This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json) Hash identifier: Dxp6i12yf1vzxzo7bZ1TcdQ8Hjgw6eKByXOV9pbeAO8= Subject key identifier: EB:B1:88:E8:EF:53:8E:B8:70:CB:8A:11:3B:D7:79:A8:DD:ED:DC:9B Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Certificate serial: 019B32D5E3079C7E8B6083FB5F5081E065DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft Manifest number: 0CCC Signing time: Thu 18 Dec 2025 19:00:36 +0000 Manifest this update: Thu 18 Dec 2025 19:00:36 +0000 Manifest next update: Fri 19 Dec 2025 19:00:36 +0000 Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=) 2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: YiZZjEIeyID+9MSDFCKDNfQZFjYTJIbVXPLIOFQocJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:e3:07:9c:7e:8b:60:83:fb:5f:50:81:e0:65:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Validity Not Before: Dec 18 19:00:36 2025 GMT Not After : Dec 19 19:00:36 2025 GMT Subject: CN=ebb188e8ef538eb870cb8a113bd779a8ddeddc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:8a:fc:aa:84:b2:c5:60:d0:67:a5:bd:d7: 2a:43:72:b1:fe:95:41:7c:91:73:3b:06:ed:67:5e: ff:95:a0:5e:5e:17:01:db:9f:b0:03:d3:57:57:8d: eb:22:7d:56:1b:e0:52:f3:e0:f1:57:cb:98:2c:c1: 10:1c:94:8a:a9:fb:01:da:37:50:e9:67:80:3e:62: 42:49:db:14:3a:9b:68:ed:35:1a:f9:d0:4c:3a:ab: 72:81:3f:7a:9d:c5:0c:c6:51:3b:bc:7b:b6:68:93: 00:b7:aa:35:f8:6a:0e:a8:6d:89:42:da:27:5c:03: 6d:bb:6e:e3:67:24:c7:20:5b:c5:cd:85:dd:c7:50: cd:79:11:11:90:82:e0:4f:2d:a1:cc:c1:3c:fc:09: e8:a4:a6:7a:e0:9d:ad:5a:bb:f1:e4:cf:42:a2:ff: 43:cc:ad:01:5b:d9:ee:00:db:4d:67:94:56:86:7d: 8a:b5:a0:35:7f:1a:30:4b:66:5f:21:91:f5:84:47: 80:97:67:48:92:4d:b4:39:3b:60:ad:5c:17:5d:9d: f5:d9:f4:5f:98:5c:31:84:0d:f8:d4:3b:6e:0c:65: c2:9b:48:c0:6a:5b:7b:20:f5:3b:c2:9e:47:cc:27: 97:5b:5a:2a:04:08:b7:17:ed:2a:da:b8:0f:2e:c2: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:88:E8:EF:53:8E:B8:70:CB:8A:11:3B:D7:79:A8:DD:ED:DC:9B X509v3 Authority Key Identifier: keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:92:01:18:ce:32:34:4e:91:07:f5:7b:52:6c:4e:28:5c:b4: ed:91:a2:a3:80:dc:d0:d8:f6:95:a3:9d:2c:59:b5:1d:c0:c3: 16:33:dd:19:34:59:ea:93:81:a0:4b:a5:ac:24:6b:48:ad:df: 11:a9:aa:30:96:b8:93:b6:ff:b1:72:d0:ef:55:b7:58:40:66: e7:f8:d5:b8:2f:41:52:95:0e:66:30:84:49:a0:b7:86:68:b9: 2b:76:5c:9e:bb:1d:6a:60:e9:9a:8a:5a:8e:75:ed:7f:ec:b1: 51:fe:7c:4f:b1:85:8f:3e:ed:ee:29:77:84:34:5f:80:8e:3c: 45:4f:35:25:14:9a:79:a1:0a:46:86:15:a2:08:8f:d5:1e:bb: 00:bd:1a:e9:9d:75:62:1b:12:2a:7d:ca:5b:92:1e:64:b8:47: 26:3d:09:5f:fc:c4:91:37:b7:79:4d:46:92:c8:db:36:71:ce: d7:6b:f1:a3:2f:55:70:16:c7:6a:a7:a8:1f:a6:6a:ef:81:df: 7b:3d:44:23:94:d7:45:f0:8a:51:5d:56:02:9a:e5:aa:1a:60: f5:54:c0:d6:34:8d:ec:db:05:aa:e6:73:17:c2:03:63:44:33: 1d:f7:85:f9:2b:65:74:37:28:33:3b:88:96:f8:61:ae:28:20: d2:e6:0e:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1eMHnH6LYIP7X1CB4GXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTRlMzYzOTc0YjJlZjkwZWNiMDUzNDBhZjVkYWY2YjI0 MTYwY2IwHhcNMjUxMjE4MTkwMDM2WhcNMjUxMjE5MTkwMDM2WjAzMTEwLwYDVQQD EyhlYmIxODhlOGVmNTM4ZWI4NzBjYjhhMTEzYmQ3NzlhOGRkZWRkYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnWK/KqEssVg0GelvdcqQ3Kx/pVB fJFzOwbtZ17/laBeXhcB25+wA9NXV43rIn1WG+BS8+DxV8uYLMEQHJSKqfsB2jdQ 6WeAPmJCSdsUOpto7TUa+dBMOqtygT96ncUMxlE7vHu2aJMAt6o1+GoOqG2JQton XANtu27jZyTHIFvFzYXdx1DNeRERkILgTy2hzME8/AnopKZ64J2tWrvx5M9Cov9D zK0BW9nuANtNZ5RWhn2KtaA1fxowS2ZfIZH1hEeAl2dIkk20OTtgrVwXXZ312fRf mFwxhA341DtuDGXCm0jAalt7IPU7wp5HzCeXW1oqBAi3F+0q2rgPLsLAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuxiOjvU464cMuKETvXeajd7dybMB8GA1UdIwQY MBaAFGuk42OXSy75DssFNAr12vayQWDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMt ZWNkN2ZlZTdjMWIwLzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMtZWNkN2ZlZTdjMWIw LzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopIBGM4y NE6RB/V7UmxOKFy07ZGio4Dc0Nj2laOdLFm1HcDDFjPdGTRZ6pOBoEulrCRrSK3f EamqMJa4k7b/sXLQ71W3WEBm5/jVuC9BUpUOZjCESaC3hmi5K3ZcnrsdamDpmopa jnXtf+yxUf58T7GFjz7t7il3hDRfgI48RU81JRSaeaEKRoYVogiP1R67AL0a6Z11 YhsSKn3KW5IeZLhHJj0JX/zEkTe3eU1GksjbNnHO12vxoy9VcBbHaqeoH6Zq74Hf ez1EI5TXRfCKUV1WAprlqhpg9VTA1jSN7NsFquZzF8IDY0QzHfeF+StldDcoMzuI lvhhrigg0uYOjg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:45:44 2025 by rpki-client