This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json) Hash identifier: lIxiG3Vz5JhdqCJlFktAf3xwlakq8z8IydrKWdhix4Y= Subject key identifier: 02:05:7B:12:99:6D:9E:62:52:67:BC:9E:D3:4A:9C:25:C3:61:16:EB Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88 Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88 Certificate serial: 019B435BE0BB0351ADE56A5B2575E5E12814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft Manifest number: 0DFD Signing time: Mon 22 Dec 2025 00:00:53 +0000 Manifest this update: Mon 22 Dec 2025 00:00:53 +0000 Manifest next update: Tue 23 Dec 2025 00:00:53 +0000 Files and hashes: 1: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: tTyExVUmMZFFm251DZO2q7jA64vkx47RRLN83jAmMZA=) 2: YNj6jBY1WWdwBM-l9h2oiKXTYmA.roa (hash: koHDOBOLhPLlqLo5UxyVmvsrhs2UPLUKAfoxF2eIjW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:e0:bb:03:51:ad:e5:6a:5b:25:75:e5:e1:28:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88 Validity Not Before: Dec 22 00:00:53 2025 GMT Not After : Dec 23 00:00:53 2025 GMT Subject: CN=02057b12996d9e625267bc9ed34a9c25c36116eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:34:91:aa:6b:06:b7:26:18:6b:2c:b0:85: 05:ac:f1:92:58:07:22:4f:f7:84:c1:ab:52:9e:87: 14:26:36:cc:7a:34:d5:8c:a0:74:88:ea:d6:70:78: c1:9a:84:fd:9f:f6:4f:39:46:03:2c:27:a9:17:5b: 32:0f:d9:c8:32:4f:11:5d:f6:e1:a7:cd:ea:6c:3c: e7:3b:08:5a:f7:d5:d1:b5:39:37:ce:4b:f7:5e:f3: c7:58:aa:4c:3c:24:bc:0c:3a:45:60:41:28:9e:8b: 75:8f:fa:3f:dd:f3:bd:3e:f6:a9:4b:8e:28:93:3d: db:c4:a3:1e:a9:4d:82:d4:ef:a7:27:46:f0:a3:f4: 43:7a:aa:5a:30:4d:c6:72:e0:b6:20:ec:a2:16:69: a7:78:cf:99:5d:39:62:bb:02:21:54:9c:f2:6f:19: 8e:96:76:8c:c9:69:57:87:d0:42:cb:ae:4f:34:3d: ec:f9:38:48:c6:31:85:b1:62:bd:8b:88:71:99:b1: 53:b6:ad:9b:3c:2b:81:07:b7:52:8a:3f:42:8f:71: de:0c:dd:a2:e4:f9:5c:a1:db:8a:00:56:9e:a3:4c: 1a:a7:01:e7:5a:d3:db:7d:b5:43:cc:93:8b:cd:c1: f7:d2:3f:e4:8e:24:68:16:94:46:d1:bd:06:88:2b: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:05:7B:12:99:6D:9E:62:52:67:BC:9E:D3:4A:9C:25:C3:61:16:EB X509v3 Authority Key Identifier: keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b0:bc:34:40:f1:fd:76:60:85:31:70:33:44:b6:b1:4a:fb: 76:13:5c:25:6e:7a:fb:88:df:3d:3f:cd:75:45:8e:a8:4d:e6: 11:6c:7f:e7:3c:78:0d:7e:59:fc:b7:52:4a:13:3c:86:65:16: 26:ae:35:e4:fd:31:48:bd:96:06:32:8d:b7:bf:05:de:62:45: 96:c9:40:0e:f8:b1:c9:7d:1d:0d:09:7c:9f:16:7f:22:95:44: cf:70:0a:38:b4:4f:e6:7a:57:6b:4d:3f:46:4d:a1:9f:5e:67: 73:f8:8b:2c:36:76:70:59:e4:4c:a1:55:1d:0b:0c:48:b6:b9: db:2f:7b:0b:e4:84:2e:d6:bc:06:ac:3d:a5:5b:2c:77:77:2c: 5b:0b:1a:c5:5a:c3:9b:59:b7:1d:21:46:29:a6:db:49:89:7b: ac:a2:58:94:31:01:6f:3f:de:58:b2:49:82:59:48:f7:d6:7e: d4:4f:c0:1f:f2:f9:71:c9:59:34:49:63:55:9a:10:50:49:b2: 57:b1:ab:e3:44:f8:71:de:8c:68:6d:14:dc:ce:51:10:82:20: d3:cd:2e:44:6b:b5:ce:af:5e:40:5d:e7:0d:ef:e8:48:65:87: ab:e8:a5:97:38:75:8a:4c:f5:4d:ae:ca:b3:ac:b1:45:29:c8: 8a:a1:5e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW+C7A1Gt5WpbJXXl4SgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YzNkNDJmM2IyOTIxYmE3NDE4ZjM4MjAzMmQ2YjM1Yzcx NTliODgwHhcNMjUxMjIyMDAwMDUzWhcNMjUxMjIzMDAwMDUzWjAzMTEwLwYDVQQD EygwMjA1N2IxMjk5NmQ5ZTYyNTI2N2JjOWVkMzRhOWMyNWMzNjExNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHI0kaprBrcmGGsssIUFrPGSWAci T/eEwatSnocUJjbMejTVjKB0iOrWcHjBmoT9n/ZPOUYDLCepF1syD9nIMk8RXfbh p83qbDznOwha99XRtTk3zkv3XvPHWKpMPCS8DDpFYEEonot1j/o/3fO9PvapS44o kz3bxKMeqU2C1O+nJ0bwo/RDeqpaME3GcuC2IOyiFmmneM+ZXTliuwIhVJzybxmO lnaMyWlXh9BCy65PND3s+ThIxjGFsWK9i4hxmbFTtq2bPCuBB7dSij9Cj3HeDN2i 5PlcoduKAFaeo0wapwHnWtPbfbVDzJOLzcH30j/kjiRoFpRG0b0GiCshaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIFexKZbZ5iUme8ntNKnCXDYRbrMB8GA1UdIwQY MBaAFOnD1C87KSG6dBjzggMtazXHFZuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDIt MWExZWFkMmNkMmIxLzEvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDItMWExZWFkMmNkMmIx LzEvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbC8NEDx /XZghTFwM0S2sUr7dhNcJW56+4jfPT/NdUWOqE3mEWx/5zx4DX5Z/LdSShM8hmUW Jq415P0xSL2WBjKNt78F3mJFlslADvixyX0dDQl8nxZ/IpVEz3AKOLRP5npXa00/ Rk2hn15nc/iLLDZ2cFnkTKFVHQsMSLa52y97C+SELta8Bqw9pVssd3csWwsaxVrD m1m3HSFGKabbSYl7rKJYlDEBbz/eWLJJgllI99Z+1E/AH/L5cclZNEljVZoQUEmy V7Gr40T4cd6MaG0U3M5REIIg080uRGu1zq9eQF3nDe/oSGWHq+illzh1ikz1Ta7K s6yxRSnIiqFefA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:45:00 2025 by rpki-client