This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft File: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json) Hash identifier: n/LMPuSzx65p1bKSOicqeNNTrlvD33FMkcrMwUHFR/I= Subject key identifier: 1F:E3:E1:E7:FF:E1:DE:10:45:13:0B:05:C7:BD:3E:BE:EF:1C:1A:CC Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9 Certificate issuer: /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9 Certificate serial: 019AF31BD032045E0C041505849F68743083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:17 +0000 Manifest this update: Sat 06 Dec 2025 10:01:17 +0000 Manifest next update: Sun 07 Dec 2025 10:01:17 +0000 Files and hashes: 1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: u5zPQ7IrFXuQFivNw2jDf4hFycjWjdjgcVZNezlQnZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d0:32:04:5e:0c:04:15:05:84:9f:68:74:30:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9 Validity Not Before: Dec 6 10:01:17 2025 GMT Not After : Dec 7 10:01:17 2025 GMT Subject: CN=1fe3e1e7ffe1de1045130b05c7bd3ebeef1c1acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:26:90:e6:51:fe:42:36:f8:fd:90:3d:f0: 52:72:b1:71:19:60:20:2a:74:fc:c9:7b:48:d9:5d: 73:50:d2:e3:d1:5d:94:c3:11:f9:f7:38:d3:3d:f5: e4:06:7f:90:3b:f8:59:45:60:a2:4a:77:a4:a3:89: 40:c0:b0:41:aa:56:06:6b:c1:43:93:12:a4:05:9d: 2a:61:03:ed:a3:23:02:ba:20:e6:ea:cf:cc:1b:83: aa:87:c6:78:a7:6f:3f:49:01:7d:bc:a8:58:c4:61: 06:cf:b8:3c:e3:eb:7b:44:cf:50:54:66:46:b7:3c: 65:bc:08:1c:1e:9e:8d:d5:b7:f0:f1:7c:48:14:cb: b2:2b:ce:d8:dc:ac:47:f7:ea:22:9f:43:34:ff:62: e0:32:13:f3:92:b4:83:4f:bf:d7:12:d2:ef:74:fe: 48:0d:c5:c5:25:75:00:79:46:6c:c8:2f:91:94:be: 19:b4:ff:5d:de:cb:25:92:9e:e0:b2:99:63:19:78: 7b:b2:d9:ec:59:42:3b:ee:ab:28:c2:cd:2a:30:0e: 2e:36:b9:a9:d9:39:80:a7:72:eb:b9:d9:5e:4e:b3: 11:81:b4:b8:87:7a:d3:dd:2b:cf:3c:65:c0:53:88: 45:26:4d:25:9e:1d:4a:72:5e:88:c8:06:c2:ea:a2: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E3:E1:E7:FF:E1:DE:10:45:13:0B:05:C7:BD:3E:BE:EF:1C:1A:CC X509v3 Authority Key Identifier: keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:67:51:89:42:56:52:ff:4d:d9:8c:bc:6c:a4:ae:f1:b3:70: 76:0c:e2:e1:8e:f1:45:b4:93:de:f2:47:f8:84:e9:c9:f9:2d: 4a:89:37:3e:b6:61:ac:e1:8a:33:e3:44:ce:44:c4:01:15:24: 29:2b:15:7c:14:08:d1:d2:d3:7d:ec:25:aa:45:32:78:9f:66: 1a:ac:c9:18:2a:fa:95:34:88:4e:0e:82:0b:fa:e8:ab:7c:1f: ac:dd:d3:39:b4:83:a5:ee:01:29:bf:3e:40:3c:8e:8a:0c:90: b1:f7:be:5f:84:7b:35:a0:bb:18:17:3b:1a:57:64:b7:27:44: b1:bc:05:67:f5:84:ba:f9:3f:e0:81:e9:bc:4a:27:a2:b7:f2: cd:eb:53:45:3f:29:70:3b:0c:dd:3f:03:04:b1:46:ee:45:d8: 04:46:4a:9f:3e:1f:e3:6d:7f:78:36:1c:4f:ef:23:fe:c9:56: 00:c0:bd:53:0f:94:ae:3f:42:b9:93:16:b1:5d:03:49:20:39: 89:97:e5:f1:b3:b4:93:e8:44:b5:19:4c:04:26:ff:25:47:cc: 8b:e9:97:24:9a:1c:bd:18:0e:13:f9:f1:af:35:f8:64:a0:a6: db:cc:4e:73:f3:a7:e9:96:67:66:06:e7:28:6a:3c:c3:d6:c2: d2:72:ba:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9AyBF4MBBUFhJ9odDCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMWJjMmVhNjI1MjM4YmI0ZTI4MjFhMThiZDVlZWVhM2E2 OGE3ZjkwHhcNMjUxMjA2MTAwMTE3WhcNMjUxMjA3MTAwMTE3WjAzMTEwLwYDVQQD EygxZmUzZTFlN2ZmZTFkZTEwNDUxMzBiMDVjN2JkM2ViZWVmMWMxYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06smkOZR/kI2+P2QPfBScrFxGWAg KnT8yXtI2V1zUNLj0V2UwxH59zjTPfXkBn+QO/hZRWCiSneko4lAwLBBqlYGa8FD kxKkBZ0qYQPtoyMCuiDm6s/MG4Oqh8Z4p28/SQF9vKhYxGEGz7g84+t7RM9QVGZG tzxlvAgcHp6N1bfw8XxIFMuyK87Y3KxH9+oin0M0/2LgMhPzkrSDT7/XEtLvdP5I DcXFJXUAeUZsyC+RlL4ZtP9d3sslkp7gspljGXh7stnsWUI77qsows0qMA4uNrmp 2TmAp3LrudleTrMRgbS4h3rT3SvPPGXAU4hFJk0lnh1Kcl6IyAbC6qKzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/j4ef/4d4QRRMLBce9Pr7vHBrMMB8GA1UdIwQY MBaAFOsbwupiUji7TighoYvV7uo6aKf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2Et NTg5MjIyNzJiYjE3LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2EtNTg5MjIyNzJiYjE3 LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmdRiUJW Uv9N2Yy8bKSu8bNwdgzi4Y7xRbST3vJH+ITpyfktSok3PrZhrOGKM+NEzkTEARUk KSsVfBQI0dLTfewlqkUyeJ9mGqzJGCr6lTSITg6CC/roq3wfrN3TObSDpe4BKb8+ QDyOigyQsfe+X4R7NaC7GBc7GldktydEsbwFZ/WEuvk/4IHpvEonorfyzetTRT8p cDsM3T8DBLFG7kXYBEZKnz4f421/eDYcT+8j/slWAMC9Uw+Urj9CuZMWsV0DSSA5 iZfl8bO0k+hEtRlMBCb/JUfMi+mXJJocvRgOE/nxrzX4ZKCm28xOc/On6ZZnZgbn KGo8w9bC0nK6pg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:50:49 2025 by rpki-client