This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json) Hash identifier: Adp4ibH0Cz1uuLSh3/HgBQt5T4mk0HUdMpDGBYVtRcc= Subject key identifier: 1E:0C:78:57:0C:27:8E:29:BF:7C:8B:B0:2A:FC:24:CB:CB:4D:92:15 Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a Certificate serial: 019AF2AD4EA5B1397B69029A5BE24B1969E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: JpNI12V1XUKcXjsjYJrzzxu8M4Gjkj/z7nVUziZxbKU=) 2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4e:a5:b1:39:7b:69:02:9a:5b:e2:4b:19:69:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=1e0c78570c278e29bf7c8bb02afc24cbcb4d9215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b7:a9:ed:d6:5a:f5:bf:d6:4e:b1:5c:3f:07: 90:8c:62:6e:e0:86:1f:5a:77:1f:6a:0b:2c:5b:d4: 39:c6:2f:31:59:00:42:b2:ad:0c:05:d4:2c:8b:fe: 5d:20:6f:cd:07:f9:7f:2a:58:d4:43:4f:7e:29:45: 15:67:44:3b:b0:84:12:21:e6:fc:f0:48:0c:9d:ab: c7:35:1b:6b:d8:a4:35:07:13:4b:d2:39:d7:b5:d8: 43:85:39:c0:bc:8a:5b:ee:be:a9:89:e6:02:c2:c5: 4d:e5:0c:c0:72:7b:3f:dd:45:1f:14:8c:74:58:3e: e2:fe:9d:f2:eb:be:4b:b7:ae:c5:9c:c6:9c:1a:8c: 65:6c:97:ab:e6:bf:29:13:80:53:a6:6f:78:8b:7b: 5f:8b:49:f9:40:92:41:56:e1:c6:40:73:2c:f0:ee: 4e:f9:35:9f:1c:53:10:e9:d3:39:a6:09:8d:91:07: 76:e5:c8:bc:68:ce:ea:ef:08:1f:85:b5:79:4a:b1: 92:68:e9:e1:d5:ad:d5:f5:b0:30:64:3b:60:d9:45: 24:31:66:3b:cc:81:23:39:ec:c7:5e:f8:28:b4:e0: 0f:91:69:61:3c:6f:07:f4:63:08:98:ee:51:cf:b6: 94:c8:da:3f:83:c5:3f:f3:f3:4e:a1:26:9b:c3:89: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0C:78:57:0C:27:8E:29:BF:7C:8B:B0:2A:FC:24:CB:CB:4D:92:15 X509v3 Authority Key Identifier: keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9f:27:cc:26:62:e9:b4:b9:1d:ee:5a:16:e1:19:9c:9d:89: 11:39:15:9c:14:f2:98:bf:48:fc:05:65:4c:23:3c:14:f5:dd: 1a:a8:ab:55:2e:4e:39:91:01:28:7f:d4:d0:87:6a:fe:96:79: c6:73:c5:45:56:1b:9e:e2:51:32:f6:bb:4e:be:44:0c:0a:c8: 80:94:42:38:1c:31:fa:21:1d:90:b4:79:7b:20:0b:ff:4d:9b: 1e:0e:4a:ae:93:97:9b:73:b1:cc:79:cf:05:78:f2:90:81:0c: f9:d2:9c:58:cd:c1:e7:3a:0b:a9:2d:92:73:31:e3:04:3a:4f: ed:63:18:cd:a9:66:f6:c3:1e:d1:8b:3a:f9:ce:ae:81:1a:e4: 17:f0:dc:9a:bc:89:ac:52:2a:52:62:f3:3c:a7:11:7a:17:2f: cb:d8:57:c7:96:91:b0:ea:ab:d6:be:dd:e0:fb:db:4b:d8:52: e7:7b:93:45:42:0c:c1:d6:e1:16:26:5b:d7:2a:9e:d0:68:e7: ff:e9:01:84:54:22:69:97:e4:a5:ed:53:ef:71:7c:f2:c2:a0: 99:ca:12:0a:24:d7:c7:02:2f:ea:37:da:ab:e4:38:5f:b0:7c: 91:bb:01:5c:16:a6:2b:28:02:87:0f:53:18:9e:7e:70:38:20: 93:5d:42:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU6lsTl7aQKaW+JLGWnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YzRjZDQxMThkZGZmZWU1NmU4ODU2NjM3OTU1NDdhMWRl M2Y5OGEwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EygxZTBjNzg1NzBjMjc4ZTI5YmY3YzhiYjAyYWZjMjRjYmNiNGQ5MjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lep7dZa9b/WTrFcPweQjGJu4IYf WncfagssW9Q5xi8xWQBCsq0MBdQsi/5dIG/NB/l/KljUQ09+KUUVZ0Q7sIQSIeb8 8EgMnavHNRtr2KQ1BxNL0jnXtdhDhTnAvIpb7r6pieYCwsVN5QzAcns/3UUfFIx0 WD7i/p3y675Lt67FnMacGoxlbJer5r8pE4BTpm94i3tfi0n5QJJBVuHGQHMs8O5O +TWfHFMQ6dM5pgmNkQd25ci8aM7q7wgfhbV5SrGSaOnh1a3V9bAwZDtg2UUkMWY7 zIEjOezHXvgotOAPkWlhPG8H9GMImO5Rz7aUyNo/g8U/8/NOoSabw4l0mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4MeFcMJ44pv3yLsCr8JMvLTZIVMB8GA1UdIwQY MBaAFOnEzUEY3f/uVuiFZjeVVHod4/mKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQt NmNiMmQzYjQ0MzdjLzEvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQtNmNiMmQzYjQ0Mzdj LzEvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJ8nzCZi 6bS5He5aFuEZnJ2JETkVnBTymL9I/AVlTCM8FPXdGqirVS5OOZEBKH/U0Idq/pZ5 xnPFRVYbnuJRMva7Tr5EDArIgJRCOBwx+iEdkLR5eyAL/02bHg5KrpOXm3OxzHnP BXjykIEM+dKcWM3B5zoLqS2SczHjBDpP7WMYzalm9sMe0Ys6+c6ugRrkF/DcmryJ rFIqUmLzPKcRehcvy9hXx5aRsOqr1r7d4PvbS9hS53uTRUIMwdbhFiZb1yqe0Gjn /+kBhFQiaZfkpe1T73F88sKgmcoSCiTXxwIv6jfaq+Q4X7B8kbsBXBamKygChw9T GJ5+cDggk11CXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:01 2025 by rpki-client