This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft File: 6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json) Hash identifier: kL50cgHaR3cxAYdCWRypccExsL4s5FKKze7mSX+RDX4= Subject key identifier: 60:7C:36:87:E1:1D:3E:19:C9:E6:12:F3:09:7B:F1:B4:3C:EB:5F:85 Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9 Certificate issuer: /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9 Certificate serial: 019B3DFEE5F1BDD9EC82952B2E5722C342DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:01:13 +0000 Manifest this update: Sat 20 Dec 2025 23:01:13 +0000 Manifest next update: Sun 21 Dec 2025 23:01:13 +0000 Files and hashes: 1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: I8d2dwkBNcQujGpseuICUjBLwiU0SpEpHdubRxWiW3k=) 2: qKIz6NW658QiWYOFcDWwBberXPk.roa (hash: XrH4aIQQINYqHfRuibGZ0Zr0PYKUQ4mNWHvnArdnsa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e5:f1:bd:d9:ec:82:95:2b:2e:57:22:c3:42:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9 Validity Not Before: Dec 20 23:01:13 2025 GMT Not After : Dec 21 23:01:13 2025 GMT Subject: CN=607c3687e11d3e19c9e612f3097bf1b43ceb5f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:72:73:70:12:0d:67:c3:d2:f3:d6:2f:dd: 6d:51:05:0a:2d:c5:43:e0:23:44:9a:f1:11:5d:c8: 70:48:9a:09:42:5c:5d:d3:5c:5c:68:14:df:30:c6: 16:bb:c2:e0:0b:40:cc:9a:0e:45:29:5e:40:41:77: c3:b4:12:ba:7d:d2:4a:ac:69:09:93:49:94:1d:b0: e4:e9:6e:22:17:7d:01:e8:fa:06:cb:c2:d3:68:d7: b1:7d:51:c8:3c:04:72:7e:4e:70:01:3b:51:b1:e5: 2b:ed:3b:35:73:9e:36:50:f2:90:3b:5a:f2:23:a4: 44:63:d1:03:2b:c1:14:3d:1d:5d:1a:7c:70:9c:22: 9c:1e:b2:6d:6e:94:c2:3a:1a:09:a5:aa:00:1f:ae: d4:f3:74:21:88:97:2c:a4:ab:4e:3a:d9:05:0f:71: 27:07:e7:a8:9a:2a:04:24:98:7f:89:3a:70:c0:7a: 6c:8f:00:7c:35:60:d4:79:df:aa:c2:ab:a0:f4:8b: 2c:b0:76:f1:24:4d:22:31:33:2b:8b:a3:17:e1:68: 80:ea:aa:13:8e:ba:46:f1:e7:c6:90:73:31:8c:2f: b3:f5:f4:e0:5b:8e:33:05:ef:8f:8b:96:b8:89:da: 04:94:0a:38:cd:ce:a5:ad:14:26:ca:69:1e:7b:b4: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7C:36:87:E1:1D:3E:19:C9:E6:12:F3:09:7B:F1:B4:3C:EB:5F:85 X509v3 Authority Key Identifier: keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:74:09:c1:51:a0:4f:6c:5b:3d:96:90:a0:ea:1c:38:2d:3e: 65:7d:47:91:43:1b:0c:bc:77:f0:95:9c:80:b3:24:12:5a:20: eb:01:d4:07:9e:d2:53:c1:40:56:93:47:a6:0d:2c:85:fc:f8: fc:79:5f:11:be:b4:61:c3:60:05:90:51:04:33:b1:3b:50:0a: 50:ef:ca:97:9a:8e:b9:79:3f:ba:15:af:ea:02:cf:89:a8:10: 9f:46:78:69:d8:a4:6b:eb:26:45:32:e6:b7:18:ff:ac:86:50: a3:23:12:5d:48:c5:88:bf:31:ca:16:78:5c:51:e1:36:c9:09: e0:81:15:ec:8e:c5:06:35:70:1d:25:bd:3b:1c:ae:5c:fb:88: 5f:c0:dd:a3:61:e9:7e:d0:14:bb:e5:c8:d4:9b:fb:ae:9a:fc: ac:16:bc:99:11:ad:33:89:aa:81:74:b7:42:f5:38:43:5a:14: 8e:9c:7c:e9:4e:fe:09:88:a8:a1:25:e8:ca:45:ab:02:7c:e3: d8:e0:ab:d1:31:85:63:e8:34:ef:d4:47:ff:43:35:d2:f0:12: b5:b8:f3:07:db:8b:04:f0:f4:63:f3:fa:dc:c7:5d:8e:e7:bc: fd:92:f2:2b:5c:53:7a:6a:26:6f:8d:6e:66:32:50:77:06:dc: 62:8f:c6:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uXxvdnsgpUrLlciw0LdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzM3ZWFkNmI5YjkzZGQwZDc1OGFiZjlkN2IzMDMwNzJh OTllYjkwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD Eyg2MDdjMzY4N2UxMWQzZTE5YzllNjEyZjMwOTdiZjFiNDNjZWI1Zjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQFyc3ASDWfD0vPWL91tUQUKLcVD 4CNEmvERXchwSJoJQlxd01xcaBTfMMYWu8LgC0DMmg5FKV5AQXfDtBK6fdJKrGkJ k0mUHbDk6W4iF30B6PoGy8LTaNexfVHIPARyfk5wATtRseUr7Ts1c542UPKQO1ry I6REY9EDK8EUPR1dGnxwnCKcHrJtbpTCOhoJpaoAH67U83QhiJcspKtOOtkFD3En B+eomioEJJh/iTpwwHpsjwB8NWDUed+qwqug9IsssHbxJE0iMTMri6MX4WiA6qoT jrpG8efGkHMxjC+z9fTgW44zBe+Pi5a4idoElAo4zc6lrRQmymkee7R0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB8NofhHT4ZyeYS8wl78bQ861+FMB8GA1UdIwQY MBaAFOszfq1rm5PdDXWKv517MDByqZ65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDct OWNhMTAwNDI4ZjEwLzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDctOWNhMTAwNDI4ZjEw LzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnQJwVGg T2xbPZaQoOocOC0+ZX1HkUMbDLx38JWcgLMkElog6wHUB57SU8FAVpNHpg0shfz4 /HlfEb60YcNgBZBRBDOxO1AKUO/Kl5qOuXk/uhWv6gLPiagQn0Z4adika+smRTLm txj/rIZQoyMSXUjFiL8xyhZ4XFHhNskJ4IEV7I7FBjVwHSW9OxyuXPuIX8Ddo2Hp ftAUu+XI1Jv7rpr8rBa8mRGtM4mqgXS3QvU4Q1oUjpx86U7+CYiooSXoykWrAnzj 2OCr0TGFY+g079RH/0M10vAStbjzB9uLBPD0Y/P63Mddjue8/ZLyK1xTemomb41u ZjJQdwbcYo/Glw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:44 2025 by rpki-client