This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json) Hash identifier: EL330NBlsHPnSICiUSvCZL7HkDZRocZwBH5ae49DfoM= Subject key identifier: 05:21:75:DB:EB:F8:6A:A0:A1:33:D6:02:9E:D6:92:71:06:54:38:E0 Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d Certificate serial: 019B47021F31301B1F010B51A6CFCBB19A60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 17:01:19 +0000 Manifest this update: Mon 22 Dec 2025 17:01:19 +0000 Manifest next update: Tue 23 Dec 2025 17:01:19 +0000 Files and hashes: 1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=) 2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: 5IpjJHcHT4DGz6GgqhA+zkye+u8e547lntCuPbcRg6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:1f:31:30:1b:1f:01:0b:51:a6:cf:cb:b1:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d Validity Not Before: Dec 22 17:01:19 2025 GMT Not After : Dec 23 17:01:19 2025 GMT Subject: CN=052175dbebf86aa0a133d6029ed69271065438e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:f6:4b:e5:a6:b9:28:09:8c:25:be:32:07: e6:1f:4f:c0:ed:b9:10:a2:a0:b5:dd:1e:01:e6:b6: ab:e5:f7:b2:d8:02:3e:ab:27:20:62:14:83:d2:29: 94:2e:b6:31:32:35:49:37:b8:5d:ea:87:94:ae:ed: 51:a8:2c:63:90:a1:b6:3e:6e:86:eb:f3:00:01:e0: 7d:cf:d4:28:4d:f2:c8:4f:16:ae:da:92:6f:0c:fb: d5:10:16:3d:b6:84:5b:2f:63:1a:df:af:54:2d:ae: 4d:61:9f:8e:d0:46:e9:8b:a4:8a:95:45:df:be:17: 09:1d:6e:89:c0:c1:f0:30:d8:c8:20:37:06:63:2c: 28:da:91:5f:68:88:12:60:e4:c2:31:6b:91:e2:4c: f3:f1:84:2d:8c:9c:2a:19:bf:05:9d:b1:9e:0c:db: aa:67:b7:e4:b8:25:31:86:6f:b2:72:1f:98:c8:f8: 7d:98:cb:b1:15:85:e8:4b:e5:10:72:5d:28:54:41: 65:76:87:07:e3:ac:77:9c:19:e9:86:8f:22:e4:ee: df:43:6d:2f:bc:41:de:cf:95:d8:4a:eb:71:f6:ac: 65:b7:a6:ba:52:d5:c4:15:18:09:82:a5:01:48:19: 20:8a:3c:45:56:02:fe:5f:47:d1:f1:55:f5:c7:ec: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:21:75:DB:EB:F8:6A:A0:A1:33:D6:02:9E:D6:92:71:06:54:38:E0 X509v3 Authority Key Identifier: keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f0:7a:66:63:ab:06:57:df:73:4f:06:6a:6c:1c:c5:6c:20: c8:5f:25:b7:f6:af:0a:6e:32:9d:ad:95:70:e3:2b:8c:84:48: da:5f:f5:fd:08:41:32:53:21:92:f9:13:26:89:9a:f3:3b:ca: 95:51:27:d3:38:9d:ba:71:4e:c1:ec:b7:d1:77:77:04:f2:6e: ce:a9:6c:a9:0a:b6:4f:44:b9:61:e0:69:9a:f5:7b:01:85:ce: a1:95:2c:4c:65:be:d1:9b:d9:d7:13:e6:fa:3a:f8:48:b1:ef: 95:72:d7:b8:17:21:1a:41:2c:c8:e9:78:62:ce:d8:ca:bf:6d: 5a:5f:19:b9:77:97:a7:63:24:56:bd:58:2f:7d:14:5b:c9:3c: 57:f3:d2:ae:3f:63:18:80:3e:d2:fd:51:23:cc:a5:b2:98:db: ef:f3:53:bf:8d:dc:e2:ac:1a:5c:59:1a:40:bf:53:8c:87:ba: 6c:ce:22:9d:9a:a8:86:38:d7:e7:17:2f:06:e2:66:24:c0:7e: 23:a1:86:6b:3e:3c:97:d1:5b:8f:6e:c2:7b:dc:4d:6e:4d:5b: 86:b1:3b:1a:3e:2c:1d:8f:ed:87:b0:8a:89:b1:27:40:a2:85: 76:f1:46:c6:30:69:c1:8b:3c:c4:b9:de:28:c9:da:fa:e6:dc: 19:e4:83:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAh8xMBsfAQtRps/LsZpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OGUyMDIzODFjMWM4OGQ4MmYzYjcwZjNiZTA2OGExYWEz NzJiOWQwHhcNMjUxMjIyMTcwMTE5WhcNMjUxMjIzMTcwMTE5WjAzMTEwLwYDVQQD EygwNTIxNzVkYmViZjg2YWEwYTEzM2Q2MDI5ZWQ2OTI3MTA2NTQzOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyL2S+WmuSgJjCW+MgfmH0/A7bkQ oqC13R4B5rar5fey2AI+qycgYhSD0imULrYxMjVJN7hd6oeUru1RqCxjkKG2Pm6G 6/MAAeB9z9QoTfLITxau2pJvDPvVEBY9toRbL2Ma369ULa5NYZ+O0Ebpi6SKlUXf vhcJHW6JwMHwMNjIIDcGYywo2pFfaIgSYOTCMWuR4kzz8YQtjJwqGb8FnbGeDNuq Z7fkuCUxhm+ych+YyPh9mMuxFYXoS+UQcl0oVEFldocH46x3nBnpho8i5O7fQ20v vEHez5XYSutx9qxlt6a6UtXEFRgJgqUBSBkgijxFVgL+X0fR8VX1x+xn/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUhddvr+GqgoTPWAp7WknEGVDjgMB8GA1UdIwQY MBaAFOmOICOBwciNgvO3DzvgaKGqNyudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQt YzgzMmVkN2Q1ZmVjLzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQtYzgzMmVkN2Q1ZmVj LzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/B6ZmOr Blffc08GamwcxWwgyF8lt/avCm4yna2VcOMrjIRI2l/1/QhBMlMhkvkTJoma8zvK lVEn0zidunFOwey30Xd3BPJuzqlsqQq2T0S5YeBpmvV7AYXOoZUsTGW+0ZvZ1xPm +jr4SLHvlXLXuBchGkEsyOl4Ys7Yyr9tWl8ZuXeXp2MkVr1YL30UW8k8V/PSrj9j GIA+0v1RI8ylspjb7/NTv43c4qwaXFkaQL9TjIe6bM4inZqohjjX5xcvBuJmJMB+ I6GGaz48l9Fbj27Ce9xNbk1bhrE7Gj4sHY/th7CKibEnQKKFdvFGxjBpwYs8xLne KMna+ubcGeSDew== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:38 2025 by rpki-client