This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft File: 51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json) Hash identifier: q5aqZxE4VsLrqNx6lLePihS/5pnulKLh5jT4wsReiPk= Subject key identifier: 6A:ED:D2:60:6E:F8:34:38:B5:95:FB:26:D0:BE:B9:3E:D5:6A:BC:99 Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2 Certificate issuer: /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2 Certificate serial: 019AF0881EBDFF6665A57E579E0C783E6EAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft Manifest number: 06FB Signing time: Fri 05 Dec 2025 22:00:43 +0000 Manifest this update: Fri 05 Dec 2025 22:00:43 +0000 Manifest next update: Sat 06 Dec 2025 22:00:43 +0000 Files and hashes: 1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: Eys8kIkIzFv+Ebe/fVfqyXX7XF7YxulJtZKfXun098o=) 2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1e:bd:ff:66:65:a5:7e:57:9e:0c:78:3e:6e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2 Validity Not Before: Dec 5 22:00:43 2025 GMT Not After : Dec 6 22:00:43 2025 GMT Subject: CN=6aedd2606ef83438b595fb26d0beb93ed56abc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:da:9c:55:fc:33:4c:fe:2d:a4:2a:e2:90: 87:52:47:17:77:1e:81:55:3d:1d:da:b4:cd:7f:a7: b7:48:da:51:c2:6d:97:ac:9f:6d:56:89:a5:fc:e5: a4:86:71:6b:3d:07:20:3a:dc:a4:bd:83:a3:b6:f8: 1c:eb:c9:ee:f6:45:09:bd:c4:73:0b:be:a0:f3:aa: 56:61:25:dd:7c:c9:3d:05:f6:ac:51:af:5b:11:ec: 22:ab:d9:46:db:4f:7b:4f:cd:33:28:36:2b:49:14: dc:6d:61:4c:a0:9d:0a:4b:8f:e8:0c:16:44:2d:50: 5a:02:46:aa:86:5e:67:ee:45:9c:e7:d9:8f:a8:04: 97:f4:47:84:cb:86:37:3d:5d:c0:51:24:82:a0:9c: 71:74:c2:5b:e8:b7:62:be:13:1f:a0:d3:57:00:06: 6d:60:a5:fb:ee:26:3d:37:f3:f7:f2:8f:e6:78:8c: 62:a5:87:42:97:4c:9a:ec:7c:f1:47:76:4b:d4:72: 61:f6:46:18:3e:1d:1a:ee:f1:34:6e:01:bf:08:62: c6:bd:e4:5c:f6:ca:ff:fc:0b:5c:6b:e9:71:03:6f: 50:de:24:43:91:50:93:ed:91:be:ff:ae:1e:1d:6d: 43:a2:61:e8:6e:4d:c9:e3:71:fc:85:30:63:1f:9f: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:ED:D2:60:6E:F8:34:38:B5:95:FB:26:D0:BE:B9:3E:D5:6A:BC:99 X509v3 Authority Key Identifier: keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e7:53:13:d4:e9:bb:70:21:bd:f3:c9:c9:27:ec:ca:55:79: 62:7a:47:89:a8:ed:f2:bd:90:d8:6a:be:85:4b:dc:13:92:ea: c9:0e:fc:bc:df:3b:d4:50:8f:0f:a1:b2:b6:5b:38:bd:3c:c7: c8:12:3c:f0:e1:1b:66:5f:02:c2:dd:76:10:2a:e9:f1:f9:84: 65:f6:1a:88:2e:8f:76:9e:11:61:55:63:80:fe:af:11:86:03: 80:69:6b:6a:cb:38:80:1a:4d:16:5b:ef:1e:a7:9d:c0:26:6f: 26:98:e2:6c:1f:3c:6b:90:07:9a:d1:a5:78:e7:2b:4b:26:0e: 72:4a:3b:c1:ae:2e:28:dc:3b:6a:aa:63:61:17:e6:e9:79:c1: 15:c7:e8:c0:c9:69:de:68:b6:85:ad:68:78:35:56:49:70:21: 82:9f:bb:ea:47:62:cc:8f:ce:4a:6c:83:3c:f3:3f:d9:eb:b5: 44:a0:9c:b3:e2:f4:d3:8f:7d:f4:c5:b9:4e:f8:a9:9e:b1:c1: c8:5c:ae:ab:18:df:72:f6:6c:19:6c:be:97:40:4e:02:b7:ad: cc:80:72:bf:36:f1:f7:d7:ff:4d:62:25:c9:e5:3d:4d:ab:26: b3:a6:b9:6b:c3:c1:e8:5b:31:d9:97:b6:bc:42:64:7d:1e:bf: 92:1d:27:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiB69/2ZlpX5Xngx4Pm6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTY0ZDBjYzdkYTA1ZmE1OGNmYmQ4YzJhOTQzNWNiMzM2 MmNkZTIwHhcNMjUxMjA1MjIwMDQzWhcNMjUxMjA2MjIwMDQzWjAzMTEwLwYDVQQD Eyg2YWVkZDI2MDZlZjgzNDM4YjU5NWZiMjZkMGJlYjkzZWQ1NmFiYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GzanFX8M0z+LaQq4pCHUkcXdx6B VT0d2rTNf6e3SNpRwm2XrJ9tVoml/OWkhnFrPQcgOtykvYOjtvgc68nu9kUJvcRz C76g86pWYSXdfMk9BfasUa9bEewiq9lG2097T80zKDYrSRTcbWFMoJ0KS4/oDBZE LVBaAkaqhl5n7kWc59mPqASX9EeEy4Y3PV3AUSSCoJxxdMJb6LdivhMfoNNXAAZt YKX77iY9N/P38o/meIxipYdCl0ya7HzxR3ZL1HJh9kYYPh0a7vE0bgG/CGLGveRc 9sr//Atca+lxA29Q3iRDkVCT7ZG+/64eHW1DomHobk3J43H8hTBjH58vywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrt0mBu+DQ4tZX7JtC+uT7VaryZMB8GA1UdIwQY MBaAFOdWTQzH2gX6WM+9jCqUNcszYs3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFaTkRNZmFCZnBZejcyTUtwUTF5ek5pemVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80MmNmYWUtZTI5ZC00ZDk0LWJhNTIt YzQxZDk5ZjE3ZmRhLzEvNTFaTkRNZmFCZnBZejcyTUtwUTF5ek5pemVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80MmNmYWUtZTI5ZC00ZDk0LWJhNTItYzQxZDk5ZjE3ZmRh LzEvNTFaTkRNZmFCZnBZejcyTUtwUTF5ek5pemVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+dTE9Tp u3AhvfPJySfsylV5YnpHiajt8r2Q2Gq+hUvcE5LqyQ78vN871FCPD6Gytls4vTzH yBI88OEbZl8Cwt12ECrp8fmEZfYaiC6Pdp4RYVVjgP6vEYYDgGlrass4gBpNFlvv HqedwCZvJpjibB88a5AHmtGleOcrSyYOcko7wa4uKNw7aqpjYRfm6XnBFcfowMlp 3mi2ha1oeDVWSXAhgp+76kdizI/OSmyDPPM/2eu1RKCcs+L004999MW5TvipnrHB yFyuqxjfcvZsGWy+l0BOAretzIByvzbx99f/TWIlyeU9Tasms6a5a8PB6Fsx2Ze2 vEJkfR6/kh0nkw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:04 2025 by rpki-client