This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft File: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json) Hash identifier: hifeevL0Bx96Ak9dIYdDIOFmCtq8lw6oG3eO7WcEgm4= Subject key identifier: F9:D2:A8:60:C7:64:35:CC:B7:F5:FC:F8:68:54:5E:AB:9C:45:C4:B5 Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Certificate serial: 019B4E4DA31CA1A6888729E2C92BCA5B29F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft Manifest number: 0E72 Signing time: Wed 24 Dec 2025 03:01:09 +0000 Manifest this update: Wed 24 Dec 2025 03:01:09 +0000 Manifest next update: Thu 25 Dec 2025 03:01:09 +0000 Files and hashes: 1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: ht2IMMMz/SMIjnrJsYKVfvkoF2PGR4wmZhE2YCt6A/4=) 2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:a3:1c:a1:a6:88:87:29:e2:c9:2b:ca:5b:29:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Validity Not Before: Dec 24 03:01:09 2025 GMT Not After : Dec 25 03:01:09 2025 GMT Subject: CN=f9d2a860c76435ccb7f5fcf868545eab9c45c4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:d6:59:7b:d1:e6:3c:f5:45:4a:21:23:01: e3:81:2f:da:05:4a:3a:53:ff:e5:11:c3:93:83:21: a6:63:a4:d0:c8:e9:b2:0b:7d:7f:1a:4e:cb:0c:ce: 16:30:f9:cc:e2:23:20:ef:40:a2:72:dc:f7:17:02: 5a:64:85:ac:cf:23:cb:8e:28:5a:5a:f1:54:e3:84: ae:7a:fc:28:c0:e4:fa:5c:bc:e7:d7:1c:c4:8c:45: 01:6b:36:53:14:cf:50:e3:98:ee:de:2b:16:0b:12: db:cb:11:3d:f4:48:a7:58:09:c2:f7:30:24:61:b0: c4:2c:d3:4a:8b:90:1f:1e:01:c0:66:ba:3b:b4:2f: ae:9c:2c:12:c9:9f:2b:50:45:f9:94:99:f9:1b:13: a2:2f:b9:1d:ce:0f:09:52:2a:08:2a:c4:bb:92:f5: a5:ea:10:88:c7:cb:8e:75:bb:e8:c1:8c:93:aa:f2: a2:74:4c:e1:96:15:ae:b3:b9:7b:d5:1d:75:26:91: 97:51:a1:14:89:cf:ff:2c:e9:d2:4b:73:9b:de:d0: 17:88:31:9f:72:0e:de:9b:e9:a7:25:18:ba:97:a4: 74:d3:a0:f6:ab:ca:00:25:3f:b7:7c:ee:97:15:bd: f8:44:67:4c:78:37:b6:fd:78:c9:e7:a3:41:d6:21: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D2:A8:60:C7:64:35:CC:B7:F5:FC:F8:68:54:5E:AB:9C:45:C4:B5 X509v3 Authority Key Identifier: keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:76:fc:1b:45:ad:5e:f8:a6:08:2e:78:eb:cd:bd:68:1b:ff: 63:b1:a0:3e:b3:f2:df:17:68:94:72:40:03:a2:79:5d:28:7a: e5:25:50:39:81:64:b9:42:0d:3a:e0:03:60:82:6c:9c:fa:29: 21:fe:a3:ee:ba:d0:fa:c6:80:a5:0d:c0:81:a2:71:5d:88:2d: 58:5d:7b:58:b1:78:29:c7:ee:1e:f9:1a:83:59:10:15:3e:42: fe:d1:b4:96:13:39:01:ed:07:d0:b0:e8:f3:51:82:0c:22:65: 22:c6:92:ea:6a:e3:03:0d:9f:04:19:12:c3:59:63:a4:1a:28: bc:a6:a4:c2:92:fc:ec:23:d1:12:00:a7:d0:7f:66:0e:8c:d6: f1:53:22:b0:c6:db:c4:15:a8:81:7d:70:73:35:9b:87:72:26: 99:66:e6:20:41:18:02:6b:b5:86:d5:79:f5:e8:0c:31:dc:2f: b1:4d:bb:b2:4d:06:74:24:ca:a9:27:e4:09:e8:61:21:d0:56: 71:08:72:26:9a:a6:7d:22:ce:89:bc:49:eb:31:39:b1:f3:d0: a4:93:23:fb:06:b0:aa:10:2d:01:76:ff:8b:96:6f:e3:17:0f: bf:05:4e:da:f4:be:d4:db:67:cf:45:84:9f:11:13:59:07:27: 1a:91:0c:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTaMcoaaIhyniySvKWyn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy ODM2ZGMwHhcNMjUxMjI0MDMwMTA5WhcNMjUxMjI1MDMwMTA5WjAzMTEwLwYDVQQD EyhmOWQyYTg2MGM3NjQzNWNjYjdmNWZjZjg2ODU0NWVhYjljNDVjNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13LWWXvR5jz1RUohIwHjgS/aBUo6 U//lEcOTgyGmY6TQyOmyC31/Gk7LDM4WMPnM4iMg70Cictz3FwJaZIWszyPLjiha WvFU44SuevwowOT6XLzn1xzEjEUBazZTFM9Q45ju3isWCxLbyxE99EinWAnC9zAk YbDELNNKi5AfHgHAZro7tC+unCwSyZ8rUEX5lJn5GxOiL7kdzg8JUioIKsS7kvWl 6hCIx8uOdbvowYyTqvKidEzhlhWus7l71R11JpGXUaEUic//LOnSS3Ob3tAXiDGf cg7em+mnJRi6l6R006D2q8oAJT+3fO6XFb34RGdMeDe2/XjJ56NB1iF9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnSqGDHZDXMt/X8+GhUXqucRcS1MB8GA1UdIwQY MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt MDY1ZWQ0ZDg0NDFmLzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHb8G0Wt XvimCC546829aBv/Y7GgPrPy3xdolHJAA6J5XSh65SVQOYFkuUINOuADYIJsnPop If6j7rrQ+saApQ3AgaJxXYgtWF17WLF4KcfuHvkag1kQFT5C/tG0lhM5Ae0H0LDo 81GCDCJlIsaS6mrjAw2fBBkSw1ljpBoovKakwpL87CPREgCn0H9mDozW8VMisMbb xBWogX1wczWbh3ImmWbmIEEYAmu1htV59egMMdwvsU27sk0GdCTKqSfkCehhIdBW cQhyJpqmfSLOibxJ6zE5sfPQpJMj+wawqhAtAXb/i5Zv4xcPvwVO2vS+1Ntnz0WE nxETWQcnGpEMbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:42:30 2025 by rpki-client