This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft File: 6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json) Hash identifier: e8SrW3QvvG8d/3W0h92bnxL+WGHnhlPP6BDUipaHirk= Subject key identifier: 1A:CA:4F:94:E6:64:0D:AD:B1:B0:28:73:B4:79:B0:C5:81:B7:60:4E Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4 Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4 Certificate serial: 019B3BA25BE70CA55604DC21851CB02B25A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft Manifest number: 11D6 Signing time: Sat 20 Dec 2025 12:00:54 +0000 Manifest this update: Sat 20 Dec 2025 12:00:54 +0000 Manifest next update: Sun 21 Dec 2025 12:00:54 +0000 Files and hashes: 1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: 97gFVQ9fMrmjcTAL11OCpFzax8FjxiQJXIjDytNpZwE=) 2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=) 3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=) 4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=) 5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=) 6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:5b:e7:0c:a5:56:04:dc:21:85:1c:b0:2b:25:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4 Validity Not Before: Dec 20 12:00:54 2025 GMT Not After : Dec 21 12:00:54 2025 GMT Subject: CN=1aca4f94e6640dadb1b02873b479b0c581b7604e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:ff:42:cc:39:98:d0:1a:05:31:f5:be:50: 4d:10:f8:3d:2e:03:12:a5:92:ed:91:17:5a:0a:bc: eb:64:65:3f:d5:63:df:43:5d:c8:ba:29:d9:09:0c: 17:66:88:e4:be:7e:59:14:d3:4e:9c:28:78:ea:74: 81:82:73:6a:fd:6d:cf:7a:09:ec:77:86:9f:62:29: b7:60:a7:de:0c:26:6c:c1:59:ca:a2:8c:ed:5f:1a: cb:83:db:e6:62:85:64:82:86:1b:c2:25:9d:ab:d7: 65:52:84:bf:f1:39:e4:8e:f1:23:d2:1c:e4:ab:41: 5a:00:6c:da:98:93:04:75:f7:4e:82:6a:cc:bc:0b: c8:a5:53:b7:89:e7:4f:f0:2d:ac:ee:22:b6:a3:a8: a7:39:f3:c3:52:77:89:bb:d0:6c:6f:7e:ff:81:cc: 97:ef:a4:51:40:72:40:19:b5:f3:00:2e:7a:99:1b: 67:46:0c:e8:08:94:38:c9:66:ed:3c:b6:4e:83:c0: 9e:12:3f:39:75:c2:ba:74:b5:de:b2:11:d0:70:a5: 89:aa:a4:e0:39:d0:f6:30:32:f1:98:df:63:13:83: b6:41:d5:40:23:45:76:f0:d2:92:86:0d:63:e1:65: 4c:c4:4d:67:91:74:26:9a:7a:1a:2d:78:4b:3d:05: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CA:4F:94:E6:64:0D:AD:B1:B0:28:73:B4:79:B0:C5:81:B7:60:4E X509v3 Authority Key Identifier: keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:38:e3:1d:ee:5f:89:b0:14:b7:1d:49:aa:54:ea:39:54:f4: 74:2c:22:30:11:c3:43:8c:d7:3b:2e:73:02:5e:48:ee:42:1d: 63:c3:1e:c0:00:4e:83:89:49:04:4b:5d:a7:e3:73:c1:23:32: 82:5b:66:41:3c:60:2e:7b:e9:08:86:68:9a:92:50:9f:50:b9: 75:88:96:2a:f5:b2:fa:85:47:85:98:82:22:d3:ae:ad:c9:fa: 11:4b:e3:48:68:89:af:91:68:8e:32:e0:d2:62:61:94:02:a5: 6d:57:a8:48:1d:5f:d1:50:f8:0f:05:51:df:b2:29:44:e6:fb: 98:0f:94:2a:de:d2:40:a6:18:4b:a0:05:df:68:5c:71:36:2c: 30:33:c9:a7:db:59:50:6a:7f:f0:6f:42:ef:92:21:a2:a2:dd: 9c:65:37:4e:4d:50:e1:3d:9a:a7:9e:f2:47:c5:da:87:ee:07: 4a:6b:0e:51:9f:ff:94:fb:b3:86:49:39:48:48:64:6f:be:32: e0:4f:39:ef:c6:de:9d:a4:51:b3:8e:c8:f8:7a:91:e2:2e:d1: a7:f3:13:a0:8a:e9:0c:ce:97:64:36:38:e7:e5:30:e1:40:07: 76:04:d5:c3:9e:c1:d4:ba:76:67:ad:58:93:91:15:a6:ff:76: 5d:c5:f4:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olvnDKVWBNwhhRywKyWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz MjkwYTQwHhcNMjUxMjIwMTIwMDU0WhcNMjUxMjIxMTIwMDU0WjAzMTEwLwYDVQQD EygxYWNhNGY5NGU2NjQwZGFkYjFiMDI4NzNiNDc5YjBjNTgxYjc2MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRD/Qsw5mNAaBTH1vlBNEPg9LgMS pZLtkRdaCrzrZGU/1WPfQ13IuinZCQwXZojkvn5ZFNNOnCh46nSBgnNq/W3Pegns d4afYim3YKfeDCZswVnKooztXxrLg9vmYoVkgoYbwiWdq9dlUoS/8TnkjvEj0hzk q0FaAGzamJMEdfdOgmrMvAvIpVO3iedP8C2s7iK2o6inOfPDUneJu9Bsb37/gcyX 76RRQHJAGbXzAC56mRtnRgzoCJQ4yWbtPLZOg8CeEj85dcK6dLXeshHQcKWJqqTg OdD2MDLxmN9jE4O2QdVAI0V28NKShg1j4WVMxE1nkXQmmnoaLXhLPQXQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrKT5TmZA2tsbAoc7R5sMWBt2BOMB8GA1UdIwQY MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt NzI0YjFhMDIxMmQ0LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0 LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzjjHe5f ibAUtx1JqlTqOVT0dCwiMBHDQ4zXOy5zAl5I7kIdY8MewABOg4lJBEtdp+NzwSMy gltmQTxgLnvpCIZompJQn1C5dYiWKvWy+oVHhZiCItOurcn6EUvjSGiJr5FojjLg 0mJhlAKlbVeoSB1f0VD4DwVR37IpROb7mA+UKt7SQKYYS6AF32hccTYsMDPJp9tZ UGp/8G9C75IhoqLdnGU3Tk1Q4T2ap57yR8Xah+4HSmsOUZ//lPuzhkk5SEhkb74y 4E8578benaRRs47I+HqR4i7Rp/MToIrpDM6XZDY45+Uw4UAHdgTVw57B1Lp2Z61Y k5EVpv92XcX0jQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:46:16 2025 by rpki-client