This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft File: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json) Hash identifier: J2ngSlp/+zX4y5tw0bHEQ0RmMQgwvYeZs3v+ohZRpFg= Subject key identifier: AC:BD:A0:C5:67:C1:AB:F3:CF:F1:54:CE:1B:EA:DD:00:E1:59:17:87 Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Certificate serial: 019AF20944D9E7FA93C7CC1C48B2AD0AB6BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft Manifest number: 1062 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: oTK1n0yJdSyuEtEL9mkSeLWAO9p7/zr9Yq9rrkxOBws=) 2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:44:d9:e7:fa:93:c7:cc:1c:48:b2:ad:0a:b6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=acbda0c567c1abf3cff154ce1beadd00e1591787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:16:c1:ea:05:4c:82:33:08:d7:66:a3:0c: 6c:36:0a:f8:b9:d9:b9:75:7f:e0:ab:1d:0f:b9:c7: 81:36:05:fc:23:80:64:cd:73:38:f9:56:09:90:80: 35:02:7a:e3:0b:5d:38:b0:b9:1d:35:0c:28:a0:24: 7c:ed:32:ed:76:1c:fa:85:0e:81:51:70:ce:97:fe: 14:89:a7:4d:12:79:96:0b:53:05:0d:47:f3:bc:77: 91:b7:f9:d1:d8:ad:9e:a4:bc:34:3f:69:ab:0b:91: 43:d7:42:66:7f:9b:06:fd:53:5b:eb:d1:a5:e9:8b: 80:ee:3c:61:e5:97:ce:8b:b4:01:eb:de:da:17:f8: 39:12:85:21:99:5f:25:35:da:1e:e2:bc:60:a8:88: 63:4c:81:ac:42:81:04:ad:2c:0a:ec:ab:d6:89:a5: b8:b1:f6:64:dd:bd:30:4d:70:31:c2:47:47:95:5b: 08:ec:01:ec:18:a9:12:f3:c9:1e:9c:ca:c5:69:43: 93:1a:c2:d5:01:d2:28:7c:13:14:f1:51:21:73:54: 40:b5:ec:6b:1d:55:7d:e4:35:37:d8:89:bd:e5:2d: 93:3e:b6:d7:a6:8a:cb:58:c0:ef:6c:20:28:48:fb: 5f:bf:73:94:81:da:d4:ca:f8:5c:41:1e:19:75:a3: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:A0:C5:67:C1:AB:F3:CF:F1:54:CE:1B:EA:DD:00:E1:59:17:87 X509v3 Authority Key Identifier: keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:41:ce:c0:76:c5:7a:9c:84:96:12:36:97:1f:7e:ff:67:1b: 3f:1e:f3:95:75:59:f9:07:2f:38:63:29:f2:24:6e:d3:17:2f: 97:b0:5f:33:b2:17:cf:f0:72:51:8a:7d:8a:6f:69:10:4b:12: 53:5c:95:a7:35:71:2b:e3:de:21:04:a3:c8:8d:6a:22:56:81: 4d:78:f6:e0:cb:e4:ba:20:8d:bf:89:82:14:c6:bf:e5:3c:e5: e8:33:7d:00:3a:fd:6d:5e:e0:98:16:06:73:0a:c4:7c:e9:e9: a3:bf:7b:54:65:45:2f:28:f3:2c:d7:d2:95:56:20:4a:4a:d1: 2e:9f:5e:61:f1:f6:e9:d7:9d:22:d7:a0:c4:ca:d8:d3:9f:4c: 0e:4d:5a:57:3a:4c:8a:e2:4b:6e:1f:3d:fb:b5:e0:e5:eb:ec: 16:ae:2c:5a:ac:54:ce:78:3f:ea:cd:9c:a2:3e:4b:22:8c:47: 6f:23:1d:ec:45:90:7b:8a:8f:76:b0:d0:57:79:30:06:26:aa: 83:de:66:84:28:6a:dd:bb:d0:b5:e7:38:6d:ad:5c:71:26:a3: 58:81:0b:67:98:03:cd:5d:57:1b:7c:c2:79:f2:33:3c:7f:15: 5d:6b:9f:57:cc:79:ad:57:0b:aa:7d:e2:f0:a9:44:8d:53:fb: c1:49:e4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUTZ5/qTx8wcSLKtCra7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh MDVkZDAwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhhY2JkYTBjNTY3YzFhYmYzY2ZmMTU0Y2UxYmVhZGQwMGUxNTkxNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxcWweoFTIIzCNdmowxsNgr4udm5 dX/gqx0PuceBNgX8I4BkzXM4+VYJkIA1AnrjC104sLkdNQwooCR87TLtdhz6hQ6B UXDOl/4UiadNEnmWC1MFDUfzvHeRt/nR2K2epLw0P2mrC5FD10Jmf5sG/VNb69Gl 6YuA7jxh5ZfOi7QB697aF/g5EoUhmV8lNdoe4rxgqIhjTIGsQoEErSwK7KvWiaW4 sfZk3b0wTXAxwkdHlVsI7AHsGKkS88kenMrFaUOTGsLVAdIofBMU8VEhc1RAtexr HVV95DU32Im95S2TPrbXporLWMDvbCAoSPtfv3OUgdrUyvhcQR4ZdaPD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy9oMVnwavzz/FUzhvq3QDhWReHMB8GA1UdIwQY MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt MGYzYjljMDVkZTQ1LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1 LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUHOwHbF epyElhI2lx9+/2cbPx7zlXVZ+QcvOGMp8iRu0xcvl7BfM7IXz/ByUYp9im9pEEsS U1yVpzVxK+PeIQSjyI1qIlaBTXj24MvkuiCNv4mCFMa/5Tzl6DN9ADr9bV7gmBYG cwrEfOnpo797VGVFLyjzLNfSlVYgSkrRLp9eYfH26dedItegxMrY059MDk1aVzpM iuJLbh89+7Xg5evsFq4sWqxUzng/6s2coj5LIoxHbyMd7EWQe4qPdrDQV3kwBiaq g95mhChq3bvQtec4ba1ccSajWIELZ5gDzV1XG3zCefIzPH8VXWufV8x5rVcLqn3i 8KlEjVP7wUnkZw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:57 2025 by rpki-client