This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft File: t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft (raw, json) Hash identifier: 34f0ZfEa6KmrsTDXkfeJ8HhMkg9+x3WzMO/HgmLPdsc= Subject key identifier: 1C:C0:3C:54:6F:68:63:FB:77:9B:3E:B9:61:24:A7:92:9B:EB:07:F5 Authority key identifier: B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78 Certificate issuer: /CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78 Certificate serial: 019AF1D1DFE85EE826A8153BC4C7D656AB7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft Manifest number: 55 Signing time: Sat 06 Dec 2025 04:00:54 +0000 Manifest this update: Sat 06 Dec 2025 04:00:54 +0000 Manifest next update: Sun 07 Dec 2025 04:00:54 +0000 Files and hashes: 1: t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl (hash: IEAAIaYLWL+QdZvDXgpcdjiPufKjXYuZBLU/E4WFB4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:df:e8:5e:e8:26:a8:15:3b:c4:c7:d6:56:ab:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78 Validity Not Before: Dec 6 04:00:54 2025 GMT Not After : Dec 7 04:00:54 2025 GMT Subject: CN=1cc03c546f6863fb779b3eb96124a7929beb07f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:46:76:15:de:3c:c2:15:d9:6c:26:4e:9a: fa:5c:f4:ce:92:7d:b9:57:f1:1e:84:6f:5e:6d:f0: e4:6d:1a:ea:5d:17:ca:9d:21:64:69:4b:84:86:ae: d3:ca:35:4e:99:9a:1a:ac:30:00:40:89:67:a0:f6: c0:08:7c:d3:97:8c:1f:d1:b2:08:52:8d:90:19:30: 03:cf:27:22:09:02:29:40:0f:ac:07:4d:64:f8:51: 0f:b8:86:39:03:b4:90:77:fc:d3:36:fb:8c:47:36: ff:c7:03:ce:cc:0f:80:b1:78:b4:4e:55:71:0f:08: 16:9f:80:9a:38:f3:c9:ed:e8:da:a7:ca:19:ed:44: f2:f2:70:67:7c:2c:2e:9d:b8:fc:4e:ad:7a:41:f3: 86:ed:ef:4d:42:05:76:3e:70:ea:32:49:f6:5d:2e: 50:f4:12:72:0a:fe:e9:97:45:ae:77:4f:92:10:65: b9:dd:1c:f7:a6:24:2d:dc:10:0b:a4:a3:57:d1:d6: 59:93:0b:aa:b7:f0:f9:0a:62:e6:01:5d:db:1b:78: 7d:d6:7b:67:d1:de:17:47:7e:51:ec:91:67:85:c9: df:90:44:d5:bb:e2:f5:c4:12:08:bf:49:6c:ad:40: 46:14:33:51:e7:d5:58:be:dd:c5:71:58:99:bf:2d: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C0:3C:54:6F:68:63:FB:77:9B:3E:B9:61:24:A7:92:9B:EB:07:F5 X509v3 Authority Key Identifier: keyid:B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e4:cc:39:0f:65:2f:f1:7f:87:05:37:8f:b2:99:8f:35:4e: 4e:72:5a:e8:7d:0d:07:2f:e9:e7:ef:1f:11:14:bd:f3:01:0e: 50:1b:29:a3:d8:e6:d6:ca:d5:62:f1:32:56:72:73:f9:c0:97: 54:e5:5a:08:ac:53:a5:11:cd:93:b9:ed:73:8e:08:4d:5f:78: 83:01:63:2f:db:42:d2:2e:c4:b7:ba:1e:48:d1:e3:fc:ab:3b: e9:34:3f:4d:ca:ca:bd:93:08:ca:9c:2a:9d:5d:14:a6:0c:40: 74:ba:42:38:9e:63:cb:8b:97:65:51:5d:3a:2a:93:c2:99:42: 46:c0:75:20:a2:3a:80:89:2e:32:0c:44:e8:85:43:68:bb:08: ab:0b:da:2a:b0:12:f7:ce:ef:e7:64:94:20:1c:4c:e2:ac:30: 7d:21:5c:bf:34:a1:8b:bc:72:4b:56:37:44:6c:ea:b1:bf:1c: f1:24:6d:6f:42:52:97:9a:f8:33:99:ac:01:f3:bb:0c:3c:a4: 19:53:e1:95:ef:61:6c:98:cb:b8:91:d8:56:a8:3b:f0:10:2b: cb:09:4f:22:1d:0a:f8:a7:13:c1:1c:ac:46:3f:e6:cd:7f:1b: 43:13:56:35:2b:c7:83:df:16:3c:10:36:c6:03:77:de:45:6b: ee:4d:eb:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d/oXugmqBU7xMfWVqt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWE0ZDRlY2NiYjBhYWI3YTY2MjczYjc5Y2JiZWI4YmM0 MThlNzgwHhcNMjUxMjA2MDQwMDU0WhcNMjUxMjA3MDQwMDU0WjAzMTEwLwYDVQQD EygxY2MwM2M1NDZmNjg2M2ZiNzc5YjNlYjk2MTI0YTc5MjliZWIwN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4RGdhXePMIV2WwmTpr6XPTOkn25 V/EehG9ebfDkbRrqXRfKnSFkaUuEhq7TyjVOmZoarDAAQIlnoPbACHzTl4wf0bII Uo2QGTADzyciCQIpQA+sB01k+FEPuIY5A7SQd/zTNvuMRzb/xwPOzA+AsXi0TlVx DwgWn4CaOPPJ7ejap8oZ7UTy8nBnfCwunbj8Tq16QfOG7e9NQgV2PnDqMkn2XS5Q 9BJyCv7pl0Wud0+SEGW53Rz3piQt3BALpKNX0dZZkwuqt/D5CmLmAV3bG3h91ntn 0d4XR35R7JFnhcnfkETVu+L1xBIIv0lsrUBGFDNR59VYvt3FcViZvy0yjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzAPFRvaGP7d5s+uWEkp5Kb6wf1MB8GA1UdIwQY MBaAFLeqTU7MuwqremYnO3nLvri8QY54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZwTlRzeTdDcXQ2WmljN2VjdS11THhCam5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mNWRlOWUtMTg4NS00YzQ5LWIyOTct YjI4YmQyNGNiZGIzLzEvdDZwTlRzeTdDcXQ2WmljN2VjdS11THhCam5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9mNWRlOWUtMTg4NS00YzQ5LWIyOTctYjI4YmQyNGNiZGIz LzEvdDZwTlRzeTdDcXQ2WmljN2VjdS11THhCam5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeTMOQ9l L/F/hwU3j7KZjzVOTnJa6H0NBy/p5+8fERS98wEOUBspo9jm1srVYvEyVnJz+cCX VOVaCKxTpRHNk7ntc44ITV94gwFjL9tC0i7Et7oeSNHj/Ks76TQ/TcrKvZMIypwq nV0UpgxAdLpCOJ5jy4uXZVFdOiqTwplCRsB1IKI6gIkuMgxE6IVDaLsIqwvaKrAS 987v52SUIBxM4qwwfSFcvzShi7xyS1Y3RGzqsb8c8SRtb0JSl5r4M5msAfO7DDyk GVPhle9hbJjLuJHYVqg78BArywlPIh0K+KcTwRysRj/mzX8bQxNWNSvHg98WPBA2 xgN33kVr7k3r8A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:40 2025 by rpki-client