This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft File: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json) Hash identifier: 2gcTQ/jyBNGW+Bp1Y57MCC4SCDkBTkfHc1mugv3lScE= Subject key identifier: E6:3F:82:AC:7D:C0:22:D1:4B:DE:08:67:EB:D9:3B:3A:4E:37:0A:EC Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD Certificate issuer: /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd Certificate serial: 019B32D6BEFEDC5A2E86D6663F642CB4838B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft Manifest number: 0DDA Signing time: Thu 18 Dec 2025 19:01:32 +0000 Manifest this update: Thu 18 Dec 2025 19:01:32 +0000 Manifest next update: Fri 19 Dec 2025 19:01:32 +0000 Files and hashes: 1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: ETdnk6pNSqK5JunPqZHom89aeLCVFWNsKhaDG1FJaPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:be:fe:dc:5a:2e:86:d6:66:3f:64:2c:b4:83:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd Validity Not Before: Dec 18 19:01:32 2025 GMT Not After : Dec 19 19:01:32 2025 GMT Subject: CN=e63f82ac7dc022d14bde0867ebd93b3a4e370aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:3b:93:2a:89:7f:73:23:63:d7:7a:01:61: 60:08:8f:19:74:ce:51:4b:58:54:5c:48:1c:51:b1: cc:ba:22:68:2a:68:27:17:f7:1b:61:e5:e0:21:d5: bf:d7:53:b8:7a:0c:da:b5:b7:0f:be:84:d6:ec:53: 96:f8:6c:40:25:98:95:82:f9:59:ab:a9:38:a1:c6: 3a:59:08:38:06:23:38:ec:1f:3b:e9:d3:b2:b1:92: 8a:6e:66:d5:cb:8e:35:65:40:1f:90:1b:eb:ba:98: 0c:4f:2f:c0:91:7d:f9:5d:bf:2f:fb:40:9c:53:1a: cf:8a:10:dd:b9:a8:0a:b1:e4:4d:6e:96:e8:c1:1c: e1:cf:03:5e:96:ba:6f:a0:f8:7c:c2:e9:05:9d:29: 9e:4e:61:7c:2f:ae:79:0d:24:c2:20:d2:c0:08:02: 33:ad:62:1a:16:d2:9d:1e:a5:16:5e:95:5e:de:15: 4e:11:03:d7:f8:88:bf:62:dd:a8:c1:d1:97:df:21: 4e:d4:ff:ea:d5:96:2a:4e:d5:94:c8:cb:5f:91:5e: 77:f7:cf:63:b9:85:ee:28:13:1a:f5:96:29:39:b8: 83:78:30:b2:66:3e:df:75:95:21:60:1c:22:84:7b: b0:ca:52:18:c2:66:b7:eb:31:56:6b:2d:c0:2f:31: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:82:AC:7D:C0:22:D1:4B:DE:08:67:EB:D9:3B:3A:4E:37:0A:EC X509v3 Authority Key Identifier: keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a7:26:ce:6b:da:bc:8e:c8:64:0c:2a:28:46:cd:73:ad:18: fa:8e:d4:68:86:80:7d:4f:46:ef:a0:10:16:81:a6:cd:ee:d7: 3a:69:40:5e:b1:b1:2c:0c:17:26:08:33:f6:ca:82:88:c7:a4: 13:ab:ca:87:76:21:1a:39:e6:1b:07:c1:6a:84:c7:df:6e:76: 71:c7:61:ae:ca:ef:fb:6c:20:c2:eb:54:c1:22:87:c1:61:ad: f7:e7:d4:81:dc:a5:df:8b:e0:5c:af:b8:f3:c3:30:3b:22:57: 80:75:e8:50:1f:d5:4e:f7:d0:72:18:2a:89:16:7d:e8:f0:c6: c3:7f:43:46:5e:09:87:39:35:e2:2a:52:9a:65:7a:31:43:05: 99:f8:d3:27:b2:77:6a:7e:d2:69:26:aa:43:3a:05:34:0f:01: ea:09:11:1a:ec:01:e2:4b:cc:d0:09:36:1c:35:c8:02:48:b5: 32:2e:bf:ae:ec:f8:d2:1c:a5:11:6b:1c:36:be:a2:9b:28:f7: 0e:00:eb:2f:cf:7d:4e:f3:25:65:19:81:85:cf:c0:44:15:97: c8:92:db:af:1d:bf:9f:a2:03:b7:77:b8:93:85:58:4c:ff:f0: 66:08:9b:1d:17:4b:19:82:ba:0d:b4:24:8a:f6:15:73:21:de: 63:cc:30:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1r7+3FouhtZmP2QstIOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWU0OThhZWFiYTE0NTU3NmE2MWI2MzdmMTM2ZWMxYzNm NDMwZGQwHhcNMjUxMjE4MTkwMTMyWhcNMjUxMjE5MTkwMTMyWjAzMTEwLwYDVQQD EyhlNjNmODJhYzdkYzAyMmQxNGJkZTA4NjdlYmQ5M2IzYTRlMzcwYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSs7kyqJf3MjY9d6AWFgCI8ZdM5R S1hUXEgcUbHMuiJoKmgnF/cbYeXgIdW/11O4egzatbcPvoTW7FOW+GxAJZiVgvlZ q6k4ocY6WQg4BiM47B876dOysZKKbmbVy441ZUAfkBvrupgMTy/AkX35Xb8v+0Cc UxrPihDduagKseRNbpbowRzhzwNelrpvoPh8wukFnSmeTmF8L655DSTCINLACAIz rWIaFtKdHqUWXpVe3hVOEQPX+Ii/Yt2owdGX3yFO1P/q1ZYqTtWUyMtfkV53989j uYXuKBMa9ZYpObiDeDCyZj7fdZUhYBwihHuwylIYwma36zFWay3ALzFSDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY/gqx9wCLRS94IZ+vZOzpONwrsMB8GA1UdIwQY MBaAFOjuSYrquhRVdqYbY38TbsHD9DDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgt YTA2OGFjOGIxMDI4LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgtYTA2OGFjOGIxMDI4 LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6cmzmva vI7IZAwqKEbNc60Y+o7UaIaAfU9G76AQFoGmze7XOmlAXrGxLAwXJggz9sqCiMek E6vKh3YhGjnmGwfBaoTH3252ccdhrsrv+2wgwutUwSKHwWGt9+fUgdyl34vgXK+4 88MwOyJXgHXoUB/VTvfQchgqiRZ96PDGw39DRl4Jhzk14ipSmmV6MUMFmfjTJ7J3 an7SaSaqQzoFNA8B6gkRGuwB4kvM0Ak2HDXIAki1Mi6/ruz40hylEWscNr6imyj3 DgDrL899TvMlZRmBhc/ARBWXyJLbrx2/n6IDt3e4k4VYTP/wZgibHRdLGYK6DbQk ivYVcyHeY8wwlA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:52 2025 by rpki-client