This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft File: 6R-du-aLhAJ87U0x6IA_E-nWXRM.mft (raw, json) Hash identifier: L1OkyPukv/hZS/k129ykf1WjGU9E9C+d6jiAjb1XqTI= Subject key identifier: E9:FE:D1:7E:0A:6C:2D:ED:5D:75:1F:33:1C:B7:11:D9:B2:1C:DA:3C Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13 Certificate issuer: /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13 Certificate serial: 019AF08881F15D1A90B9FEA6FE4A90521237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft Manifest number: 1471 Signing time: Fri 05 Dec 2025 22:01:09 +0000 Manifest this update: Fri 05 Dec 2025 22:01:09 +0000 Manifest next update: Sat 06 Dec 2025 22:01:09 +0000 Files and hashes: 1: 6R-du-aLhAJ87U0x6IA_E-nWXRM.crl (hash: fTArqvjDFkGjdQypRxu7TxWsdkp0KtHoPBvFA/BH+94=) 2: aSrHCQIT4pfyWNVtX5PsNo34yos.roa (hash: PzxdBgO+9mdjiqiAtfFS95/jZclQ/pzO7110cuOtJf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:81:f1:5d:1a:90:b9:fe:a6:fe:4a:90:52:12:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13 Validity Not Before: Dec 5 22:01:09 2025 GMT Not After : Dec 6 22:01:09 2025 GMT Subject: CN=e9fed17e0a6c2ded5d751f331cb711d9b21cda3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:bb:09:ae:dc:63:50:d1:f5:20:03:d3:1e: 87:9e:7d:ed:7e:02:09:ee:8d:2d:73:4e:72:e4:0d: 6a:58:0f:33:43:a3:33:6a:c0:f4:77:c1:bb:aa:79: 13:3a:d8:1e:62:2a:6a:60:f4:67:2e:fe:6b:28:75: 44:96:0a:e5:a3:3c:89:5f:5f:47:85:7e:21:45:6d: 33:c0:8f:e5:79:61:ef:93:b0:0e:77:02:6f:de:55: b6:f9:31:e6:b9:d5:58:62:1b:dd:da:9c:01:1e:03: ce:81:4e:12:b3:57:75:65:7c:63:2c:f5:72:28:8d: 0e:bc:57:ad:6b:32:ca:25:c0:5f:57:c2:3f:bf:ef: 71:13:55:d8:60:a7:cb:8b:d6:24:7b:d1:55:5a:82: 69:dc:4f:1e:fe:67:c1:4e:39:89:12:c5:23:39:4b: 78:25:75:27:f6:c5:2b:c9:f4:f7:ee:3b:a9:f1:7e: 5b:d0:a1:73:40:a5:01:73:3d:27:65:da:b7:4e:a1: f4:ed:92:36:e1:a5:90:6c:ea:e0:66:fb:19:2b:0e: f9:b7:ba:6f:40:ed:8b:59:9d:84:98:4b:fd:f3:94: 6b:e1:1b:29:1a:fb:d0:cc:e0:41:b0:74:17:c0:8e: b8:f7:cc:b2:a4:e3:73:de:70:ee:9f:5b:f7:c3:b6: bd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:D1:7E:0A:6C:2D:ED:5D:75:1F:33:1C:B7:11:D9:B2:1C:DA:3C X509v3 Authority Key Identifier: keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0c:8c:ec:a8:2e:d8:ef:ee:ef:85:43:25:d3:0c:8a:6d:51: 3f:69:7a:c4:fa:a5:76:03:64:a0:18:fc:dc:d5:20:0a:5c:44: c9:dd:91:18:e1:15:17:f8:61:ee:94:82:0a:cc:04:f2:a1:f2: f3:f4:dd:9d:c8:a1:67:d2:4f:86:80:07:e0:1c:1d:54:45:d4: 72:0f:53:9e:2e:96:7d:0e:4c:eb:50:ec:49:ae:08:95:c9:a3: f1:e8:11:cc:78:f7:de:e2:1b:a8:11:7f:f2:06:a0:65:6d:8f: 55:db:64:bb:3d:66:3d:52:6f:5f:67:e6:53:01:5e:4a:77:23: df:f5:48:54:d0:12:4f:3e:ce:36:8d:19:89:b3:4e:0a:1a:56: 5d:1c:3e:2d:92:e9:f8:c1:aa:bf:4a:70:0d:56:e1:98:34:3b: 6a:6b:f9:83:19:b6:3b:e7:3c:af:0b:40:a7:fb:bf:6f:0f:86: bc:c1:ee:cf:33:3e:df:23:0b:2d:9d:8f:4a:15:8c:33:39:c1: 8e:97:15:b7:d8:07:d4:3e:c9:3b:64:44:90:31:e9:c2:c7:2a: c1:1d:ee:3b:04:dd:68:29:d1:12:e6:f3:1a:f7:4e:d2:44:8f: fe:a1:ba:9d:e8:c6:5b:26:f4:64:89:94:e7:33:19:02:e7:07: 90:14:da:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIHxXRqQuf6m/kqQUhI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWY5ZGJiZTY4Yjg0MDI3Y2VkNGQzMWU4ODAzZjEzZTlk NjVkMTMwHhcNMjUxMjA1MjIwMTA5WhcNMjUxMjA2MjIwMTA5WjAzMTEwLwYDVQQD EyhlOWZlZDE3ZTBhNmMyZGVkNWQ3NTFmMzMxY2I3MTFkOWIyMWNkYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop+7Ca7cY1DR9SAD0x6Hnn3tfgIJ 7o0tc05y5A1qWA8zQ6MzasD0d8G7qnkTOtgeYipqYPRnLv5rKHVElgrlozyJX19H hX4hRW0zwI/leWHvk7AOdwJv3lW2+THmudVYYhvd2pwBHgPOgU4Ss1d1ZXxjLPVy KI0OvFetazLKJcBfV8I/v+9xE1XYYKfLi9Yke9FVWoJp3E8e/mfBTjmJEsUjOUt4 JXUn9sUryfT37jup8X5b0KFzQKUBcz0nZdq3TqH07ZI24aWQbOrgZvsZKw75t7pv QO2LWZ2EmEv985Rr4RspGvvQzOBBsHQXwI6498yypONz3nDun1v3w7a9lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn+0X4KbC3tXXUfMxy3EdmyHNo8MB8GA1UdIwQY MBaAFOkfnbvmi4QCfO1NMeiAPxPp1l0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUt YjRlNzlmNzgxZTRkLzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUtYjRlNzlmNzgxZTRk LzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAyM7Kgu 2O/u74VDJdMMim1RP2l6xPqldgNkoBj83NUgClxEyd2RGOEVF/hh7pSCCswE8qHy 8/TdncihZ9JPhoAH4BwdVEXUcg9Tni6WfQ5M61DsSa4Ilcmj8egRzHj33uIbqBF/ 8gagZW2PVdtkuz1mPVJvX2fmUwFeSncj3/VIVNASTz7ONo0ZibNOChpWXRw+LZLp +MGqv0pwDVbhmDQ7amv5gxm2O+c8rwtAp/u/bw+GvMHuzzM+3yMLLZ2PShWMMznB jpcVt9gH1D7JO2REkDHpwscqwR3uOwTdaCnREubzGvdO0kSP/qG6nejGWyb0ZImU 5zMZAucHkBTaKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:26 2025 by rpki-client