This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft File: 6hnxNhI41O6MRqpBsJwyLGLIh_0.mft (raw, json) Hash identifier: 3llaeO0f6ryktHLS2PvUgO/izQK0klyoF2RGTvbrfjw= Subject key identifier: 7C:B2:E5:F5:87:36:83:A6:01:27:4A:74:53:83:A5:03:95:8A:C9:E5 Authority key identifier: EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD Certificate issuer: /CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd Certificate serial: 019AF6F80EFAC17D0CE829553BD5A6BAFA57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft Manifest number: 16F1 Signing time: Sun 07 Dec 2025 04:00:43 +0000 Manifest this update: Sun 07 Dec 2025 04:00:43 +0000 Manifest next update: Mon 08 Dec 2025 04:00:43 +0000 Files and hashes: 1: 6hnxNhI41O6MRqpBsJwyLGLIh_0.crl (hash: YphyspNWzG8L7NIMfWRuA+KnkPFav2HtavKjlowcln0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:0e:fa:c1:7d:0c:e8:29:55:3b:d5:a6:ba:fa:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd Validity Not Before: Dec 7 04:00:43 2025 GMT Not After : Dec 8 04:00:43 2025 GMT Subject: CN=7cb2e5f5873683a601274a745383a503958ac9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2e:a9:4f:2d:3b:63:d0:58:ef:1e:95:3b:23: f5:6d:df:af:a0:9e:a3:fa:e3:68:c1:8a:df:c3:43: c6:8f:ed:3a:05:7e:90:e5:cb:05:52:ce:df:ec:94: a1:9e:d3:88:04:8b:49:b4:93:5e:fc:6e:71:4c:9f: e6:a9:a2:98:eb:f8:98:3d:48:b3:a2:bf:f9:75:9c: 58:65:78:02:b3:7b:a0:8c:61:d3:11:68:73:5a:ee: dd:d9:76:2b:44:a7:33:fb:59:3e:6b:7b:b7:61:64: 74:17:f6:6c:38:c7:ea:9c:9d:c2:e9:83:64:bc:15: ea:70:76:83:e3:0d:56:fc:88:4b:2a:fc:a1:c0:93: 04:28:55:60:15:e8:c3:b1:8d:70:f6:6f:5e:27:47: 1b:18:19:33:15:33:ec:b2:f5:c5:89:61:17:ab:67: 5d:49:ce:1e:e9:72:a3:9c:72:fc:c7:65:a1:79:b1: 7f:0b:6b:69:e2:f8:f0:8b:3a:89:cd:3e:c3:88:8c: d3:4d:58:c4:22:3d:c1:c1:6e:9f:78:1f:c7:2b:41: 4a:44:ed:03:15:e0:26:e9:50:72:33:c5:6f:9d:82: fd:52:2e:ea:36:3a:74:a3:5e:e7:17:62:a7:ed:49: 61:23:9d:be:91:d2:2c:8e:a3:07:dd:80:1e:61:61: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:E5:F5:87:36:83:A6:01:27:4A:74:53:83:A5:03:95:8A:C9:E5 X509v3 Authority Key Identifier: keyid:EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cc:0b:c1:56:2e:1a:fa:0e:d0:7b:c7:f4:d4:b6:8f:e4:ea: 5b:31:87:52:71:68:ef:e8:0b:a0:3f:6d:76:fa:ab:da:23:99: a3:c7:19:ce:70:e9:81:11:8e:40:7a:bb:81:78:45:e8:61:38: 79:a2:f7:b9:a7:a3:b3:d3:68:d6:f5:30:1a:b9:9e:43:73:55: 2f:4b:00:83:b5:c6:5c:0f:5f:57:85:9c:e7:48:35:30:34:9f: 7e:0f:01:2f:c2:d2:2c:f1:71:11:ca:85:10:87:66:27:08:bf: 14:b3:ee:3f:5a:df:0a:99:e1:62:c3:0b:b2:92:91:53:76:d8: 70:8f:02:67:90:7e:88:61:87:ef:60:98:43:6e:aa:f8:56:e2: 50:6d:4f:af:12:1f:f5:43:1e:94:d6:0c:0f:df:71:46:88:83: 58:f1:a5:c3:28:4d:36:69:0e:91:28:d8:23:2e:ab:63:94:5d: 66:07:74:ec:61:0d:c5:ea:02:77:84:af:c8:64:af:e0:b7:63: 9d:84:61:02:ab:22:ff:08:2a:62:eb:11:0b:7d:e7:55:ad:b0: 42:31:03:17:5b:dd:b4:9e:71:02:6e:37:5c:4b:0b:c1:cf:92: f5:62:0e:2c:56:6a:b0:8f:60:ca:49:de:d3:93:2a:03:29:5a: a8:5f:48:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+A76wX0M6ClVO9WmuvpXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMTlmMTM2MTIzOGQ0ZWU4YzQ2YWE0MWIwOWMzMjJjNjJj ODg3ZmQwHhcNMjUxMjA3MDQwMDQzWhcNMjUxMjA4MDQwMDQzWjAzMTEwLwYDVQQD Eyg3Y2IyZTVmNTg3MzY4M2E2MDEyNzRhNzQ1MzgzYTUwMzk1OGFjOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi6pTy07Y9BY7x6VOyP1bd+voJ6j +uNowYrfw0PGj+06BX6Q5csFUs7f7JShntOIBItJtJNe/G5xTJ/mqaKY6/iYPUiz or/5dZxYZXgCs3ugjGHTEWhzWu7d2XYrRKcz+1k+a3u3YWR0F/ZsOMfqnJ3C6YNk vBXqcHaD4w1W/IhLKvyhwJMEKFVgFejDsY1w9m9eJ0cbGBkzFTPssvXFiWEXq2dd Sc4e6XKjnHL8x2WhebF/C2tp4vjwizqJzT7DiIzTTVjEIj3BwW6feB/HK0FKRO0D FeAm6VByM8VvnYL9Ui7qNjp0o17nF2Kn7UlhI52+kdIsjqMH3YAeYWFSuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyy5fWHNoOmASdKdFODpQOVisnlMB8GA1UdIwQY MBaAFOoZ8TYSONTujEaqQbCcMixiyIf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmhueE5oSTQxTzZNUnFwQnNKd3lMR0xJaF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yN2I0YWEtMzU3Yy00ZTI1LWJkMmIt NmM1ZDA2OWU1NjU3LzEvNmhueE5oSTQxTzZNUnFwQnNKd3lMR0xJaF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yN2I0YWEtMzU3Yy00ZTI1LWJkMmItNmM1ZDA2OWU1NjU3 LzEvNmhueE5oSTQxTzZNUnFwQnNKd3lMR0xJaF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHswLwVYu GvoO0HvH9NS2j+TqWzGHUnFo7+gLoD9tdvqr2iOZo8cZznDpgRGOQHq7gXhF6GE4 eaL3uaejs9No1vUwGrmeQ3NVL0sAg7XGXA9fV4Wc50g1MDSffg8BL8LSLPFxEcqF EIdmJwi/FLPuP1rfCpnhYsMLspKRU3bYcI8CZ5B+iGGH72CYQ26q+FbiUG1PrxIf 9UMelNYMD99xRoiDWPGlwyhNNmkOkSjYIy6rY5RdZgd07GENxeoCd4SvyGSv4Ldj nYRhAqsi/wgqYusRC33nVa2wQjEDF1vdtJ5xAm43XEsLwc+S9WIOLFZqsI9gykne 05MqAylaqF9IEg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:39 2025 by rpki-client