This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json) Hash identifier: OCVtDQRNc4xaA9RTX2aC4TIVBCIzav2vkH/kwaHEA1I= Subject key identifier: BF:33:27:8B:D0:87:6D:CC:59:4A:9F:E7:27:9F:72:EF:76:30:9C:B0 Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97 Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197 Certificate serial: 019AF0515053EF0D27F50B6EFA97D36E6A35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft Manifest number: 01E7 Signing time: Fri 05 Dec 2025 21:00:52 +0000 Manifest this update: Fri 05 Dec 2025 21:00:52 +0000 Manifest next update: Sat 06 Dec 2025 21:00:52 +0000 Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: tEBJEu5rEc3KEGfnOfhg/he8k6hGC/O3zgenA7XO2j4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:50:53:ef:0d:27:f5:0b:6e:fa:97:d3:6e:6a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197 Validity Not Before: Dec 5 21:00:52 2025 GMT Not After : Dec 6 21:00:52 2025 GMT Subject: CN=bf33278bd0876dcc594a9fe7279f72ef76309cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:df:71:be:22:91:3c:c3:38:0e:41:04:4f:ed: 55:34:45:58:b5:7b:91:37:5b:4e:28:84:29:77:a3: 28:c6:fd:00:33:cc:ab:c2:53:d9:b7:fe:4f:2b:e8: 39:0c:ac:27:2c:15:4d:7c:73:d8:93:0a:86:48:00: 3d:8c:5a:09:c0:1b:b6:c9:91:a8:39:59:10:71:11: 6e:4d:37:6e:92:8a:e7:8a:17:7b:de:49:c4:ef:e8: 13:71:08:d7:3b:fd:7c:df:45:13:f0:15:f1:77:1f: 40:e4:6e:2f:dd:e6:15:36:52:29:ba:6c:d7:3c:60: fe:77:bb:e7:df:1d:5d:bd:5f:15:c9:e6:9e:89:9e: 83:6b:9f:15:46:63:2a:58:c6:64:5c:02:a2:5e:1b: 13:d1:9d:03:91:68:bc:50:ac:22:a8:a3:f7:9b:38: 20:46:d8:aa:19:fb:f3:52:6a:37:7f:16:33:e6:6d: 37:b9:f7:e9:95:e1:38:dd:0d:f9:68:a6:51:06:0d: de:bc:36:df:d9:42:0e:63:b3:e8:71:20:3a:c0:9c: 0a:e6:43:66:c1:4f:37:1f:83:c5:fa:3c:42:ac:f0: 12:7a:fd:07:c9:a6:af:d9:81:e1:b6:fc:2b:ad:37: 7a:3c:8d:03:28:87:d2:82:fa:81:2a:b2:fb:39:4d: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:33:27:8B:D0:87:6D:CC:59:4A:9F:E7:27:9F:72:EF:76:30:9C:B0 X509v3 Authority Key Identifier: keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:21:c1:b6:81:f0:06:55:46:19:04:db:53:71:e3:75:6d:cc: 40:c5:19:3c:11:32:1c:d2:c2:f9:3b:19:01:40:52:58:5a:90: 66:fa:a6:bf:6f:1c:63:ca:e6:00:4b:91:f1:04:a2:0b:9b:9e: 0c:5b:35:87:47:5e:ec:f4:36:9f:ab:52:b4:fe:ec:3f:05:fe: 16:47:9e:79:41:64:85:67:29:34:9a:f7:b4:b5:e7:41:37:59: dc:cb:dc:fb:c4:da:fe:2f:98:fb:78:98:91:dc:0a:51:d5:17: b7:c0:6f:9a:9d:0b:f1:b3:93:df:1c:48:18:87:cf:c0:31:aa: 71:0f:eb:a4:fd:e6:60:cd:85:60:7e:47:0e:a5:52:aa:15:d2: 92:b4:bd:20:65:d0:66:68:fa:5b:00:00:5e:2b:ee:24:33:07: 29:1c:2c:77:41:f6:fc:fe:9e:ae:26:0a:6b:99:8d:b4:c4:0c: ef:c6:e4:63:ca:39:21:94:22:7b:a7:be:f1:2b:b9:bb:b5:ce: 01:29:5d:ce:d2:5a:9c:8c:a3:8f:9d:dd:e7:a0:c2:6f:9e:e4: 48:ab:c4:82:41:05:69:2c:52:09:c8:70:a6:4b:4b:76:54:1f: 95:43:5a:25:f0:8f:7a:09:34:83:ed:03:50:8e:4b:d6:96:fd: 7c:f8:46:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUVBT7w0n9Qtu+pfTbmo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTY5OGM5ZjgwMzAzMjU3OTIwMTA0OGI4N2MxOWM2M2M4 ZTExOTcwHhcNMjUxMjA1MjEwMDUyWhcNMjUxMjA2MjEwMDUyWjAzMTEwLwYDVQQD EyhiZjMzMjc4YmQwODc2ZGNjNTk0YTlmZTcyNzlmNzJlZjc2MzA5Y2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt9xviKRPMM4DkEET+1VNEVYtXuR N1tOKIQpd6Moxv0AM8yrwlPZt/5PK+g5DKwnLBVNfHPYkwqGSAA9jFoJwBu2yZGo OVkQcRFuTTdukornihd73knE7+gTcQjXO/1830UT8BXxdx9A5G4v3eYVNlIpumzX PGD+d7vn3x1dvV8VyeaeiZ6Da58VRmMqWMZkXAKiXhsT0Z0DkWi8UKwiqKP3mzgg RtiqGfvzUmo3fxYz5m03uffpleE43Q35aKZRBg3evDbf2UIOY7PocSA6wJwK5kNm wU83H4PF+jxCrPASev0Hyaav2YHhtvwrrTd6PI0DKIfSgvqBKrL7OU1RswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8zJ4vQh23MWUqf5yefcu92MJywMB8GA1UdIwQY MBaAFI+mmMn4AwMleSAQSLh8GcY8jhGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMt ZjQ0ODA5NTc4Y2NhLzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMtZjQ0ODA5NTc4Y2Nh LzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiHBtoHw BlVGGQTbU3HjdW3MQMUZPBEyHNLC+TsZAUBSWFqQZvqmv28cY8rmAEuR8QSiC5ue DFs1h0de7PQ2n6tStP7sPwX+FkeeeUFkhWcpNJr3tLXnQTdZ3Mvc+8Ta/i+Y+3iY kdwKUdUXt8Bvmp0L8bOT3xxIGIfPwDGqcQ/rpP3mYM2FYH5HDqVSqhXSkrS9IGXQ Zmj6WwAAXivuJDMHKRwsd0H2/P6eriYKa5mNtMQM78bkY8o5IZQie6e+8Su5u7XO ASldztJanIyjj53d56DCb57kSKvEgkEFaSxSCchwpktLdlQflUNaJfCPegk0g+0D UI5L1pb9fPhG+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:00 2025 by rpki-client