This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft File: 6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json) Hash identifier: CLhcunfXREl86VjEZwv8gLwWdX/quTTxwGLlrhqCYxk= Subject key identifier: 2E:B1:51:5D:05:9C:13:DD:D5:A6:CC:11:2D:20:98:0C:84:9E:AE:70 Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA Certificate issuer: /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca Certificate serial: 019B650D13FA05F38BEB682111565B5D409F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft Manifest number: 057E Signing time: Sun 28 Dec 2025 13:01:54 +0000 Manifest this update: Sun 28 Dec 2025 13:01:54 +0000 Manifest next update: Mon 29 Dec 2025 13:01:54 +0000 Files and hashes: 1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: Th2zCS3J2bnput08NYfkBsijrYVSk46FeRXnUx68CEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:13:fa:05:f3:8b:eb:68:21:11:56:5b:5d:40:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca Validity Not Before: Dec 28 13:01:54 2025 GMT Not After : Dec 29 13:01:54 2025 GMT Subject: CN=2eb1515d059c13ddd5a6cc112d20980c849eae70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:ce:4a:01:19:0d:d1:4b:23:e8:e0:ef:3a: bf:6d:37:2a:f1:07:fe:31:ae:a0:53:c6:92:7e:30: 07:17:2c:21:50:67:a4:1c:5c:f0:a4:65:57:92:10: 46:a3:06:30:e9:95:60:81:b7:b7:92:dd:e6:f5:a0: 0a:12:ad:1d:cd:3f:1b:a7:c5:c0:f0:46:5c:dc:d7: fe:31:76:8c:4a:74:96:03:6d:99:26:8f:6b:3b:ff: a1:16:10:9e:36:16:6d:08:ec:bc:09:45:7b:10:1b: 23:cd:af:e4:6a:43:d6:f0:9a:fd:08:7a:7a:42:5f: 97:e2:3b:69:51:8a:90:c2:43:20:c2:2a:98:1d:48: 83:50:5c:83:c4:61:fe:22:72:41:de:56:49:59:4d: 57:96:e3:30:8e:18:35:4a:4d:7c:67:d3:02:42:64: d9:e9:7c:5e:b3:83:39:a7:d5:cb:31:06:01:22:3c: 53:5f:be:a7:a0:42:e7:f7:96:9f:d8:05:a0:ac:dd: bf:9e:5f:be:e0:82:a8:21:14:2e:6e:05:e6:a4:f4: b4:0a:84:2d:17:7f:51:f9:49:d4:29:59:a9:f4:55: bd:e9:e4:7d:63:e5:47:e3:dd:09:eb:34:5c:94:7f: 27:1a:d7:4a:64:22:19:76:f5:e0:72:5b:d6:c6:c0: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B1:51:5D:05:9C:13:DD:D5:A6:CC:11:2D:20:98:0C:84:9E:AE:70 X509v3 Authority Key Identifier: keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e7:a4:9d:b3:f0:c6:b8:01:4b:0a:dd:7c:73:6f:83:7c:c1: 99:5c:99:25:ce:5d:77:91:d5:81:e0:3b:b2:55:29:7d:f9:1f: 8b:08:56:7a:60:1a:52:3d:31:a7:0e:e4:5e:f8:8a:15:cb:d6: 41:f9:13:34:68:f3:f0:c0:3e:cf:08:a7:d0:57:46:b2:00:46: 04:09:8f:a8:45:54:80:23:3e:67:9e:54:6e:1a:e7:1b:61:2b: 3f:84:28:0e:ce:32:73:a3:7e:af:ab:3c:ef:16:51:a2:16:c2: 20:48:05:26:03:a6:c9:50:4d:eb:5b:d8:35:f6:5e:a7:d8:d6: fc:13:16:ab:63:f3:af:1e:b7:88:28:24:38:fc:a4:e2:d1:93: a1:bf:33:e2:7d:f5:dd:fa:bc:32:50:48:f6:a5:7b:05:6c:ed: 96:2b:18:c0:d1:13:35:f6:56:f6:6d:17:0e:7f:42:17:62:48: c2:6b:ba:e5:36:86:f6:c4:62:0f:7e:f3:41:a6:c0:e2:e2:9f: 86:ba:ee:94:0f:1a:f5:8c:11:af:a0:f1:ea:22:41:ad:25:ab: 1b:ee:9d:f5:f0:7d:08:40:8f:17:3a:15:de:21:72:75:21:a3: ca:06:8b:d9:de:dc:0b:14:14:00:57:dc:c2:56:d3:f9:64:01: 9d:90:5a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDRP6BfOL62ghEVZbXUCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ODMxZmQwZTdiMTViMTdlMGEwYTdkY2NmY2FiYjA2M2Q3 YzQ3Y2EwHhcNMjUxMjI4MTMwMTU0WhcNMjUxMjI5MTMwMTU0WjAzMTEwLwYDVQQD EygyZWIxNTE1ZDA1OWMxM2RkZDVhNmNjMTEyZDIwOTgwYzg0OWVhZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnrOSgEZDdFLI+jg7zq/bTcq8Qf+ Ma6gU8aSfjAHFywhUGekHFzwpGVXkhBGowYw6ZVggbe3kt3m9aAKEq0dzT8bp8XA 8EZc3Nf+MXaMSnSWA22ZJo9rO/+hFhCeNhZtCOy8CUV7EBsjza/kakPW8Jr9CHp6 Ql+X4jtpUYqQwkMgwiqYHUiDUFyDxGH+InJB3lZJWU1XluMwjhg1Sk18Z9MCQmTZ 6Xxes4M5p9XLMQYBIjxTX76noELn95af2AWgrN2/nl++4IKoIRQubgXmpPS0CoQt F39R+UnUKVmp9FW96eR9Y+VH490J6zRclH8nGtdKZCIZdvXgclvWxsDioQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6xUV0FnBPd1abMES0gmAyEnq5wMB8GA1UdIwQY MBaAFOmDH9DnsVsX4KCn3M/KuwY9fEfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQt MDE0N2UxM2E5OTNlLzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQtMDE0N2UxM2E5OTNl LzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACueknbPw xrgBSwrdfHNvg3zBmVyZJc5dd5HVgeA7slUpffkfiwhWemAaUj0xpw7kXviKFcvW QfkTNGjz8MA+zwin0FdGsgBGBAmPqEVUgCM+Z55UbhrnG2ErP4QoDs4yc6N+r6s8 7xZRohbCIEgFJgOmyVBN61vYNfZep9jW/BMWq2Pzrx63iCgkOPyk4tGTob8z4n31 3fq8MlBI9qV7BWztlisYwNETNfZW9m0XDn9CF2JIwmu65TaG9sRiD37zQabA4uKf hrrulA8a9YwRr6Dx6iJBrSWrG+6d9fB9CECPFzoV3iFydSGjygaL2d7cCxQUAFfc wlbT+WQBnZBavA== -----END CERTIFICATE-----Generated at Sun Dec 28 20:28:31 2025 by rpki-client