This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft File: 6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json) Hash identifier: ASK+x/+zEvNt6H8oXY7CGW7iX+WBPLb1+vGMsBMgMZY= Subject key identifier: 41:9E:CB:57:01:0D:10:CF:C4:B0:8B:0F:A4:57:4E:41:3D:75:D5:D3 Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C Certificate issuer: /CN=e8428fc2da5b6563749ccb99775775e820b7733c Certificate serial: 019AF19BA6D1FD2FF9ED32DBC2C408644325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft Manifest number: 1192 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: TId0Dit/J2uls2woD8QhN2ptjmOabPWg/sVWVVtjUFM=) 2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a6:d1:fd:2f:f9:ed:32:db:c2:c4:08:64:43:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=419ecb57010d10cfc4b08b0fa4574e413d75d5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:e9:a6:ad:4d:1f:b3:c4:c6:55:09:d8:65: ac:cc:5b:bb:25:6a:ff:63:b9:b2:36:69:98:42:3f: ff:c1:9d:38:60:99:5b:0e:78:f8:83:97:8c:9c:1f: bb:62:49:56:8f:33:93:6b:b6:38:9c:c4:60:c7:7e: fd:0b:b3:21:e8:94:7e:c1:eb:c0:1e:01:65:b1:cf: 60:a3:73:5f:c1:3c:e5:ee:8e:b7:55:72:63:05:9c: 12:ae:23:90:a2:a9:1b:3c:51:56:91:92:bf:cc:20: 0a:5c:f5:87:76:78:19:08:8f:59:46:41:6e:cf:55: 61:a5:ba:8a:58:d1:79:a9:80:b9:7d:c4:ec:16:fa: 0f:04:5d:b1:66:cc:60:a9:6f:0e:27:38:f3:94:78: be:60:5a:d1:22:dd:44:24:ac:86:1b:fe:4c:6e:59: b6:67:92:fd:61:81:04:aa:63:d1:02:c2:38:25:d0: 3f:7e:28:17:3a:b0:f4:92:90:5b:4f:d9:75:58:a2: a6:0c:42:d4:aa:0f:47:3b:2e:24:65:20:dc:81:93: 26:7f:93:d1:96:e0:8a:57:93:a2:7c:e6:b4:40:dd: 00:81:38:50:3a:c4:d1:1f:7a:6c:29:49:61:12:d9: 2f:2f:c8:78:a3:99:01:cd:70:20:90:9e:fa:c2:1d: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:CB:57:01:0D:10:CF:C4:B0:8B:0F:A4:57:4E:41:3D:75:D5:D3 X509v3 Authority Key Identifier: keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:6c:47:20:a9:fd:0b:52:d9:7a:15:a0:42:8e:55:5c:78:19: f3:15:bb:ce:49:49:8c:fc:d5:5d:41:89:12:06:3d:ea:42:6e: 85:87:db:d7:f9:66:73:67:36:51:bd:d3:23:04:0f:8b:c7:a7: 9b:59:be:bd:a4:c1:56:3d:7d:fd:ce:91:55:0b:02:45:bd:a1: 3b:27:31:69:08:85:a9:03:ea:79:92:44:9a:9c:15:c6:3e:a8: 68:4f:2d:c4:f1:ea:12:81:de:41:55:ac:5f:da:4d:b9:88:75: 1e:37:c2:22:8f:17:7b:f7:af:98:a9:bb:fc:df:fb:f3:27:33: 7d:f2:4f:bd:af:ae:6c:07:2a:1b:f7:3b:17:56:e4:8f:d6:d8: b9:0d:b9:ab:75:b8:c4:a5:65:08:36:ec:e2:a5:b6:0e:e6:78: 5d:3b:cf:27:18:ed:5d:9e:36:f3:a6:3f:99:1e:f4:bf:e0:53: 2b:d8:f5:8e:f9:75:99:e8:39:7b:bb:36:12:d4:77:b6:99:c9: a8:06:d5:a6:c3:7c:2d:eb:e8:e8:c1:a4:9a:40:ce:e7:11:25: 0b:e9:12:2a:07:b4:0d:e3:83:99:52:c9:4e:05:47:98:6b:bd: 03:dd:cd:77:41:3a:39:29:12:2d:57:81:c3:37:bd:a1:fd:65: 34:9d:68:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6bR/S/57TLbwsQIZEMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDI4ZmMyZGE1YjY1NjM3NDljY2I5OTc3NTc3NWU4MjBi NzczM2MwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD Eyg0MTllY2I1NzAxMGQxMGNmYzRiMDhiMGZhNDU3NGU0MTNkNzVkNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLzppq1NH7PExlUJ2GWszFu7JWr/ Y7myNmmYQj//wZ04YJlbDnj4g5eMnB+7YklWjzOTa7Y4nMRgx379C7Mh6JR+wevA HgFlsc9go3NfwTzl7o63VXJjBZwSriOQoqkbPFFWkZK/zCAKXPWHdngZCI9ZRkFu z1VhpbqKWNF5qYC5fcTsFvoPBF2xZsxgqW8OJzjzlHi+YFrRIt1EJKyGG/5Mblm2 Z5L9YYEEqmPRAsI4JdA/figXOrD0kpBbT9l1WKKmDELUqg9HOy4kZSDcgZMmf5PR luCKV5OifOa0QN0AgThQOsTRH3psKUlhEtkvL8h4o5kBzXAgkJ76wh2tRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGey1cBDRDPxLCLD6RXTkE9ddXTMB8GA1UdIwQY MBaAFOhCj8LaW2VjdJzLmXdXdeggt3M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMt NWU2Y2Y5NmY3MGNiLzEvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMtNWU2Y2Y5NmY3MGNi LzEvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2xHIKn9 C1LZehWgQo5VXHgZ8xW7zklJjPzVXUGJEgY96kJuhYfb1/lmc2c2Ub3TIwQPi8en m1m+vaTBVj19/c6RVQsCRb2hOycxaQiFqQPqeZJEmpwVxj6oaE8txPHqEoHeQVWs X9pNuYh1HjfCIo8Xe/evmKm7/N/78yczffJPva+ubAcqG/c7F1bkj9bYuQ25q3W4 xKVlCDbs4qW2DuZ4XTvPJxjtXZ4286Y/mR70v+BTK9j1jvl1meg5e7s2EtR3tpnJ qAbVpsN8Levo6MGkmkDO5xElC+kSKge0DeODmVLJTgVHmGu9A93Nd0E6OSkSLVeB wze9of1lNJ1oSg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:13 2025 by rpki-client