This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft File: 6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json) Hash identifier: icYDBu5XVjngExk7mjVkSX4bRm4M+29750xvdIVF75g= Subject key identifier: 75:42:8B:C3:1F:8C:77:F1:D0:15:27:8F:95:DC:05:DE:A6:07:62:B1 Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1 Certificate issuer: /CN=eacc3babd53c44cd76145af87d42370317e8d0c1 Certificate serial: 019B27ADDA8EAAC17043D65A4665D03EDF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft Manifest number: 0ECA Signing time: Tue 16 Dec 2025 15:01:03 +0000 Manifest this update: Tue 16 Dec 2025 15:01:03 +0000 Manifest next update: Wed 17 Dec 2025 15:01:03 +0000 Files and hashes: 1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: mzhetxt5CA4Itm+Bzf1e2Mi6MI+76hRTJ8GXUCCJ7mU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:da:8e:aa:c1:70:43:d6:5a:46:65:d0:3e:df:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1 Validity Not Before: Dec 16 15:01:03 2025 GMT Not After : Dec 17 15:01:03 2025 GMT Subject: CN=75428bc31f8c77f1d015278f95dc05dea60762b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:c0:be:de:cf:13:c1:6c:86:6d:b3:e0:42: 42:ac:c5:53:99:49:41:3b:eb:59:29:2c:2d:ee:30: ef:e5:b2:18:8b:1a:ce:95:69:c8:06:7c:d0:82:e2: 97:2b:08:b3:92:7e:ba:2a:62:68:ef:68:9e:ed:6f: c4:00:0b:33:b8:8c:08:28:f7:e6:27:eb:a1:4b:91: a6:37:53:b9:54:e4:e1:7f:a0:02:64:d3:b6:2d:3c: 06:08:34:78:47:05:f4:44:81:01:8e:34:ce:1c:22: 81:bf:79:03:89:98:80:f8:3d:44:69:b6:d8:23:ad: 9a:f8:87:42:d3:28:f4:40:5c:4f:dc:f2:ba:ef:f7: 3c:de:25:48:aa:b5:83:23:60:f3:ad:a5:83:6a:58: 88:03:d4:77:70:55:da:41:5e:17:c0:ff:54:54:07: 20:00:21:5e:4d:47:18:cc:1e:fd:3f:8b:3d:13:9b: de:7f:a7:54:6a:5d:14:9e:e2:da:39:03:69:81:f5: 76:b2:be:d9:0d:64:03:2e:4f:6e:e5:45:91:9d:2f: e4:7a:05:c8:94:48:18:23:95:94:9c:c6:a6:4e:13: 8e:55:ec:e0:31:c0:86:3c:79:a8:e0:36:fd:dc:24: e5:92:3e:2d:d6:f5:4b:88:ba:87:7c:e6:49:50:c6: 4b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:8B:C3:1F:8C:77:F1:D0:15:27:8F:95:DC:05:DE:A6:07:62:B1 X509v3 Authority Key Identifier: keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a3:dd:2d:f2:36:41:be:b7:cb:94:eb:09:44:1a:a3:4f:8b: 42:5b:13:8e:95:dd:ac:a0:62:e1:8d:3a:6d:b8:ed:a8:0d:a7: 9c:d2:d4:18:15:48:60:99:2a:32:47:4d:22:49:64:54:e5:f9: e9:ac:5b:d3:14:0c:9d:8e:2d:12:c1:f9:cb:f5:89:b7:fe:55: 85:86:8f:52:03:1c:d8:c7:8b:70:b6:90:7a:a6:b8:90:47:b2: 77:0a:7b:5f:11:d5:ab:37:03:ea:fd:5b:e5:68:da:bd:b9:4b: ee:52:96:3a:a7:2e:87:94:17:b3:ea:9f:3b:d2:64:90:0b:bb: 7a:8b:23:f5:e8:2a:90:82:27:0f:94:45:ed:a8:a9:84:c6:8b: ae:4b:96:c0:8d:98:6f:7a:cf:67:ad:d3:5a:b1:f1:ed:14:59: a2:0c:fc:5e:34:62:72:da:24:47:28:f6:17:f6:a7:e3:41:0d: ad:66:37:58:c5:91:0f:47:11:b3:df:29:ac:08:f0:7b:ce:32: e3:1f:21:d9:a7:ee:33:e0:a7:b4:0f:c7:b4:9c:15:72:6d:8c: af:83:6b:a6:07:b4:fe:de:13:9e:f0:3d:34:76:4f:ab:5b:e9: d3:ba:d1:c2:68:7e:7e:e3:35:ac:12:9b:84:dc:e4:a6:ec:f3: 12:20:f5:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrdqOqsFwQ9ZaRmXQPt+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2MzYmFiZDUzYzQ0Y2Q3NjE0NWFmODdkNDIzNzAzMTdl OGQwYzEwHhcNMjUxMjE2MTUwMTAzWhcNMjUxMjE3MTUwMTAzWjAzMTEwLwYDVQQD Eyg3NTQyOGJjMzFmOGM3N2YxZDAxNTI3OGY5NWRjMDVkZWE2MDc2MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskTAvt7PE8Fshm2z4EJCrMVTmUlB O+tZKSwt7jDv5bIYixrOlWnIBnzQguKXKwizkn66KmJo72ie7W/EAAszuIwIKPfm J+uhS5GmN1O5VOThf6ACZNO2LTwGCDR4RwX0RIEBjjTOHCKBv3kDiZiA+D1EabbY I62a+IdC0yj0QFxP3PK67/c83iVIqrWDI2DzraWDaliIA9R3cFXaQV4XwP9UVAcg ACFeTUcYzB79P4s9E5vef6dUal0UnuLaOQNpgfV2sr7ZDWQDLk9u5UWRnS/kegXI lEgYI5WUnMamThOOVezgMcCGPHmo4Db93CTlkj4t1vVLiLqHfOZJUMZLrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVCi8MfjHfx0BUnj5XcBd6mB2KxMB8GA1UdIwQY MBaAFOrMO6vVPETNdhRa+H1CNwMX6NDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUt M2I0YzUwMTkyOWM1LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUtM2I0YzUwMTkyOWM1 LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKPdLfI2 Qb63y5TrCUQao0+LQlsTjpXdrKBi4Y06bbjtqA2nnNLUGBVIYJkqMkdNIklkVOX5 6axb0xQMnY4tEsH5y/WJt/5VhYaPUgMc2MeLcLaQeqa4kEeydwp7XxHVqzcD6v1b 5WjavblL7lKWOqcuh5QXs+qfO9JkkAu7eosj9egqkIInD5RF7aiphMaLrkuWwI2Y b3rPZ63TWrHx7RRZogz8XjRictokRyj2F/an40ENrWY3WMWRD0cRs98prAjwe84y 4x8h2afuM+CntA/HtJwVcm2Mr4Nrpge0/t4TnvA9NHZPq1vp07rRwmh+fuM1rBKb hNzkpuzzEiD12g== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:57 2025 by rpki-client