This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json) Hash identifier: CI2agQv1blSTeGUYd+HlkfamkonzPuSdV9OPGyD4IkI= Subject key identifier: C3:18:38:6B:79:82:C2:C6:CE:19:28:54:BD:06:4A:3D:6D:07:A9:10 Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7 Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7 Certificate serial: 019AF50A1E6BABC0F642AF1182E6B4D84599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:12 +0000 Manifest this update: Sat 06 Dec 2025 19:01:12 +0000 Manifest next update: Sun 07 Dec 2025 19:01:12 +0000 Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: 1O/i26I1hflxYDcIDHBJsDCEV1NU1aVeLjtm0Aue9Ds=) 2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1e:6b:ab:c0:f6:42:af:11:82:e6:b4:d8:45:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7 Validity Not Before: Dec 6 19:01:12 2025 GMT Not After : Dec 7 19:01:12 2025 GMT Subject: CN=c318386b7982c2c6ce192854bd064a3d6d07a910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b5:ef:9d:a3:c1:5c:b6:2f:88:f3:40:7e:2c: 4f:b5:02:33:ab:98:ac:ce:e8:30:92:25:3b:9f:1b: 8b:1e:4b:07:bf:0a:11:d9:00:16:59:04:4c:b6:04: 4c:f2:c0:8a:12:1d:03:1c:0e:04:c6:5a:e8:c8:f1: c3:04:fc:8d:65:e2:26:0e:f4:26:0c:5e:72:1a:e5: e5:b2:eb:d5:db:90:3f:af:92:e1:f3:5e:f0:76:26: 4b:a8:51:df:17:d6:94:8f:56:7f:46:c2:db:44:ff: 85:91:50:89:f9:5f:f5:b1:af:32:68:ad:08:54:12: 33:f8:dd:71:94:eb:bf:2b:ee:b9:e7:a2:12:aa:c9: 11:2a:69:cf:b1:09:ae:5f:62:b9:02:56:7e:31:64: 08:08:b8:6e:07:ec:e2:df:d0:9d:6b:0c:c9:28:88: f9:b3:d7:93:92:19:0d:e7:5e:51:aa:93:c2:98:4c: 49:fe:97:b1:56:a5:e0:00:1b:80:ed:63:0f:af:d8: ef:69:af:05:bb:45:cc:94:15:d8:a7:1d:f4:3d:8c: 0d:31:c7:e2:ce:57:aa:f6:a9:50:c4:ad:3a:17:22: 9c:35:76:58:73:8d:ed:a1:a5:b6:00:b4:15:34:db: 49:af:42:03:4a:53:02:7b:6e:24:b2:ad:a0:d5:04: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:38:6B:79:82:C2:C6:CE:19:28:54:BD:06:4A:3D:6D:07:A9:10 X509v3 Authority Key Identifier: keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e8:ce:26:d9:b3:41:ce:fd:82:ea:3d:ea:5b:32:ed:fe:4c: 64:40:00:57:41:a1:cb:3d:4c:be:84:1a:16:8f:83:d4:b3:44: f0:57:92:db:67:49:87:af:62:eb:65:7e:cd:46:4a:f5:dd:bf: f9:e4:24:73:7d:03:4c:a4:71:81:f7:b2:e1:95:97:38:3d:4c: 89:d4:5e:93:46:18:47:4d:ed:11:6f:17:8e:8d:a9:6b:f8:e3: 10:90:33:1d:9b:85:0a:a2:8f:da:2d:37:63:4a:22:11:77:c0: b8:0d:55:0e:41:3d:7f:a4:f9:b6:17:89:46:7f:dc:cc:97:d4: 3e:ed:97:bc:a7:04:df:ef:16:ad:1a:11:9f:29:9e:4b:a3:3e: 72:fe:67:ba:40:99:fb:fd:b3:e4:66:b8:fb:92:de:6a:88:26: dd:a2:05:57:1c:21:c6:b4:b8:a1:ee:b6:92:14:f1:9e:a1:f9: 5e:26:28:d5:9f:a7:e5:bf:d9:52:0e:bc:f3:84:1a:5c:d4:61: 22:34:cc:d1:0c:9c:0f:10:79:29:c5:2a:c7:06:55:18:67:44: ea:0e:54:77:eb:65:8e:46:96:89:e1:ac:33:f8:f2:2d:0b:00: a4:b1:de:e3:5b:d3:94:23:64:07:81:c1:e5:12:96:38:42:b0: bf:37:80:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ch5rq8D2Qq8Rgua02EWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTNmMzNjY2RmYzVmZTg0Yjg0YzE1ZjA0MzIyOTA2OTkx YWY5ZTcwHhcNMjUxMjA2MTkwMTEyWhcNMjUxMjA3MTkwMTEyWjAzMTEwLwYDVQQD EyhjMzE4Mzg2Yjc5ODJjMmM2Y2UxOTI4NTRiZDA2NGEzZDZkMDdhOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7XvnaPBXLYviPNAfixPtQIzq5is zugwkiU7nxuLHksHvwoR2QAWWQRMtgRM8sCKEh0DHA4ExlroyPHDBPyNZeImDvQm DF5yGuXlsuvV25A/r5Lh817wdiZLqFHfF9aUj1Z/RsLbRP+FkVCJ+V/1sa8yaK0I VBIz+N1xlOu/K+6556ISqskRKmnPsQmuX2K5AlZ+MWQICLhuB+zi39CdawzJKIj5 s9eTkhkN515RqpPCmExJ/pexVqXgABuA7WMPr9jvaa8Fu0XMlBXYpx30PYwNMcfi zleq9qlQxK06FyKcNXZYc43toaW2ALQVNNtJr0IDSlMCe24ksq2g1QTJqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMYOGt5gsLGzhkoVL0GSj1tB6kQMB8GA1UdIwQY MBaAFOpT8zzN/F/oS4TBXwQyKQaZGvnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQt OGE0ZjYzZWE5YmYxLzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQtOGE0ZjYzZWE5YmYx LzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+jOJtmz Qc79guo96lsy7f5MZEAAV0Ghyz1MvoQaFo+D1LNE8FeS22dJh69i62V+zUZK9d2/ +eQkc30DTKRxgfey4ZWXOD1MidRek0YYR03tEW8Xjo2pa/jjEJAzHZuFCqKP2i03 Y0oiEXfAuA1VDkE9f6T5theJRn/czJfUPu2XvKcE3+8WrRoRnymeS6M+cv5nukCZ +/2z5Ga4+5Leaogm3aIFVxwhxrS4oe62khTxnqH5XiYo1Z+n5b/ZUg6884QaXNRh IjTM0QycDxB5KcUqxwZVGGdE6g5Ud+tljkaWieGsM/jyLQsApLHe41vTlCNkB4HB 5RKWOEKwvzeAVg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:31 2025 by rpki-client