:8e:c8:fd:01:77:c5:85:69:bd:95: c9:e6:31:b4:f0:3f:df:88:1b:d9:fa:34:70:10:20: 87:94:fe:2e:3d:3b:07:81:47:15:f9:62:40:a6:98: 64:67:85:ee:f9:18:40:0a:60:db:4f:43:61:35:d9: b2:95:c7:a8:36:a9:2c:93:e4:f4:9e:66:79:d2:e7: 17:3a:9c:95:73:49:82:4b:46:8d:59:f2:8b:93:f3: d7:ce:de:df:5f:0f:f2:ec:85:0b:83:ac:cd:fc:80: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:1C:6E:1A:83:AE:45:83:C2:4B:DC:A3:FE:97:4A:0E:3E:2E:B9 X509v3 Authority Key Identifier: keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5d:6d:00:03:81:ed:c8:54:11:2d:04:af:7b:3b:80:7f:75: 9c:68:8b:03:69:d6:5d:20:b4:e3:05:c2:f5:ad:12:c5:3a:f5: e1:6a:23:bf:0e:70:4c:4a:21:f6:9d:1f:af:7a:55:b9:cb:17: 7f:b2:97:b2:77:26:4c:6a:67:5d:fe:ce:c2:f4:70:67:fa:0b: ee:10:0a:05:ac:f2:8d:9a:fd:c6:0d:c2:f2:1f:b1:be:39:d5: d4:7d:be:5e:eb:83:07:0f:53:9d:b9:89:72:c0:73:37:b3:c9: 8e:5e:3f:ef:6c:5c:53:bb:96:20:4b:31:cc:cd:70:0a:d3:58: 0e:44:2d:6b:f2:92:55:29:0f:7e:7e:3a:d5:d0:32:a8:cf:18: 0b:64:1f:c9:00:d4:78:ad:0d:0e:6e:ba:2d:d3:d5:3d:35:e0: 58:60:fe:9c:b2:95:0d:6b:b3:0f:c6:96:c4:cf:32:51:e3:57: ba:5d:dd:09:2f:d9:75:50:ba:a3:49:5a:13:c5:e0:de:e1:7c: f9:ab:be:6a:07:6c:55:f3:57:fe:cb:cb:c3:38:b7:04:fd:7d: 58:1a:34:c0:78:68:7a:dc:4e:dd:36:40:10:86:31:a1:5c:be: 93:3b:f5:d3:a4:38:8b:df:a3:ef:cf:fd:d4:1d:8b:b7:5b:88: b8:ea:1f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rkWt793IBlbnGG94KWKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmI0ZWQzMzE3YzkyYTM0Yjc2YzhmYWQyOWFlOTcwODBm OTFmM2IwHhcNMjUxMjA2MjIwMDMwWhcNMjUxMjA3MjIwMDMwWjAzMTEwLwYDVQQD Eyg4NjFmMWM2ZTFhODNhZTQ1ODNjMjRiZGNhM2ZlOTc0YTBlM2UyZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLNiS54+mkjZz0oQMQXNgUFdGS9c 5tuWsSmda6q0jzen+cR68FLlHI+xt9VyEqzJg9SFgAdo4/yT+9DUD6D0x2mlba4m yf4pFZDVBny5tb8TB1r/xFxboj6PdY4ZzVmGgRC2w6BF20JdeLCbmKyAAPvKJRoO C1pAmBJ6iNsNU6S8woSwgkShJ82JQi4VJAF9nNX9Sdn9jAGTVY7I/QF3xYVpvZXJ 5jG08D/fiBvZ+jRwECCHlP4uPTsHgUcV+WJApphkZ4Xu+RhACmDbT0NhNdmylceo Nqksk+T0nmZ50ucXOpyVc0mCS0aNWfKLk/PXzt7fXw/y7IULg6zN/IB7swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYfHG4ag65Fg8JL3KP+l0oOPi65MB8GA1UdIwQY MBaAFOhrTtMxfJKjS3bI+tKa6XCA+R87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEt MzI1YWFkZDczM2MzLzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEtMzI1YWFkZDczM2Mz LzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF1tAAOB 7chUES0Er3s7gH91nGiLA2nWXSC04wXC9a0SxTr14Wojvw5wTEoh9p0fr3pVucsX f7KXsncmTGpnXf7OwvRwZ/oL7hAKBazyjZr9xg3C8h+xvjnV1H2+XuuDBw9TnbmJ csBzN7PJjl4/72xcU7uWIEsxzM1wCtNYDkQta/KSVSkPfn461dAyqM8YC2QfyQDU eK0NDm66LdPVPTXgWGD+nLKVDWuzD8aWxM8yUeNXul3dCS/ZdVC6o0laE8Xg3uF8 +au+agdsVfNX/svLwzi3BP19WBo0wHhoetxO3TZAEIYxoVy+kzv106Q4i9+j78/9 1B2Lt1uIuOof6Q== -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:37 2025 by rpki-client