This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft File: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json) Hash identifier: y5qIJwK+9k/1eblprrgZkqCENMS/OhH5HytwR3a8x7o= Subject key identifier: EA:1E:5A:CE:42:D8:9E:F8:90:B6:F2:32:3E:F4:5E:D2:95:93:A4:32 Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d Certificate serial: 019B3F111B3F8828598A30B16D810752244B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft Manifest number: 1645 Signing time: Sun 21 Dec 2025 04:00:44 +0000 Manifest this update: Sun 21 Dec 2025 04:00:44 +0000 Manifest next update: Mon 22 Dec 2025 04:00:44 +0000 Files and hashes: 1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: COZBiDAV4F/JeJ0SSCRSHvOD/LnzzyZCSpsm5e6b53s=) 2: XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa (hash: P/OmeGABxQo0KdahW/abtL2rzvBKjRzNV4nj+svt9Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:1b:3f:88:28:59:8a:30:b1:6d:81:07:52:24:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d Validity Not Before: Dec 21 04:00:44 2025 GMT Not After : Dec 22 04:00:44 2025 GMT Subject: CN=ea1e5ace42d89ef890b6f2323ef45ed29593a432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:18:67:4a:3d:d8:0c:55:54:c8:22:76:e9: 8d:48:a2:31:b8:9f:83:e4:d5:6d:ab:c9:33:6e:95: 30:97:bf:3d:23:10:6b:c5:fc:c4:8e:60:7a:06:0e: 7d:7c:27:33:2d:40:8e:cb:de:39:13:bb:f5:db:29: 95:53:df:c5:4c:5f:7e:89:16:9f:c1:b1:6c:91:fc: f3:c2:47:6a:34:58:6f:60:78:ff:54:fc:0b:00:e6: b3:42:9b:cf:03:a1:66:f3:8a:d3:68:0e:32:a3:24: fd:4e:0f:11:0c:67:03:dd:f9:55:c1:04:6b:6a:2a: 02:31:30:8a:71:68:da:c5:77:99:34:56:0e:a9:b9: bb:26:8e:a4:35:ab:12:fd:a4:a1:04:bc:ae:a1:c3: 64:63:10:15:36:9d:77:c2:d5:23:21:51:fc:3a:79: 27:00:c6:e6:d7:85:1c:ca:a0:bc:f8:8d:10:89:de: 19:39:93:d6:58:a3:a5:38:6f:e7:da:d6:04:a8:46: 15:ef:86:45:fe:41:9b:d0:9e:bd:d2:a9:c6:d4:22: 3c:a1:79:05:b3:eb:77:23:7c:13:ec:6e:47:f9:3e: 49:da:0c:e4:12:19:f2:b5:c1:9a:70:6f:0e:19:6c: 2a:0f:74:f2:e8:ed:3d:69:b0:46:48:3d:b1:ed:59: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1E:5A:CE:42:D8:9E:F8:90:B6:F2:32:3E:F4:5E:D2:95:93:A4:32 X509v3 Authority Key Identifier: keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:32:ad:e7:a2:f7:10:48:77:d7:5b:9a:15:2d:62:78:1b:85: ff:80:ec:8f:c6:df:89:c5:87:80:28:d3:3c:0f:7c:97:c7:40: 1f:de:39:88:8c:e9:dc:5a:17:65:e2:41:ac:df:6f:92:9b:12: c0:cc:77:ff:79:a2:29:8a:e0:7a:32:f0:68:cb:68:22:bb:da: 21:f1:9a:23:85:99:2a:82:11:c0:ba:13:84:69:38:17:02:c9: 7b:c0:81:5a:e3:33:23:69:16:28:cb:27:20:90:40:b7:07:ae: 3e:d5:2c:8f:88:62:fc:c1:70:b4:3e:33:9c:02:3d:73:25:08: 3d:e6:09:57:dd:a7:c0:4a:9a:2e:cc:60:c0:68:e4:d3:c7:04: 8a:05:dd:db:76:48:61:9b:7e:63:57:22:ed:98:d0:38:29:75: 10:4e:1e:99:94:3b:59:7e:86:35:09:7f:61:cb:41:8e:0c:a1: d0:9f:f3:d7:af:10:fd:d5:dc:6f:6b:7a:2d:38:bd:5f:07:20: 3a:96:96:1b:1f:67:fd:c3:99:14:6c:0f:a9:33:92:72:ba:65: 06:74:3a:a7:bc:08:7e:04:c8:2c:a8:2c:08:aa:cd:22:12:77: 72:a2:87:54:ee:b1:d5:68:bb:97:ee:a7:d0:f7:d7:79:e5:a8: 42:79:58:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ERs/iChZijCxbYEHUiRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmQwZDlhYThjNzQzY2RhMTgyZjAwNjY4NTgzYTQ2ZTYw MGMzMmQwHhcNMjUxMjIxMDQwMDQ0WhcNMjUxMjIyMDQwMDQ0WjAzMTEwLwYDVQQD EyhlYTFlNWFjZTQyZDg5ZWY4OTBiNmYyMzIzZWY0NWVkMjk1OTNhNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFYYZ0o92AxVVMgidumNSKIxuJ+D 5NVtq8kzbpUwl789IxBrxfzEjmB6Bg59fCczLUCOy945E7v12ymVU9/FTF9+iRaf wbFskfzzwkdqNFhvYHj/VPwLAOazQpvPA6Fm84rTaA4yoyT9Tg8RDGcD3flVwQRr aioCMTCKcWjaxXeZNFYOqbm7Jo6kNasS/aShBLyuocNkYxAVNp13wtUjIVH8Onkn AMbm14UcyqC8+I0Qid4ZOZPWWKOlOG/n2tYEqEYV74ZF/kGb0J690qnG1CI8oXkF s+t3I3wT7G5H+T5J2gzkEhnytcGacG8OGWwqD3Ty6O09abBGSD2x7VlCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoeWs5C2J74kLbyMj70XtKVk6QyMB8GA1UdIwQY MBaAFOi9DZqox0PNoYLwBmhYOkbmAMMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMt ODg5MjQzODY5Njc5LzEvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMtODg5MjQzODY5Njc5 LzEvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjKt56L3 EEh311uaFS1ieBuF/4Dsj8bficWHgCjTPA98l8dAH945iIzp3FoXZeJBrN9vkpsS wMx3/3miKYrgejLwaMtoIrvaIfGaI4WZKoIRwLoThGk4FwLJe8CBWuMzI2kWKMsn IJBAtweuPtUsj4hi/MFwtD4znAI9cyUIPeYJV92nwEqaLsxgwGjk08cEigXd23ZI YZt+Y1ci7ZjQOCl1EE4emZQ7WX6GNQl/YctBjgyh0J/z168Q/dXcb2t6LTi9Xwcg OpaWGx9n/cOZFGwPqTOScrplBnQ6p7wIfgTILKgsCKrNIhJ3cqKHVO6x1Wi7l+6n 0PfXeeWoQnlYwA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:31:52 2025 by rpki-client