This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json) Hash identifier: jvXBvXHRCMwAWsiEWFtG+nnz2a7HOsmr0P9SgdABioM= Subject key identifier: 3F:64:0C:FA:8D:FB:40:B7:87:C0:BB:BD:54:0F:4B:9C:B2:88:1C:A0 Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Certificate serial: 019B38D88C2DE9674B9DC9460BB12AC51289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft Manifest number: 15CA Signing time: Fri 19 Dec 2025 23:01:14 +0000 Manifest this update: Fri 19 Dec 2025 23:01:14 +0000 Manifest next update: Sat 20 Dec 2025 23:01:14 +0000 Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=) 2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: 6637ta+y+uyn31tKPb5RoBDKxxj2eF48EAO3581+nlw=) 3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:8c:2d:e9:67:4b:9d:c9:46:0b:b1:2a:c5:12:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Validity Not Before: Dec 19 23:01:14 2025 GMT Not After : Dec 20 23:01:14 2025 GMT Subject: CN=3f640cfa8dfb40b787c0bbbd540f4b9cb2881ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:aa:9a:7b:2a:98:54:7b:e3:d3:08:23:a3:1e: 16:a0:cb:2a:92:d7:1a:8c:d5:64:f3:15:0f:b5:6b: 17:17:34:72:a8:cc:1a:cd:1f:c9:db:28:46:dc:b2: f6:bc:62:2c:47:2f:aa:56:bc:1a:0e:8b:b8:81:11: 43:b1:fc:04:ff:65:5a:8e:67:0e:01:2c:08:5a:16: 46:92:f1:46:01:b0:b3:24:fa:16:2f:e6:ed:ce:f1: 87:13:2c:18:a1:f8:1b:5a:5e:8a:14:33:79:e8:f3: a7:ae:3c:f7:e6:48:c8:b8:97:04:85:b3:45:5a:0c: 96:c7:49:f3:14:c6:3d:dd:8e:4a:7d:21:8c:82:ba: 15:83:53:b8:8c:29:6d:d3:8b:1b:62:b6:89:df:de: 20:2f:90:d9:63:be:9f:af:93:9a:50:31:bc:6f:6a: 84:f1:fe:a4:e5:e2:b1:15:51:b1:5e:0c:e8:9b:86: b7:c7:1b:22:50:67:a7:69:5f:7f:e0:7f:68:00:22: c0:a3:b2:14:b9:44:3d:19:a8:7c:7b:50:3c:fc:54: cf:a0:f8:92:a7:8f:74:4a:5c:e9:f6:81:58:09:05: cc:71:b7:2b:7d:43:83:d5:16:71:e0:43:1e:a6:e6: 8e:0b:06:e3:4f:b0:d6:14:df:30:2f:9c:b3:8b:4e: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:64:0C:FA:8D:FB:40:B7:87:C0:BB:BD:54:0F:4B:9C:B2:88:1C:A0 X509v3 Authority Key Identifier: keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:63:e1:2a:ba:2e:cc:99:6d:1f:5d:4c:bf:ee:c2:1b:4c:7f: 33:b1:a6:d9:eb:63:0d:00:f0:c6:d0:64:c7:18:8a:71:d7:4c: 2a:fb:2d:26:b9:a1:5d:7d:67:d6:94:62:61:4f:66:4e:f2:6c: 91:69:10:7e:93:c3:3b:1e:d3:ff:38:59:bb:83:c5:84:c7:09: 3c:94:51:11:07:48:9d:c6:12:f3:97:1d:ef:e8:e5:34:bc:d0: bb:96:42:8b:6d:8b:39:01:c3:8c:89:96:4c:89:cb:e3:22:3a: d1:ab:f3:bc:97:6a:c0:9e:19:6c:35:0c:a8:77:22:00:ed:33: 31:fd:e8:cd:e8:f6:f3:24:aa:82:0b:87:d5:ab:62:c3:a2:ec: 9f:cb:eb:a2:d3:fc:f1:07:52:ef:6b:f3:a8:f3:92:93:7d:6f: 87:b2:1b:d7:d1:e6:ce:90:24:53:12:1f:75:9c:f2:60:9c:18: ff:e9:32:3e:4e:ce:b4:22:4b:07:17:28:99:43:8b:ae:28:a9: 5d:37:2d:63:3c:b9:9d:e6:e9:de:42:6b:ce:34:43:cf:fd:ab: d4:5c:7f:2d:6c:f5:71:54:c2:e7:29:f4:73:f9:a4:f1:70:20: c6:e2:b1:b6:a4:07:f6:de:b9:b7:78:c2:f8:f2:ad:78:72:b4: 04:2d:6d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Iwt6WdLnclGC7EqxRKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli M2FmZWYwHhcNMjUxMjE5MjMwMTE0WhcNMjUxMjIwMjMwMTE0WjAzMTEwLwYDVQQD EygzZjY0MGNmYThkZmI0MGI3ODdjMGJiYmQ1NDBmNGI5Y2IyODgxY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KqaeyqYVHvj0wgjox4WoMsqktca jNVk8xUPtWsXFzRyqMwazR/J2yhG3LL2vGIsRy+qVrwaDou4gRFDsfwE/2VajmcO ASwIWhZGkvFGAbCzJPoWL+btzvGHEywYofgbWl6KFDN56POnrjz35kjIuJcEhbNF WgyWx0nzFMY93Y5KfSGMgroVg1O4jClt04sbYraJ394gL5DZY76fr5OaUDG8b2qE 8f6k5eKxFVGxXgzom4a3xxsiUGenaV9/4H9oACLAo7IUuUQ9Gah8e1A8/FTPoPiS p490Slzp9oFYCQXMcbcrfUOD1RZx4EMepuaOCwbjT7DWFN8wL5yzi07sFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9kDPqN+0C3h8C7vVQPS5yyiBygMB8GA1UdIwQY MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0 LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWPhKrou zJltH11Mv+7CG0x/M7Gm2etjDQDwxtBkxxiKcddMKvstJrmhXX1n1pRiYU9mTvJs kWkQfpPDOx7T/zhZu4PFhMcJPJRREQdIncYS85cd7+jlNLzQu5ZCi22LOQHDjImW TInL4yI60avzvJdqwJ4ZbDUMqHciAO0zMf3ozej28ySqgguH1atiw6Lsn8vrotP8 8QdS72vzqPOSk31vh7Ib19HmzpAkUxIfdZzyYJwY/+kyPk7OtCJLBxcomUOLriip XTctYzy5nebp3kJrzjRDz/2r1Fx/LWz1cVTC5yn0c/mk8XAgxuKxtqQH9t65t3jC +PKteHK0BC1tGg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:03 2025 by rpki-client