This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json) Hash identifier: YhpeYqDKZ7F5eGJEBtd97atNN9bttSP/NElTE87YhAs= Subject key identifier: 69:1B:2A:DD:C1:DA:CC:28:73:1A:9C:46:0F:82:CC:8E:B3:06:B5:8A Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95 Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295 Certificate serial: 019AF1D2200A3973613761BC3C5BB646D4AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: ta3kd2TA/feBpg5XW39xGDmpc+TPQd//PGkdaSx9mKw=) 2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:20:0a:39:73:61:37:61:bc:3c:5b:b6:46:d4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295 Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=691b2addc1dacc28731a9c460f82cc8eb306b58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:8a:48:9c:e5:cc:22:de:19:c3:b3:fd:d2: 31:9a:c3:82:d3:96:c0:c4:c3:4d:69:32:6d:fa:4b: 27:6e:bc:b6:05:95:da:c8:7b:41:79:fc:a1:63:0b: 46:16:b5:9f:76:35:d5:b3:6d:7c:35:84:5a:71:28: 58:5b:39:6f:53:bd:f2:55:db:28:7c:fa:ba:07:da: 0f:71:45:7c:01:03:b4:11:d8:49:26:5a:14:33:65: 57:ab:0e:25:eb:2c:09:61:c0:8e:27:5f:44:e1:97: fe:5d:8c:03:70:7b:84:39:19:15:a1:7b:c2:1c:53: f0:76:27:4a:a3:b6:88:3f:32:b0:79:52:db:ca:af: 32:24:8a:4c:66:9f:7a:24:2a:da:61:2b:da:39:cf: d5:f8:bc:3a:bc:c7:78:2b:12:d3:31:64:b1:17:2c: 65:fe:f7:63:f8:3f:e3:f9:87:cb:0d:f2:50:80:f8: d7:86:a3:5c:14:0f:47:8d:c0:cd:11:14:80:ed:6c: b5:6b:ac:8f:51:9e:d2:9f:68:0e:ae:bc:49:03:94: 1d:52:57:7f:8d:85:66:e5:4e:87:ec:f4:73:7f:9c: 9a:df:ca:da:50:48:83:36:d7:13:ab:62:1e:bf:38: d4:f9:6c:c2:43:64:ac:c2:a3:ad:66:40:aa:1e:62: 34:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1B:2A:DD:C1:DA:CC:28:73:1A:9C:46:0F:82:CC:8E:B3:06:B5:8A X509v3 Authority Key Identifier: keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:47:41:4f:51:12:9a:aa:8d:80:3b:c3:af:46:8b:d1:2f:03: 4c:33:52:92:ae:3a:7c:28:33:74:75:a7:82:b0:38:3d:bc:2e: 21:0b:f6:e4:9f:63:91:09:55:e4:1f:e2:5d:dd:b9:e5:5a:2c: 21:4c:c6:ab:6d:b5:fd:0c:15:ed:b3:81:a0:ae:e9:4a:e4:d4: e4:25:36:e5:c8:85:99:3e:10:75:be:0e:7b:9d:ac:66:ca:cf: e6:a1:5d:1d:5a:ac:64:de:6b:73:82:6c:c6:40:e0:d1:fb:f8: f8:89:f1:b1:82:e2:90:4f:90:e7:f6:53:07:91:95:a8:39:50: aa:ef:78:c8:d9:08:c0:e3:a0:d7:f5:99:b4:a6:54:b7:f9:3f: d6:2d:e6:b9:84:c8:6c:e8:b2:51:88:ee:5a:01:c7:db:0b:d3: 9c:3c:63:e1:a7:48:71:d6:25:ec:63:b7:3d:22:db:54:3a:9f: e6:3f:f9:49:5c:7a:8f:63:76:86:97:93:56:ea:55:d9:ce:d7: 3e:95:41:df:77:03:a9:5a:d7:a2:1a:b1:67:8c:c7:6a:5a:91: 48:3a:9a:e8:e9:e5:77:03:9a:7c:52:3e:db:a2:6a:bf:f5:f7: 6b:64:19:ec:eb:9a:1a:12:52:14:fa:90:27:11:d3:14:fa:c1: 9d:0a:e0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iAKOXNhN2G8PFu2RtSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWQ2YTcxZGVmZTU2MGEwZTVjMjFmZmJiNDAzOGZiNDEw OTEyOTUwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD Eyg2OTFiMmFkZGMxZGFjYzI4NzMxYTljNDYwZjgyY2M4ZWIzMDZiNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjWKSJzlzCLeGcOz/dIxmsOC05bA xMNNaTJt+ksnbry2BZXayHtBefyhYwtGFrWfdjXVs218NYRacShYWzlvU73yVdso fPq6B9oPcUV8AQO0EdhJJloUM2VXqw4l6ywJYcCOJ19E4Zf+XYwDcHuEORkVoXvC HFPwdidKo7aIPzKweVLbyq8yJIpMZp96JCraYSvaOc/V+Lw6vMd4KxLTMWSxFyxl /vdj+D/j+YfLDfJQgPjXhqNcFA9HjcDNERSA7Wy1a6yPUZ7Sn2gOrrxJA5QdUld/ jYVm5U6H7PRzf5ya38raUEiDNtcTq2IevzjU+WzCQ2SswqOtZkCqHmI0QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkbKt3B2swocxqcRg+CzI6zBrWKMB8GA1UdIwQY MBaAFG+tanHe/lYKDlwh/7tAOPtBCRKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDct OGNiNGUyNTNmMTc1LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDctOGNiNGUyNTNmMTc1 LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkdBT1ES mqqNgDvDr0aL0S8DTDNSkq46fCgzdHWngrA4PbwuIQv25J9jkQlV5B/iXd255Vos IUzGq221/QwV7bOBoK7pSuTU5CU25ciFmT4Qdb4Oe52sZsrP5qFdHVqsZN5rc4Js xkDg0fv4+InxsYLikE+Q5/ZTB5GVqDlQqu94yNkIwOOg1/WZtKZUt/k/1i3muYTI bOiyUYjuWgHH2wvTnDxj4adIcdYl7GO3PSLbVDqf5j/5SVx6j2N2hpeTVupV2c7X PpVB33cDqVrXohqxZ4zHalqRSDqa6OnldwOafFI+26Jqv/X3a2QZ7OuaGhJSFPqQ JxHTFPrBnQrgdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:33 2025 by rpki-client