This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json) Hash identifier: +seUaVt9W54Mx2grUjA+94qaDWuv4UPA4g/RMLUm62s= Subject key identifier: 86:0C:12:FA:7D:A0:26:62:B9:29:B5:3A:44:85:AB:BB:21:25:A6:13 Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40 Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40 Certificate serial: 019B522A3109B1569DF5EAFCA7CAA9468344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 21:00:55 +0000 Manifest this update: Wed 24 Dec 2025 21:00:55 +0000 Manifest next update: Thu 25 Dec 2025 21:00:55 +0000 Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: Dnoy7M2UW+1AJYyKyjYvmjplBCLe1v8di4BcjRIiVms=) 2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:31:09:b1:56:9d:f5:ea:fc:a7:ca:a9:46:83:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40 Validity Not Before: Dec 24 21:00:55 2025 GMT Not After : Dec 25 21:00:55 2025 GMT Subject: CN=860c12fa7da02662b929b53a4485abbb2125a613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:c2:6e:8b:8e:c6:f8:13:0c:58:55:e7:3d: 98:79:a2:02:91:d1:69:e7:a8:4b:6d:de:48:93:87: 75:d9:22:62:e3:37:1d:e6:8b:0a:f2:fd:ff:72:2a: 17:3c:c3:9c:cf:8b:d5:8b:c3:13:24:93:3a:ae:0c: 62:12:52:03:ef:09:8e:83:ac:5b:0f:5a:db:71:f3: 10:be:f6:60:2f:d0:41:8e:be:62:58:a8:a6:59:f3: 12:16:4c:34:bd:66:db:14:99:7b:a1:53:f0:e2:51: c8:d1:68:ae:f0:44:9c:0b:29:3c:f4:8a:74:97:75: c4:9e:5d:cb:e0:35:8e:48:29:a2:0f:a6:52:9a:47: 40:36:51:3b:90:d7:06:e7:28:f9:77:40:f8:ce:ee: b7:99:b5:98:07:bb:ca:b0:4e:09:cc:69:96:0a:3d: a1:29:4e:5b:ca:82:65:f2:ee:24:10:4c:ab:89:82: d5:31:d6:99:60:68:fe:45:8a:ec:e4:01:1f:74:1e: 0a:6e:38:0d:cc:38:0b:8e:36:f7:91:e3:09:65:f2: 14:b3:56:88:84:2d:6d:4b:75:f5:b8:50:9c:f9:48: 9f:30:6d:af:0b:dd:1f:e8:f2:46:9f:14:97:86:f1: 39:1b:b8:ab:db:4c:b9:3c:56:22:a6:00:24:5a:06: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:12:FA:7D:A0:26:62:B9:29:B5:3A:44:85:AB:BB:21:25:A6:13 X509v3 Authority Key Identifier: keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:63:8b:db:e5:07:24:42:5e:a9:39:ab:6e:cc:ec:be:28:5c: 58:b5:04:a2:ba:3e:44:2c:08:9a:c8:f3:15:8f:26:17:f1:4e: 1d:f4:11:9b:56:c4:6a:28:a1:71:03:e6:c8:0b:57:36:9f:c5: bf:2d:55:1d:8b:be:16:61:e6:cb:04:7d:0a:fd:ce:54:27:fd: 60:5a:89:6f:f2:e9:cf:f9:70:4a:3f:19:d5:db:db:d3:47:70: 88:c8:ad:d1:88:6c:85:bf:69:9d:58:e8:e5:ac:61:8f:91:af: 0d:2c:81:ea:17:de:93:c3:30:87:61:3e:a6:9c:ff:89:00:75: 3b:c5:c7:27:c7:1c:0d:56:20:d0:ef:ca:cd:70:82:18:e9:80: 25:c3:4a:ff:7a:2f:f7:d8:0f:c0:b7:e4:78:13:2b:fc:96:af: 8d:4e:18:db:a4:ed:55:6a:22:3c:c3:32:71:a4:eb:77:ce:c8: eb:66:31:28:44:d4:b3:6e:61:14:30:9d:b3:97:4c:d9:81:3e: b1:dd:a9:f5:5b:e2:38:e4:df:94:db:11:52:a6:fc:14:ce:30: 07:b3:1c:44:7a:24:06:83:09:7a:97:20:84:f4:d3:eb:b8:ff: 06:de:2c:e1:62:8c:00:bd:05:07:e1:3d:b9:5b:60:89:33:f0: a9:b3:0b:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKjEJsVad9er8p8qpRoNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5 MWVhNDAwHhcNMjUxMjI0MjEwMDU1WhcNMjUxMjI1MjEwMDU1WjAzMTEwLwYDVQQD Eyg4NjBjMTJmYTdkYTAyNjYyYjkyOWI1M2E0NDg1YWJiYjIxMjVhNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJHCbouOxvgTDFhV5z2YeaICkdFp 56hLbd5Ik4d12SJi4zcd5osK8v3/cioXPMOcz4vVi8MTJJM6rgxiElID7wmOg6xb D1rbcfMQvvZgL9BBjr5iWKimWfMSFkw0vWbbFJl7oVPw4lHI0Wiu8EScCyk89Ip0 l3XEnl3L4DWOSCmiD6ZSmkdANlE7kNcG5yj5d0D4zu63mbWYB7vKsE4JzGmWCj2h KU5byoJl8u4kEEyriYLVMdaZYGj+RYrs5AEfdB4KbjgNzDgLjjb3keMJZfIUs1aI hC1tS3X1uFCc+UifMG2vC90f6PJGnxSXhvE5G7ir20y5PFYipgAkWgYbiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYMEvp9oCZiuSm1OkSFq7shJaYTMB8GA1UdIwQY MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWOL2+UH JEJeqTmrbszsvihcWLUEoro+RCwImsjzFY8mF/FOHfQRm1bEaiihcQPmyAtXNp/F vy1VHYu+FmHmywR9Cv3OVCf9YFqJb/Lpz/lwSj8Z1dvb00dwiMit0Yhshb9pnVjo 5axhj5GvDSyB6hfek8Mwh2E+ppz/iQB1O8XHJ8ccDVYg0O/KzXCCGOmAJcNK/3ov 99gPwLfkeBMr/JavjU4Y26TtVWoiPMMycaTrd87I62YxKETUs25hFDCds5dM2YE+ sd2p9VviOOTflNsRUqb8FM4wB7McRHokBoMJepcghPTT67j/Bt4s4WKMAL0FB+E9 uVtgiTPwqbMLcQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:14:04 2025 by rpki-client