This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft File: 6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json) Hash identifier: r23EmDGwajT6ekgpMRJSLxV0BBmfhq+Pr5MLAKZERWs= Subject key identifier: D5:68:E3:D2:33:E1:57:A7:6B:99:D4:99:BB:FA:EB:FD:7A:74:7C:1A Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9 Certificate issuer: /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9 Certificate serial: 019B72231795C6A681FC4BFAB2B76881B226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 02:01:00 +0000 Manifest this update: Wed 31 Dec 2025 02:01:00 +0000 Manifest next update: Thu 01 Jan 2026 02:01:00 +0000 Files and hashes: 1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: ROJYWYv9MY995K7/JGOXqzscuz35F3sSjKCuAOOtc+E=) 2: qKIz6NW658QiWYOFcDWwBberXPk.roa (hash: XrH4aIQQINYqHfRuibGZ0Zr0PYKUQ4mNWHvnArdnsa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:23:17:95:c6:a6:81:fc:4b:fa:b2:b7:68:81:b2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9 Validity Not Before: Dec 31 02:01:00 2025 GMT Not After : Jan 1 02:01:00 2026 GMT Subject: CN=d568e3d233e157a76b99d499bbfaebfd7a747c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:2c:2b:2d:a9:05:36:ba:71:c5:5b:55:20: a4:05:4a:28:0e:ed:f2:ef:af:31:f9:13:5c:16:9c: 60:f6:f3:15:d8:c4:96:a2:75:8f:51:00:12:b3:81: 24:73:9f:f1:b4:62:4e:a3:5e:93:4d:23:3b:e6:6e: 6a:b9:5a:a4:0e:f5:80:8e:73:ac:92:64:38:e2:7d: af:15:ec:f5:96:5c:f2:9a:e1:2d:de:a3:91:d9:43: f4:0e:7c:da:65:16:28:92:0f:7c:be:0d:70:d9:f3: 56:92:8b:70:fc:f5:ea:43:53:6b:06:62:0f:fe:d8: 74:2b:da:0d:d6:e9:a5:27:03:56:51:32:71:de:e1: c0:4e:e4:2f:a8:ee:c4:e7:f0:e5:67:f9:71:43:21: f2:f3:b7:17:a5:c2:e3:f7:1c:09:73:b1:e1:24:ac: de:92:9e:a1:f7:d7:e5:4d:b2:ba:5b:34:f3:11:64: 95:30:59:5f:d5:65:25:22:8f:f2:c0:b5:7d:f8:bd: a0:2e:0a:bc:35:70:dc:4b:b5:6c:23:fd:8e:e6:ca: 1d:3f:61:81:7a:5b:45:9b:82:8e:65:67:54:0d:c0: 8b:11:66:84:a0:58:02:e4:86:05:ad:bf:bf:29:59: fb:25:e6:0f:24:ab:d7:99:9f:83:b6:d5:8a:ca:da: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:68:E3:D2:33:E1:57:A7:6B:99:D4:99:BB:FA:EB:FD:7A:74:7C:1A X509v3 Authority Key Identifier: keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:80:45:a4:8b:26:6c:22:f6:20:9b:21:cc:ff:3b:aa:73:0b: 73:53:7d:74:1a:d3:d3:4e:28:83:4e:00:70:64:01:30:94:2f: bf:d0:9f:aa:cf:96:6e:be:43:a9:43:bc:ab:70:5d:95:21:84: aa:d0:59:01:fa:36:fd:cd:da:34:51:e9:63:77:b7:52:33:e2: 57:43:d9:38:6d:3f:d4:71:3e:e4:4b:f1:3d:64:c1:a2:87:57: 1f:4f:28:cd:04:46:18:c4:55:a5:7c:18:b2:a8:83:4d:20:b7: 15:e4:7e:5d:10:cd:11:c0:d5:76:73:58:2a:33:1b:9e:d2:53: 8a:cd:f2:24:63:16:7f:17:df:88:5b:05:1f:24:94:8f:33:bb: 87:8e:f2:17:43:cd:9c:bc:13:f1:a9:0e:ce:89:7a:6b:ba:01: f3:1c:63:f8:7d:67:0c:f8:7e:de:54:28:13:d8:a3:f0:49:40: c7:c3:03:d7:27:86:25:d0:0f:5c:aa:1f:f8:98:77:d8:6c:d3: 7a:e5:50:98:fb:e1:41:7d:98:9a:ac:6c:18:5c:49:ab:8a:70: 31:85:b6:20:1f:4a:59:57:dd:32:fa:a7:90:a3:06:98:20:5a: 2f:c0:5f:c7:ea:5b:66:31:c8:4c:0a:33:bf:48:0e:07:fe:25: 06:01:d0:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIxeVxqaB/Ev6srdogbImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzM3ZWFkNmI5YjkzZGQwZDc1OGFiZjlkN2IzMDMwNzJh OTllYjkwHhcNMjUxMjMxMDIwMTAwWhcNMjYwMTAxMDIwMTAwWjAzMTEwLwYDVQQD EyhkNTY4ZTNkMjMzZTE1N2E3NmI5OWQ0OTliYmZhZWJmZDdhNzQ3YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhIsKy2pBTa6ccVbVSCkBUooDu3y 768x+RNcFpxg9vMV2MSWonWPUQASs4Ekc5/xtGJOo16TTSM75m5quVqkDvWAjnOs kmQ44n2vFez1llzymuEt3qOR2UP0DnzaZRYokg98vg1w2fNWkotw/PXqQ1NrBmIP /th0K9oN1umlJwNWUTJx3uHATuQvqO7E5/DlZ/lxQyHy87cXpcLj9xwJc7HhJKze kp6h99flTbK6WzTzEWSVMFlf1WUlIo/ywLV9+L2gLgq8NXDcS7VsI/2O5sodP2GB eltFm4KOZWdUDcCLEWaEoFgC5IYFrb+/KVn7JeYPJKvXmZ+DttWKytrIDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVo49Iz4Vena5nUmbv66/16dHwaMB8GA1UdIwQY MBaAFOszfq1rm5PdDXWKv517MDByqZ65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDct OWNhMTAwNDI4ZjEwLzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDctOWNhMTAwNDI4ZjEw LzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIBFpIsm bCL2IJshzP87qnMLc1N9dBrT004og04AcGQBMJQvv9Cfqs+Wbr5DqUO8q3BdlSGE qtBZAfo2/c3aNFHpY3e3UjPiV0PZOG0/1HE+5EvxPWTBoodXH08ozQRGGMRVpXwY sqiDTSC3FeR+XRDNEcDVdnNYKjMbntJTis3yJGMWfxffiFsFHySUjzO7h47yF0PN nLwT8akOzol6a7oB8xxj+H1nDPh+3lQoE9ij8ElAx8MD1yeGJdAPXKof+Jh32GzT euVQmPvhQX2YmqxsGFxJq4pwMYW2IB9KWVfdMvqnkKMGmCBaL8Bfx+pbZjHITAoz v0gOB/4lBgHQlQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:50 2025 by rpki-client