This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json) Hash identifier: YndEXvAtQIDINktXTzYMGI7p5OggP7eONmEWEtWmouk= Subject key identifier: FA:4F:7C:3D:AB:28:E5:A6:AA:CA:65:FC:DD:9B:CF:A9:F6:09:15:9F Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c Certificate serial: 019B32D5CE6AAB9B711A4E4A228BB263E7EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft Manifest number: 1263 Signing time: Thu 18 Dec 2025 19:00:31 +0000 Manifest this update: Thu 18 Dec 2025 19:00:31 +0000 Manifest next update: Fri 19 Dec 2025 19:00:31 +0000 Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: Cq4XYQGBTq7/Gu35XbQiftOlqUaeaZW1+1VEFuM1AkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:ce:6a:ab:9b:71:1a:4e:4a:22:8b:b2:63:e7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c Validity Not Before: Dec 18 19:00:31 2025 GMT Not After : Dec 19 19:00:31 2025 GMT Subject: CN=fa4f7c3dab28e5a6aaca65fcdd9bcfa9f609159f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:b7:a2:ba:2b:74:6f:2c:3f:55:d4:e8:36: 4c:2e:31:97:08:8f:a9:dd:63:72:23:87:66:d0:91: 5f:a4:45:7f:86:3f:a6:de:59:25:e3:bc:6f:b8:5f: 72:57:8a:10:ea:3f:5d:92:87:cd:11:4c:58:3b:b4: 7a:b2:80:8b:cd:b1:6a:7c:f8:8b:35:ba:13:9d:74: 08:58:20:f5:27:84:48:eb:0d:cb:c4:48:f7:63:ef: 1e:e9:32:b6:6a:fb:dd:ea:cc:cb:0e:71:a0:83:bc: 08:5f:0c:51:e1:39:76:90:58:c0:13:61:d9:f5:d1: b3:92:b2:34:f8:22:b8:f0:64:67:82:33:25:36:94: 7f:73:9b:80:2d:d5:2b:69:65:49:25:c9:d8:87:6b: 7b:e7:16:d9:e2:18:fe:5f:50:7d:ee:21:ba:4d:a7: 91:61:be:08:7b:b2:f5:3b:44:0c:76:58:00:d3:e2: ce:64:cd:70:e5:5e:05:59:1c:32:24:80:a5:57:75: 58:01:2b:a8:1a:8d:c2:46:94:53:03:b8:8c:a8:4a: 04:77:fc:41:cd:c7:2f:3c:16:05:59:49:e8:68:f3: 04:5f:60:2f:a8:80:ff:12:08:cc:c8:80:f3:a1:b0: 31:1b:37:54:c5:ae:30:5a:d3:6f:61:6c:ba:a6:95: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4F:7C:3D:AB:28:E5:A6:AA:CA:65:FC:DD:9B:CF:A9:F6:09:15:9F X509v3 Authority Key Identifier: keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:20:ac:24:33:74:8f:ff:54:29:9d:f0:59:49:ee:fd:bb:5c: 91:6a:ee:25:ae:04:30:dc:f4:a0:d1:89:12:2d:67:02:79:eb: de:d7:5c:a4:d6:6b:c8:0f:32:fb:19:40:f8:75:a6:57:24:57: d4:ce:29:18:66:80:c4:77:53:e9:2c:4d:dc:64:89:43:5c:53: e3:60:11:60:ad:cf:dc:12:98:3e:91:f5:a1:38:26:e1:e4:a1: 87:ae:86:d2:ef:07:83:b3:45:f5:6f:51:52:7a:68:55:74:a2: 09:19:29:c0:47:fb:61:f9:b7:af:89:9a:fb:23:e8:22:f4:4c: 02:1d:e4:c4:77:91:45:e3:04:37:5a:94:28:07:04:cc:54:8b: 83:fc:18:53:3b:17:d1:01:c0:08:f9:cb:b9:1f:7a:e2:96:fb: 65:a6:11:eb:ed:37:37:08:6d:e9:7d:68:cb:3a:50:e3:38:d4: 06:62:6f:2c:68:34:c7:bd:da:ff:96:fc:26:94:81:35:a9:0f: cc:93:3b:2e:7a:e1:2f:7a:cb:de:c9:6f:a1:ca:50:85:69:a8: 4a:27:bc:26:e9:d0:73:16:1d:e8:0f:3f:8b:8e:be:62:d8:a0: 26:dc:c8:c7:0f:6a:d1:4e:c1:f9:44:9a:77:1e:7b:46:62:3a: 85:94:77:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1c5qq5txGk5KIouyY+fqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTAxYTY4ZDkxMDkzZTdkZWYyZjRlMDMxMDMxZDExNGQ0 M2JhM2MwHhcNMjUxMjE4MTkwMDMxWhcNMjUxMjE5MTkwMDMxWjAzMTEwLwYDVQQD EyhmYTRmN2MzZGFiMjhlNWE2YWFjYTY1ZmNkZDliY2ZhOWY2MDkxNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn++3orordG8sP1XU6DZMLjGXCI+p 3WNyI4dm0JFfpEV/hj+m3lkl47xvuF9yV4oQ6j9dkofNEUxYO7R6soCLzbFqfPiL NboTnXQIWCD1J4RI6w3LxEj3Y+8e6TK2avvd6szLDnGgg7wIXwxR4Tl2kFjAE2HZ 9dGzkrI0+CK48GRngjMlNpR/c5uALdUraWVJJcnYh2t75xbZ4hj+X1B97iG6TaeR Yb4Ie7L1O0QMdlgA0+LOZM1w5V4FWRwyJIClV3VYASuoGo3CRpRTA7iMqEoEd/xB zccvPBYFWUnoaPMEX2AvqID/EgjMyIDzobAxGzdUxa4wWtNvYWy6ppX3owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpPfD2rKOWmqspl/N2bz6n2CRWfMB8GA1UdIwQY MBaAFOpQGmjZEJPn3vL04DEDHRFNQ7o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjIt MzQ1ZTE3ZjlkNjMyLzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjItMzQ1ZTE3ZjlkNjMy LzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCCsJDN0 j/9UKZ3wWUnu/btckWruJa4EMNz0oNGJEi1nAnnr3tdcpNZryA8y+xlA+HWmVyRX 1M4pGGaAxHdT6SxN3GSJQ1xT42ARYK3P3BKYPpH1oTgm4eShh66G0u8Hg7NF9W9R UnpoVXSiCRkpwEf7Yfm3r4ma+yPoIvRMAh3kxHeRReMEN1qUKAcEzFSLg/wYUzsX 0QHACPnLuR964pb7ZaYR6+03Nwht6X1oyzpQ4zjUBmJvLGg0x73a/5b8JpSBNakP zJM7LnrhL3rL3slvocpQhWmoSie8JunQcxYd6A8/i46+YtigJtzIxw9q0U7B+USa dx57RmI6hZR3jQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:11 2025 by rpki-client