This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json) Hash identifier: fL5718wXBxIdeQBcetP3gJRjGkbehyQIqhVGYE+EapI= Subject key identifier: 9E:50:2D:B9:A6:71:28:28:CD:71:56:EC:57:BD:C1:0A:05:51:6A:0C Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47 Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47 Certificate serial: 019B51BC1C524AF722CD434A34412B101B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft Manifest number: 0FBA Signing time: Wed 24 Dec 2025 19:00:40 +0000 Manifest this update: Wed 24 Dec 2025 19:00:40 +0000 Manifest next update: Thu 25 Dec 2025 19:00:40 +0000 Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: SOZoMEOD+U/v2D6piJ2+GmTLoM2+9XwIEYHms5MtfCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:1c:52:4a:f7:22:cd:43:4a:34:41:2b:10:1b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47 Validity Not Before: Dec 24 19:00:40 2025 GMT Not After : Dec 25 19:00:40 2025 GMT Subject: CN=9e502db9a6712828cd7156ec57bdc10a05516a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:85:03:72:71:f4:21:80:92:32:b6:a4:9a: 71:fc:a8:69:2b:c4:ea:f2:9d:7e:e4:f0:4a:42:2a: 7e:53:ba:b6:7e:1b:d0:22:db:16:64:7e:cc:79:ca: 12:36:0b:27:37:0d:df:f1:87:d6:28:49:d0:8b:f2: cf:d5:0c:b6:b4:f8:21:d4:03:42:eb:30:c6:14:c2: 2b:17:14:1d:83:30:bf:38:d8:01:16:7f:6c:18:22: 11:f3:f0:3a:3b:5c:0e:27:c4:44:61:08:71:1d:5d: 62:d6:7f:25:65:4e:3e:5c:38:90:16:a4:1c:42:ef: e5:50:72:08:73:e7:4b:aa:a0:1d:b7:cd:c0:b5:16: 54:98:b9:e8:01:79:b5:b8:5c:24:a4:bf:15:72:86: 65:85:63:b6:62:5a:95:7c:81:c4:09:1c:4e:dc:4a: 13:9b:8c:71:da:a3:83:c3:e0:ff:a5:e7:e7:37:c3: 80:54:f6:7b:41:47:42:ac:d2:8a:93:2f:bf:ca:9e: f9:17:af:2e:0b:86:e9:7e:e9:22:e8:3b:5d:0c:20: b9:a9:4e:00:4b:64:d2:a3:7c:f5:ae:94:69:1a:b8: 7d:51:17:a6:78:49:a6:3b:9f:eb:50:05:79:e3:12: 09:78:5d:b1:09:62:25:d0:9e:06:23:a8:d8:5a:2a: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:50:2D:B9:A6:71:28:28:CD:71:56:EC:57:BD:C1:0A:05:51:6A:0C X509v3 Authority Key Identifier: keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:93:38:31:29:06:fe:11:4c:c7:d0:46:b7:ed:2d:51:a7:2e: bf:48:61:40:93:ed:79:b1:73:fa:19:0a:d8:71:c5:ec:52:b0: 9a:7a:f1:ea:4f:a0:55:bc:ec:32:52:30:cf:06:06:3d:fb:53: ae:f8:a8:61:c1:18:15:ab:32:83:5b:35:62:59:ee:65:9c:59: a5:73:cd:de:1d:95:4a:b1:ad:1a:9b:92:f9:f8:d2:5b:91:47: c4:72:65:13:3c:d9:cd:42:1f:1b:9d:74:52:6a:1b:19:37:b3: 32:d8:4b:28:a9:43:61:7b:60:7b:c4:cd:67:7e:2c:b3:54:9d: f4:c8:dc:3e:78:6c:45:04:58:c1:c0:b3:9a:0a:6c:d8:17:ed: 05:b9:bf:ca:b5:20:20:68:ff:96:ed:a5:a0:c5:32:7c:5d:fe: d4:5b:28:51:d5:73:eb:05:34:7e:57:ff:64:9a:3b:f7:1e:19: 43:41:58:45:e5:38:96:a8:90:a5:04:39:3c:85:61:3b:bc:f4: c4:52:c6:8b:a7:91:b8:55:5f:0c:c5:0e:b4:ed:f8:62:f8:1b: 0d:7b:3b:12:de:ba:28:a6:8c:12:7b:39:3a:be:7f:0e:2c:82: f3:43:f3:95:46:59:1b:b4:53:19:ab:5e:0e:5a:c7:76:b9:25: c7:b2:55:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvBxSSvcizUNKNEErEBteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmJlYTAwYjU3ZDBiOWE4Y2FmMTlmNmRmZTRkZDMwYTRm ZTZjNDcwHhcNMjUxMjI0MTkwMDQwWhcNMjUxMjI1MTkwMDQwWjAzMTEwLwYDVQQD Eyg5ZTUwMmRiOWE2NzEyODI4Y2Q3MTU2ZWM1N2JkYzEwYTA1NTE2YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LOFA3Jx9CGAkjK2pJpx/KhpK8Tq 8p1+5PBKQip+U7q2fhvQItsWZH7MecoSNgsnNw3f8YfWKEnQi/LP1Qy2tPgh1ANC 6zDGFMIrFxQdgzC/ONgBFn9sGCIR8/A6O1wOJ8REYQhxHV1i1n8lZU4+XDiQFqQc Qu/lUHIIc+dLqqAdt83AtRZUmLnoAXm1uFwkpL8VcoZlhWO2YlqVfIHECRxO3EoT m4xx2qODw+D/pefnN8OAVPZ7QUdCrNKKky+/yp75F68uC4bpfuki6DtdDCC5qU4A S2TSo3z1rpRpGrh9URemeEmmO5/rUAV54xIJeF2xCWIl0J4GI6jYWirB8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5QLbmmcSgozXFW7Fe9wQoFUWoMMB8GA1UdIwQY MBaAFOhr6gC1fQuajK8Z9t/k3TCk/mxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGIt YzdmNTY2NWNiOTE4LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wZjdhOTgtNjk0YS00NWNlLTlhZGItYzdmNTY2NWNiOTE4 LzEvNkd2cUFMVjlDNXFNcnhuMjMtVGRNS1QtYkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJM4MSkG /hFMx9BGt+0tUacuv0hhQJPtebFz+hkK2HHF7FKwmnrx6k+gVbzsMlIwzwYGPftT rvioYcEYFasyg1s1YlnuZZxZpXPN3h2VSrGtGpuS+fjSW5FHxHJlEzzZzUIfG510 UmobGTezMthLKKlDYXtge8TNZ34ss1Sd9MjcPnhsRQRYwcCzmgps2BftBbm/yrUg IGj/lu2loMUyfF3+1FsoUdVz6wU0flf/ZJo79x4ZQ0FYReU4lqiQpQQ5PIVhO7z0 xFLGi6eRuFVfDMUOtO34YvgbDXs7Et66KKaMEns5Or5/DiyC80PzlUZZG7RTGate DlrHdrklx7JV2Q== -----END CERTIFICATE-----Generated at Thu Dec 25 02:41:21 2025 by rpki-client