This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json) Hash identifier: nVj3uOlZvupPs8ZEHbj35MyPq4Mc34T68us7DVWYO5Y= Subject key identifier: 1B:86:33:4A:01:B2:17:A2:71:C3:A9:E6:AC:9A:B1:34:9D:60:69:1B Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d Certificate serial: 019B2DB0B82067960AC24EA7628925EB7461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft Manifest number: 0AEB Signing time: Wed 17 Dec 2025 19:01:54 +0000 Manifest this update: Wed 17 Dec 2025 19:01:54 +0000 Manifest next update: Thu 18 Dec 2025 19:01:54 +0000 Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: XZVaKWT8LkwwIUeQvNkd3WX1FNbOXQ6GgBwVl8VnX18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:b8:20:67:96:0a:c2:4e:a7:62:89:25:eb:74:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d Validity Not Before: Dec 17 19:01:54 2025 GMT Not After : Dec 18 19:01:54 2025 GMT Subject: CN=1b86334a01b217a271c3a9e6ac9ab1349d60691b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:5c:a7:ab:d4:11:37:77:15:98:de:9b:2d: 5f:ec:0d:58:8a:2f:d9:d8:9d:10:a0:61:39:21:4f: d3:89:b1:67:f0:71:2b:e7:3b:c3:25:eb:8f:e2:00: 5f:68:0a:ec:13:67:f8:4e:f3:d0:4f:8e:73:b5:73: 82:9b:3b:65:db:2b:79:83:e6:e2:24:74:4d:13:68: 00:c2:00:b1:58:93:51:93:9d:eb:e4:d9:ef:88:92: 38:f9:f4:d2:01:8f:d2:d4:40:53:bb:3c:1d:4b:0b: 09:81:19:6f:39:1f:65:35:48:70:2d:d9:36:dd:9c: 70:f5:66:d1:d8:04:83:53:5b:cd:a1:3b:73:31:a1: 5f:6c:d3:ea:df:e6:1c:f6:05:83:7e:38:dd:90:69: b3:d7:e8:07:ba:4b:e4:23:af:cd:70:1d:66:ff:28: b5:3e:54:ed:12:6d:92:b4:71:9c:01:22:6c:ba:8e: 87:59:34:a8:08:91:b8:cb:c8:87:5f:a2:0f:63:78: 64:3e:7d:71:38:6e:0e:a5:02:0e:d3:f3:3a:6e:5f: 57:5a:f5:73:c7:76:7c:8d:21:5e:f9:44:27:94:25: 86:64:bf:ea:3a:3f:9c:eb:23:91:cd:cd:02:b9:cb: d2:05:9a:a0:2e:3e:22:11:02:2b:b4:54:3f:45:37: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:86:33:4A:01:B2:17:A2:71:C3:A9:E6:AC:9A:B1:34:9D:60:69:1B X509v3 Authority Key Identifier: keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3d:cb:24:28:16:39:a6:05:f7:06:47:cf:c6:d9:69:60:40: d0:b3:d2:ab:d7:62:97:1e:21:69:b8:bf:85:ac:67:14:14:b5: 8c:d1:b4:e5:00:2a:db:89:22:12:b9:f7:30:22:21:62:99:7a: c7:1c:dd:81:72:33:18:c2:bc:ec:fe:1a:8f:fb:0b:d5:5e:f2: f0:0d:39:11:35:3d:56:5c:d4:b3:59:b6:71:7f:38:3c:45:dd: 62:56:8c:46:b8:74:6d:7b:7b:89:17:22:b7:7d:65:e0:d4:07: ac:26:50:be:c3:ea:a3:d5:2a:48:d2:14:b9:1c:e3:15:16:20: f9:49:6c:c3:02:fd:96:86:1e:6a:fe:5b:01:55:14:80:96:e1: f8:ff:d5:00:35:c3:b5:5e:3c:eb:02:8c:d0:96:d7:04:e2:dd: 58:b1:19:a9:71:aa:d4:89:c3:59:2e:d9:7f:57:0f:50:4d:c3: 50:6b:6c:e5:41:4d:28:b0:c2:59:bc:0d:7d:3e:d3:70:c4:3f: 40:75:fe:3a:77:43:00:bd:f0:c1:ed:cd:f0:e0:bb:fe:e4:dc: 0b:c0:56:24:22:2f:ab:51:2f:5f:49:b4:ae:24:79:9d:ad:c9: 79:eb:ff:6c:09:49:d7:88:4f:8b:0a:79:68:4f:72:ff:35:83: e0:e1:9b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsLggZ5YKwk6nYokl63RhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YTAzOGU5MjAxMWVlMjY4MDY4YTE1MTdkMjQ0Y2UyMmMy NjU1NGQwHhcNMjUxMjE3MTkwMTU0WhcNMjUxMjE4MTkwMTU0WjAzMTEwLwYDVQQD EygxYjg2MzM0YTAxYjIxN2EyNzFjM2E5ZTZhYzlhYjEzNDlkNjA2OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjBcp6vUETd3FZjemy1f7A1Yii/Z 2J0QoGE5IU/TibFn8HEr5zvDJeuP4gBfaArsE2f4TvPQT45ztXOCmztl2yt5g+bi JHRNE2gAwgCxWJNRk53r5NnviJI4+fTSAY/S1EBTuzwdSwsJgRlvOR9lNUhwLdk2 3Zxw9WbR2ASDU1vNoTtzMaFfbNPq3+Yc9gWDfjjdkGmz1+gHukvkI6/NcB1m/yi1 PlTtEm2StHGcASJsuo6HWTSoCJG4y8iHX6IPY3hkPn1xOG4OpQIO0/M6bl9XWvVz x3Z8jSFe+UQnlCWGZL/qOj+c6yORzc0CucvSBZqgLj4iEQIrtFQ/RTdtDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuGM0oBsheiccOp5qyasTSdYGkbMB8GA1UdIwQY MBaAFJegOOkgEe4mgGihUX0kTOIsJlVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYt ODUyYjZkOGMwMmUyLzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYtODUyYjZkOGMwMmUy LzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj3LJCgW OaYF9wZHz8bZaWBA0LPSq9dilx4habi/haxnFBS1jNG05QAq24kiErn3MCIhYpl6 xxzdgXIzGMK87P4aj/sL1V7y8A05ETU9VlzUs1m2cX84PEXdYlaMRrh0bXt7iRci t31l4NQHrCZQvsPqo9UqSNIUuRzjFRYg+UlswwL9loYeav5bAVUUgJbh+P/VADXD tV486wKM0JbXBOLdWLEZqXGq1InDWS7Zf1cPUE3DUGts5UFNKLDCWbwNfT7TcMQ/ QHX+OndDAL3wwe3N8OC7/uTcC8BWJCIvq1EvX0m0riR5na3Jeev/bAlJ14hPiwp5 aE9y/zWD4OGbBg== -----END CERTIFICATE-----Generated at Wed Dec 17 22:08:33 2025 by rpki-client