This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json) Hash identifier: UkinI52tECPCuECVizZApaj3Kcyza2Hba65J5RObtGo= Subject key identifier: A9:D1:BC:B0:0A:84:EC:6F:5F:B0:F5:D0:BB:3D:F1:63:A8:7F:58:27 Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40 Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40 Certificate serial: 019AF19BB0C1FE738A6A7711F1713FBA0023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:43 +0000 Manifest this update: Sat 06 Dec 2025 03:01:43 +0000 Manifest next update: Sun 07 Dec 2025 03:01:43 +0000 Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: nVQlhgqvD66NsnqRSFiYflQt65NtHODhPT84dfYFj+U=) 2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b0:c1:fe:73:8a:6a:77:11:f1:71:3f:ba:00:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40 Validity Not Before: Dec 6 03:01:43 2025 GMT Not After : Dec 7 03:01:43 2025 GMT Subject: CN=a9d1bcb00a84ec6f5fb0f5d0bb3df163a87f5827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:f9:5c:2a:cf:77:c3:d0:6d:32:3a:d7:9e: 51:ee:e3:8a:c5:04:36:b9:1d:a1:95:81:e8:72:c8: a7:a0:ab:8b:38:5f:84:44:aa:40:01:2c:59:33:a5: 21:32:ab:5e:cd:9c:09:a8:78:93:db:10:4f:ec:9e: 0b:c8:76:c1:00:83:10:76:51:34:a0:aa:51:99:fc: 7f:d8:79:71:de:7f:3e:f7:6a:57:39:86:bc:c7:27: a2:01:6c:88:43:5b:f9:0a:38:e1:f7:9e:c3:5b:29: 28:f6:bb:03:f3:f6:ce:f5:c0:d8:6b:f7:dc:0b:c2: cf:a0:81:f3:3d:0e:a2:dc:c6:f2:b0:cd:8f:bb:27: 96:78:50:9b:91:43:98:ba:1e:19:90:2a:16:d4:02: 94:02:13:f2:99:4e:69:72:2f:9b:cc:8f:7e:6b:2f: b1:f8:49:24:7c:f4:ef:45:60:39:5c:ab:84:af:37: 6f:48:23:75:f6:50:03:70:2f:c5:d4:93:c6:8c:66: e0:d8:66:b9:83:e9:ca:01:fc:0b:70:99:39:c3:b2: dc:36:f1:36:c9:9d:06:be:8d:a9:70:ee:d4:f8:ea: 63:cc:f3:ba:bd:9d:c2:f5:c1:a4:51:dd:38:fc:e0: 4f:c1:f6:f9:7c:d8:37:f8:99:e2:7a:d4:f7:21:39: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D1:BC:B0:0A:84:EC:6F:5F:B0:F5:D0:BB:3D:F1:63:A8:7F:58:27 X509v3 Authority Key Identifier: keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2a:17:f9:86:6b:bf:63:1e:46:4c:53:ce:71:3f:d2:3f:d0: 44:b7:b1:91:33:01:f6:67:68:14:de:67:23:a8:78:92:86:2d: e7:db:70:01:8c:69:ea:29:53:8b:8d:66:59:3f:cc:96:f8:57: ac:ee:58:32:ac:e4:2f:b5:20:68:2b:72:1b:11:e8:98:69:15: 0d:cf:69:30:80:1a:b8:d2:de:1f:98:f3:ad:0b:43:63:31:3f: b6:34:77:fc:2a:07:25:ff:9a:81:4d:9f:ad:cd:eb:5d:28:35: 05:f5:12:90:0d:5e:3b:c7:89:9e:ae:9a:18:30:9d:f1:db:9f: c6:5b:a3:d4:8d:82:30:27:3a:90:e0:58:c6:9c:73:6e:13:b9: 4a:f8:84:6c:f9:a6:bb:48:7a:cf:c9:8f:f7:d2:71:84:82:8b: 23:63:ee:05:f7:19:19:30:d2:a4:f6:0c:88:db:a1:63:c3:2a: 0a:d2:71:95:60:3d:56:7f:f7:9e:b0:7f:dd:e4:19:e1:4c:29: cc:fa:6e:86:8e:5f:f1:ec:13:1b:d2:fd:b7:a3:9c:4e:f0:b5: e0:cb:7b:fc:e2:c0:69:b4:1b:7a:50:e7:a0:f9:f9:36:9c:06: 7b:17:f7:83:a8:68:42:a9:d0:34:ce:1e:b0:9d:90:88:fe:aa: 62:69:23:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7DB/nOKancR8XE/ugAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5 MWVhNDAwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD EyhhOWQxYmNiMDBhODRlYzZmNWZiMGY1ZDBiYjNkZjE2M2E4N2Y1ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqED5XCrPd8PQbTI6155R7uOKxQQ2 uR2hlYHocsinoKuLOF+ERKpAASxZM6UhMqtezZwJqHiT2xBP7J4LyHbBAIMQdlE0 oKpRmfx/2Hlx3n8+92pXOYa8xyeiAWyIQ1v5Cjjh957DWyko9rsD8/bO9cDYa/fc C8LPoIHzPQ6i3MbysM2PuyeWeFCbkUOYuh4ZkCoW1AKUAhPymU5pci+bzI9+ay+x +EkkfPTvRWA5XKuErzdvSCN19lADcC/F1JPGjGbg2Ga5g+nKAfwLcJk5w7LcNvE2 yZ0Gvo2pcO7U+OpjzPO6vZ3C9cGkUd04/OBPwfb5fNg3+JnietT3ITkFeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnRvLAKhOxvX7D10Ls98WOof1gnMB8GA1UdIwQY MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMioX+YZr v2MeRkxTznE/0j/QRLexkTMB9mdoFN5nI6h4koYt59twAYxp6ilTi41mWT/MlvhX rO5YMqzkL7UgaCtyGxHomGkVDc9pMIAauNLeH5jzrQtDYzE/tjR3/CoHJf+agU2f rc3rXSg1BfUSkA1eO8eJnq6aGDCd8dufxluj1I2CMCc6kOBYxpxzbhO5SviEbPmm u0h6z8mP99JxhIKLI2PuBfcZGTDSpPYMiNuhY8MqCtJxlWA9Vn/3nrB/3eQZ4Uwp zPpuho5f8ewTG9L9t6OcTvC14Mt7/OLAabQbelDnoPn5NpwGexf3g6hoQqnQNM4e sJ2QiP6qYmkjHA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:20 2025 by rpki-client