This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json) Hash identifier: M2bX96MyoG3+H16VwxyiUnVi7c0G2Hl/9r5INV0cTnY= Subject key identifier: CA:AF:39:C3:8E:36:61:B5:46:9A:EA:B4:0B:83:D3:FF:90:16:83:E9 Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Certificate serial: 019B3FECFDB5A77DA666760544490B073E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft Manifest number: 0E70 Signing time: Sun 21 Dec 2025 08:00:54 +0000 Manifest this update: Sun 21 Dec 2025 08:00:54 +0000 Manifest next update: Mon 22 Dec 2025 08:00:54 +0000 Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: zNecMgTpQ8ZFM3hMqzZq6O1khljqhMY3gypT5gzm+tE=) 2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:fd:b5:a7:7d:a6:66:76:05:44:49:0b:07:3e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Validity Not Before: Dec 21 08:00:54 2025 GMT Not After : Dec 22 08:00:54 2025 GMT Subject: CN=caaf39c38e3661b5469aeab40b83d3ff901683e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:39:82:19:dc:66:e0:b2:5a:bf:53:e3:b4: 33:f9:16:f2:eb:2a:fc:07:be:7d:ed:36:d1:97:4f: 93:74:6f:2c:94:2a:d1:58:6e:99:52:d8:25:57:75: 8b:25:ce:c3:b1:a8:e7:20:af:a4:3e:a5:f5:cf:46: 57:22:6b:1f:66:5a:80:51:ae:20:23:36:1b:b4:ce: d9:d6:13:59:34:b4:2d:c0:a9:f2:9a:dd:43:39:16: d8:dd:57:bc:b3:65:3a:60:5a:47:9e:06:6c:54:b6: 7b:be:a0:e4:3a:4b:a1:81:ab:78:97:2e:6b:82:ef: e9:b4:29:36:70:84:74:17:65:99:5a:e5:0b:d7:54: ac:95:60:cb:1f:ac:2d:7a:40:e9:6c:30:c9:03:6e: 00:b8:f7:dd:1f:40:0e:f8:28:c4:55:c0:93:1b:71: 51:b2:9a:e7:10:8e:5d:b8:4a:92:73:41:54:59:e8: 3c:6d:d5:db:d7:90:00:0b:c3:03:5a:44:05:12:63: 40:bc:1a:34:95:6c:b0:9f:05:fb:72:4a:9a:a4:af: ed:4d:ca:25:b7:f8:e0:b7:43:0c:b8:29:46:41:e1: b8:05:63:fb:a5:d3:28:b6:1c:0a:60:76:54:ef:72: 3a:f4:99:43:d5:be:c3:ae:74:31:7e:46:0f:da:5a: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AF:39:C3:8E:36:61:B5:46:9A:EA:B4:0B:83:D3:FF:90:16:83:E9 X509v3 Authority Key Identifier: keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ef:d8:e3:1c:39:17:9d:39:a3:a2:06:44:46:43:ad:37:ff: 64:0a:d7:e0:5b:1e:2c:de:b3:76:e5:65:e5:67:60:a5:ce:8f: 8a:11:9d:a3:cb:0e:28:27:91:1d:3d:41:5b:7f:48:aa:fe:c9: c5:50:c6:11:8c:fa:01:63:6e:38:0d:9e:5f:8e:90:55:b1:ba: 59:cf:e7:ea:03:04:1d:92:77:cc:03:61:79:12:7d:ac:ad:c0: 25:7d:46:a0:a0:76:ad:cb:50:2c:49:55:71:00:18:5c:11:01: fe:88:de:94:29:96:38:37:bd:ff:d3:1a:b0:79:61:28:a4:85: fa:b2:6e:f2:44:85:80:5d:c1:4b:ea:d3:8e:fa:65:dc:93:41: 9a:56:e4:69:34:ff:90:05:9d:e9:23:77:70:82:0c:99:71:15: f8:be:f6:68:12:e6:d0:0d:b7:cb:22:2b:ab:75:12:f9:56:49: 36:3a:ac:d5:1e:5b:3a:f4:e5:81:06:ba:a3:be:f7:a8:f6:87: 3e:23:97:f8:43:45:ee:1f:25:df:22:ce:fa:dc:4b:6b:c2:f8: c1:36:5d:e4:ff:af:08:e5:c5:33:aa:e8:aa:a5:b8:86:fb:5e: 03:de:fc:59:1c:0a:e6:c8:ac:58:c4:08:22:a5:a2:2c:09:db: b0:03:b9:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7P21p32mZnYFREkLBz46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTUzZGEzYzI0Y2UxMjM2ZTIwYzQ2ODYxNjM1ZGM4ZWZi NTZhOTIwHhcNMjUxMjIxMDgwMDU0WhcNMjUxMjIyMDgwMDU0WjAzMTEwLwYDVQQD EyhjYWFmMzljMzhlMzY2MWI1NDY5YWVhYjQwYjgzZDNmZjkwMTY4M2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCQ5ghncZuCyWr9T47Qz+Rby6yr8 B7597TbRl0+TdG8slCrRWG6ZUtglV3WLJc7DsajnIK+kPqX1z0ZXImsfZlqAUa4g IzYbtM7Z1hNZNLQtwKnymt1DORbY3Ve8s2U6YFpHngZsVLZ7vqDkOkuhgat4ly5r gu/ptCk2cIR0F2WZWuUL11SslWDLH6wtekDpbDDJA24AuPfdH0AO+CjEVcCTG3FR sprnEI5duEqSc0FUWeg8bdXb15AAC8MDWkQFEmNAvBo0lWywnwX7ckqapK/tTcol t/jgt0MMuClGQeG4BWP7pdMothwKYHZU73I69JlD1b7DrnQxfkYP2lpX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqvOcOONmG1RprqtAuD0/+QFoPpMB8GA1UdIwQY MBaAFOsVPaPCTOEjbiDEaGFjXcjvtWqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2Ut MzlkYTFhZThiNzMxLzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2UtMzlkYTFhZThiNzMx LzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlO/Y4xw5 F505o6IGREZDrTf/ZArX4FseLN6zduVl5Wdgpc6PihGdo8sOKCeRHT1BW39Iqv7J xVDGEYz6AWNuOA2eX46QVbG6Wc/n6gMEHZJ3zANheRJ9rK3AJX1GoKB2rctQLElV cQAYXBEB/ojelCmWODe9/9MasHlhKKSF+rJu8kSFgF3BS+rTjvpl3JNBmlbkaTT/ kAWd6SN3cIIMmXEV+L72aBLm0A23yyIrq3US+VZJNjqs1R5bOvTlgQa6o773qPaH PiOX+ENF7h8l3yLO+txLa8L4wTZd5P+vCOXFM6roqqW4hvteA978WRwK5sisWMQI IqWiLAnbsAO5RQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:33 2025 by rpki-client