This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json) Hash identifier: dFmTUyqI4OGnrbyIqw+3NrM1xDwfsNfMem/CaQlin5o= Subject key identifier: 4D:62:A9:AF:4A:90:3B:E6:33:1F:04:81:09:F1:F0:4A:E6:29:91:8C Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Certificate serial: 019B5C0908697A9735B1E6FF7D912C3D8026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft Manifest number: 164B Signing time: Fri 26 Dec 2025 19:00:54 +0000 Manifest this update: Fri 26 Dec 2025 19:00:54 +0000 Manifest next update: Sat 27 Dec 2025 19:00:54 +0000 Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: lDrLvyCeDZK5H/IbbC2jQAg/HvkWSix/Gn7ScyYKtE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:08:69:7a:97:35:b1:e6:ff:7d:91:2c:3d:80:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Validity Not Before: Dec 26 19:00:54 2025 GMT Not After : Dec 27 19:00:54 2025 GMT Subject: CN=4d62a9af4a903be6331f048109f1f04ae629918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:57:2e:df:db:90:fe:5b:77:9c:e9:09:aa: ea:fd:d3:16:1a:e8:df:80:20:b0:c0:60:3d:19:59: 3b:fc:d9:5a:c7:5d:23:ca:b9:ff:7d:72:1a:83:0a: f4:25:6c:bb:6c:69:f1:09:9a:ee:0d:1b:e4:0e:3e: 5c:21:82:97:60:91:6e:dc:bc:63:30:1c:a2:72:97: b4:aa:c6:b8:6c:a1:a4:a2:cd:23:a5:30:91:3c:10: 74:20:d4:fc:ce:58:3a:38:06:2f:d6:42:9b:0d:40: 36:e4:ee:ea:cf:8b:2c:02:00:e3:6e:16:2e:2d:c2: 08:bc:25:3e:f4:ea:02:36:36:9c:42:fb:d5:fe:c3: e1:1b:5d:8e:e2:f6:92:d5:bf:3e:81:0e:2e:8e:e8: 36:b2:00:af:1d:eb:cc:c4:09:15:98:29:55:f2:98: 04:41:5d:5f:28:b0:23:56:6b:b9:5e:31:3a:1a:65: 54:6b:80:0a:bd:96:dd:bb:08:c6:2c:27:d6:ee:16: a6:4f:f6:10:57:f0:01:84:a3:3c:45:62:bc:54:89: 76:ad:8c:f5:fa:a0:83:0d:fd:b5:c8:de:88:62:90: 84:76:2a:19:4a:50:83:31:b1:d1:0e:6f:d1:0f:bf: 61:c5:a5:40:26:f8:6f:8d:15:8b:0b:04:60:80:d5: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:62:A9:AF:4A:90:3B:E6:33:1F:04:81:09:F1:F0:4A:E6:29:91:8C X509v3 Authority Key Identifier: keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cb:84:e9:52:71:2e:0b:bb:35:3b:a2:bd:21:b5:77:49:ab: 8a:75:6a:a1:2d:41:33:24:c1:7a:cd:81:8f:e5:4b:1b:1b:0f: 5b:33:ac:8b:04:f0:2b:10:d0:a5:70:e0:49:bc:fa:ab:96:e0: a9:68:97:26:e5:2c:b6:92:40:1a:71:b7:ea:c5:6f:6e:36:10: f2:d6:f5:ce:2d:7f:da:19:99:e1:74:5a:af:19:71:8d:dc:e2: 28:9c:74:e3:2a:4d:01:7b:ca:8f:dc:fe:28:ef:75:95:1b:4f: 47:45:fb:e5:98:0d:2e:79:43:77:de:84:d9:aa:74:99:d1:77: 64:77:d8:cc:d3:e6:04:fb:91:65:32:4f:e0:5c:a4:cb:df:e3: 7f:da:3d:ad:42:f0:26:94:3b:68:db:b9:20:f9:2f:b1:22:36: 51:db:e6:46:9a:2d:7c:be:a8:0a:df:cf:c4:48:c6:8b:a0:00: 86:e2:77:12:1a:0e:45:56:0c:3b:3a:91:03:b4:51:a2:a3:fc: 10:c7:30:3f:46:4e:95:85:c3:77:66:08:f4:9e:3c:8c:33:88: a8:d8:84:12:df:07:30:45:1e:9d:a0:c5:ff:e0:73:b0:1c:61: 1a:7a:59:04:a4:c3:a7:e7:2f:34:7c:72:a0:4f:ce:6a:67:7a: 81:a5:1a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCQhpepc1seb/fZEsPYAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNWNmN2QxZGM1ZmJkYmQ2MzRiZDYxYjgwYjdlZmZlZWM0 NjI4NzMwHhcNMjUxMjI2MTkwMDU0WhcNMjUxMjI3MTkwMDU0WjAzMTEwLwYDVQQD Eyg0ZDYyYTlhZjRhOTAzYmU2MzMxZjA0ODEwOWYxZjA0YWU2Mjk5MThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9NXLt/bkP5bd5zpCarq/dMWGujf gCCwwGA9GVk7/Nlax10jyrn/fXIagwr0JWy7bGnxCZruDRvkDj5cIYKXYJFu3Lxj MByicpe0qsa4bKGkos0jpTCRPBB0INT8zlg6OAYv1kKbDUA25O7qz4ssAgDjbhYu LcIIvCU+9OoCNjacQvvV/sPhG12O4vaS1b8+gQ4ujug2sgCvHevMxAkVmClV8pgE QV1fKLAjVmu5XjE6GmVUa4AKvZbduwjGLCfW7hamT/YQV/ABhKM8RWK8VIl2rYz1 +qCDDf21yN6IYpCEdioZSlCDMbHRDm/RD79hxaVAJvhvjRWLCwRggNUPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1iqa9KkDvmMx8EgQnx8ErmKZGMMB8GA1UdIwQY MBaAFOpc99HcX729Y0vWG4C37/7sRihzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQt ODEzMjMyOWFjMzViLzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQtODEzMjMyOWFjMzVi LzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsuE6VJx Lgu7NTuivSG1d0mrinVqoS1BMyTBes2Bj+VLGxsPWzOsiwTwKxDQpXDgSbz6q5bg qWiXJuUstpJAGnG36sVvbjYQ8tb1zi1/2hmZ4XRarxlxjdziKJx04ypNAXvKj9z+ KO91lRtPR0X75ZgNLnlDd96E2ap0mdF3ZHfYzNPmBPuRZTJP4Fyky9/jf9o9rULw JpQ7aNu5IPkvsSI2UdvmRpotfL6oCt/PxEjGi6AAhuJ3EhoORVYMOzqRA7RRoqP8 EMcwP0ZOlYXDd2YI9J48jDOIqNiEEt8HMEUenaDF/+BzsBxhGnpZBKTDp+cvNHxy oE/Oamd6gaUa+w== -----END CERTIFICATE-----Generated at Sat Dec 27 04:48:04 2025 by rpki-client