This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft File: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json) Hash identifier: GnTkYphobIgZg+FwsmWc3gw1WXxVMfgEbN14uEWrhiE= Subject key identifier: C7:57:77:FB:13:EF:87:5C:10:DB:BF:0F:5E:66:F9:13:21:5A:C0:A7 Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1 Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1 Certificate serial: 019B75FF3D9D609C94A0C74D36C7533485F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft Manifest number: 0741 Signing time: Wed 31 Dec 2025 20:00:20 +0000 Manifest this update: Wed 31 Dec 2025 20:00:20 +0000 Manifest next update: Thu 01 Jan 2026 20:00:20 +0000 Files and hashes: 1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: OOUXEjVZr1X7nBkqt10lVvIbg9xugK5UuTrsUOiKMcM=) 2: ADjr28xDnqYwCSe2YSx596u1Q58.roa (hash: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:ff:3d:9d:60:9c:94:a0:c7:4d:36:c7:53:34:85:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e994e74064158e97904990947510eb9941986ca1 Validity Not Before: Dec 31 20:00:20 2025 GMT Not After : Jan 1 20:00:20 2026 GMT Subject: CN=c75777fb13ef875c10dbbf0f5e66f913215ac0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:a7:9f:0f:d3:59:43:00:60:47:d4:89:b1: d8:ab:81:a2:d4:8b:a7:ab:25:51:b6:4e:0c:ee:eb: 92:65:27:4e:e1:a8:e1:5b:27:1d:83:5b:3d:73:6e: bc:b7:92:7f:29:d2:7b:71:32:aa:f5:a1:30:09:0f: d4:8c:ec:27:bf:4e:a5:51:61:6b:c8:87:34:08:dd: fe:33:eb:d3:85:4e:85:8e:24:8f:d5:a3:6f:1b:3e: 11:24:78:6d:8a:55:ef:78:5f:23:c9:fe:3a:99:c8: 2c:bc:75:44:39:7b:f5:9b:e8:92:95:61:e2:b2:05: dc:0b:b0:14:ac:a0:7d:33:f9:1a:45:60:bd:78:a2: bf:a9:0b:ed:30:32:d8:b0:d5:7e:4e:3a:e3:57:39: ff:5b:d3:cd:cd:f9:8f:36:e6:7b:92:20:38:84:51: 06:86:ae:83:c7:33:cc:da:0b:62:a0:69:27:e6:2d: 91:a7:7d:76:5e:d5:74:ef:68:7a:7e:ab:b1:ad:8d: 23:a0:7e:d7:7d:58:3f:65:f1:b5:eb:d6:e9:5a:4e: 48:2c:ec:e3:01:0c:a5:14:33:b6:3f:42:30:6e:9e: 3a:fc:dd:b8:09:88:ad:cd:44:29:1d:3e:b9:91:d6: 81:d2:16:33:85:a5:29:de:8d:25:b1:a6:e1:99:e6: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:57:77:FB:13:EF:87:5C:10:DB:BF:0F:5E:66:F9:13:21:5A:C0:A7 X509v3 Authority Key Identifier: keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a1:1c:b0:17:83:4a:4e:ce:45:b9:1d:06:c9:08:f6:8c:1e: 6d:43:dd:d4:db:fb:38:32:6a:42:9e:ec:77:1f:18:49:15:76: 98:ff:9e:d6:ab:99:de:26:49:0b:22:52:e4:01:63:f7:fd:00: 06:7e:a0:92:7b:ff:9a:f4:30:ca:71:73:6c:cb:00:4b:03:c1: ec:c3:1c:cb:fb:ec:0d:cf:1e:15:4b:8f:30:4e:d1:70:be:9f: dd:99:4d:b7:a0:96:01:4a:b3:a5:8a:59:4b:b4:19:a7:96:f0: a9:9e:0b:2d:3e:33:8e:64:6f:28:9c:63:c1:a5:41:dc:03:0a: a8:48:f9:55:57:8f:66:15:03:6a:79:40:72:8f:b6:06:9c:a6: 67:4e:3a:39:10:d1:23:13:61:0e:0d:f5:c9:2a:37:94:6d:8b: 34:6f:ec:be:ac:68:8e:a4:25:c4:23:16:1c:eb:76:91:c6:8a: a0:f6:c5:eb:71:8c:a1:39:ec:e5:ed:8d:be:a6:dd:27:47:7e: 31:b5:0f:d2:fd:85:c1:71:ec:c7:14:e1:f2:9d:91:df:da:38: e7:c9:e3:f8:60:4d:b9:32:ad:6d:f5:db:73:b1:9e:70:f3:d0: 6c:21:70:95:97:38:49:5d:c6:fa:c2:ac:4a:ba:63:cf:68:3a: e5:68:f8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1/z2dYJyUoMdNNsdTNIXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTRlNzQwNjQxNThlOTc5MDQ5OTA5NDc1MTBlYjk5NDE5 ODZjYTEwHhcNMjUxMjMxMjAwMDIwWhcNMjYwMTAxMjAwMDIwWjAzMTEwLwYDVQQD EyhjNzU3NzdmYjEzZWY4NzVjMTBkYmJmMGY1ZTY2ZjkxMzIxNWFjMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqinnw/TWUMAYEfUibHYq4Gi1Iun qyVRtk4M7uuSZSdO4ajhWycdg1s9c268t5J/KdJ7cTKq9aEwCQ/UjOwnv06lUWFr yIc0CN3+M+vThU6FjiSP1aNvGz4RJHhtilXveF8jyf46mcgsvHVEOXv1m+iSlWHi sgXcC7AUrKB9M/kaRWC9eKK/qQvtMDLYsNV+TjrjVzn/W9PNzfmPNuZ7kiA4hFEG hq6DxzPM2gtioGkn5i2Rp312XtV072h6fquxrY0joH7XfVg/ZfG169bpWk5ILOzj AQylFDO2P0Iwbp46/N24CYitzUQpHT65kdaB0hYzhaUp3o0lsabhmeayfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdXd/sT74dcENu/D15m+RMhWsCnMB8GA1UdIwQY MBaAFOmU50BkFY6XkEmQlHUQ65lBmGyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEt MzYyMGNlZmNjNzI0LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYzEyZTUtYzgwZC00NzMzLWJjNGEtMzYyMGNlZmNjNzI0 LzEvNlpUblFHUVZqcGVRU1pDVWRSRHJtVUdZYktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaEcsBeD Sk7ORbkdBskI9owebUPd1Nv7ODJqQp7sdx8YSRV2mP+e1quZ3iZJCyJS5AFj9/0A Bn6gknv/mvQwynFzbMsASwPB7MMcy/vsDc8eFUuPME7RcL6f3ZlNt6CWAUqzpYpZ S7QZp5bwqZ4LLT4zjmRvKJxjwaVB3AMKqEj5VVePZhUDanlAco+2BpymZ046ORDR IxNhDg31ySo3lG2LNG/svqxojqQlxCMWHOt2kcaKoPbF63GMoTns5e2NvqbdJ0d+ MbUP0v2FwXHsxxTh8p2R39o458nj+GBNuTKtbfXbc7GecPPQbCFwlZc4SV3G+sKs Srpjz2g65Wj4AQ== -----END CERTIFICATE-----Generated at Thu Jan 1 02:25:23 2026 by rpki-client