This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json) Hash identifier: hTK0akjYvgPyHGp6NK0+LxuYK5SJaJZH9/kcwS+NgJk= Subject key identifier: 15:18:E4:F8:0C:34:D1:D5:BF:9C:5D:32:2D:8F:46:CD:CD:70:33:78 Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Certificate serial: 019B3DFE6F8D4CE4B63B3067CAE7654A9F7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft Manifest number: 028E Signing time: Sat 20 Dec 2025 23:00:43 +0000 Manifest this update: Sat 20 Dec 2025 23:00:43 +0000 Manifest next update: Sun 21 Dec 2025 23:00:43 +0000 Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: 0IrBd+NmIMtMxsxPyAtCgsi+uo79e/J5iu5lsNSx6yY=) 2: nTzt_7yObYF91YEfJlGe8rhCQyE.roa (hash: UZJuy0N8FDFUyDPS/6Vsx+tptqpEF0jDlmMqyvXeZZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:6f:8d:4c:e4:b6:3b:30:67:ca:e7:65:4a:9f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Validity Not Before: Dec 20 23:00:43 2025 GMT Not After : Dec 21 23:00:43 2025 GMT Subject: CN=1518e4f80c34d1d5bf9c5d322d8f46cdcd703378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:49:86:ab:6e:c1:6b:0d:82:27:3d:57:40: 73:59:c4:1d:2b:9d:e0:bc:72:cb:de:56:73:90:b7: 88:fd:81:32:1e:4d:e2:2f:c5:bc:2e:43:a8:a1:b5: 26:78:ef:69:71:54:14:8b:92:8c:ca:c8:34:2a:c1: 86:ee:1e:36:0f:21:e5:7f:30:34:b8:d6:27:9a:3b: 9d:de:40:5c:19:3b:f2:e8:42:b8:db:ca:f4:d1:3d: 66:7d:55:9c:2d:66:4d:e6:18:4f:69:8d:93:06:15: b3:71:50:80:1a:38:1b:2e:02:a9:8a:3b:b0:13:df: 13:b7:00:d8:bc:f2:75:c8:34:bd:42:a4:2e:1f:42: 6a:ff:2c:fd:06:cd:0e:3f:11:21:dd:3b:ae:5a:b6: ef:93:82:5a:0b:c1:1a:09:20:6b:12:e8:6b:30:9b: 15:ac:0a:43:56:6e:0c:16:c7:9f:14:17:b7:61:cb: 01:4a:fa:9c:90:b1:d7:e2:a8:88:8a:4b:55:d7:15: 85:e0:ae:60:fd:81:51:c5:13:91:cc:1d:d6:25:ca: 3e:81:d0:bb:04:bb:4b:f4:99:f9:03:32:c6:00:2f: f6:f7:45:ee:de:8c:ad:37:ce:13:30:29:50:1b:3f: f2:9e:9c:c2:c3:16:fc:10:8c:2d:90:c5:11:fb:83: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:18:E4:F8:0C:34:D1:D5:BF:9C:5D:32:2D:8F:46:CD:CD:70:33:78 X509v3 Authority Key Identifier: keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:93:95:5f:76:ac:53:49:7c:e8:96:9d:08:bb:1b:aa:d2:2f: 91:9d:f3:6a:14:70:55:91:37:85:a9:01:5a:f3:51:cb:57:02: 1f:b4:02:44:2e:5b:a2:2b:c8:76:c9:d8:fd:c1:95:27:d4:70: 2d:6a:ce:f5:c8:6f:ff:ec:9b:39:e6:11:00:c1:85:60:86:14: 49:12:ad:a6:5c:a3:e7:58:34:e0:a2:9c:7b:6f:5c:ac:dc:2c: 85:1a:d2:fb:f4:a9:2a:81:81:f3:70:b8:90:b7:b7:cd:29:b8: bd:6d:3f:37:a5:23:a7:1c:fb:2d:f2:75:c9:b7:d2:1c:c3:f0: 46:c5:49:9b:50:40:9b:6b:e5:79:37:9a:b2:41:f4:0c:ae:36: 3a:a2:c8:5c:e0:59:d5:ce:f6:2a:a4:13:4f:f7:07:af:56:7d: b3:0d:d4:fa:36:5c:d9:16:43:a9:d3:f1:dc:30:f6:c3:7d:c9: 72:54:6c:26:e3:e8:b3:f0:08:aa:78:75:95:24:17:ad:cd:32: 73:8d:67:36:5e:7d:82:0a:21:54:4c:2e:cd:5b:e5:bd:87:02: 89:0b:0a:cf:57:f8:53:8b:aa:3d:7d:0a:29:6e:06:b2:a1:a1: 85:42:dd:34:bb:8f:56:cd:a0:e3:52:cf:39:14:38:df:6f:ea: 65:ce:c6:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/m+NTOS2OzBnyudlSp9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2 NjMzZGEwHhcNMjUxMjIwMjMwMDQzWhcNMjUxMjIxMjMwMDQzWjAzMTEwLwYDVQQD EygxNTE4ZTRmODBjMzRkMWQ1YmY5YzVkMzIyZDhmNDZjZGNkNzAzMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA255JhqtuwWsNgic9V0BzWcQdK53g vHLL3lZzkLeI/YEyHk3iL8W8LkOoobUmeO9pcVQUi5KMysg0KsGG7h42DyHlfzA0 uNYnmjud3kBcGTvy6EK428r00T1mfVWcLWZN5hhPaY2TBhWzcVCAGjgbLgKpijuw E98TtwDYvPJ1yDS9QqQuH0Jq/yz9Bs0OPxEh3TuuWrbvk4JaC8EaCSBrEuhrMJsV rApDVm4MFsefFBe3YcsBSvqckLHX4qiIiktV1xWF4K5g/YFRxRORzB3WJco+gdC7 BLtL9Jn5AzLGAC/290Xu3oytN84TMClQGz/ynpzCwxb8EIwtkMUR+4Of7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUY5PgMNNHVv5xdMi2PRs3NcDN4MB8GA1UdIwQY MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt ZGI5MDU5MTNjYjg3LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3 LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5OVX3as U0l86JadCLsbqtIvkZ3zahRwVZE3hakBWvNRy1cCH7QCRC5boivIdsnY/cGVJ9Rw LWrO9chv/+ybOeYRAMGFYIYUSRKtplyj51g04KKce29crNwshRrS+/SpKoGB83C4 kLe3zSm4vW0/N6Ujpxz7LfJ1ybfSHMPwRsVJm1BAm2vleTeaskH0DK42OqLIXOBZ 1c72KqQTT/cHr1Z9sw3U+jZc2RZDqdPx3DD2w33JclRsJuPos/AIqnh1lSQXrc0y c41nNl59ggohVEwuzVvlvYcCiQsKz1f4U4uqPX0KKW4GsqGhhULdNLuPVs2g41LP ORQ432/qZc7GvA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:18 2025 by rpki-client