This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json) Hash identifier: HcHADgEpMwF5ZgkRDfavuQT6GRf7wfyUUP7N63Cfgw0= Subject key identifier: 76:B4:66:11:8B:77:CA:3A:B8:1F:AE:5B:57:71:DE:91:8C:1E:AE:26 Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d Certificate serial: 019B2F9E92B908F7E88AA8C21EB5DF10428C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft Manifest number: 0AEC Signing time: Thu 18 Dec 2025 04:01:19 +0000 Manifest this update: Thu 18 Dec 2025 04:01:19 +0000 Manifest next update: Fri 19 Dec 2025 04:01:19 +0000 Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: NZs6JFPQeXcOKU0aHLARjc/l6XKskDp8SxZnMQvXSSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:92:b9:08:f7:e8:8a:a8:c2:1e:b5:df:10:42:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d Validity Not Before: Dec 18 04:01:19 2025 GMT Not After : Dec 19 04:01:19 2025 GMT Subject: CN=76b466118b77ca3ab81fae5b5771de918c1eae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:52:67:1f:01:dd:c0:e0:19:49:9f:3c:a1: 53:bf:17:33:57:ed:eb:8d:21:92:8a:27:60:1c:90: 77:d6:63:02:ed:2e:51:59:6d:b5:08:d7:e0:22:75: bc:70:c2:73:3c:a7:9b:c5:4d:12:a3:3b:15:b2:5b: 57:a0:6a:4d:c7:39:79:12:88:e6:9c:5a:2c:4b:06: 70:d9:60:1b:c1:c0:e2:85:79:ec:d8:08:36:2b:b5: 52:39:64:86:61:96:f7:e4:8d:16:63:51:ee:50:e0: 64:83:82:c1:0f:3b:ec:03:ae:39:0a:08:e1:5a:ec: c5:c8:15:de:3c:a9:df:fa:55:24:9f:17:ee:2d:b2: 10:2f:83:0f:d0:ae:f5:f1:7a:33:01:be:0b:f9:69: 3d:ca:a8:92:37:3b:f5:52:ad:37:06:b5:52:54:a9: c0:0a:5a:93:b5:3c:dc:83:27:5f:1f:46:7b:b9:bf: 00:61:36:d7:88:18:5c:fe:de:28:35:62:47:ec:d4: e3:96:6f:78:8c:89:ee:91:bc:39:84:3c:88:8d:23: 86:45:ab:b6:3e:11:9d:30:85:79:4e:70:a3:e7:80: 5f:39:b6:72:9f:89:81:11:69:ce:3b:e5:4a:ad:9e: 00:e3:0b:d1:ed:89:fc:2d:bf:b0:06:a0:e6:0f:c0: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:66:11:8B:77:CA:3A:B8:1F:AE:5B:57:71:DE:91:8C:1E:AE:26 X509v3 Authority Key Identifier: keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5a:8f:b6:a0:70:79:87:b1:ea:a9:ed:dc:08:58:a8:02:d7: 9f:1b:01:7a:01:81:02:1c:bc:44:1a:9d:8e:a2:ac:ed:7a:e2: bb:ec:10:73:9d:ae:02:98:6b:9d:87:28:6e:95:6d:80:81:37: 2c:07:93:55:3b:91:a6:60:00:49:c1:ca:18:33:a9:f1:56:2e: 04:91:ff:85:fb:57:f0:09:26:99:1c:bf:71:18:81:f4:33:b2: 74:f7:1d:62:e6:ee:6a:eb:76:b5:11:21:46:29:c4:ae:8d:81: 87:53:8c:4f:9b:6e:2f:0b:c0:4a:7e:cf:0f:13:a9:ad:b1:29: cc:c1:06:22:8e:22:29:ad:c7:f6:3c:20:c3:bb:7b:8c:f9:18: c5:91:a1:cb:11:bf:b2:27:14:84:3b:12:ef:a2:52:1e:10:88: b9:d8:47:1a:2c:92:c7:fe:d4:d8:bd:cd:c0:96:e8:42:c9:99: eb:c4:96:73:12:07:3b:09:ba:40:47:b0:56:13:61:e4:f6:94: a1:aa:b3:7b:9a:ba:da:4d:63:2e:a3:42:b4:a2:17:4a:1d:db: cf:38:51:10:10:5b:60:12:6c:e8:a4:36:c0:65:0a:3a:a9:56: 9f:76:6f:ab:c8:6d:38:84:3c:25:e1:c3:f3:dc:76:7f:7f:19: d8:61:30:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnpK5CPfoiqjCHrXfEEKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YTAzOGU5MjAxMWVlMjY4MDY4YTE1MTdkMjQ0Y2UyMmMy NjU1NGQwHhcNMjUxMjE4MDQwMTE5WhcNMjUxMjE5MDQwMTE5WjAzMTEwLwYDVQQD Eyg3NmI0NjYxMThiNzdjYTNhYjgxZmFlNWI1NzcxZGU5MThjMWVhZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3odSZx8B3cDgGUmfPKFTvxczV+3r jSGSiidgHJB31mMC7S5RWW21CNfgInW8cMJzPKebxU0SozsVsltXoGpNxzl5Eojm nFosSwZw2WAbwcDihXns2Ag2K7VSOWSGYZb35I0WY1HuUOBkg4LBDzvsA645Cgjh WuzFyBXePKnf+lUknxfuLbIQL4MP0K718XozAb4L+Wk9yqiSNzv1Uq03BrVSVKnA ClqTtTzcgydfH0Z7ub8AYTbXiBhc/t4oNWJH7NTjlm94jInukbw5hDyIjSOGRau2 PhGdMIV5TnCj54BfObZyn4mBEWnOO+VKrZ4A4wvR7Yn8Lb+wBqDmD8D2GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa0ZhGLd8o6uB+uW1dx3pGMHq4mMB8GA1UdIwQY MBaAFJegOOkgEe4mgGihUX0kTOIsJlVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYt ODUyYjZkOGMwMmUyLzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYtODUyYjZkOGMwMmUy LzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlqPtqBw eYex6qnt3AhYqALXnxsBegGBAhy8RBqdjqKs7Xriu+wQc52uAphrnYcobpVtgIE3 LAeTVTuRpmAAScHKGDOp8VYuBJH/hftX8AkmmRy/cRiB9DOydPcdYubuaut2tREh RinEro2Bh1OMT5tuLwvASn7PDxOprbEpzMEGIo4iKa3H9jwgw7t7jPkYxZGhyxG/ sicUhDsS76JSHhCIudhHGiySx/7U2L3NwJboQsmZ68SWcxIHOwm6QEewVhNh5PaU oaqze5q62k1jLqNCtKIXSh3bzzhREBBbYBJs6KQ2wGUKOqlWn3Zvq8htOIQ8JeHD 89x2f38Z2GEw5A== -----END CERTIFICATE-----Generated at Thu Dec 18 10:24:03 2025 by rpki-client