This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft File: 6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json) Hash identifier: uRrY42Dno4dmY13qf0lBsUCjUsKEq73p3zWErKWw/J8= Subject key identifier: 0A:DB:45:29:3E:0A:3C:5A:38:F6:5B:0D:71:D0:4D:DE:7A:F1:C5:56 Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C Certificate issuer: /CN=e8428fc2da5b6563749ccb99775775e820b7733c Certificate serial: 019B40C929EB1D915B076D6FC10AE042DA7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft Manifest number: 11BB Signing time: Sun 21 Dec 2025 12:01:23 +0000 Manifest this update: Sun 21 Dec 2025 12:01:23 +0000 Manifest next update: Mon 22 Dec 2025 12:01:23 +0000 Files and hashes: 1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: ImeK4FABOBUvV6Dn24EUAVIVkltAurt9NAzQU5KBhWQ=) 2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:29:eb:1d:91:5b:07:6d:6f:c1:0a:e0:42:da:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c Validity Not Before: Dec 21 12:01:23 2025 GMT Not After : Dec 22 12:01:23 2025 GMT Subject: CN=0adb45293e0a3c5a38f65b0d71d04dde7af1c556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:06:1e:ed:76:38:b0:53:95:50:9d:ec:b9: 76:41:85:4d:db:df:65:12:45:ab:35:6d:ea:79:a5: b2:3c:f5:88:22:cd:9b:03:7d:31:6e:57:91:2d:e5: ce:c7:4d:40:15:c2:f9:b0:61:33:6e:d4:b4:cb:2a: 33:7b:c8:68:7e:ee:e9:01:79:bc:83:4a:89:18:62: c1:f8:a6:85:be:b2:0b:50:74:5e:bc:c3:cd:15:36: b8:5a:0f:23:05:bc:db:03:63:91:9f:0f:48:21:cc: 36:35:a9:3f:24:d2:98:d6:8d:98:03:8d:1d:09:75: 76:70:1d:55:6f:7e:b4:0b:35:83:15:8e:c0:70:5d: b3:1e:bc:b3:3f:44:6a:11:c0:e4:0f:5b:58:54:74: 0d:d2:6d:63:31:21:c0:e9:f7:fb:97:e4:27:b5:b3: 2e:8f:cd:f6:1b:61:2f:ce:4d:92:9d:51:37:6c:93: f6:c6:7a:b2:ee:f0:12:9d:0b:37:c7:a6:2d:90:b8: 52:55:67:d1:56:f9:88:93:7f:bf:3f:37:d2:6a:fa: 0b:4d:03:0d:cc:0b:84:2b:5a:92:7d:85:c0:31:5f: 71:39:da:d1:86:3d:53:65:b1:2d:f9:85:97:6f:b4: 58:d0:54:1f:c7:60:8f:aa:ad:a9:1a:25:77:dc:fd: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:45:29:3E:0A:3C:5A:38:F6:5B:0D:71:D0:4D:DE:7A:F1:C5:56 X509v3 Authority Key Identifier: keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:37:fc:86:39:3a:20:f8:9e:df:04:fc:8b:55:9d:a2:55:bc: d9:22:d6:50:9c:01:35:24:49:bd:e7:10:51:19:98:2a:bd:e4: a8:06:21:59:77:61:ae:9d:9f:46:20:13:83:aa:a6:96:58:b6: 58:a3:3f:3e:ff:e7:7a:46:aa:f4:bb:e4:c2:f5:4f:7d:f3:aa: 0c:34:06:fe:7a:cd:e6:53:33:ff:4d:4b:63:95:e5:2d:0b:1f: c9:cb:e0:55:95:1a:c0:9e:c1:7e:48:2c:b3:71:6e:b3:c6:9b: 1e:a5:c2:d2:a7:ce:a6:4a:1e:15:79:a0:41:34:02:28:46:a9: 60:3b:4b:f4:2d:8f:f0:c1:3e:3c:82:85:18:79:49:ae:b8:d7: fd:b4:e7:a8:09:36:3f:c0:1d:3d:eb:2f:26:27:9e:24:08:52: 45:a7:ee:b0:49:56:08:43:3d:08:69:b8:2f:8a:e8:d4:42:68: 54:49:ed:c9:15:5e:81:58:5e:f7:d4:b8:f7:79:a9:e8:46:a2: aa:a4:83:7d:00:8c:40:5f:8b:7d:8e:e0:6e:fb:13:ee:a9:d4: 5f:e2:1c:7e:a7:7d:64:b1:1a:26:2f:2a:5a:11:b9:9a:58:1e: 0d:3b:45:bb:a0:33:a7:9f:79:b3:4f:a7:48:f9:a4:f5:91:f4: 3d:17:65:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySnrHZFbB21vwQrgQtp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDI4ZmMyZGE1YjY1NjM3NDljY2I5OTc3NTc3NWU4MjBi NzczM2MwHhcNMjUxMjIxMTIwMTIzWhcNMjUxMjIyMTIwMTIzWjAzMTEwLwYDVQQD EygwYWRiNDUyOTNlMGEzYzVhMzhmNjViMGQ3MWQwNGRkZTdhZjFjNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJoGHu12OLBTlVCd7Ll2QYVN299l EkWrNW3qeaWyPPWIIs2bA30xbleRLeXOx01AFcL5sGEzbtS0yyoze8hofu7pAXm8 g0qJGGLB+KaFvrILUHRevMPNFTa4Wg8jBbzbA2ORnw9IIcw2Nak/JNKY1o2YA40d CXV2cB1Vb360CzWDFY7AcF2zHryzP0RqEcDkD1tYVHQN0m1jMSHA6ff7l+QntbMu j832G2Evzk2SnVE3bJP2xnqy7vASnQs3x6YtkLhSVWfRVvmIk3+/PzfSavoLTQMN zAuEK1qSfYXAMV9xOdrRhj1TZbEt+YWXb7RY0FQfx2CPqq2pGiV33P2N/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArbRSk+CjxaOPZbDXHQTd568cVWMB8GA1UdIwQY MBaAFOhCj8LaW2VjdJzLmXdXdeggt3M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMt NWU2Y2Y5NmY3MGNiLzEvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OTY3OTEtNTNjZi00ZDA5LWFlZWMtNWU2Y2Y5NmY3MGNi LzEvNkVLUHd0cGJaV04wbk11WmQxZDE2Q0MzY3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjf8hjk6 IPie3wT8i1WdolW82SLWUJwBNSRJvecQURmYKr3kqAYhWXdhrp2fRiATg6qmlli2 WKM/Pv/nekaq9LvkwvVPffOqDDQG/nrN5lMz/01LY5XlLQsfycvgVZUawJ7Bfkgs s3Fus8abHqXC0qfOpkoeFXmgQTQCKEapYDtL9C2P8ME+PIKFGHlJrrjX/bTnqAk2 P8AdPesvJieeJAhSRafusElWCEM9CGm4L4ro1EJoVEntyRVegVhe99S493mp6Eai qqSDfQCMQF+LfY7gbvsT7qnUX+Icfqd9ZLEaJi8qWhG5mlgeDTtFu6Azp595s0+n SPmk9ZH0PRdlFA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:07 2025 by rpki-client