This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft File: 6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json) Hash identifier: wB6jsd48Fhk91RMJRhKynAX8umjiPXagqJQVdCppfw0= Subject key identifier: 66:23:40:55:04:B6:36:BC:29:D3:08:1A:7F:E3:0D:3B:9A:AF:AE:58 Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9 Certificate issuer: /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9 Certificate serial: 019AF19B3537AFE1CB1AD18032691B13852A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft Manifest number: 0B54 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: F4b9wVPSvvuCw1lWSaGw3pggVrcMZ71V7jIZfUazBAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:35:37:af:e1:cb:1a:d1:80:32:69:1b:13:85:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=6623405504b636bc29d3081a7fe30d3b9aafae58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1f:bd:7f:45:42:0a:01:8f:8f:15:ff:01:78: 0f:49:54:75:21:8c:e7:90:ae:e8:25:b0:cb:d5:f0: 31:6f:3e:54:de:31:ec:45:ad:8c:3e:05:d2:3f:e1: 45:6c:87:8f:92:2d:48:e4:0f:b3:f6:c2:8d:4c:be: ff:51:1f:d7:97:03:f8:fa:c0:1b:59:ed:2e:1d:61: 05:88:d0:7f:0a:5d:83:ec:62:70:22:af:1c:2d:01: 07:a9:c2:b7:a6:24:90:ff:e2:a4:d4:24:e1:fd:ce: f5:79:e4:49:5b:72:94:74:81:c9:5b:bc:70:f5:6c: 95:c9:6b:fc:27:ab:a5:07:46:8a:43:b4:55:83:d2: 09:a8:95:8f:67:c9:62:28:c2:68:22:7f:d8:9d:a4: ad:d3:f7:a1:69:8a:a7:1b:96:fe:cb:64:f8:d1:ee: 07:19:a8:be:93:cd:90:21:ea:68:fd:7c:f6:e4:32: 32:85:7c:80:0f:1b:7f:f4:4d:6b:3e:8d:28:06:96: a7:e0:8a:8f:fa:17:95:4b:61:3b:c4:34:f0:2b:b2: 73:16:2c:0b:c3:08:0f:db:04:35:20:7a:f0:c1:d8: 17:5b:7e:07:d0:ce:a2:4b:b6:aa:b4:a0:d5:12:3a: 72:c1:c6:ba:2d:7a:7b:d4:9f:89:20:87:e0:af:4c: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:40:55:04:B6:36:BC:29:D3:08:1A:7F:E3:0D:3B:9A:AF:AE:58 X509v3 Authority Key Identifier: keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:18:96:1b:c3:a5:e9:3e:a3:31:05:05:1a:0d:41:c9:c7:51: 1a:d3:37:96:24:63:31:09:bd:a6:51:e8:43:53:94:e8:e5:af: 7e:48:45:e0:d6:8c:63:8e:bc:81:92:c6:7e:f5:d1:66:ec:30: 14:62:bb:68:2b:72:1a:c3:3d:0d:d2:09:25:86:ec:d8:9e:6c: 91:95:2d:ec:e3:f8:72:71:f2:80:76:ce:b4:48:80:36:db:96: db:31:39:8e:96:5e:dc:54:39:e6:b6:8f:41:87:95:e3:01:bf: fe:d3:d8:60:c2:d3:4c:d7:17:88:26:df:52:f3:72:ce:a6:d3: 98:0c:c2:5a:14:f1:99:15:30:68:7a:4e:91:aa:af:7e:23:ab: 09:4d:cc:90:02:8d:cb:6b:8b:ab:8d:ae:d3:b9:e1:ad:ff:c9: 43:94:37:d5:31:28:dc:38:11:8b:d2:68:4a:e4:b6:53:64:df: 9a:87:f9:2e:37:6e:be:97:b5:85:13:cb:e0:27:fb:05:71:c4: 24:ed:83:ea:74:70:98:53:5a:bd:bb:3d:a5:b0:4d:51:f5:cb: 47:b0:2e:70:67:ca:81:bc:5c:47:22:36:be:70:2d:d8:98:73: 3b:89:60:37:86:8a:ac:36:75:2a:2c:98:39:40:21:6e:8c:b0: 24:70:ac:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzU3r+HLGtGAMmkbE4UqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOWEzNjJhM2ExZWE4ZDY5YTJkMjYzZmZmYzE4MGRhYjVh MzgxYzkwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD Eyg2NjIzNDA1NTA0YjYzNmJjMjlkMzA4MWE3ZmUzMGQzYjlhYWZhZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B+9f0VCCgGPjxX/AXgPSVR1IYzn kK7oJbDL1fAxbz5U3jHsRa2MPgXSP+FFbIePki1I5A+z9sKNTL7/UR/XlwP4+sAb We0uHWEFiNB/Cl2D7GJwIq8cLQEHqcK3piSQ/+Kk1CTh/c71eeRJW3KUdIHJW7xw 9WyVyWv8J6ulB0aKQ7RVg9IJqJWPZ8liKMJoIn/YnaSt0/ehaYqnG5b+y2T40e4H Gai+k82QIepo/Xz25DIyhXyADxt/9E1rPo0oBpan4IqP+heVS2E7xDTwK7JzFiwL wwgP2wQ1IHrwwdgXW34H0M6iS7aqtKDVEjpywca6LXp71J+JIIfgr0yiTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYjQFUEtja8KdMIGn/jDTuar65YMB8GA1UdIwQY MBaAFOqaNio6HqjWmi0mP//BgNq1o4HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQt ZDRkOGY4OTZiZmYzLzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQtZDRkOGY4OTZiZmYz LzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBiWG8Ol 6T6jMQUFGg1BycdRGtM3liRjMQm9plHoQ1OU6OWvfkhF4NaMY468gZLGfvXRZuww FGK7aCtyGsM9DdIJJYbs2J5skZUt7OP4cnHygHbOtEiANtuW2zE5jpZe3FQ55raP QYeV4wG//tPYYMLTTNcXiCbfUvNyzqbTmAzCWhTxmRUwaHpOkaqvfiOrCU3MkAKN y2uLq42u07nhrf/JQ5Q31TEo3DgRi9JoSuS2U2Tfmof5Ljduvpe1hRPL4Cf7BXHE JO2D6nRwmFNavbs9pbBNUfXLR7AucGfKgbxcRyI2vnAt2JhzO4lgN4aKrDZ1KiyY OUAhboywJHCs1A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:30 2025 by rpki-client