This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json) Hash identifier: ALEQQBp7mj2cSCTIEpCcYisF21LelHRF5T4aADlixrU= Subject key identifier: 3C:18:1F:D9:F9:95:3C:05:25:78:14:31:CE:A5:8A:07:FC:54:4B:68 Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Certificate serial: 019AF1D1A6E7FB960AE2B9FC60ACD663416F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: zyWYShJNadmWYJjHwM+yuce317a3cANI4O4X7pDu85I=) 2: Om5FJ2saBdYhhGOS3f3FISumZqg.roa (hash: Fu3JRt/JCmRX1P55XNbPmEdky96U0142N0aVN3A+m0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a6:e7:fb:96:0a:e2:b9:fc:60:ac:d6:63:41:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=3c181fd9f9953c0525781431cea58a07fc544b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:ec:dc:72:e0:80:f0:76:6d:c8:f0:79:1f: 2e:2a:15:2d:b7:0e:43:89:39:d2:87:a3:06:01:b2: b5:da:29:3a:7d:af:43:b0:52:60:7d:d7:2a:ff:f4: f3:f5:69:3b:23:67:31:32:d5:cf:c0:42:bf:fb:63: c1:82:0b:32:48:34:e1:b9:aa:9d:97:7e:5f:dd:89: 38:78:b2:9c:0d:a7:3b:5e:36:f5:eb:8b:75:24:64: 57:be:86:3b:14:5e:ed:23:8e:da:bc:3c:20:d0:10: d2:65:a1:72:09:1e:7d:a5:29:a4:dd:ca:fa:81:09: 3f:41:d3:40:00:9c:e7:7b:63:4a:99:f4:d3:d6:59: df:99:3c:51:50:62:b3:60:da:7b:de:aa:c3:9f:88: 30:69:05:0b:7a:a8:31:af:a8:2f:31:1e:fd:40:4c: 45:8b:07:97:03:bd:5a:8d:30:f0:7e:74:4e:37:5d: fc:1b:2e:f2:2d:ce:40:75:df:17:76:a4:43:03:2d: f3:2b:97:04:c9:bc:e7:78:bf:b7:b6:00:10:21:50: c5:95:47:d9:bc:28:b2:15:cf:1b:c2:af:fe:17:76: b0:4d:93:36:e5:44:1a:62:1e:f5:88:69:dc:0a:47: e9:25:a5:81:a1:cc:b1:4d:9e:38:1f:b3:97:04:49: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:18:1F:D9:F9:95:3C:05:25:78:14:31:CE:A5:8A:07:FC:54:4B:68 X509v3 Authority Key Identifier: keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b3:83:17:71:90:e5:3b:03:55:0a:43:e0:24:51:52:94:92: 3b:c1:dc:c7:f8:c9:4f:ae:87:fc:5f:63:03:01:53:f8:78:69: 12:84:a9:16:90:0d:eb:36:31:88:4c:c8:19:e8:73:4e:a5:db: fe:aa:62:4f:2a:6c:54:3c:1c:a2:69:8e:09:3c:9b:49:be:a7: 8b:33:f1:4e:96:18:5a:a5:58:fd:ec:85:ac:34:d2:48:86:6b: c3:ae:dc:dc:c6:a0:0d:b9:9a:0e:43:1a:11:ff:41:a2:93:1d: 78:f4:17:a1:51:1c:a4:f8:82:f3:38:20:cd:45:3d:4c:0f:80: fe:c6:24:e4:da:e7:85:34:c8:04:e1:b3:02:a4:19:1a:ba:44: 2e:28:95:dc:6e:17:dc:61:53:18:f4:cc:72:fc:4b:4c:b2:e4: 52:f2:fe:38:4a:b1:58:05:0c:1d:d1:ca:ed:58:df:32:d4:b7: ce:7b:89:0f:86:1a:3d:2b:88:16:a4:3a:f8:05:dd:b3:43:42: 82:15:08:15:5c:ca:7a:81:e2:0e:91:00:3f:c7:56:fc:19:1b: 68:3f:8f:16:39:fa:c1:0e:ef:82:0b:bc:c6:ab:cd:7f:eb:30: 50:c9:f7:01:d2:d8:8d:09:5b:a0:f3:50:26:0e:76:34:92:a0: 97:2c:63:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0abn+5YK4rn8YKzWY0FvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh NGE5OGMwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EygzYzE4MWZkOWY5OTUzYzA1MjU3ODE0MzFjZWE1OGEwN2ZjNTQ0YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Ps3HLggPB2bcjweR8uKhUttw5D iTnSh6MGAbK12ik6fa9DsFJgfdcq//Tz9Wk7I2cxMtXPwEK/+2PBggsySDThuaqd l35f3Yk4eLKcDac7Xjb164t1JGRXvoY7FF7tI47avDwg0BDSZaFyCR59pSmk3cr6 gQk/QdNAAJzne2NKmfTT1lnfmTxRUGKzYNp73qrDn4gwaQULeqgxr6gvMR79QExF iweXA71ajTDwfnRON138Gy7yLc5Add8XdqRDAy3zK5cEybzneL+3tgAQIVDFlUfZ vCiyFc8bwq/+F3awTZM25UQaYh71iGncCkfpJaWBocyxTZ44H7OXBEnA5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwYH9n5lTwFJXgUMc6ligf8VEtoMB8GA1UdIwQY MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt OTBlMjFkZjAxZTkxLzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLODF3GQ 5TsDVQpD4CRRUpSSO8Hcx/jJT66H/F9jAwFT+HhpEoSpFpAN6zYxiEzIGehzTqXb /qpiTypsVDwcommOCTybSb6nizPxTpYYWqVY/eyFrDTSSIZrw67c3MagDbmaDkMa Ef9BopMdePQXoVEcpPiC8zggzUU9TA+A/sYk5NrnhTTIBOGzAqQZGrpELiiV3G4X 3GFTGPTMcvxLTLLkUvL+OEqxWAUMHdHK7VjfMtS3znuJD4YaPSuIFqQ6+AXds0NC ghUIFVzKeoHiDpEAP8dW/BkbaD+PFjn6wQ7vggu8xqvNf+swUMn3AdLYjQlboPNQ Jg52NJKglyxjew== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:57 2025 by rpki-client