This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft File: 6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json) Hash identifier: lyd/mCY+fTWk8YzZM6XUe+KiR1RGrsF13u/UDlV82PM= Subject key identifier: 00:18:95:F2:95:33:F6:6C:B4:3B:87:59:A7:91:08:D0:E5:6C:E6:42 Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62 Certificate issuer: /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62 Certificate serial: 019B66561A2CA4EAC2367354DD24340FFE33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft Manifest number: 0460 Signing time: Sun 28 Dec 2025 19:01:17 +0000 Manifest this update: Sun 28 Dec 2025 19:01:17 +0000 Manifest next update: Mon 29 Dec 2025 19:01:17 +0000 Files and hashes: 1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: 9sx5xDYrXR6xcmgtyJEpceawAGphG1jo+a7n4rW0ATI=) 2: Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa (hash: Useq54Tz9psDJFY8ug181fsHtAqbkZCsf85Cmb59VeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:1a:2c:a4:ea:c2:36:73:54:dd:24:34:0f:fe:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62 Validity Not Before: Dec 28 19:01:17 2025 GMT Not After : Dec 29 19:01:17 2025 GMT Subject: CN=001895f29533f66cb43b8759a79108d0e56ce642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:1f:f9:53:a3:2a:5e:b1:6f:49:0b:2b:55: 93:bd:6f:47:a5:2c:42:4a:f4:00:51:83:ee:46:cc: 17:dc:86:b7:58:89:74:42:38:a1:b5:c8:c3:35:65: 3d:97:cd:5b:2a:43:e3:5a:f6:74:f7:e2:5d:e1:9e: 56:16:fd:9b:e0:50:dc:97:00:fc:e5:0d:0e:71:74: ed:54:f9:17:e2:ba:37:7c:5b:d0:5b:b2:fc:55:4a: 23:8b:6a:33:e3:db:41:f1:fe:3e:fc:85:8e:53:e7: 4a:e7:3a:58:f6:1c:97:c0:35:0a:d7:65:96:00:dd: d5:0d:13:45:db:3b:2a:60:17:fd:86:72:08:51:5d: e7:a0:86:a3:d7:9e:d1:a7:2c:c7:82:19:aa:ac:22: 39:1f:0e:05:f7:1e:2b:76:d6:18:7f:0d:83:8e:0d: 6c:f8:47:cb:2e:f6:4f:01:42:34:91:33:b5:59:3f: 29:68:0b:7e:04:89:21:dd:c2:6e:c5:bc:8e:74:73: 74:8b:c9:1b:53:9d:63:e6:81:ea:b3:d9:d0:66:ff: a2:4c:98:c1:9d:49:1a:bc:61:28:29:04:60:14:a8: a4:99:c4:c6:e8:b5:d1:3d:1f:4f:32:1f:f1:15:85: ff:54:1f:d4:b5:0c:6f:d2:d0:7a:8e:d1:45:fb:b9: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:18:95:F2:95:33:F6:6C:B4:3B:87:59:A7:91:08:D0:E5:6C:E6:42 X509v3 Authority Key Identifier: keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:89:40:4b:27:a0:46:8f:f9:5f:ef:78:61:38:40:b5:0f:f2: cd:4b:2b:78:50:1b:60:d7:8b:7d:a5:3a:db:01:31:34:ee:c5: b6:8a:9b:74:29:f0:ee:89:2c:70:73:6d:96:db:77:7f:4c:60: 8a:29:74:12:56:35:a4:b9:24:b9:51:ae:2f:eb:2e:f8:ce:6e: a4:4b:e3:af:1d:30:31:f9:6f:6a:9b:f7:bb:f2:4b:06:ee:39: ce:b1:c7:63:c3:4d:c7:bb:ad:86:4f:f8:25:71:1b:3e:9b:3a: 17:fa:ad:12:23:28:c3:d8:2f:aa:2a:d5:ab:63:4e:cd:21:59: 4a:45:7c:49:bf:e9:71:c6:39:a4:f0:51:37:c3:84:f1:87:ad: 33:4f:45:05:81:65:f1:c7:7f:3d:0e:67:e1:db:eb:e6:9c:d8: 5d:0c:39:90:05:f9:92:73:5f:a2:92:69:da:77:b3:41:9b:ea: eb:5d:43:6c:5d:26:2b:02:8f:e2:34:1a:c5:ea:f8:a5:b7:e9: bc:ba:70:8f:93:6c:af:6d:11:e4:cf:a2:42:f0:82:3e:fe:fb: fe:ec:1e:5d:f9:b9:3d:fc:5a:72:e3:c4:92:5a:2b:ce:8e:08: 65:88:20:80:72:14:08:52:e8:de:03:22:60:df:25:a5:59:76: 92:b0:3c:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVhospOrCNnNU3SQ0D/4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOTBlZDY4NDhhOWNhMWVmMjAxMGU2MzRjZTIxYjZjOWFk ZGViNjIwHhcNMjUxMjI4MTkwMTE3WhcNMjUxMjI5MTkwMTE3WjAzMTEwLwYDVQQD EygwMDE4OTVmMjk1MzNmNjZjYjQzYjg3NTlhNzkxMDhkMGU1NmNlNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf4f+VOjKl6xb0kLK1WTvW9HpSxC SvQAUYPuRswX3Ia3WIl0QjihtcjDNWU9l81bKkPjWvZ09+Jd4Z5WFv2b4FDclwD8 5Q0OcXTtVPkX4ro3fFvQW7L8VUoji2oz49tB8f4+/IWOU+dK5zpY9hyXwDUK12WW AN3VDRNF2zsqYBf9hnIIUV3noIaj157RpyzHghmqrCI5Hw4F9x4rdtYYfw2Djg1s +EfLLvZPAUI0kTO1WT8paAt+BIkh3cJuxbyOdHN0i8kbU51j5oHqs9nQZv+iTJjB nUkavGEoKQRgFKikmcTG6LXRPR9PMh/xFYX/VB/UtQxv0tB6jtFF+7luwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAYlfKVM/ZstDuHWaeRCNDlbOZCMB8GA1UdIwQY MBaAFOqQ7WhIqcoe8gEOY0ziG2ya3etiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUt NTg2YjZkMDQ3ODc4LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUtNTg2YjZkMDQ3ODc4 LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4olASyeg Ro/5X+94YThAtQ/yzUsreFAbYNeLfaU62wExNO7FtoqbdCnw7okscHNtltt3f0xg iil0ElY1pLkkuVGuL+su+M5upEvjrx0wMflvapv3u/JLBu45zrHHY8NNx7uthk/4 JXEbPps6F/qtEiMow9gvqirVq2NOzSFZSkV8Sb/pccY5pPBRN8OE8YetM09FBYFl 8cd/PQ5n4dvr5pzYXQw5kAX5knNfopJp2nezQZvq611DbF0mKwKP4jQaxer4pbfp vLpwj5Nsr20R5M+iQvCCPv77/uweXfm5PfxacuPEklorzo4IZYgggHIUCFLo3gMi YN8lpVl2krA8DA== -----END CERTIFICATE-----Generated at Mon Dec 29 02:58:06 2025 by rpki-client