This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft File: 6rBQEXItJcEknmWLLK7MEYwp6CI.mft (raw, json) Hash identifier: QFvk7mCNym+/kMuShSMn5rktca/fUHVWn5WbrCQ0hdM= Subject key identifier: BF:80:ED:21:98:BA:62:79:00:A4:CE:51:0F:A4:7F:CF:BD:00:FF:24 Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 Certificate issuer: /CN=eab05011722d25c1249e658b2caecc118c29e822 Certificate serial: 019B2F6721D04D9B0683FE6346DD523F5345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft Manifest number: 04FF Signing time: Thu 18 Dec 2025 03:00:46 +0000 Manifest this update: Thu 18 Dec 2025 03:00:46 +0000 Manifest next update: Fri 19 Dec 2025 03:00:46 +0000 Files and hashes: 1: 6rBQEXItJcEknmWLLK7MEYwp6CI.crl (hash: zI6y0oRowBNwoxIpzzxCLag6Syr67zx1bqIzZRbu6Vw=) 2: CJPWpn8RP7gsAwpJK6rfiafLL0g.roa (hash: MSILC9AgMAOaApiwEtXOHau49IMY7PQIrPiC8xgTPYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:21:d0:4d:9b:06:83:fe:63:46:dd:52:3f:53:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822 Validity Not Before: Dec 18 03:00:46 2025 GMT Not After : Dec 19 03:00:46 2025 GMT Subject: CN=bf80ed2198ba627900a4ce510fa47fcfbd00ff24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:f3:b7:ca:c6:d6:7e:b9:1a:5a:09:15:8c: 1e:bf:ca:3a:59:1c:30:c1:ed:76:4f:ed:88:61:09: bc:e6:7b:e7:88:29:3c:b5:bb:79:ad:61:24:db:5a: 1f:77:9e:55:48:4f:32:1f:9c:a4:b0:d7:8e:5a:c0: 2a:49:41:e2:a4:e5:92:a4:ed:70:0a:fb:47:ae:dc: 39:60:df:63:25:b7:25:ce:97:c6:9e:e8:bb:f7:2c: 94:e6:a3:d7:5d:86:50:75:96:f5:af:b5:1b:1a:5e: e8:fd:3b:b0:23:bf:4b:28:72:0e:52:16:dc:b0:54: 9c:db:81:85:25:dc:31:ae:da:74:b4:cc:a3:d9:04: f4:70:55:92:14:2c:80:e2:e3:27:c4:ff:56:bb:31: 12:b6:aa:f1:b1:df:c1:87:8b:f5:f0:f4:86:a8:49: ed:37:74:a4:54:1b:f2:c9:bb:d4:aa:92:8c:cc:5e: 57:75:d1:7c:a1:7c:f9:2f:13:ab:6b:0e:37:c8:c5: 49:d8:b3:35:eb:b2:18:12:5f:18:d5:4d:23:e3:fa: 58:e7:ec:df:46:ae:8e:46:14:55:46:06:8c:a5:9b: ba:c0:43:4d:79:c8:d3:c1:de:7d:8f:6b:be:41:c1: b0:24:19:7a:53:2f:10:23:45:aa:92:a5:ec:6f:a2: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:80:ED:21:98:BA:62:79:00:A4:CE:51:0F:A4:7F:CF:BD:00:FF:24 X509v3 Authority Key Identifier: keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:14:c9:5d:a0:6f:a6:89:a8:f4:f2:32:77:61:d1:48:e2: e4:6c:6f:47:54:fa:75:73:15:95:31:84:22:b5:18:3f:83:8d: ef:0d:e6:ce:a7:d4:8e:3c:58:70:7e:b9:e4:9e:e0:47:ad:29: 56:47:67:7e:98:62:2c:6f:e9:a9:be:ed:66:0f:11:e9:7d:cd: 42:4b:8c:61:ff:7c:65:69:44:44:b6:82:1b:eb:1d:ef:7b:ff: 00:d0:da:d2:ff:e6:7e:41:0d:7b:7d:8c:f2:3a:8f:7c:4b:09: 85:a2:d0:94:a8:50:06:e7:80:6b:55:e4:58:7e:a3:81:cb:48: e8:3e:b5:4c:72:38:74:74:de:6a:80:95:1c:1f:7d:22:a6:06: 05:6d:2a:fc:09:a1:39:f0:6b:c9:fb:6c:39:78:f4:35:47:27: d4:25:b6:e5:9d:14:06:52:6a:9d:05:15:63:31:fc:9e:e6:49: d4:9f:80:f2:ff:e2:84:7f:76:83:b2:db:dd:c2:84:a1:80:38: e8:1e:83:55:93:a5:fd:3f:53:63:1c:c8:d0:60:90:5e:a7:24: e9:23:7e:d2:ad:23:8c:52:d5:4d:d1:f6:80:8f:40:57:4e:5b: c5:4a:76:7b:9d:e7:9c:db:37:a4:67:13:40:79:f0:74:40:13: 46:24:34:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyHQTZsGg/5jRt1SP1NFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjA1MDExNzIyZDI1YzEyNDllNjU4YjJjYWVjYzExOGMy OWU4MjIwHhcNMjUxMjE4MDMwMDQ2WhcNMjUxMjE5MDMwMDQ2WjAzMTEwLwYDVQQD EyhiZjgwZWQyMTk4YmE2Mjc5MDBhNGNlNTEwZmE0N2ZjZmJkMDBmZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDrzt8rG1n65GloJFYwev8o6WRww we12T+2IYQm85nvniCk8tbt5rWEk21ofd55VSE8yH5yksNeOWsAqSUHipOWSpO1w CvtHrtw5YN9jJbclzpfGnui79yyU5qPXXYZQdZb1r7UbGl7o/TuwI79LKHIOUhbc sFSc24GFJdwxrtp0tMyj2QT0cFWSFCyA4uMnxP9WuzEStqrxsd/Bh4v18PSGqEnt N3SkVBvyybvUqpKMzF5XddF8oXz5LxOraw43yMVJ2LM167IYEl8Y1U0j4/pY5+zf Rq6ORhRVRgaMpZu6wENNecjTwd59j2u+QcGwJBl6Uy8QI0WqkqXsb6KtWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+A7SGYumJ5AKTOUQ+kf8+9AP8kMB8GA1UdIwQY MBaAFOqwUBFyLSXBJJ5liyyuzBGMKegiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDct N2RiOGY4MTZkMDc3LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDctN2RiOGY4MTZkMDc3 LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfoUyV2g b6aJqPTyMndh0Uji5GxvR1T6dXMVlTGEIrUYP4ON7w3mzqfUjjxYcH655J7gR60p VkdnfphiLG/pqb7tZg8R6X3NQkuMYf98ZWlERLaCG+sd73v/ANDa0v/mfkENe32M 8jqPfEsJhaLQlKhQBueAa1XkWH6jgctI6D61THI4dHTeaoCVHB99IqYGBW0q/Amh OfBryftsOXj0NUcn1CW25Z0UBlJqnQUVYzH8nuZJ1J+A8v/ihH92g7Lb3cKEoYA4 6B6DVZOl/T9TYxzI0GCQXqck6SN+0q0jjFLVTdH2gI9AV05bxUp2e53nnNs3pGcT QHnwdEATRiQ0/A== -----END CERTIFICATE-----Generated at Thu Dec 18 07:40:48 2025 by rpki-client