This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft File: 6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json) Hash identifier: SdRdmRY9Y0my3dKN8mnQ8Dhnrc4D+riAXl/Q4lk9dDM= Subject key identifier: CB:14:1A:6F:3B:51:78:EE:36:B2:9C:40:85:35:4E:D1:40:97:1C:EC Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD Certificate issuer: /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd Certificate serial: 019B3C1077C5DB8D7FA289A2C41534F9A8DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft Manifest number: 06E2 Signing time: Sat 20 Dec 2025 14:01:10 +0000 Manifest this update: Sat 20 Dec 2025 14:01:10 +0000 Manifest next update: Sun 21 Dec 2025 14:01:10 +0000 Files and hashes: 1: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: vCR/zLtssuSp/R/occnPkZ92L6kxd7iU+KQKTFxw6OM=) 2: PRoUF_nI3QR5YCF3oP9-TeW8-7M.roa (hash: 8cgALraVTSl/WpvIBY9Xw/fiXrmhiHG/rLuS82zfXFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:77:c5:db:8d:7f:a2:89:a2:c4:15:34:f9:a8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd Validity Not Before: Dec 20 14:01:10 2025 GMT Not After : Dec 21 14:01:10 2025 GMT Subject: CN=cb141a6f3b5178ee36b29c4085354ed140971cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:59:f4:23:c0:04:43:3d:43:c7:d3:18:f1: 7c:3c:33:c6:7b:15:ba:e4:1f:5f:cd:09:9b:59:b7: e0:b3:58:f7:61:99:6a:04:9d:24:1b:b0:c6:23:ca: 78:26:5d:f7:b8:a5:ab:b8:09:b1:f1:43:42:06:a0: 47:ba:67:de:92:cc:b4:f9:62:dd:53:a8:15:30:c1: 92:2a:84:07:d4:b3:76:8c:09:01:96:c6:df:7b:e1: 88:b4:ef:af:6c:09:1f:57:a5:56:e7:2c:97:9e:9d: 8f:0d:f4:06:9b:d2:f3:cb:2c:d7:41:e3:eb:c6:07: c2:6d:75:22:89:2a:1d:f7:5f:58:96:8d:a5:e2:4d: 7f:88:d4:13:65:62:fc:c0:19:21:59:63:9a:fa:1d: 5e:6e:f9:af:56:83:4c:af:10:cf:59:06:3a:fc:2b: 55:85:f2:f3:61:30:9c:5e:73:ec:95:3d:df:21:d4: e3:a1:8e:4f:a8:c4:ba:f4:23:b5:62:50:5d:45:10: 8f:34:7f:28:84:e2:6f:1b:39:88:53:2a:d1:7b:f9: 1e:e8:5d:47:76:27:fa:6c:93:b4:1a:e5:16:e3:99: 75:13:77:85:88:43:c3:c4:3b:ac:b6:78:89:d0:6d: a9:61:26:cd:ef:00:4f:1d:b0:e1:63:86:37:19:ed: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:1A:6F:3B:51:78:EE:36:B2:9C:40:85:35:4E:D1:40:97:1C:EC X509v3 Authority Key Identifier: keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:19:37:51:a7:e2:60:bb:be:b2:2c:40:0b:db:bd:eb:b8:93: 86:e1:ce:43:91:59:79:e5:c0:11:4e:68:67:90:d6:37:09:4e: ce:06:9e:2b:ab:d5:7f:ba:58:f2:d0:39:12:e0:26:08:ee:0d: a4:a1:4c:f6:84:17:d2:22:ae:f2:9b:18:c0:53:30:10:dc:5d: 2a:55:b6:fc:09:b6:1e:84:f4:6b:05:12:0d:2a:89:b2:39:58: 31:88:21:e1:1c:3f:f6:eb:ee:3b:55:46:23:d5:f6:a3:ef:53: 10:4d:31:93:11:d5:7e:a7:d1:85:d2:67:48:8b:59:ba:22:c2: b0:13:f9:2b:ee:58:85:f9:47:ed:ad:e1:f7:15:75:93:74:71: 88:10:c5:fe:16:78:b4:4b:c3:b2:47:f4:cd:78:a6:b9:da:be: 29:a3:43:b0:52:75:fd:23:8e:9a:9e:e5:40:04:d5:56:5c:3b: da:7d:b1:62:b9:d7:2a:1e:8b:56:14:f8:ef:f4:f8:c3:32:51: 31:4f:3a:72:06:84:31:02:b0:67:3e:d6:fa:e2:b2:c3:5d:c7: 45:7b:46:79:4e:d4:f6:56:44:67:4f:0d:a1:41:1d:b2:d2:c1: c4:7c:e5:65:75:63:31:3c:b9:85:aa:32:d0:e1:d7:11:31:7c: 33:c4:3d:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHfF241/oomixBU0+ajfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTZlMTcwZjc5YmIwNWU3YzBkZWMzZWM2MDY0M2U3Mjli ZTRlY2QwHhcNMjUxMjIwMTQwMTEwWhcNMjUxMjIxMTQwMTEwWjAzMTEwLwYDVQQD EyhjYjE0MWE2ZjNiNTE3OGVlMzZiMjljNDA4NTM1NGVkMTQwOTcxY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlpZ9CPABEM9Q8fTGPF8PDPGexW6 5B9fzQmbWbfgs1j3YZlqBJ0kG7DGI8p4Jl33uKWruAmx8UNCBqBHumfeksy0+WLd U6gVMMGSKoQH1LN2jAkBlsbfe+GItO+vbAkfV6VW5yyXnp2PDfQGm9LzyyzXQePr xgfCbXUiiSod919Ylo2l4k1/iNQTZWL8wBkhWWOa+h1ebvmvVoNMrxDPWQY6/CtV hfLzYTCcXnPslT3fIdTjoY5PqMS69CO1YlBdRRCPNH8ohOJvGzmIUyrRe/ke6F1H dif6bJO0GuUW45l1E3eFiEPDxDustniJ0G2pYSbN7wBPHbDhY4Y3Ge1qKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsUGm87UXjuNrKcQIU1TtFAlxzsMB8GA1UdIwQY MBaAFOsW4XD3m7BefA3sPsYGQ+cpvk7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80ZDc2M2EtZmUwZS00ZjBmLTlmMzIt NGJkOWM4NjdiZWU5LzEvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80ZDc2M2EtZmUwZS00ZjBmLTlmMzItNGJkOWM4NjdiZWU5 LzEvNnhiaGNQZWJzRjU4RGV3LXhnWkQ1eW0tVHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxk3Uafi YLu+sixAC9u967iThuHOQ5FZeeXAEU5oZ5DWNwlOzgaeK6vVf7pY8tA5EuAmCO4N pKFM9oQX0iKu8psYwFMwENxdKlW2/Am2HoT0awUSDSqJsjlYMYgh4Rw/9uvuO1VG I9X2o+9TEE0xkxHVfqfRhdJnSItZuiLCsBP5K+5YhflH7a3h9xV1k3RxiBDF/hZ4 tEvDskf0zXimudq+KaNDsFJ1/SOOmp7lQATVVlw72n2xYrnXKh6LVhT47/T4wzJR MU86cgaEMQKwZz7W+uKyw13HRXtGeU7U9lZEZ08NoUEdstLBxHzlZXVjMTy5haoy 0OHXETF8M8Q9bQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:48:48 2025 by rpki-client