This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft File: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json) Hash identifier: EX8wO49s/P5Bs9qeSe80Y9W3yykKUaWUJZO4HwNRlv8= Subject key identifier: 48:DE:EF:84:02:B1:65:63:FE:58:9A:0F:4A:4A:F5:B1:FB:42:C8:94 Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24 Certificate serial: 019B52CEE1964671D04A0AF9AC85371DFF90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft Manifest number: 0523 Signing time: Thu 25 Dec 2025 00:00:48 +0000 Manifest this update: Thu 25 Dec 2025 00:00:48 +0000 Manifest next update: Fri 26 Dec 2025 00:00:48 +0000 Files and hashes: 1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: P5DkwsDQ4o07RraZTxxEAwzeKPp130sd1vM3AkyHVKc=) 2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:e1:96:46:71:d0:4a:0a:f9:ac:85:37:1d:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e847e88749704294552fef54886111ed0586ec24 Validity Not Before: Dec 25 00:00:48 2025 GMT Not After : Dec 26 00:00:48 2025 GMT Subject: CN=48deef8402b16563fe589a0f4a4af5b1fb42c894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:d7:f9:38:c6:da:07:01:96:72:79:d3:d3: 37:cd:01:ad:8c:0b:f0:c9:62:cd:08:ab:c6:fa:a1: 99:5c:8c:00:22:3a:00:7e:a2:ae:a3:92:d6:4e:8c: 90:0d:d0:0a:17:82:72:cf:64:e8:09:37:fa:72:28: 68:25:af:1e:0f:54:9b:0d:21:12:41:1e:38:28:aa: 6d:0c:f5:7f:d7:f1:69:30:7c:f8:c3:8b:04:f1:89: 5d:f0:28:a7:72:78:5e:19:49:b6:c7:7e:35:1f:5e: c0:e8:d5:4a:3e:a8:60:ae:ca:ba:b5:a4:b3:75:2f: 48:a3:81:8c:c3:fb:7e:9c:ef:35:fa:d9:12:ad:b7: e2:a7:d8:07:e2:f6:8b:1b:0d:1c:a8:60:d5:bc:6f: 77:a2:2c:77:e9:de:f9:77:28:24:9f:d5:c9:7f:45: c5:a8:af:e4:26:bc:21:87:58:d6:42:c1:d7:66:92: 74:6b:80:da:61:72:14:de:bc:3d:35:f5:b6:a3:c7: dc:ea:3b:38:dc:51:35:66:1a:70:47:a9:57:72:a7: a7:ca:7f:ea:94:7d:ed:f3:f3:fa:4f:82:a7:77:32: 8b:82:e9:1a:e7:64:1f:ea:ca:c2:da:3e:81:55:af: 27:f1:25:a1:4b:20:11:70:d8:09:d0:70:ca:bf:2c: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:EF:84:02:B1:65:63:FE:58:9A:0F:4A:4A:F5:B1:FB:42:C8:94 X509v3 Authority Key Identifier: keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ce:e6:c3:66:b5:19:78:82:6e:53:4e:3c:77:c2:3e:37:de: 08:21:46:1f:56:eb:fa:00:4e:94:02:5e:17:61:22:c3:a2:bd: 5e:27:1d:36:05:1d:c2:9b:26:1e:6e:4a:ae:3b:64:cc:62:6f: d2:a9:3e:2a:b7:e6:9a:a2:b3:74:06:b9:30:a8:77:58:2d:e1: d5:d0:3d:9e:5e:08:65:20:ee:72:8e:f8:99:d7:6d:0c:00:2f: b6:b3:7d:90:fe:26:bf:c6:71:23:99:63:7d:82:c9:bf:e4:25: 23:0c:19:cc:f2:ad:53:f3:d6:43:69:c3:e5:30:02:6a:9d:fe: 74:1e:26:0a:69:03:ba:c3:1d:d1:17:5e:1e:56:ee:f3:3d:98: bb:3a:ad:03:fb:75:5c:2a:0b:2d:51:39:89:4e:29:02:a5:d8: 0b:90:30:9d:48:35:a4:f0:18:92:76:f9:80:2c:56:97:fe:39: 53:00:52:c1:d4:1b:33:ab:5e:82:58:91:32:5b:2d:85:96:bb: d4:ad:07:2f:6a:b6:1a:c6:5f:60:4e:bc:63:7f:9f:ba:60:7b: 0c:cf:3a:91:7d:4f:f9:d9:81:33:18:5d:24:87:07:31:b0:29: 71:3d:61:ba:91:d5:fd:30:bc:41:d8:fc:2f:3a:00:50:2e:ab: 4f:91:75:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzuGWRnHQSgr5rIU3Hf+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDdlODg3NDk3MDQyOTQ1NTJmZWY1NDg4NjExMWVkMDU4 NmVjMjQwHhcNMjUxMjI1MDAwMDQ4WhcNMjUxMjI2MDAwMDQ4WjAzMTEwLwYDVQQD Eyg0OGRlZWY4NDAyYjE2NTYzZmU1ODlhMGY0YTRhZjViMWZiNDJjODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWXX+TjG2gcBlnJ509M3zQGtjAvw yWLNCKvG+qGZXIwAIjoAfqKuo5LWToyQDdAKF4Jyz2ToCTf6cihoJa8eD1SbDSES QR44KKptDPV/1/FpMHz4w4sE8Yld8CincnheGUm2x341H17A6NVKPqhgrsq6taSz dS9Io4GMw/t+nO81+tkSrbfip9gH4vaLGw0cqGDVvG93oix36d75dygkn9XJf0XF qK/kJrwhh1jWQsHXZpJ0a4DaYXIU3rw9NfW2o8fc6js43FE1ZhpwR6lXcqenyn/q lH3t8/P6T4KndzKLguka52Qf6srC2j6BVa8n8SWhSyARcNgJ0HDKvyxvaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEje74QCsWVj/liaD0pK9bH7QsiUMB8GA1UdIwQY MBaAFOhH6IdJcEKUVS/vVIhhEe0FhuwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgt YmRhZDdlZjc3NmM0LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgtYmRhZDdlZjc3NmM0 LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac7mw2a1 GXiCblNOPHfCPjfeCCFGH1br+gBOlAJeF2Eiw6K9XicdNgUdwpsmHm5KrjtkzGJv 0qk+KrfmmqKzdAa5MKh3WC3h1dA9nl4IZSDuco74mddtDAAvtrN9kP4mv8ZxI5lj fYLJv+QlIwwZzPKtU/PWQ2nD5TACap3+dB4mCmkDusMd0RdeHlbu8z2YuzqtA/t1 XCoLLVE5iU4pAqXYC5AwnUg1pPAYknb5gCxWl/45UwBSwdQbM6tegliRMlsthZa7 1K0HL2q2GsZfYE68Y3+fumB7DM86kX1P+dmBMxhdJIcHMbApcT1hupHV/TC8Qdj8 LzoAUC6rT5F1Sw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:34:22 2025 by rpki-client