This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft File: 6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json) Hash identifier: hXypYuhM78jpfg2kVbYq0wj/u0jmStu2bvaHQR6xeRU= Subject key identifier: B4:1A:F6:87:B1:49:68:7E:B6:8B:9D:6F:B2:00:91:8A:84:9B:75:EB Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E Certificate issuer: /CN=e97124752c840067dd37e242e949dda34dcb4b4e Certificate serial: 019AF46514429DEE9A99A1E638E0C425B3A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:00:56 +0000 Manifest this update: Sat 06 Dec 2025 16:00:56 +0000 Manifest next update: Sun 07 Dec 2025 16:00:56 +0000 Files and hashes: 1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: g4IjyLX/UFWii9SrkeryRyOkkqGr9janR64F7A/MYWE=) 2: ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa (hash: HgLGglk0S4IATrqUxgAV1S7c2Cds50Oig+WiSSLRjns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:14:42:9d:ee:9a:99:a1:e6:38:e0:c4:25:b3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e Validity Not Before: Dec 6 16:00:56 2025 GMT Not After : Dec 7 16:00:56 2025 GMT Subject: CN=b41af687b149687eb68b9d6fb200918a849b75eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:f0:91:5d:9f:97:1c:70:06:8f:c6:57:a1: 6a:c0:a3:2d:82:5c:6b:04:0b:3d:8f:2e:74:51:67: c7:63:2e:18:48:04:33:ae:97:00:c3:4b:0c:57:79: b0:41:e6:57:f5:d0:5a:c5:4f:31:b6:df:24:d3:97: 21:fd:73:ff:74:54:1b:ed:3a:6e:cd:4a:6b:4c:a0: 8c:f7:15:d3:90:95:55:ba:51:d4:66:23:f3:f5:19: 12:16:98:f6:5f:bc:d8:14:0f:88:b5:f4:25:e2:94: 7f:10:fd:c1:2b:43:d7:50:7e:05:b2:8c:b8:eb:9a: e7:7e:d4:1c:9a:3f:d1:77:a8:a8:a8:e2:5f:39:b8: c7:0b:a2:e2:c2:b2:85:a2:ae:11:e9:71:79:66:49: 03:b7:1d:97:c4:8b:cf:43:47:e3:19:3e:e8:ff:e5: e5:88:06:cb:ad:17:c3:e9:a4:4f:7a:89:01:02:72: f1:23:35:e6:8e:f7:ac:36:24:a7:3a:79:91:ec:09: 50:be:5e:9c:64:fc:99:d3:27:25:77:5e:da:cf:3e: 38:c3:7d:d8:46:54:74:be:e4:21:11:39:0a:d6:83: ff:29:5d:8d:d2:1c:d2:e8:80:3c:a4:75:41:7e:a5: 02:9e:62:b7:60:9c:e8:29:6c:9e:ec:fb:32:d9:fb: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:F6:87:B1:49:68:7E:B6:8B:9D:6F:B2:00:91:8A:84:9B:75:EB X509v3 Authority Key Identifier: keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:86:aa:01:28:1d:44:d2:78:53:04:b8:18:7f:ba:b4:1c:b9: 37:77:a5:04:b9:d1:69:bd:45:2c:3f:a1:eb:8c:45:8a:ef:1c: a6:0c:b8:ab:8e:4b:4e:83:de:25:4b:c2:41:e1:fd:2c:64:7f: df:68:61:e7:85:28:aa:45:b2:9f:c9:a5:1a:48:76:56:96:3a: 8c:46:b0:ac:64:c3:8d:8d:69:68:10:6b:3d:7d:67:36:a9:1c: 8e:ec:60:6a:b7:1f:85:29:c8:93:77:e0:14:1d:97:d5:7b:e7: aa:d5:d9:6b:26:aa:6a:22:f2:fc:8f:0f:65:f5:49:02:37:cd: 3e:ab:0a:8f:db:67:e3:fb:2e:a6:d8:77:d1:37:ce:63:f2:93: c5:95:39:05:13:19:f0:06:5b:45:ed:92:66:bc:21:a1:fe:f4: 5b:42:e7:e2:73:9a:96:d8:18:8d:4d:75:a1:49:00:17:9f:6b: 4f:0b:63:3b:ca:5a:67:86:68:89:06:0f:0a:cd:ef:70:c2:d7: af:34:5d:3d:3a:e1:76:1a:83:35:4c:92:2b:20:10:d3:a9:6e: 7c:c7:79:04:84:60:1f:1d:58:e9:b5:b0:ff:24:ab:ca:a0:f3: c6:f1:b0:ef:5b:dc:af:92:51:fa:68:5d:e3:fa:30:56:52:42: 61:da:31:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRRCne6amaHmOODEJbOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEyNDc1MmM4NDAwNjdkZDM3ZTI0MmU5NDlkZGEzNGRj YjRiNGUwHhcNMjUxMjA2MTYwMDU2WhcNMjUxMjA3MTYwMDU2WjAzMTEwLwYDVQQD EyhiNDFhZjY4N2IxNDk2ODdlYjY4YjlkNmZiMjAwOTE4YTg0OWI3NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS7wkV2flxxwBo/GV6FqwKMtglxr BAs9jy50UWfHYy4YSAQzrpcAw0sMV3mwQeZX9dBaxU8xtt8k05ch/XP/dFQb7Tpu zUprTKCM9xXTkJVVulHUZiPz9RkSFpj2X7zYFA+ItfQl4pR/EP3BK0PXUH4Fsoy4 65rnftQcmj/Rd6ioqOJfObjHC6LiwrKFoq4R6XF5ZkkDtx2XxIvPQ0fjGT7o/+Xl iAbLrRfD6aRPeokBAnLxIzXmjvesNiSnOnmR7AlQvl6cZPyZ0ycld17azz44w33Y RlR0vuQhETkK1oP/KV2N0hzS6IA8pHVBfqUCnmK3YJzoKWye7Psy2furTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQa9oexSWh+toudb7IAkYqEm3XrMB8GA1UdIwQY MBaAFOlxJHUshABn3TfiQulJ3aNNy0tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NWE5YzktMTY1MC00YjBiLWI3OGMt NWNiMzliNTRhN2VkLzEvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS83NWE5YzktMTY1MC00YjBiLWI3OGMtNWNiMzliNTRhN2Vk LzEvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4aqASgd RNJ4UwS4GH+6tBy5N3elBLnRab1FLD+h64xFiu8cpgy4q45LToPeJUvCQeH9LGR/ 32hh54UoqkWyn8mlGkh2VpY6jEawrGTDjY1paBBrPX1nNqkcjuxgarcfhSnIk3fg FB2X1XvnqtXZayaqaiLy/I8PZfVJAjfNPqsKj9tn4/supth30TfOY/KTxZU5BRMZ 8AZbRe2SZrwhof70W0Ln4nOaltgYjU11oUkAF59rTwtjO8paZ4ZoiQYPCs3vcMLX rzRdPTrhdhqDNUySKyAQ06lufMd5BIRgHx1Y6bWw/ySryqDzxvGw71vcr5JR+mhd 4/owVlJCYdox5w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:48:55 2025 by rpki-client