This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft File: J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json) Hash identifier: 7XnCPowIbMDE6DO9RIzhjddr44UMotOmM9J/GdQ37WE= Subject key identifier: CC:90:D1:2D:50:6C:F2:42:22:78:C3:C9:07:9C:8D:45:E9:B1:AE:23 Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B Certificate issuer: /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b Certificate serial: 019AF31B9231FBDE645BAAFCB590DBC0B647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft Manifest number: 0574 Signing time: Sat 06 Dec 2025 10:01:01 +0000 Manifest this update: Sat 06 Dec 2025 10:01:01 +0000 Manifest next update: Sun 07 Dec 2025 10:01:01 +0000 Files and hashes: 1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: +14YcbIL6KUyy13BvYx3bQnPDLEb5yAxqpMPmU0bkqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:92:31:fb:de:64:5b:aa:fc:b5:90:db:c0:b6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b Validity Not Before: Dec 6 10:01:01 2025 GMT Not After : Dec 7 10:01:01 2025 GMT Subject: CN=cc90d12d506cf2422278c3c9079c8d45e9b1ae23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:83:ee:44:e3:22:ea:48:c8:9f:83:2e:a3: 3a:03:07:64:cb:90:80:d9:34:08:78:04:c4:25:ef: 53:ab:20:db:e7:8a:3e:73:7e:4c:8b:ac:7c:5e:c9: e9:7e:07:88:ac:1b:9a:12:ea:c8:75:44:ea:c8:13: 3b:b0:13:e5:29:15:e1:48:69:e9:c2:42:40:ee:47: ed:a3:f8:ce:49:0d:f7:da:39:7d:f7:31:08:bb:68: d7:50:f4:1f:7e:82:ff:37:43:dc:c7:58:61:a1:a4: 6d:26:1f:84:18:ec:12:88:fd:86:9d:61:ad:99:6f: 3b:dd:3c:71:c1:5e:01:6c:a2:2c:05:2d:03:5c:69: 93:96:85:7e:ec:18:0f:7f:64:7f:8c:ec:4e:44:9d: 09:e9:fd:84:6d:bf:58:75:42:81:24:27:c3:e2:c3: 46:7c:e5:23:fd:69:8a:85:69:a6:4a:e4:bc:93:ac: dc:e3:38:4b:72:80:c6:76:42:68:68:32:6c:c0:c5: 97:58:e2:28:46:a6:3a:66:b9:06:f1:62:12:eb:35: b3:65:8a:66:17:d8:1f:ec:d3:3a:53:06:02:77:32: cb:63:bb:30:1f:57:8f:66:56:64:63:7d:52:8f:4e: ab:89:ab:3f:1d:3d:35:65:5e:d5:bb:e8:bc:18:07: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:90:D1:2D:50:6C:F2:42:22:78:C3:C9:07:9C:8D:45:E9:B1:AE:23 X509v3 Authority Key Identifier: keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:81:f8:83:a3:b9:f1:d7:fd:65:3c:86:43:5a:87:5e:44:4c: 7d:b0:bc:d7:01:d3:14:46:bc:b9:89:30:6e:88:fc:f1:0b:6d: 14:2e:53:a8:0d:d7:dd:28:12:71:8c:b1:1a:01:56:8b:9e:7e: 94:fa:7d:66:91:4d:7f:8c:75:ff:ec:fb:d0:b2:42:1c:df:1c: e7:82:10:9a:24:58:f3:4c:70:9b:bb:4e:2b:65:a1:d4:0f:01: 09:c3:6a:d3:95:68:d1:99:35:d6:bd:5f:e1:44:96:f2:53:cb: 20:06:85:9f:9c:3d:b6:86:ad:0f:10:24:2c:d1:dd:74:e7:be: d2:31:11:ab:c4:b5:08:f4:80:0d:55:fb:4e:ae:59:7c:a5:4f: 9e:27:0c:4f:22:80:3a:62:b4:2c:a9:c2:49:15:f7:32:f8:25: 02:40:8c:c5:76:e7:25:33:b5:27:4b:24:bc:ae:53:73:88:35: 27:4a:f8:c3:c3:a8:7b:7e:2a:47:26:e5:ac:70:91:2e:91:ca: 07:4c:09:45:e6:a3:50:ae:ec:05:87:63:62:57:8a:77:60:59: 3d:7c:c0:7d:c9:c4:19:e9:a4:ba:f3:55:b9:48:42:ca:ea:1c: ea:39:c7:23:8e:d0:96:d5:82:60:2d:63:21:14:aa:bb:a1:b5: ae:e6:b2:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5Ix+95kW6r8tZDbwLZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YWY4MDg4NGJkY2VmMmY5ZWQ5YmE5NzgxMTYwYTA2N2M4 YzRmMGIwHhcNMjUxMjA2MTAwMTAxWhcNMjUxMjA3MTAwMTAxWjAzMTEwLwYDVQQD EyhjYzkwZDEyZDUwNmNmMjQyMjI3OGMzYzkwNzljOGQ0NWU5YjFhZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWmD7kTjIupIyJ+DLqM6Awdky5CA 2TQIeATEJe9TqyDb54o+c35Mi6x8XsnpfgeIrBuaEurIdUTqyBM7sBPlKRXhSGnp wkJA7kfto/jOSQ332jl99zEIu2jXUPQffoL/N0Pcx1hhoaRtJh+EGOwSiP2GnWGt mW873TxxwV4BbKIsBS0DXGmTloV+7BgPf2R/jOxORJ0J6f2Ebb9YdUKBJCfD4sNG fOUj/WmKhWmmSuS8k6zc4zhLcoDGdkJoaDJswMWXWOIoRqY6ZrkG8WIS6zWzZYpm F9gf7NM6UwYCdzLLY7swH1ePZlZkY31Sj06rias/HT01ZV7Vu+i8GAedpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyQ0S1QbPJCInjDyQecjUXpsa4jMB8GA1UdIwQY MBaAFCevgIhL3O8vntm6l4EWCgZ8jE8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kODczZDAtYmRlOC00ZmFlLTlmNmQt NWMwNDJkYmQwNjlmLzEvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kODczZDAtYmRlOC00ZmFlLTlmNmQtNWMwNDJkYmQwNjlm LzEvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIH4g6O5 8df9ZTyGQ1qHXkRMfbC81wHTFEa8uYkwboj88QttFC5TqA3X3SgScYyxGgFWi55+ lPp9ZpFNf4x1/+z70LJCHN8c54IQmiRY80xwm7tOK2Wh1A8BCcNq05Vo0Zk11r1f 4USW8lPLIAaFn5w9toatDxAkLNHddOe+0jERq8S1CPSADVX7Tq5ZfKVPnicMTyKA OmK0LKnCSRX3MvglAkCMxXbnJTO1J0skvK5Tc4g1J0r4w8Ooe34qRyblrHCRLpHK B0wJReajUK7sBYdjYleKd2BZPXzAfcnEGemkuvNVuUhCyuoc6jnHI47QltWCYC1j IRSqu6G1ruayCg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:36 2025 by rpki-client