This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft File: j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json) Hash identifier: SN5FZSYJp87dYEuxiJXZAAvdPRTpevMD39WdhW0odNE= Subject key identifier: 54:03:8E:B3:77:60:64:64:A8:C2:56:87:59:84:05:C2:18:4B:6E:F5 Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F Certificate issuer: /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f Certificate serial: 019B2F67A0483D12B0D631402B8918F1D132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft Manifest number: 0C61 Signing time: Thu 18 Dec 2025 03:01:18 +0000 Manifest this update: Thu 18 Dec 2025 03:01:18 +0000 Manifest next update: Fri 19 Dec 2025 03:01:18 +0000 Files and hashes: 1: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: g10Ha1XCCP3BxZGPkW8uRhcy5i4JKDG6LG0OO3s01Zg=) 2: olor_tHkoN8k1oKb8ve7r7Hwc2c.roa (hash: tMtLnjRmuVNk2beOyn14AwFTbvwBpk2hW+VYjVtGIZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:a0:48:3d:12:b0:d6:31:40:2b:89:18:f1:d1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f Validity Not Before: Dec 18 03:01:18 2025 GMT Not After : Dec 19 03:01:18 2025 GMT Subject: CN=54038eb377606464a8c25687598405c2184b6ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:0b:aa:24:a5:b9:e0:ee:cd:3a:46:74:44: 03:07:c8:4b:c7:b1:81:bd:79:31:08:f9:57:d0:a7: 2b:08:32:cc:36:86:7c:a0:c3:c5:04:ba:b4:d2:94: 6f:9c:af:12:75:e4:8f:71:3d:c9:bc:9a:1c:84:7a: f1:b5:97:a8:e5:2d:de:e2:c1:33:40:54:9b:8f:cc: 6b:b1:b4:ae:95:1e:ed:c0:58:00:3a:86:b5:64:17: 2e:a0:4d:3d:1a:4d:30:22:ca:2a:aa:b3:22:1e:49: 5d:5c:6e:26:db:c8:00:a3:86:f2:a1:7d:42:cd:fe: 95:e7:36:71:fb:c4:5c:e3:89:40:38:06:99:0a:9b: f1:95:1d:1c:9d:03:5f:29:09:09:c8:c3:9a:5e:f5: ad:e9:b1:8f:18:4d:ea:f3:1d:cc:32:77:c7:4d:2a: bd:ab:92:cf:b4:ec:99:6b:d6:69:15:a0:56:94:56: cb:da:c4:d6:c1:f4:55:65:8d:6f:9e:77:d7:d2:06: c2:7b:55:42:ca:9b:36:df:d1:e8:b3:24:99:24:59: 44:c2:85:8b:c7:ad:7f:e4:4e:1c:a2:e0:f4:49:a3: 00:e1:a8:90:8b:ae:1b:37:51:91:c7:6a:a0:09:a4: 03:b0:2f:a8:7c:86:4a:b9:00:d1:9c:4e:90:ce:b8: 51:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:03:8E:B3:77:60:64:64:A8:C2:56:87:59:84:05:C2:18:4B:6E:F5 X509v3 Authority Key Identifier: keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:ec:eb:b1:cd:89:8d:c3:2b:12:0b:70:f9:5d:a9:c2:6d:05: 89:d6:e0:39:47:bc:27:b7:a7:59:1c:1f:ff:48:90:3d:46:e0: 5e:d6:69:29:b5:25:6a:78:3b:32:79:b9:ba:f3:d9:11:15:6f: 3b:bc:44:08:93:19:a8:17:44:89:24:1d:26:37:65:3c:b6:ca: ab:4c:3a:a4:09:b6:ee:f5:36:80:4b:bc:2d:b4:85:47:aa:e1: bb:f5:9e:2a:28:8a:be:7f:36:e4:51:fc:ee:c4:f0:a7:51:1d: 26:ae:0b:38:71:65:07:8e:0f:fb:44:3c:17:02:cf:4b:c6:aa: d3:f6:5c:9a:3e:67:e3:6b:ae:bd:f8:29:c7:66:ed:ab:98:3e: fe:17:f1:d7:08:9e:b2:1d:6a:4a:c8:dd:14:41:d8:56:79:90: 1b:24:b9:fa:58:6e:12:8b:6f:2d:86:93:25:a0:8f:79:b5:31: c2:76:45:7f:50:24:c7:89:02:81:6d:db:51:5b:8a:ee:e7:e2: 1f:7d:55:ab:bd:94:e0:7f:cd:f9:c1:10:03:82:5f:b6:09:97: d3:f7:28:20:d0:96:cf:33:f5:f6:d0:74:e0:77:f0:60:b9:cf: 11:81:29:da:db:fc:73:38:29:a1:c6:09:c6:36:c9:0a:23:11: a8:18:14:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ6BIPRKw1jFAK4kY8dEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTczYTdjYzFlNGQzN2Y3NjQwMzY4NzdjNDI4MWRhOGIw MDkwN2YwHhcNMjUxMjE4MDMwMTE4WhcNMjUxMjE5MDMwMTE4WjAzMTEwLwYDVQQD Eyg1NDAzOGViMzc3NjA2NDY0YThjMjU2ODc1OTg0MDVjMjE4NGI2ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzwLqiSlueDuzTpGdEQDB8hLx7GB vXkxCPlX0KcrCDLMNoZ8oMPFBLq00pRvnK8SdeSPcT3JvJochHrxtZeo5S3e4sEz QFSbj8xrsbSulR7twFgAOoa1ZBcuoE09Gk0wIsoqqrMiHkldXG4m28gAo4byoX1C zf6V5zZx+8Rc44lAOAaZCpvxlR0cnQNfKQkJyMOaXvWt6bGPGE3q8x3MMnfHTSq9 q5LPtOyZa9ZpFaBWlFbL2sTWwfRVZY1vnnfX0gbCe1VCyps239HosySZJFlEwoWL x61/5E4couD0SaMA4aiQi64bN1GRx2qgCaQDsC+ofIZKuQDRnE6QzrhRYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQDjrN3YGRkqMJWh1mEBcIYS271MB8GA1UdIwQY MBaAFI+nOnzB5NN/dkA2h3xCgdqLAJB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZjNmZNSGswMzkyUURhSGZFS0Iyb3NBa0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lOTM4MTItMjI3Yi00MDllLWI1NTUt YWZhM2IwYmVhMGI3LzEvajZjNmZNSGswMzkyUURhSGZFS0Iyb3NBa0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lOTM4MTItMjI3Yi00MDllLWI1NTUtYWZhM2IwYmVhMGI3 LzEvajZjNmZNSGswMzkyUURhSGZFS0Iyb3NBa0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Ozrsc2J jcMrEgtw+V2pwm0FidbgOUe8J7enWRwf/0iQPUbgXtZpKbUlang7Mnm5uvPZERVv O7xECJMZqBdEiSQdJjdlPLbKq0w6pAm27vU2gEu8LbSFR6rhu/WeKiiKvn825FH8 7sTwp1EdJq4LOHFlB44P+0Q8FwLPS8aq0/Zcmj5n42uuvfgpx2btq5g+/hfx1wie sh1qSsjdFEHYVnmQGyS5+lhuEotvLYaTJaCPebUxwnZFf1Akx4kCgW3bUVuK7ufi H31Vq72U4H/N+cEQA4JftgmX0/coINCWzzP19tB04HfwYLnPEYEp2tv8czgpocYJ xjbJCiMRqBgUuQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:54:09 2025 by rpki-client