This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft File: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json) Hash identifier: Eh+9hFhJduNqtLF907n7fAfhrGaSVCxP8SwhGepRFCU= Subject key identifier: 65:3D:E0:6D:48:3B:C7:61:BD:60:BC:DF:79:7E:88:1A:F6:FE:2D:22 Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4 Certificate issuer: /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4 Certificate serial: 019B3CB4F7C0ACA6BBEB1482BE9135217297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft Manifest number: 128F Signing time: Sat 20 Dec 2025 17:00:51 +0000 Manifest this update: Sat 20 Dec 2025 17:00:51 +0000 Manifest next update: Sun 21 Dec 2025 17:00:51 +0000 Files and hashes: 1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: y/CEGEQ8eTrCtELl+mlQXhwYPpjGjOTJo2CCpZXb2wU=) 2: zzkHgU3pPK_renmca_tjyEqX_S4.roa (hash: ANmTP8T5HJ5lr31OcBilkarY0aetBNgPCtaIRztJMUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f7:c0:ac:a6:bb:eb:14:82:be:91:35:21:72:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4 Validity Not Before: Dec 20 17:00:51 2025 GMT Not After : Dec 21 17:00:51 2025 GMT Subject: CN=653de06d483bc761bd60bcdf797e881af6fe2d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:66:b2:27:f9:7c:59:9a:e5:7d:90:99:13:c0: 9b:e9:86:fb:f4:2f:3b:a4:09:e3:1d:06:ed:86:44: 25:29:34:a7:3c:87:10:6b:cd:bf:f9:63:56:e6:51: 94:57:60:18:ec:1e:1b:8e:b8:21:95:86:49:fb:60: 9b:34:1b:24:5f:ad:35:f5:3f:70:95:d1:cf:bd:b9: 28:15:a7:54:d6:86:3c:e4:23:21:e6:53:38:85:63: b2:18:ee:5d:45:70:0b:88:fc:cb:7e:6e:55:61:5e: c9:22:4e:67:4b:15:eb:36:a7:6c:b4:f0:05:7d:99: dc:f0:16:3f:bc:e6:6a:ee:43:7d:d8:58:42:f7:9c: d9:89:ef:36:12:d4:d9:62:1e:ad:84:55:38:b6:79: 12:c6:86:0d:ca:22:7b:7e:3c:5b:31:10:80:6c:33: d8:c2:f4:00:85:c8:c8:30:2d:a8:39:9a:d0:3d:c0: 5d:48:2b:2e:82:65:6a:65:42:80:b4:fc:75:ec:82: 13:6e:a5:cd:c4:93:fc:da:06:4b:6b:9c:a0:5b:53: 38:07:a2:86:cf:09:f9:46:f5:1a:25:25:74:77:56: a2:a2:ad:36:fa:74:12:17:db:e5:c1:9c:91:75:36: 96:a6:f9:b0:07:78:f7:e7:7b:b4:37:35:c6:5e:1b: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:E0:6D:48:3B:C7:61:BD:60:BC:DF:79:7E:88:1A:F6:FE:2D:22 X509v3 Authority Key Identifier: keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8b:1c:5f:d9:55:23:99:d4:ec:f1:28:92:f1:8c:26:8e:6a: 06:41:a8:42:22:1a:d0:b8:9c:6d:13:88:d1:d4:70:52:f2:13: af:ff:d4:aa:84:0e:d5:7f:65:a5:ae:f7:a2:a3:90:7c:ea:b5: e5:3c:bb:5c:82:f2:1a:e8:7f:c9:f4:bf:69:e5:e6:19:f5:d7: 7d:aa:19:d2:ac:3f:bc:72:3c:13:fc:bc:cb:77:b3:e0:5b:88: a6:83:2e:21:b0:05:02:ee:bd:35:1f:e8:17:a8:ff:f9:66:64: a6:b1:c8:66:33:43:28:8a:3e:5b:f7:b6:3c:51:60:6b:35:45: 22:57:2b:ce:13:6b:5e:38:5b:ef:c0:ea:a4:48:c3:b7:80:16: 8e:ee:5a:25:59:69:bf:ed:61:21:ef:49:c8:5b:5b:5b:6c:8d: 5e:01:03:d2:d4:ef:2a:7e:8b:69:fd:74:17:78:a9:a2:2f:a5: 6c:57:0a:61:86:0c:02:fe:d3:f1:df:45:35:32:8b:a6:3f:f3: aa:b4:f6:51:86:8c:bc:a1:8a:7c:2b:d0:1d:f9:2e:50:13:10: 56:e8:bc:f0:1d:da:6d:59:92:93:2b:bb:82:f7:86:52:a2:0e: d0:77:0b:96:3d:f3:fc:76:4a:1b:39:3e:fe:78:38:fe:aa:9c: 00:b9:db:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPfArKa76xSCvpE1IXKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OTY0ZTRlOGZmZTMxZjY5MmY3MTMxOGMyYjcyODIwMjhk MGYzYTQwHhcNMjUxMjIwMTcwMDUxWhcNMjUxMjIxMTcwMDUxWjAzMTEwLwYDVQQD Eyg2NTNkZTA2ZDQ4M2JjNzYxYmQ2MGJjZGY3OTdlODgxYWY2ZmUyZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mayJ/l8WZrlfZCZE8Cb6Yb79C87 pAnjHQbthkQlKTSnPIcQa82/+WNW5lGUV2AY7B4bjrghlYZJ+2CbNBskX6019T9w ldHPvbkoFadU1oY85CMh5lM4hWOyGO5dRXALiPzLfm5VYV7JIk5nSxXrNqdstPAF fZnc8BY/vOZq7kN92FhC95zZie82EtTZYh6thFU4tnkSxoYNyiJ7fjxbMRCAbDPY wvQAhcjIMC2oOZrQPcBdSCsugmVqZUKAtPx17IITbqXNxJP82gZLa5ygW1M4B6KG zwn5RvUaJSV0d1aioq02+nQSF9vlwZyRdTaWpvmwB3j353u0NzXGXhv5owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU94G1IO8dhvWC833l+iBr2/i0iMB8GA1UdIwQY MBaAFOiWTk6P/jH2kvcTGMK3KCAo0POkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUt NWE2NjU2NTVlYjU3LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUtNWE2NjU2NTVlYjU3 LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4scX9lV I5nU7PEokvGMJo5qBkGoQiIa0LicbROI0dRwUvITr//UqoQO1X9lpa73oqOQfOq1 5Ty7XILyGuh/yfS/aeXmGfXXfaoZ0qw/vHI8E/y8y3ez4FuIpoMuIbAFAu69NR/o F6j/+WZkprHIZjNDKIo+W/e2PFFgazVFIlcrzhNrXjhb78DqpEjDt4AWju5aJVlp v+1hIe9JyFtbW2yNXgED0tTvKn6Laf10F3ipoi+lbFcKYYYMAv7T8d9FNTKLpj/z qrT2UYaMvKGKfCvQHfkuUBMQVui88B3abVmSkyu7gveGUqIO0HcLlj3z/HZKGzk+ /ng4/qqcALnb4g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:04 2025 by rpki-client