This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json) Hash identifier: xudhMNyymfCfvGRLAI+y23W1/bm0eTAz4hTxtR1qnRI= Subject key identifier: 6C:16:FE:86:74:4D:8C:62:32:FA:2E:32:DA:3D:52:6F:1D:EE:CA:3B Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905 Certificate serial: 019B3EA330367728E1748C979BD00D60D554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft Manifest number: 0E6A Signing time: Sun 21 Dec 2025 02:00:40 +0000 Manifest this update: Sun 21 Dec 2025 02:00:40 +0000 Manifest next update: Mon 22 Dec 2025 02:00:40 +0000 Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=) 2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: zpmLJAaFTKwV4/SnuP0w69HnyZNG+UB052zN8Gs6Nx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:30:36:77:28:e1:74:8c:97:9b:d0:0d:60:d5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905 Validity Not Before: Dec 21 02:00:40 2025 GMT Not After : Dec 22 02:00:40 2025 GMT Subject: CN=6c16fe86744d8c6232fa2e32da3d526f1deeca3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:5e:7e:8e:51:85:d5:cd:45:37:a4:23:ab: 9b:f0:85:95:80:4b:5f:fe:78:0f:25:19:8d:fb:e2: 4f:88:c4:7e:ed:d3:26:07:47:a9:0d:ad:0c:c4:1b: a4:f8:c8:06:17:a4:00:cd:f5:7c:1c:79:c2:4b:3b: bc:be:74:a0:e8:95:1e:0d:10:e4:f1:4d:05:10:76: b2:5c:31:86:41:3c:ee:ba:2e:d6:a3:fa:47:1e:e0: a3:82:07:42:23:b9:14:6b:f5:ea:1d:4a:44:36:1a: 59:49:ee:42:da:62:e8:8d:6a:8b:fc:61:da:89:fd: 9b:ba:5d:45:eb:47:99:48:67:f9:50:3b:1e:f9:a9: ab:0b:ad:84:1b:f0:90:13:4a:95:8a:f1:8c:11:10: bc:be:b1:8c:73:d8:90:0e:9f:bb:cc:b1:98:3c:28: 46:fb:16:13:a6:5b:c0:66:1e:6d:05:f2:da:7e:ba: 3e:05:a5:68:9e:e2:59:8c:6d:48:47:32:08:f5:cc: 69:e5:c4:d2:1b:16:3e:bd:2a:7e:d1:bc:62:02:8b: 87:96:24:00:11:73:e4:b3:48:65:6d:cc:5e:34:9d: 5d:af:fd:00:0e:6b:e8:f1:72:2a:92:f4:3c:3a:f6: 78:f2:b1:70:b3:07:35:f1:14:3d:c6:d0:e9:f4:ee: e3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:16:FE:86:74:4D:8C:62:32:FA:2E:32:DA:3D:52:6F:1D:EE:CA:3B X509v3 Authority Key Identifier: keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:03:b6:d5:58:36:49:8a:e0:1b:73:c5:df:65:29:3c:40: f7:8c:43:c6:7a:f7:4d:81:8d:e6:84:74:e8:8b:50:9a:e4:56: fb:23:6d:e7:ba:33:e5:be:c6:24:df:f2:2e:e2:bf:b0:2d:b5: 75:ad:1d:ee:8a:4a:c7:d0:a8:a4:58:40:fc:c6:1c:ad:28:32: a4:5b:b4:06:e1:89:2c:16:d3:3e:63:e4:38:71:a7:84:d4:a2: 02:d9:2a:39:e9:d7:f4:e4:7a:67:0e:46:87:9c:95:03:a2:9a: 80:f9:ca:e6:b3:c2:c5:30:8b:38:1a:d9:ca:ff:f4:0b:9f:c6: dd:87:fe:7f:7f:de:f4:81:88:3b:a5:f8:f4:d9:88:ed:02:70: 01:3d:c0:77:d8:38:bd:42:26:7d:0c:77:50:a8:ef:01:70:dc: b8:f3:5a:06:a1:1c:f3:ce:50:85:7f:ca:b6:4d:60:6c:ac:78: 6b:9b:85:b9:f0:9f:73:11:39:62:98:fc:df:21:63:f2:15:f6: d4:36:a0:1e:31:69:86:b2:8e:ce:fb:13:16:b1:61:5f:c2:48: e5:33:07:b7:49:0e:16:29:91:ac:52:58:72:3f:95:3b:95:91: 52:a8:75:37:20:9e:54:ad:c5:91:16:79:86:24:01:50:9e:06: a3:90:57:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozA2dyjhdIyXm9ANYNVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YWFmODkyYjg5OTFlOGMwMjc3OWNiMmRiODY0ZDMyMWVl YmU5MDUwHhcNMjUxMjIxMDIwMDQwWhcNMjUxMjIyMDIwMDQwWjAzMTEwLwYDVQQD Eyg2YzE2ZmU4Njc0NGQ4YzYyMzJmYTJlMzJkYTNkNTI2ZjFkZWVjYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS1efo5RhdXNRTekI6ub8IWVgEtf /ngPJRmN++JPiMR+7dMmB0epDa0MxBuk+MgGF6QAzfV8HHnCSzu8vnSg6JUeDRDk 8U0FEHayXDGGQTzuui7Wo/pHHuCjggdCI7kUa/XqHUpENhpZSe5C2mLojWqL/GHa if2bul1F60eZSGf5UDse+amrC62EG/CQE0qVivGMERC8vrGMc9iQDp+7zLGYPChG +xYTplvAZh5tBfLafro+BaVonuJZjG1IRzII9cxp5cTSGxY+vSp+0bxiAouHliQA EXPks0hlbcxeNJ1dr/0ADmvo8XIqkvQ8OvZ48rFwswc18RQ9xtDp9O7jbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwW/oZ0TYxiMvouMto9Um8d7so7MB8GA1UdIwQY MBaAFJeq+JK4mR6MAnecstuGTTIe6+kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQt Y2E3NDY4NjdkYWM4LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQtY2E3NDY4NjdkYWM4 LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4MDttVY NkmK4Btzxd9lKTxA94xDxnr3TYGN5oR06ItQmuRW+yNt57oz5b7GJN/yLuK/sC21 da0d7opKx9CopFhA/MYcrSgypFu0BuGJLBbTPmPkOHGnhNSiAtkqOenX9OR6Zw5G h5yVA6KagPnK5rPCxTCLOBrZyv/0C5/G3Yf+f3/e9IGIO6X49NmI7QJwAT3Ad9g4 vUImfQx3UKjvAXDcuPNaBqEc885QhX/Ktk1gbKx4a5uFufCfcxE5Ypj83yFj8hX2 1DagHjFphrKOzvsTFrFhX8JI5TMHt0kOFimRrFJYcj+VO5WRUqh1NyCeVK3FkRZ5 hiQBUJ4Go5BXyw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:38 2025 by rpki-client