This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json) Hash identifier: x45JPXsqCXO/LDlobgkLvobqjWtKY/TPvKRxFY43TWM= Subject key identifier: 7A:F4:DF:5A:99:F7:90:29:77:A6:3F:12:00:BF:5B:4F:18:F7:9F:C1 Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2 Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2 Certificate serial: 019AF12E79F00167A8D8314983F59C08BCB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft Manifest number: 0788 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: Ji3zWm2p7lhx1W2ZWa27kZT0Yv+Lki9jVGMudtYlfqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:79:f0:01:67:a8:d8:31:49:83:f5:9c:08:bc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=7af4df5a99f7902977a63f1200bf5b4f18f79fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:a8:4b:d3:4c:35:a9:8c:ff:76:45:ad:79: 50:a5:ee:b2:86:e2:4c:2e:77:f9:ab:00:5a:0e:47: 01:0a:1c:fe:a0:ce:92:77:e8:b8:cf:dc:6a:75:7e: d3:3a:6f:39:59:c1:56:6d:1e:cc:5f:24:b4:e5:3e: b7:bd:58:9b:d4:d8:01:59:25:db:55:0a:9d:90:2b: 8b:0a:92:d5:ad:56:e8:35:3f:22:32:0d:06:de:82: 42:70:c9:2e:68:1a:eb:ac:cb:b0:37:97:20:a3:14: 4e:d3:db:6b:da:cd:2b:d5:25:12:09:58:d3:6f:bd: 91:ff:3e:af:22:85:9c:89:21:29:f5:44:a7:53:37: a6:97:da:e6:a0:e6:81:67:f2:21:6b:4f:07:bd:e8: 55:4f:f7:67:4f:82:5c:c3:00:e2:84:ba:a3:74:2c: 5d:82:52:5d:42:dd:6c:e5:0e:0d:21:16:cf:df:04: e9:29:90:67:fc:ec:2d:1f:c3:27:04:73:99:a3:72: 49:68:cb:f1:f5:7a:07:4d:73:58:a6:1f:b3:a2:5c: fb:1e:63:a1:39:3e:4c:ef:14:94:74:21:f7:49:22: 06:90:48:a6:db:91:18:62:8a:14:93:56:1d:1a:c1: a1:1c:48:3d:a5:49:02:29:75:a0:59:84:38:5d:d8: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F4:DF:5A:99:F7:90:29:77:A6:3F:12:00:BF:5B:4F:18:F7:9F:C1 X509v3 Authority Key Identifier: keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:8b:f9:a9:04:bb:e0:63:ed:23:0e:81:28:f1:3d:aa:cf: f2:94:41:8c:d3:90:ce:02:2a:7f:5f:78:6c:f5:2b:f3:aa:05: 39:82:59:23:ba:f5:70:35:be:f0:5e:ca:44:a3:63:9a:96:e9: 33:68:15:17:58:8d:75:2b:19:93:da:c4:36:4b:79:87:e0:2e: b0:f0:5f:4a:cb:84:0e:03:38:ff:18:e2:8e:58:7c:02:56:07: 53:22:0d:55:f0:f0:d3:e3:1f:4d:d7:78:d0:7b:33:de:49:ef: d8:ef:bb:81:9c:71:70:4f:ae:9b:24:ac:db:69:f2:ee:60:51: 5b:2b:2b:44:d2:e6:65:f2:dd:33:e2:8e:b1:85:72:2e:65:eb: 51:90:5f:b4:85:a6:11:56:d0:d8:7c:b3:54:6c:99:2d:26:98: 07:1e:22:f2:f6:45:51:42:0c:04:15:d9:d4:2d:c8:f4:87:5e: 02:d3:30:c5:d5:58:8e:f1:f5:ff:f4:e4:33:3e:4b:b6:7b:e1: 83:ee:8a:5f:3d:13:44:d1:b5:f6:cc:bf:51:35:a0:53:f7:54: cb:88:16:00:5c:e0:60:f1:ec:9b:e4:19:f4:9d:00:cd:62:c6: 95:5b:c3:a5:0a:5d:0b:9a:e0:76:c4:74:4e:47:81:3a:86:5a: e2:c7:ea:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnnwAWeo2DFJg/WcCLy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTY4N2FmZDYyMWI1MmE5NzRjZDNhZjBiZThhMjVhNjcx MTg2ZDIwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg3YWY0ZGY1YTk5Zjc5MDI5NzdhNjNmMTIwMGJmNWI0ZjE4Zjc5ZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubyoS9NMNamM/3ZFrXlQpe6yhuJM Lnf5qwBaDkcBChz+oM6Sd+i4z9xqdX7TOm85WcFWbR7MXyS05T63vVib1NgBWSXb VQqdkCuLCpLVrVboNT8iMg0G3oJCcMkuaBrrrMuwN5cgoxRO09tr2s0r1SUSCVjT b72R/z6vIoWciSEp9USnUzeml9rmoOaBZ/Iha08HvehVT/dnT4JcwwDihLqjdCxd glJdQt1s5Q4NIRbP3wTpKZBn/OwtH8MnBHOZo3JJaMvx9XoHTXNYph+zolz7HmOh OT5M7xSUdCH3SSIGkEim25EYYooUk1YdGsGhHEg9pUkCKXWgWYQ4XditnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr031qZ95Apd6Y/EgC/W08Y95/BMB8GA1UdIwQY MBaAFOpWh6/WIbUql0zTrwvoolpnEYbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUt YjIzODU2YTFhODAzLzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUtYjIzODU2YTFhODAz LzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANo6L+akE u+Bj7SMOgSjxParP8pRBjNOQzgIqf194bPUr86oFOYJZI7r1cDW+8F7KRKNjmpbp M2gVF1iNdSsZk9rENkt5h+AusPBfSsuEDgM4/xjijlh8AlYHUyINVfDw0+MfTdd4 0Hsz3knv2O+7gZxxcE+umySs22ny7mBRWysrRNLmZfLdM+KOsYVyLmXrUZBftIWm EVbQ2HyzVGyZLSaYBx4i8vZFUUIMBBXZ1C3I9IdeAtMwxdVYjvH1//TkMz5Ltnvh g+6KXz0TRNG19sy/UTWgU/dUy4gWAFzgYPHsm+QZ9J0AzWLGlVvDpQpdC5rgdsR0 TkeBOoZa4sfqIw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:39 2025 by rpki-client