This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft File: 6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json) Hash identifier: FWVfid2K2zlAYPe9ndAcQMqvWjN3/a2W5d+TKxfwUgk= Subject key identifier: C2:F2:CF:A5:C6:50:5F:A3:01:FE:12:25:71:78:3F:E3:FA:71:58:0C Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b Certificate serial: 019AF79CE9AF0E2EBA51A3315868CC3D6477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft Manifest number: 1443 Signing time: Sun 07 Dec 2025 07:00:47 +0000 Manifest this update: Sun 07 Dec 2025 07:00:47 +0000 Manifest next update: Mon 08 Dec 2025 07:00:47 +0000 Files and hashes: 1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: u3ym0qJIg7qcPROwkh9EA/R1lmO0BxJ5+OKmBczuicc=) 2: uybfY0RvXrEw-JkeccEv0JWQnZw.roa (hash: RH7NzUozOCn71Td3PzUB1BrZzkZCZl07ezpjuP1kCZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9c:e9:af:0e:2e:ba:51:a3:31:58:68:cc:3d:64:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b Validity Not Before: Dec 7 07:00:47 2025 GMT Not After : Dec 8 07:00:47 2025 GMT Subject: CN=c2f2cfa5c6505fa301fe122571783fe3fa71580c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:6b:56:44:7f:50:ef:6c:18:6e:d5:2c:4e: ea:be:99:32:c4:65:3a:c2:b9:4e:7f:0a:2b:4b:bf: a2:98:fb:32:00:4c:bc:b6:8f:b7:29:dc:05:b1:f8: 7d:4a:87:51:2b:b5:c1:9e:06:da:a2:a3:ed:60:0f: 1e:4f:95:84:b0:e5:93:0d:ee:75:34:51:f0:8f:ac: 2c:c0:3f:92:fa:2a:56:6c:66:f9:b4:34:fa:0b:8c: 2f:30:b0:34:1b:a3:61:34:48:6b:f6:41:fa:e1:8d: ed:7a:5d:ca:43:00:ba:36:b4:6c:ff:79:1b:4d:c8: 85:99:cb:6a:02:f4:95:f5:4d:63:e2:7d:c5:42:46: 40:3b:ae:dc:a7:36:e5:f9:fe:1f:09:1e:64:9c:96: 08:03:b1:4f:c2:ad:6c:0c:13:7d:dc:64:b3:d4:c1: 1a:f0:d7:8d:89:86:01:ca:c8:3e:e4:39:94:a7:2e: 2b:7d:40:5a:11:a5:7a:10:c5:fc:07:da:c0:71:07: e6:db:f0:ff:81:5d:47:f9:8d:cf:32:cb:df:0f:c5: 00:24:3e:47:a3:78:e2:38:f6:b6:c2:ae:21:9e:dd: 07:7c:72:b1:39:b3:a6:8e:af:25:c7:be:52:83:48: fb:19:65:ef:05:55:62:84:96:ee:7f:be:e7:ab:64: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:CF:A5:C6:50:5F:A3:01:FE:12:25:71:78:3F:E3:FA:71:58:0C X509v3 Authority Key Identifier: keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:43:72:0b:c2:9f:91:b8:df:29:aa:dd:60:e1:9d:10:b0:56: b3:d5:d0:34:a3:be:b6:a9:d8:54:0b:ec:41:c3:a7:f9:c6:5c: 34:ac:bf:bd:b1:af:c4:cd:c4:2f:73:fc:1e:95:b5:5e:55:5c: 30:84:42:7f:b5:a2:b6:7b:c5:42:98:cb:bc:87:35:ab:99:2c: 6a:86:d7:4a:45:2a:1c:d3:71:c6:b0:c7:60:1c:23:69:2f:67: 01:d2:ed:65:6f:1d:72:e3:17:df:1a:f1:aa:f9:21:a5:a7:ac: d4:6c:c4:4a:c7:8f:14:4d:10:3e:eb:e8:7b:17:f3:22:a6:e1: 93:b7:d4:a2:e8:f3:fe:a8:fc:b4:ae:dc:18:df:a2:91:cf:38: c3:b9:49:7a:12:3b:6c:13:fb:38:65:93:a2:90:4a:87:89:82: 92:bc:a4:2a:a3:47:ba:a3:15:71:25:4b:46:96:37:7a:06:8c: 60:5f:da:a0:e4:9f:32:fa:44:74:ed:87:31:22:98:68:eb:d5: 00:97:eb:5a:2d:b0:a0:34:a2:00:a9:54:0e:06:d7:f5:ed:1e: 01:66:8e:7a:a0:71:ba:b5:f2:4d:7a:04:6b:fc:14:f1:7e:a5: 19:9f:a9:d7:ee:e7:eb:65:8a:8e:0e:0b:56:2a:8c:be:ca:7d: 2f:88:99:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nOmvDi66UaMxWGjMPWR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmI0ZWQzMzE3YzkyYTM0Yjc2YzhmYWQyOWFlOTcwODBm OTFmM2IwHhcNMjUxMjA3MDcwMDQ3WhcNMjUxMjA4MDcwMDQ3WjAzMTEwLwYDVQQD EyhjMmYyY2ZhNWM2NTA1ZmEzMDFmZTEyMjU3MTc4M2ZlM2ZhNzE1ODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxtrVkR/UO9sGG7VLE7qvpkyxGU6 wrlOfworS7+imPsyAEy8to+3KdwFsfh9SodRK7XBngbaoqPtYA8eT5WEsOWTDe51 NFHwj6wswD+S+ipWbGb5tDT6C4wvMLA0G6NhNEhr9kH64Y3tel3KQwC6NrRs/3kb TciFmctqAvSV9U1j4n3FQkZAO67cpzbl+f4fCR5knJYIA7FPwq1sDBN93GSz1MEa 8NeNiYYBysg+5DmUpy4rfUBaEaV6EMX8B9rAcQfm2/D/gV1H+Y3PMsvfD8UAJD5H o3jiOPa2wq4hnt0HfHKxObOmjq8lx75Sg0j7GWXvBVVihJbuf77nq2QPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLyz6XGUF+jAf4SJXF4P+P6cVgMMB8GA1UdIwQY MBaAFOhrTtMxfJKjS3bI+tKa6XCA+R87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEt MzI1YWFkZDczM2MzLzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82YzVlYWYtOWM0NC00YTVhLWJhYTEtMzI1YWFkZDczM2Mz LzEvNkd0TzB6RjhrcU5MZHNqNjBwcnBjSUQ1SHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0NyC8Kf kbjfKardYOGdELBWs9XQNKO+tqnYVAvsQcOn+cZcNKy/vbGvxM3EL3P8HpW1XlVc MIRCf7WitnvFQpjLvIc1q5ksaobXSkUqHNNxxrDHYBwjaS9nAdLtZW8dcuMX3xrx qvkhpaes1GzESsePFE0QPuvoexfzIqbhk7fUoujz/qj8tK7cGN+ikc84w7lJehI7 bBP7OGWTopBKh4mCkrykKqNHuqMVcSVLRpY3egaMYF/aoOSfMvpEdO2HMSKYaOvV AJfrWi2woDSiAKlUDgbX9e0eAWaOeqBxurXyTXoEa/wU8X6lGZ+p1+7n62WKjg4L ViqMvsp9L4iZJA== -----END CERTIFICATE-----Generated at Sun Dec 7 09:01:46 2025 by rpki-client