This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft File: 6w1TyHBxSElxrt_ZDKbsxlapbkw.mft (raw, json) Hash identifier: zbsQrJGWcthIDBleyDGtUti9z/rmkBd0ZteABnXRlxg= Subject key identifier: D3:19:1E:61:00:B4:73:2A:E6:DD:A5:48:82:6F:43:32:AF:25:FD:60 Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C Certificate issuer: /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c Certificate serial: 019B4A036C31235B88238D5978ECE7BD8829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft Manifest number: 14F7 Signing time: Tue 23 Dec 2025 07:01:36 +0000 Manifest this update: Tue 23 Dec 2025 07:01:36 +0000 Manifest next update: Wed 24 Dec 2025 07:01:36 +0000 Files and hashes: 1: 6w1TyHBxSElxrt_ZDKbsxlapbkw.crl (hash: eJaWAWnJ5FvFlLH08LuvfTv9x6rvNKBbRdbBEsNrYVg=) 2: YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa (hash: SiNOMuWGV4TsQMwgoAyZOniwZQdTB+FIJF2k4b3IHek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:6c:31:23:5b:88:23:8d:59:78:ec:e7:bd:88:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c Validity Not Before: Dec 23 07:01:36 2025 GMT Not After : Dec 24 07:01:36 2025 GMT Subject: CN=d3191e6100b4732ae6dda548826f4332af25fd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:14:72:a8:f4:b6:d0:e0:1f:b5:10:eb:02: cd:84:f6:27:75:4c:42:f5:66:67:4c:6f:39:57:db: 24:37:cd:66:6a:6f:e9:60:2a:e7:61:ad:e2:62:91: d4:07:52:d2:a6:81:19:c7:55:67:96:b7:3a:22:63: 78:85:78:04:ba:5c:5d:e4:64:2c:6e:17:2b:cc:8a: 1a:07:13:10:fa:fb:ce:df:41:b3:f1:53:b7:36:62: 23:d6:78:9c:5f:8b:64:2b:83:e5:71:ae:50:1c:5d: bf:23:e0:f0:0c:bb:3e:06:07:0c:3e:2c:26:5c:5f: 78:48:84:67:f6:5e:2b:84:e3:8b:11:2a:3e:3c:e8: a4:4c:36:9f:c4:c2:4b:f3:4b:ba:a9:20:1b:90:fd: bf:d0:0d:62:58:1b:85:e0:b4:c6:ad:f3:7b:fe:24: 24:67:06:58:ad:c3:05:6b:5b:ad:c2:1e:a3:33:23: 28:b1:9d:2c:03:0a:ca:58:0f:04:aa:7b:11:23:3d: 61:14:e1:cd:12:f8:65:bf:e2:93:d5:92:d5:af:c7: 69:8a:1f:db:91:43:e0:bd:7c:48:78:ad:37:1e:42: 91:a9:ad:85:14:2c:0d:6b:d4:a6:a6:99:af:56:3b: ae:f0:b0:f0:b7:89:29:9b:d3:3b:fc:d4:72:10:41: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:19:1E:61:00:B4:73:2A:E6:DD:A5:48:82:6F:43:32:AF:25:FD:60 X509v3 Authority Key Identifier: keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:07:92:7d:1f:e5:71:a8:dc:ee:93:7f:28:4c:30:5e:71:31: 68:2a:68:4b:51:83:8e:9d:bb:17:1f:bd:96:b8:c8:e3:96:34: bd:a5:d1:f6:26:e1:1e:2a:f7:5c:17:f6:34:d6:60:8d:5e:6b: 6a:b1:10:5d:40:b7:35:b0:9b:e5:e0:44:21:e8:10:03:63:21: e7:ab:30:a2:6c:55:6d:24:71:b5:79:d2:33:5f:66:70:38:cb: e2:c5:12:4f:0e:2d:7f:f7:fc:c8:43:a7:b1:d3:e4:15:b9:5c: c6:d9:a0:34:04:b4:21:04:3b:50:f1:8b:1f:62:27:fd:32:c9: 05:2c:1f:9c:39:bd:19:6f:a2:1e:0c:97:a2:53:66:2f:88:ad: 51:cd:fb:77:96:2c:47:76:6f:d9:9f:c7:8b:da:0b:08:16:4a: 96:c9:80:be:9d:e8:6c:dd:8f:5d:f0:4a:ba:70:5f:67:a6:49: cc:f0:17:c9:43:4e:f5:26:05:96:ac:62:62:3c:59:b9:29:bc: 9e:a5:ad:1f:40:63:e1:e4:63:7d:48:43:39:36:a7:cd:b6:da: d4:a3:99:23:5a:1e:bc:aa:9a:7b:a0:89:7e:ac:f8:a9:83:f3: 7c:97:e2:60:b0:53:96:a7:c0:4f:b4:84:a2:c5:7e:7b:9a:d2: db:6a:b1:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA2wxI1uII41ZeOznvYgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMGQ1M2M4NzA3MTQ4NDk3MWFlZGZkOTBjYTZlY2M2NTZh OTZlNGMwHhcNMjUxMjIzMDcwMTM2WhcNMjUxMjI0MDcwMTM2WjAzMTEwLwYDVQQD EyhkMzE5MWU2MTAwYjQ3MzJhZTZkZGE1NDg4MjZmNDMzMmFmMjVmZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iAUcqj0ttDgH7UQ6wLNhPYndUxC 9WZnTG85V9skN81mam/pYCrnYa3iYpHUB1LSpoEZx1Vnlrc6ImN4hXgEulxd5GQs bhcrzIoaBxMQ+vvO30Gz8VO3NmIj1nicX4tkK4Plca5QHF2/I+DwDLs+BgcMPiwm XF94SIRn9l4rhOOLESo+POikTDafxMJL80u6qSAbkP2/0A1iWBuF4LTGrfN7/iQk ZwZYrcMFa1utwh6jMyMosZ0sAwrKWA8EqnsRIz1hFOHNEvhlv+KT1ZLVr8dpih/b kUPgvXxIeK03HkKRqa2FFCwNa9SmppmvVjuu8LDwt4kpm9M7/NRyEEEj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMZHmEAtHMq5t2lSIJvQzKvJf1gMB8GA1UdIwQY MBaAFOsNU8hwcUhJca7f2Qym7MZWqW5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81MDM0NTgtMWRjNC00MTAyLTk0Mjct ZDYzOTgxODM1MjVkLzEvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy81MDM0NTgtMWRjNC00MTAyLTk0MjctZDYzOTgxODM1MjVk LzEvNncxVHlIQnhTRWx4cnRfWkRLYnN4bGFwYmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAeSfR/l cajc7pN/KEwwXnExaCpoS1GDjp27Fx+9lrjI45Y0vaXR9ibhHir3XBf2NNZgjV5r arEQXUC3NbCb5eBEIegQA2Mh56swomxVbSRxtXnSM19mcDjL4sUSTw4tf/f8yEOn sdPkFblcxtmgNAS0IQQ7UPGLH2In/TLJBSwfnDm9GW+iHgyXolNmL4itUc37d5Ys R3Zv2Z/Hi9oLCBZKlsmAvp3obN2PXfBKunBfZ6ZJzPAXyUNO9SYFlqxiYjxZuSm8 nqWtH0Bj4eRjfUhDOTanzbba1KOZI1oevKqae6CJfqz4qYPzfJfiYLBTlqfAT7SE osV+e5rS22qxSQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:15:26 2025 by rpki-client