This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft File: a49xoY3OxDR8x7TQK8h4TorCewA.mft (raw, json) Hash identifier: fX0ruJiX3h4tuzxS9eYRti3HNrdYaA5/t3LrZm3KYjI= Subject key identifier: EA:56:45:66:78:A9:9E:2E:F3:18:01:62:AF:05:E5:CF:BD:62:EC:14 Authority key identifier: 6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00 Certificate issuer: /CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00 Certificate serial: 019AF0F5D3774DFE8B6720FC4CF7C8205490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft Manifest number: 66 Signing time: Sat 06 Dec 2025 00:00:33 +0000 Manifest this update: Sat 06 Dec 2025 00:00:33 +0000 Manifest next update: Sun 07 Dec 2025 00:00:33 +0000 Files and hashes: 1: Uh4Rva54OMWP9lIMiHUduMBT0F4.roa (hash: zWB3J362I22mC7rMVfMDBzhAD2wL6BzjJJTX54CcK0o=) 2: a49xoY3OxDR8x7TQK8h4TorCewA.crl (hash: +5BYicGPqsbGkerm6al7ud0yfctSaQpCOSzCVYDHOhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d3:77:4d:fe:8b:67:20:fc:4c:f7:c8:20:54:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b8f71a18dcec4347cc7b4d02bc8784e8ac27b00 Validity Not Before: Dec 6 00:00:33 2025 GMT Not After : Dec 7 00:00:33 2025 GMT Subject: CN=ea56456678a99e2ef3180162af05e5cfbd62ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:98:d5:cf:69:2e:97:d6:a0:26:5f:5d:bd: f9:dc:0e:4e:41:1b:3f:89:91:36:fb:88:d4:2e:3f: d7:20:dc:44:46:31:d7:20:c6:15:3f:95:8f:79:f7: 19:fe:6c:0a:bb:a8:9b:5f:06:24:e9:65:bc:14:08: ec:82:4b:31:54:db:d4:18:9c:9e:75:43:d7:3e:ab: 37:0f:af:1e:59:6e:67:ff:06:60:ec:c6:bb:4b:7d: 24:2f:a7:13:9a:1f:8d:54:64:bf:95:fe:70:45:b8: 90:f0:48:3c:2f:06:f4:ce:19:84:a7:e6:dd:0f:03: 8f:93:22:a1:6e:19:50:43:06:55:5a:9e:30:1b:fd: f7:79:f4:22:3b:cb:b2:61:a5:1a:77:04:2f:75:a1: 44:c3:bb:d2:bb:86:9f:8b:a9:2d:f6:81:44:20:8a: 52:2d:aa:4b:96:db:bc:6d:af:d2:0c:b6:c0:4d:c7: fe:f1:bf:9d:30:e1:77:cc:aa:0c:02:22:45:f9:2d: 67:48:5a:7c:bc:30:f8:2f:39:33:59:67:80:5e:90: ec:33:3c:98:8a:05:ea:8c:56:5c:de:12:f8:07:a7: d9:52:11:61:91:dd:53:12:91:fa:e4:1b:a9:50:2e: c6:fe:9a:ee:61:69:b6:64:7c:02:d9:4c:89:52:e0: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:45:66:78:A9:9E:2E:F3:18:01:62:AF:05:E5:CF:BD:62:EC:14 X509v3 Authority Key Identifier: keyid:6B:8F:71:A1:8D:CE:C4:34:7C:C7:B4:D0:2B:C8:78:4E:8A:C2:7B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a49xoY3OxDR8x7TQK8h4TorCewA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8626b-330a-4e84-8492-d97ce5d41bb3/1/a49xoY3OxDR8x7TQK8h4TorCewA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:af:bd:a9:2d:fd:1d:bd:a8:e9:16:48:82:ff:7d:b8:22:45: 81:38:46:92:7b:da:45:6b:4d:32:7d:c9:69:8d:fa:34:e2:3c: 39:f5:9d:50:1a:01:26:7d:e1:fa:b1:5b:2e:a9:a5:5e:fe:1d: ce:ac:ab:71:7c:79:e7:df:b1:ee:b5:43:c2:df:8e:0b:65:f0: 52:fb:e6:05:b6:2e:f7:e7:a1:35:35:93:d2:29:69:70:61:44: 25:4c:f3:51:cf:18:1b:70:01:de:10:46:7d:72:12:bc:b0:dc: cc:96:b5:30:03:db:56:2e:9a:0c:63:ea:64:5b:83:41:88:d1: ac:6a:60:54:a6:34:42:f2:5a:d7:1c:95:58:e7:68:35:73:d3: 35:05:0b:eb:c5:49:ff:41:4d:5a:09:9d:70:50:34:60:9d:93: 58:ce:65:61:82:a5:3a:7f:b9:ac:9f:15:b9:63:f1:7f:9e:09: 74:63:4a:07:bd:5c:5b:c5:8a:59:fc:bf:1c:50:25:7e:16:c0: d4:7a:e2:fc:04:65:e1:7d:61:bb:cd:fc:ab:00:de:b8:72:18: 02:80:c5:5e:01:04:1a:b4:b9:0a:ec:2c:1f:71:f8:96:d7:46: 21:ce:82:0f:1a:b4:45:8b:64:4b:fc:6a:79:fc:15:06:30:db: fb:2d:f8:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dN3Tf6LZyD8TPfIIFSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOGY3MWExOGRjZWM0MzQ3Y2M3YjRkMDJiYzg3ODRlOGFj MjdiMDAwHhcNMjUxMjA2MDAwMDMzWhcNMjUxMjA3MDAwMDMzWjAzMTEwLwYDVQQD EyhlYTU2NDU2Njc4YTk5ZTJlZjMxODAxNjJhZjA1ZTVjZmJkNjJlYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGY1c9pLpfWoCZfXb353A5OQRs/ iZE2+4jULj/XINxERjHXIMYVP5WPefcZ/mwKu6ibXwYk6WW8FAjsgksxVNvUGJye dUPXPqs3D68eWW5n/wZg7Ma7S30kL6cTmh+NVGS/lf5wRbiQ8Eg8Lwb0zhmEp+bd DwOPkyKhbhlQQwZVWp4wG/33efQiO8uyYaUadwQvdaFEw7vSu4afi6kt9oFEIIpS LapLltu8ba/SDLbATcf+8b+dMOF3zKoMAiJF+S1nSFp8vDD4LzkzWWeAXpDsMzyY igXqjFZc3hL4B6fZUhFhkd1TEpH65BupUC7G/pruYWm2ZHwC2UyJUuDA7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpWRWZ4qZ4u8xgBYq8F5c+9YuwUMB8GA1UdIwQY MBaAFGuPcaGNzsQ0fMe00CvIeE6KwnsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hODYyNmItMzMwYS00ZTg0LTg0OTIt ZDk3Y2U1ZDQxYmIzLzEvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hODYyNmItMzMwYS00ZTg0LTg0OTItZDk3Y2U1ZDQxYmIz LzEvYTQ5eG9ZM094RFI4eDdUUUs4aDRUb3JDZXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea+9qS39 Hb2o6RZIgv99uCJFgThGknvaRWtNMn3JaY36NOI8OfWdUBoBJn3h+rFbLqmlXv4d zqyrcXx559+x7rVDwt+OC2XwUvvmBbYu9+ehNTWT0ilpcGFEJUzzUc8YG3AB3hBG fXISvLDczJa1MAPbVi6aDGPqZFuDQYjRrGpgVKY0QvJa1xyVWOdoNXPTNQUL68VJ /0FNWgmdcFA0YJ2TWM5lYYKlOn+5rJ8VuWPxf54JdGNKB71cW8WKWfy/HFAlfhbA 1Hri/ARl4X1hu838qwDeuHIYAoDFXgEEGrS5CuwsH3H4ltdGIc6CDxq0RYtkS/xq efwVBjDb+y34Jw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:34 2025 by rpki-client