This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft File: 6suWQTrI8sFrlHlWiRdNenIgHvU.mft (raw, json) Hash identifier: oL9wlq69KwUHeYeVIe3cNDrI0oJH5f4jpkGnNrqv4fQ= Subject key identifier: F6:A4:BD:70:37:D0:73:56:D3:5B:10:2B:8E:01:C0:4D:48:C6:81:0E Authority key identifier: EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5 Certificate issuer: /CN=eacb96413ac8f2c16b94795689174d7a72201ef5 Certificate serial: 019AF23F905BAEE5FEAC71C37780DE3B4348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 6suWQTrI8sFrlHlWiRdNenIgHvU.crl (hash: dCT0fZAE6b9gdAADCUGzRR7Z8HZI49xcT040tmjUhsQ=) 2: XnM69Ta6XBN7hts_Rb3s8aetyF0.roa (hash: NW2wK+uGdcWDDVw4MOzLshQcmX/+Hk+W4cTpAUTOR44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:90:5b:ae:e5:fe:ac:71:c3:77:80:de:3b:43:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacb96413ac8f2c16b94795689174d7a72201ef5 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=f6a4bd7037d07356d35b102b8e01c04d48c6810e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:23:fb:b5:df:15:62:e8:75:1a:99:58:66: 17:1b:32:31:16:11:c5:22:2d:7c:26:f1:06:1b:78: 88:1a:87:99:07:fa:54:ea:e2:8e:d4:72:25:08:c8: ee:50:72:33:1d:85:8b:52:36:4e:7b:c8:52:32:7a: 5a:d3:bd:ac:00:e9:13:00:84:d5:c0:a8:db:29:b6: 76:61:e6:ac:a9:99:8d:e5:6e:67:05:fa:19:84:5d: 66:1b:b3:3c:7d:10:03:89:b5:13:ca:8e:de:f5:93: a4:7d:50:7a:40:f3:1e:98:1c:f2:e6:95:53:bc:ec: 41:4e:3c:ca:c8:4f:ec:38:a8:85:53:14:74:ae:dd: 57:7d:c5:ee:8b:1b:13:7b:b8:00:e2:39:9e:68:3b: fd:21:4a:6d:92:f2:ea:39:c1:ad:29:80:ea:f0:57: cc:9c:20:8e:ee:27:79:4b:3e:66:19:e1:7a:94:06: b0:eb:bf:de:27:a6:30:da:9c:9b:1f:84:17:e3:73: 90:22:ae:65:df:e0:73:25:c1:2b:2f:e9:0a:31:08: 34:8a:6c:24:c9:00:a4:3e:4e:37:fd:6a:e5:49:0a: 9f:5f:e9:5b:23:af:82:d5:cd:50:0c:ec:cc:ef:a2: 3f:e9:64:1b:c8:c8:51:1d:bc:48:0d:58:4f:14:2c: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A4:BD:70:37:D0:73:56:D3:5B:10:2B:8E:01:C0:4D:48:C6:81:0E X509v3 Authority Key Identifier: keyid:EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:11:91:fb:1b:63:f7:79:2b:02:3e:61:7c:11:4f:d2:48:25: 0b:c2:fe:05:3b:3b:de:41:58:ef:7c:14:df:a1:93:46:fe:f3: b8:48:4c:4c:d2:5d:d9:3d:03:9d:dd:90:bf:9f:19:09:b5:c8: 06:52:b9:7e:db:33:03:98:a8:ba:17:47:c5:ac:f2:0f:de:7e: 3e:c4:bc:b5:8f:36:eb:86:d9:1a:45:96:d0:3e:c3:6f:a1:8c: 61:69:8a:f9:48:2c:1d:6d:16:03:5a:60:bc:f5:22:b4:22:97: 02:c1:fb:66:8c:b9:13:a8:3e:3e:d6:25:3e:cb:92:20:34:64: 33:88:7c:5e:e2:5c:1e:a8:a0:7e:b2:5e:54:24:d9:49:6e:0a: e4:9f:5a:f8:3b:35:a3:7d:50:2d:98:46:db:f6:5d:02:8a:ea: a9:e2:69:ab:51:1b:5c:d1:11:d6:f1:d4:a5:09:b1:40:7e:e4: 56:e9:af:35:5a:bd:19:f8:7f:03:71:29:5d:85:69:66:9f:39: da:44:01:c8:49:88:96:6c:f0:6f:70:6d:28:3a:38:6e:e7:e6: 26:2a:02:c2:2b:2d:86:b1:4a:40:a0:cd:3b:62:d5:bd:15:d3: 2b:81:5e:79:34:16:8b:f0:82:b0:a6:f9:f0:11:40:8b:6c:13: 78:95:f5:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5BbruX+rHHDd4DeO0NIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2I5NjQxM2FjOGYyYzE2Yjk0Nzk1Njg5MTc0ZDdhNzIy MDFlZjUwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhmNmE0YmQ3MDM3ZDA3MzU2ZDM1YjEwMmI4ZTAxYzA0ZDQ4YzY4MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr4j+7XfFWLodRqZWGYXGzIxFhHF Ii18JvEGG3iIGoeZB/pU6uKO1HIlCMjuUHIzHYWLUjZOe8hSMnpa072sAOkTAITV wKjbKbZ2YeasqZmN5W5nBfoZhF1mG7M8fRADibUTyo7e9ZOkfVB6QPMemBzy5pVT vOxBTjzKyE/sOKiFUxR0rt1XfcXuixsTe7gA4jmeaDv9IUptkvLqOcGtKYDq8FfM nCCO7id5Sz5mGeF6lAaw67/eJ6Yw2pybH4QX43OQIq5l3+BzJcErL+kKMQg0imwk yQCkPk43/WrlSQqfX+lbI6+C1c1QDOzM76I/6WQbyMhRHbxIDVhPFCwxzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPakvXA30HNW01sQK44BwE1IxoEOMB8GA1UdIwQY MBaAFOrLlkE6yPLBa5R5VokXTXpyIB71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kNDFkZjctOTQxZC00N2FlLWIxNWMt MzdmZTZiNjVmNjhmLzEvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kNDFkZjctOTQxZC00N2FlLWIxNWMtMzdmZTZiNjVmNjhm LzEvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORGR+xtj 93krAj5hfBFP0kglC8L+BTs73kFY73wU36GTRv7zuEhMTNJd2T0Dnd2Qv58ZCbXI BlK5ftszA5iouhdHxazyD95+PsS8tY8264bZGkWW0D7Db6GMYWmK+UgsHW0WA1pg vPUitCKXAsH7Zoy5E6g+PtYlPsuSIDRkM4h8XuJcHqigfrJeVCTZSW4K5J9a+Ds1 o31QLZhG2/ZdAorqqeJpq1EbXNER1vHUpQmxQH7kVumvNVq9Gfh/A3EpXYVpZp85 2kQByEmIlmzwb3BtKDo4bufmJioCwisthrFKQKDNO2LVvRXTK4FeeTQWi/CCsKb5 8BFAi2wTeJX1FA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:57 2025 by rpki-client