This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json) Hash identifier: DEKzXIAijsA2uXLEvzsarm0xd1hcrm6BCWApc8MhubI= Subject key identifier: 40:78:E8:EF:5A:3F:FB:68:DA:CD:26:DD:3E:E4:17:49:39:AB:A3:E7 Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b Certificate serial: 019B427FDEB9EB3028A267D9861BF07570E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft Manifest number: 06DC Signing time: Sun 21 Dec 2025 20:00:34 +0000 Manifest this update: Sun 21 Dec 2025 20:00:34 +0000 Manifest next update: Mon 22 Dec 2025 20:00:34 +0000 Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: RJGE6PVKpvZPg7QpjwoW1ngTttP7s3ISQmVcgnOYMzQ=) 2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=) 3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:de:b9:eb:30:28:a2:67:d9:86:1b:f0:75:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b Validity Not Before: Dec 21 20:00:34 2025 GMT Not After : Dec 22 20:00:34 2025 GMT Subject: CN=4078e8ef5a3ffb68dacd26dd3ee4174939aba3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:bb:81:5e:77:49:55:45:0c:3d:91:87:02: 57:f3:10:a0:23:a5:70:e0:4e:92:29:9d:55:2c:c7: 31:f4:96:3e:cc:ee:70:49:30:3d:59:fc:87:c3:89: 8a:eb:bc:16:0d:8f:4e:65:6e:49:d8:db:9a:cd:df: c2:79:8e:00:e5:90:e7:35:c2:da:9a:c6:f3:45:fc: 00:b9:eb:8b:e5:ed:43:6f:bb:a2:d5:95:27:36:bd: 3a:fb:e8:09:c0:1a:c6:b4:0f:2a:82:54:29:84:aa: f1:c4:c0:dd:26:8b:b6:d3:d3:ef:69:4b:7f:c3:e3: f5:17:e9:ed:30:76:78:69:27:97:b0:eb:2e:2f:cf: ff:d8:82:a4:a7:f6:f7:26:5a:b8:73:3f:8f:c2:57: 7a:c7:99:3b:f2:b8:af:e8:8b:ef:ae:19:03:39:78: 70:d7:e3:0a:7b:ac:75:fe:2f:ea:32:2a:fa:b0:80: a3:2f:d1:b7:48:75:76:26:13:1f:e1:59:3d:73:0c: 38:e3:f4:18:37:06:da:69:c4:1e:87:d8:d0:97:55: 25:1a:d5:70:21:7b:2b:9b:4f:10:5e:ff:ba:5c:16: d4:63:3e:33:f9:80:69:00:c2:e4:ae:fa:85:f6:e7: ae:56:07:f4:9c:5e:50:a1:c2:b3:1a:13:fc:d2:9a: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:78:E8:EF:5A:3F:FB:68:DA:CD:26:DD:3E:E4:17:49:39:AB:A3:E7 X509v3 Authority Key Identifier: keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:1a:d8:c0:77:e0:fb:88:6a:47:27:40:0d:9a:15:4a:e8: 36:e9:6b:73:97:37:20:d4:c0:cb:c4:bf:b2:fa:97:87:18:3d: e0:f3:c3:a7:f8:2a:5f:31:06:f6:fc:be:68:d7:3e:ac:84:2b: 84:b7:0e:85:e5:a3:31:e9:1c:cd:d3:29:68:09:61:10:2e:ec: a6:fb:74:02:9c:c4:1c:ec:28:91:d6:df:0e:e9:5c:da:07:f5: 65:30:00:63:b3:ea:4a:24:03:59:9b:6b:12:f3:7b:a5:d5:f8: 79:6e:1d:64:cf:d9:b3:1e:59:d9:04:ab:b5:39:4f:6f:93:03: d0:7f:89:7a:a0:9c:5e:0b:24:27:19:3b:07:34:5e:53:f7:6f: 48:a7:1d:18:c8:aa:83:c6:ba:54:f7:78:a6:3e:44:48:88:94: cc:56:b4:38:ff:78:b6:ff:76:fc:49:74:db:a7:37:ff:44:06: 6e:4c:07:73:b2:83:30:86:59:09:dc:b2:96:88:b6:a7:2a:d5: fc:ef:4e:2c:bd:aa:a7:2c:b4:46:8e:50:8f:4c:0a:3b:e6:d2: 67:b0:63:56:51:a9:9e:9d:aa:81:f0:1f:7c:9b:93:c8:87:84: 26:f4:6c:f3:28:a8:16:41:27:dc:76:cb:4a:ed:83:69:53:46: 12:65:15:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf9656zAoomfZhhvwdXDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Y2NkZjY5NTk4OTM3OWYzOTg0YzE4NjQxZTkzN2ViYjY4 MjI1OWIwHhcNMjUxMjIxMjAwMDM0WhcNMjUxMjIyMjAwMDM0WjAzMTEwLwYDVQQD Eyg0MDc4ZThlZjVhM2ZmYjY4ZGFjZDI2ZGQzZWU0MTc0OTM5YWJhM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm+7gV53SVVFDD2RhwJX8xCgI6Vw 4E6SKZ1VLMcx9JY+zO5wSTA9WfyHw4mK67wWDY9OZW5J2Nuazd/CeY4A5ZDnNcLa msbzRfwAueuL5e1Db7ui1ZUnNr06++gJwBrGtA8qglQphKrxxMDdJou209PvaUt/ w+P1F+ntMHZ4aSeXsOsuL8//2IKkp/b3Jlq4cz+Pwld6x5k78riv6IvvrhkDOXhw 1+MKe6x1/i/qMir6sICjL9G3SHV2JhMf4Vk9cww44/QYNwbaacQeh9jQl1UlGtVw IXsrm08QXv+6XBbUYz4z+YBpAMLkrvqF9ueuVgf0nF5QocKzGhP80pp3fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB46O9aP/to2s0m3T7kF0k5q6PnMB8GA1UdIwQY MBaAFOnM32lZiTefOYTBhkHpN+u2giWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYt YjM1ZjZhN2I3MjA4LzEvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYtYjM1ZjZhN2I3MjA4 LzEvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpQa2MB3 4PuIakcnQA2aFUroNulrc5c3INTAy8S/svqXhxg94PPDp/gqXzEG9vy+aNc+rIQr hLcOheWjMekczdMpaAlhEC7spvt0ApzEHOwokdbfDulc2gf1ZTAAY7PqSiQDWZtr EvN7pdX4eW4dZM/Zsx5Z2QSrtTlPb5MD0H+JeqCcXgskJxk7BzReU/dvSKcdGMiq g8a6VPd4pj5ESIiUzFa0OP94tv92/El026c3/0QGbkwHc7KDMIZZCdyyloi2pyrV /O9OLL2qpyy0Ro5Qj0wKO+bSZ7BjVlGpnp2qgfAffJuTyIeEJvRs8yioFkEn3HbL Su2DaVNGEmUVBw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:47:36 2025 by rpki-client