This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft File: AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json) Hash identifier: icF9/glb8cgc5qCSiR3mCejtRHtETF1vEHdQ2F3OZFI= Subject key identifier: DD:0B:13:D3:30:8B:24:3A:BB:3D:B6:FC:18:C2:D3:A8:BF:CE:4F:53 Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2 Certificate issuer: /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2 Certificate serial: 019AF3F74C2E773D3024B91D29E5959A7C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft Manifest number: 0CE3 Signing time: Sat 06 Dec 2025 14:01:01 +0000 Manifest this update: Sat 06 Dec 2025 14:01:01 +0000 Manifest next update: Sun 07 Dec 2025 14:01:01 +0000 Files and hashes: 1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: 1wg9tqK9BTfx6azIqNL8qzdfJufQKawbfcuzr7eezgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:4c:2e:77:3d:30:24:b9:1d:29:e5:95:9a:7c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2 Validity Not Before: Dec 6 14:01:01 2025 GMT Not After : Dec 7 14:01:01 2025 GMT Subject: CN=dd0b13d3308b243abb3db6fc18c2d3a8bfce4f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:4c:4b:e7:9c:a0:b8:62:3c:ea:b6:4d:44: be:41:92:57:f3:c8:1d:f1:2b:d8:f7:bd:14:44:db: d0:53:16:27:d6:72:cf:13:12:86:e0:24:72:08:ae: 14:f7:0c:e3:d1:83:5a:6e:83:3b:ae:24:5c:a9:82: 2b:37:6e:cc:00:f8:ab:02:61:9f:3c:be:7c:27:d3: 1c:d2:f6:70:dc:20:f3:3f:b4:80:9b:6e:6f:5a:5a: 79:a9:0d:67:a1:1d:ce:b8:69:6c:3a:e6:c3:99:3e: 20:01:e2:2a:1b:1b:3c:09:02:00:04:a9:06:12:d2: 54:33:9b:60:8b:8a:b1:c4:79:75:07:2a:dc:eb:23: 6d:79:bf:6b:8f:f5:2f:a8:25:ad:26:94:6b:4c:58: d1:c1:7d:da:4d:7e:3e:3a:6b:e5:81:04:35:34:cb: 21:28:ce:1a:7e:2d:a2:54:1d:4e:b6:19:d9:02:87: 41:59:7b:f2:16:ec:8e:10:d9:65:5b:4c:bd:29:09: fb:c4:4e:c4:7f:2c:5a:c4:d5:0e:a0:01:88:27:41: 52:15:0d:84:59:ad:cf:61:5e:29:fe:d9:ec:0a:90: a5:de:95:94:db:98:a1:81:de:d9:61:53:ed:da:50: c9:ec:d4:9f:87:1c:d9:06:94:08:f0:43:25:83:cd: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0B:13:D3:30:8B:24:3A:BB:3D:B6:FC:18:C2:D3:A8:BF:CE:4F:53 X509v3 Authority Key Identifier: keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:74:97:c1:b3:a1:60:66:3b:8f:e3:d6:0a:f6:26:34:ba:86: 81:37:25:9f:cc:2f:90:95:e4:f8:d7:b2:1d:7e:79:35:47:ec: dc:20:9f:62:4b:cb:32:f7:95:9d:83:71:b1:b1:c4:b8:16:11: 37:95:c8:42:ef:dc:ec:ab:37:12:36:b2:de:3a:17:8f:56:d9: 1b:e3:23:42:c4:90:6c:4a:b4:9a:94:c1:34:e9:64:b4:5f:a3: 63:09:5c:38:4c:8d:26:30:33:c9:0e:9e:e2:6e:fa:f2:cc:00: 70:8f:46:09:f0:de:47:1e:4b:b4:e7:67:6d:48:ba:89:ee:e9: 02:c1:9d:4f:4a:ff:6d:1d:a7:03:7a:6e:e2:1c:9f:57:ee:6b: d8:bc:72:97:35:49:e6:23:d1:3d:e2:bd:e9:d7:d1:61:1b:ff: fe:bd:3f:f6:a3:73:36:2b:e2:0f:97:1a:74:b1:07:46:ba:c8: e4:26:d4:ec:ee:5e:ac:18:00:32:95:b2:17:58:3d:e9:a7:ec: c7:e2:91:0d:ff:d2:ad:cd:a1:97:00:ae:77:26:10:cc:46:e2: cb:16:78:d4:9f:6f:95:be:92:9f:d9:9e:dc:4a:ba:1d:7c:dd: bf:7a:15:86:2a:96:62:cc:50:90:9c:ef:71:61:ba:c1:e8:43: 3e:d1:7e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90wudz0wJLkdKeWVmnwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYmU5NzE4ZDRhYmI4NjdkZDA1NDRlYThmYjQ2MmRjMzMy YjljZDIwHhcNMjUxMjA2MTQwMTAxWhcNMjUxMjA3MTQwMTAxWjAzMTEwLwYDVQQD EyhkZDBiMTNkMzMwOGIyNDNhYmIzZGI2ZmMxOGMyZDNhOGJmY2U0ZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNJMS+ecoLhiPOq2TUS+QZJX88gd 8SvY970URNvQUxYn1nLPExKG4CRyCK4U9wzj0YNaboM7riRcqYIrN27MAPirAmGf PL58J9Mc0vZw3CDzP7SAm25vWlp5qQ1noR3OuGlsOubDmT4gAeIqGxs8CQIABKkG EtJUM5tgi4qxxHl1Byrc6yNteb9rj/UvqCWtJpRrTFjRwX3aTX4+OmvlgQQ1NMsh KM4afi2iVB1OthnZAodBWXvyFuyOENllW0y9KQn7xE7EfyxaxNUOoAGIJ0FSFQ2E Wa3PYV4p/tnsCpCl3pWU25ihgd7ZYVPt2lDJ7NSfhxzZBpQI8EMlg83dlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0LE9MwiyQ6uz22/BjC06i/zk9TMB8GA1UdIwQY MBaAFAC+lxjUq7hn3QVE6o+0YtwzK5zSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAt MDJhMjEzNTg0MjRhLzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAtMDJhMjEzNTg0MjRh LzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3SXwbOh YGY7j+PWCvYmNLqGgTcln8wvkJXk+NeyHX55NUfs3CCfYkvLMveVnYNxsbHEuBYR N5XIQu/c7Ks3Ejay3joXj1bZG+MjQsSQbEq0mpTBNOlktF+jYwlcOEyNJjAzyQ6e 4m768swAcI9GCfDeRx5LtOdnbUi6ie7pAsGdT0r/bR2nA3pu4hyfV+5r2LxylzVJ 5iPRPeK96dfRYRv//r0/9qNzNiviD5cadLEHRrrI5CbU7O5erBgAMpWyF1g96afs x+KRDf/Src2hlwCudyYQzEbiyxZ41J9vlb6Sn9me3Eq6HXzdv3oVhiqWYsxQkJzv cWG6wehDPtF+6g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:26 2025 by rpki-client