This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json) Hash identifier: xKfwg9HJSq/8HkW3F/mxVCBjyiME06efp4lCROfoygM= Subject key identifier: F6:D0:85:C4:FD:F6:BA:32:BD:30:83:DC:18:49:9C:48:DF:E0:D5:55 Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Certificate serial: 019B3FB6576CCEFAE0DCFA1DEEC90E56D366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft Manifest number: 17A4 Signing time: Sun 21 Dec 2025 07:01:12 +0000 Manifest this update: Sun 21 Dec 2025 07:01:12 +0000 Manifest next update: Mon 22 Dec 2025 07:01:12 +0000 Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: NPFwyx1S538CSfXaPGr0Q27VFIwL40/Pez9odrluvos=) 2: CgTYr4EhLa24IM21Hqih4Qqwlhs.roa (hash: L3KclJobQeVHsKxlYqzQz1I9Nwx/XkKtDyzqL3uEzCQ=) 3: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=) 4: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:57:6c:ce:fa:e0:dc:fa:1d:ee:c9:0e:56:d3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Validity Not Before: Dec 21 07:01:12 2025 GMT Not After : Dec 22 07:01:12 2025 GMT Subject: CN=f6d085c4fdf6ba32bd3083dc18499c48dfe0d555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:1d:e5:de:dc:c6:dd:e2:a4:83:1a:7b:fc: 11:f0:31:57:ef:61:f9:b7:61:c4:cb:f5:b5:68:c0: 70:67:03:b3:96:e4:95:fe:7a:4c:b2:c2:b3:fa:9a: f3:18:3b:02:47:75:bf:03:45:be:bd:13:c7:af:1c: f6:19:e9:2c:97:b8:64:1f:79:c9:5d:5a:08:a4:5f: a6:b4:0a:bd:3c:f7:3b:64:03:a6:ee:17:8b:96:5b: ea:05:60:1a:ab:d8:20:94:f7:3d:ce:ec:20:a8:66: 00:46:73:6c:31:a4:77:09:e4:11:15:ab:c8:d3:2f: c3:fd:65:b2:0e:be:c3:01:c7:17:cf:57:d1:55:cb: d2:5c:6d:1e:db:55:bb:ce:4b:54:d4:a8:58:1c:14: 28:3d:64:7f:03:9c:f3:3b:1f:f3:2a:eb:54:a8:65: ba:db:45:44:08:e9:98:84:de:34:f4:3f:2a:c3:36: 90:78:c7:73:85:e7:e3:f6:9e:42:52:a9:2f:79:63: 08:89:65:bd:62:61:4f:32:6a:0c:c4:8f:8b:fa:93: 8e:37:cb:6c:c5:68:23:27:b3:cf:84:a0:7f:45:a4: 9d:07:61:a7:16:d1:8d:7c:26:18:37:64:8a:d0:3f: fa:fd:7c:65:a1:9c:5b:fe:3c:b7:15:ef:b2:00:5e: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D0:85:C4:FD:F6:BA:32:BD:30:83:DC:18:49:9C:48:DF:E0:D5:55 X509v3 Authority Key Identifier: keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:27:04:07:76:ee:b9:1c:2b:f2:fa:0b:f9:eb:bc:dd:9e:07: 04:9c:93:f2:be:12:15:70:33:71:98:bd:a4:58:76:08:c4:01: cc:a6:60:06:ee:a4:34:46:1c:f9:0f:75:f1:6d:df:f4:e0:14: 76:52:6a:36:c9:00:e8:fa:8e:30:1f:36:04:20:e5:d8:1d:77: 6f:77:e1:94:75:71:c6:db:4d:11:a6:ac:e8:2c:08:65:d9:2a: 33:d4:fe:56:16:b8:9c:b3:89:7f:1a:d7:88:9b:be:93:9d:b0: 23:83:cb:96:c6:4e:d8:8d:17:c8:15:89:de:d4:07:33:37:d1: e4:f0:1f:73:60:aa:ae:c4:55:c2:49:1d:aa:a0:b8:ea:51:24: 38:9a:38:9c:0f:cb:fc:ad:ce:13:a0:5d:1d:ce:77:d6:78:a0: fe:41:10:1b:7a:25:e1:e8:66:11:44:fe:9b:c3:22:c5:12:d2: fa:08:ba:9a:5e:d6:a2:c5:f4:75:50:28:1c:ab:29:7c:a6:c5: 31:99:36:ce:c7:9e:43:4a:80:b3:7b:35:7c:eb:13:6b:e8:dc: d8:f5:73:5b:2e:61:65:fd:7d:0b:d9:f9:53:56:c6:6b:58:2d: f1:34:e3:fd:0f:6b:c0:aa:05:f9:c7:44:13:a4:f3:3b:9e:09: cf:76:e7:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tldszvrg3Pod7skOVtNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1 YWI3Y2YwHhcNMjUxMjIxMDcwMTEyWhcNMjUxMjIyMDcwMTEyWjAzMTEwLwYDVQQD EyhmNmQwODVjNGZkZjZiYTMyYmQzMDgzZGMxODQ5OWM0OGRmZTBkNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Id5d7cxt3ipIMae/wR8DFX72H5 t2HEy/W1aMBwZwOzluSV/npMssKz+przGDsCR3W/A0W+vRPHrxz2Geksl7hkH3nJ XVoIpF+mtAq9PPc7ZAOm7heLllvqBWAaq9gglPc9zuwgqGYARnNsMaR3CeQRFavI 0y/D/WWyDr7DAccXz1fRVcvSXG0e21W7zktU1KhYHBQoPWR/A5zzOx/zKutUqGW6 20VECOmYhN409D8qwzaQeMdzhefj9p5CUqkveWMIiWW9YmFPMmoMxI+L+pOON8ts xWgjJ7PPhKB/RaSdB2GnFtGNfCYYN2SK0D/6/XxloZxb/jy3Fe+yAF7bRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbQhcT99royvTCD3BhJnEjf4NVVMB8GA1UdIwQY MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5 LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeycEB3bu uRwr8voL+eu83Z4HBJyT8r4SFXAzcZi9pFh2CMQBzKZgBu6kNEYc+Q918W3f9OAU dlJqNskA6PqOMB82BCDl2B13b3fhlHVxxttNEaas6CwIZdkqM9T+Vha4nLOJfxrX iJu+k52wI4PLlsZO2I0XyBWJ3tQHMzfR5PAfc2CqrsRVwkkdqqC46lEkOJo4nA/L /K3OE6BdHc531nig/kEQG3ol4ehmEUT+m8MixRLS+gi6ml7WosX0dVAoHKspfKbF MZk2zseeQ0qAs3s1fOsTa+jc2PVzWy5hZf19C9n5U1bGa1gt8TTj/Q9rwKoF+cdE E6TzO54Jz3bnBg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:31 2025 by rpki-client