This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft File: 6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json) Hash identifier: 5hWgH921yL5i0J6SdyQ17HhvOgDW3XLbHvrt0bWultM= Subject key identifier: B4:DF:0A:F0:E3:4E:2E:B0:7C:2E:38:33:B3:56:4C:87:EF:60:FE:33 Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Certificate serial: 019AF164480A2D3B19567E9596C4373D5C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: KXeqAG3eNTlxV/qOxXCh0lCmaimemTRJUMsbH5eHG6c=) 2: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (hash: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=) 3: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (hash: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=) 4: eIUbhEvS312QdpTsSOJbOfKRhjg.roa (hash: TDTdEPNKnFdTs1u7Iy6p2CE/KWnf5yhsocLiaVIOsqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:48:0a:2d:3b:19:56:7e:95:96:c4:37:3d:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=b4df0af0e34e2eb07c2e3833b3564c87ef60fe33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:61:f4:51:31:63:e0:ff:5a:f6:00:02:ae: 4b:2f:b9:f7:29:98:3e:1a:e8:86:0d:e2:21:a0:ad: 3f:ce:b8:87:19:84:e6:02:c1:57:3b:33:e6:d3:d3: bb:81:23:52:2e:d5:f7:52:de:20:53:81:cf:2f:42: 98:5d:05:e0:fe:e6:a6:f5:0f:aa:b9:e4:3e:e9:67: 58:1e:b7:67:0e:5d:db:45:a8:1c:9e:46:ba:f1:6c: b7:da:e4:22:22:83:0e:14:d0:4d:9a:60:ed:df:42: 89:f0:ce:16:63:17:1d:4c:b0:4a:bd:2b:10:b6:b2: 75:34:d1:bb:e9:5a:0b:d8:39:a3:ab:dc:af:49:b6: 5d:57:7c:34:94:71:d5:3f:ed:6d:8c:5a:8a:80:f1: ca:56:fc:a1:44:b0:4e:82:c1:7c:bc:e8:d3:06:93: 83:0d:2d:94:77:03:3f:18:49:cb:86:3a:8a:bd:f8: be:67:d7:d4:79:c6:10:e9:21:56:01:f3:a8:28:9a: 45:da:9f:4f:a7:e3:f7:d4:c5:f3:b0:6f:c6:85:57: f3:aa:3a:5f:77:ac:bb:c1:63:27:f3:7a:3a:26:3f: 0c:6b:45:6a:45:e9:03:9d:76:f2:97:64:83:ae:87: eb:80:e0:4c:8b:b7:37:b9:79:6a:b8:bb:ad:32:77: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DF:0A:F0:E3:4E:2E:B0:7C:2E:38:33:B3:56:4C:87:EF:60:FE:33 X509v3 Authority Key Identifier: keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:10:1b:86:03:b5:dd:19:49:ff:95:19:6e:71:33:b4:26:80: 68:a6:96:97:30:88:e4:88:2a:17:9f:0d:b7:74:8d:d6:f6:6d: 25:70:ae:9c:db:a9:a1:0c:8b:45:5d:95:95:c3:4b:e6:3b:33: b4:00:04:20:a3:0b:de:63:35:5d:a4:7f:96:bd:4c:7c:75:ab: 79:57:2c:c7:8d:c0:bd:3b:9a:63:49:c8:30:61:80:c2:ab:a6: fe:92:ab:74:6e:12:a4:dc:5f:b1:fe:a2:08:f1:e8:fb:2c:10: cd:f3:17:a6:9c:b9:e8:f2:5e:3e:d8:4d:d7:59:53:29:4c:ae: c5:7c:5f:9b:19:4e:74:e7:89:fd:64:56:fb:40:6d:a8:97:58: 09:0e:7b:90:89:6e:c9:0d:ee:42:5b:8a:b4:c8:c2:6d:b6:0c: f4:4b:9e:93:34:94:c5:0c:10:75:a3:5b:47:00:24:d4:ff:a0: 46:46:5b:23:ce:ed:a5:08:7a:21:13:b2:46:2b:9b:5d:3d:02: 1a:26:e7:05:b3:cd:db:49:7d:6c:fd:f5:98:74:d2:9f:6d:48: 27:dd:09:cf:0d:f6:49:84:1b:c8:62:70:cd:e1:33:88:3f:a5: c3:2e:90:ce:b9:60:08:b3:b4:b1:fe:7b:c8:72:5b:6e:fb:f7: 42:8d:00:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEgKLTsZVn6VlsQ3PVxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTgzZDYxZjJlNTdhNmIxNmVhNGIxYTljYTI3YmIyNTBk NzQ4ZWYwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD EyhiNGRmMGFmMGUzNGUyZWIwN2MyZTM4MzNiMzU2NGM4N2VmNjBmZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8dh9FExY+D/WvYAAq5LL7n3KZg+ GuiGDeIhoK0/zriHGYTmAsFXOzPm09O7gSNSLtX3Ut4gU4HPL0KYXQXg/uam9Q+q ueQ+6WdYHrdnDl3bRagcnka68Wy32uQiIoMOFNBNmmDt30KJ8M4WYxcdTLBKvSsQ trJ1NNG76VoL2Dmjq9yvSbZdV3w0lHHVP+1tjFqKgPHKVvyhRLBOgsF8vOjTBpOD DS2UdwM/GEnLhjqKvfi+Z9fUecYQ6SFWAfOoKJpF2p9Pp+P31MXzsG/GhVfzqjpf d6y7wWMn83o6Jj8Ma0VqRekDnXbyl2SDrofrgOBMi7c3uXlquLutMnfwwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTfCvDjTi6wfC44M7NWTIfvYP4zMB8GA1UdIwQY MBaAFOpYPWHy5XprFupLGpyie7JQ10jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUt OTljMWIwY2ZjM2E4LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUtOTljMWIwY2ZjM2E4 LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRAbhgO1 3RlJ/5UZbnEztCaAaKaWlzCI5IgqF58Nt3SN1vZtJXCunNupoQyLRV2VlcNL5jsz tAAEIKML3mM1XaR/lr1MfHWreVcsx43AvTuaY0nIMGGAwqum/pKrdG4SpNxfsf6i CPHo+ywQzfMXppy56PJePthN11lTKUyuxXxfmxlOdOeJ/WRW+0BtqJdYCQ57kIlu yQ3uQluKtMjCbbYM9EuekzSUxQwQdaNbRwAk1P+gRkZbI87tpQh6IROyRiubXT0C GibnBbPN20l9bP31mHTSn21IJ90Jzw32SYQbyGJwzeEziD+lwy6QzrlgCLO0sf57 yHJbbvv3Qo0Akg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:05 2025 by rpki-client