This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft File: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json) Hash identifier: uekilsvAEIafKK9c0vj3sryFnSIi+qsYZs5ItSup+g8= Subject key identifier: 97:14:9F:C2:32:2E:5A:67:7B:99:C9:9A:87:8E:A4:21:06:A0:DF:CF Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D Certificate issuer: /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d Certificate serial: 019B7335E806B6D9DE59DC4D655A0C79AE26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft Manifest number: 1366 Signing time: Wed 31 Dec 2025 07:01:11 +0000 Manifest this update: Wed 31 Dec 2025 07:01:11 +0000 Manifest next update: Thu 01 Jan 2026 07:01:11 +0000 Files and hashes: 1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: OQXq8iBceXWr5/Cm3VCPaV81yZua6RLCjdzeSJOqz7Q=) 2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:e8:06:b6:d9:de:59:dc:4d:65:5a:0c:79:ae:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d Validity Not Before: Dec 31 07:01:11 2025 GMT Not After : Jan 1 07:01:11 2026 GMT Subject: CN=97149fc2322e5a677b99c99a878ea42106a0dfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:63:5c:b3:75:7a:d1:6f:43:5f:e5:9f:2c: c6:fe:b3:be:16:d3:bd:8d:f8:75:62:cb:11:e8:23: d5:23:70:07:4e:b6:11:86:3f:e9:0b:79:bc:95:60: 17:bf:1f:9a:76:db:32:36:8d:5d:a2:41:6e:ee:d5: c2:20:b5:03:de:1d:cd:5d:47:5c:ba:a3:9e:9d:33: 00:95:f8:25:d8:dd:4d:94:dd:63:15:95:49:ed:63: 04:88:42:4a:26:f7:6d:77:e9:45:a8:05:ad:15:07: d4:02:76:9a:69:7a:95:73:88:2f:07:bd:f9:30:82: 54:d9:ba:c2:38:91:c9:d1:8a:7e:5c:26:84:f1:dc: 0d:78:03:0f:93:9a:8f:0a:b5:7a:25:ba:92:f8:0a: 84:4f:9b:46:be:1c:a8:4b:b1:4a:de:03:31:60:58: fa:e1:84:0b:c0:26:14:1f:99:52:40:d4:1d:56:99: d0:ce:6e:c4:8d:49:ef:34:ee:d7:16:c9:78:13:6e: 01:21:e0:ef:eb:1e:21:22:03:59:ce:1c:f9:fc:54: 5c:3a:cf:a2:4a:e0:6d:6c:1b:fc:79:69:f3:c3:37: 1c:f5:21:6f:b6:e4:f6:66:8c:55:d9:80:53:eb:71: 94:a9:0e:dd:21:13:37:9d:5a:7c:e0:f3:00:fb:5e: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:14:9F:C2:32:2E:5A:67:7B:99:C9:9A:87:8E:A4:21:06:A0:DF:CF X509v3 Authority Key Identifier: keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b9:6d:05:9c:10:80:f5:cb:02:f1:16:77:ab:6c:74:b8:0e: 7c:02:46:d1:5b:4f:8d:bc:07:e4:e0:bd:32:ae:3c:f0:97:dd: b3:e3:d5:b6:03:6f:f9:45:87:13:45:c4:0f:00:0e:65:22:3c: b4:e6:b3:2d:3c:7a:8b:89:a0:58:f1:7c:e8:8a:3d:b2:9f:9c: eb:a8:72:31:4a:41:7d:2d:f4:89:7f:99:a6:e0:1f:68:69:71: ec:3b:11:30:f8:b2:f9:60:ec:de:16:98:4e:cd:b3:4f:67:4c: f2:c5:97:4a:9a:be:f8:2a:a7:d1:63:f5:9d:2b:cf:84:41:4b: 4c:dd:45:d1:a4:af:c8:3d:ea:fd:54:5f:76:68:68:c0:33:7c: 05:f7:3a:66:ec:60:3e:96:1c:7f:65:0b:22:71:39:89:8a:47: c4:e8:82:a4:bd:80:15:4f:ac:79:25:0c:86:9e:c3:74:6c:09: c2:8a:82:13:84:93:f0:be:fd:c3:3e:1a:56:7c:6f:9b:00:2c: 7d:80:a2:00:09:51:21:af:16:5d:0a:38:39:fe:50:47:2c:fd: f4:3c:65:a2:c3:38:ec:3a:54:c7:3f:be:87:1f:1e:f4:e1:d9: 38:4f:d7:96:ca:2a:b2:9a:01:2b:22:d3:59:ed:14:0c:15:b5: 50:ba:00:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNegGttneWdxNZVoMea4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjM2MDg3YzNmY2VjZmIwMDZmNTE4ZDc4MTFiMjU1ZWE1 N2M5MGQwHhcNMjUxMjMxMDcwMTExWhcNMjYwMTAxMDcwMTExWjAzMTEwLwYDVQQD Eyg5NzE0OWZjMjMyMmU1YTY3N2I5OWM5OWE4NzhlYTQyMTA2YTBkZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH9jXLN1etFvQ1/lnyzG/rO+FtO9 jfh1YssR6CPVI3AHTrYRhj/pC3m8lWAXvx+adtsyNo1dokFu7tXCILUD3h3NXUdc uqOenTMAlfgl2N1NlN1jFZVJ7WMEiEJKJvdtd+lFqAWtFQfUAnaaaXqVc4gvB735 MIJU2brCOJHJ0Yp+XCaE8dwNeAMPk5qPCrV6JbqS+AqET5tGvhyoS7FK3gMxYFj6 4YQLwCYUH5lSQNQdVpnQzm7EjUnvNO7XFsl4E24BIeDv6x4hIgNZzhz5/FRcOs+i SuBtbBv8eWnzwzcc9SFvtuT2ZoxV2YBT63GUqQ7dIRM3nVp84PMA+157SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcUn8IyLlpne5nJmoeOpCEGoN/PMB8GA1UdIwQY MBaAFOvzYIfD/Oz7AG9RjXgRslXqV8kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80NjQzMWUtNDk1MS00ZTFhLTkxOTUt NjhhNDU1MWY2OGE4LzEvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80NjQzMWUtNDk1MS00ZTFhLTkxOTUtNjhhNDU1MWY2OGE4 LzEvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7ltBZwQ gPXLAvEWd6tsdLgOfAJG0VtPjbwH5OC9Mq488Jfds+PVtgNv+UWHE0XEDwAOZSI8 tOazLTx6i4mgWPF86Io9sp+c66hyMUpBfS30iX+ZpuAfaGlx7DsRMPiy+WDs3haY Ts2zT2dM8sWXSpq++Cqn0WP1nSvPhEFLTN1F0aSvyD3q/VRfdmhowDN8Bfc6Zuxg PpYcf2ULInE5iYpHxOiCpL2AFU+seSUMhp7DdGwJwoqCE4ST8L79wz4aVnxvmwAs fYCiAAlRIa8WXQo4Of5QRyz99DxlosM47DpUxz++hx8e9OHZOE/XlsoqspoBKyLT We0UDBW1ULoAMQ== -----END CERTIFICATE-----Generated at Wed Dec 31 10:27:26 2025 by rpki-client