This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json) Hash identifier: 2PjSpc1Utk6OLuMI5zO/+wW7eouRKB+rdG93xmWjj44= Subject key identifier: 23:76:2F:E0:D8:53:84:D5:F6:91:D1:DB:9D:8F:F6:97:14:C2:41:F6 Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Certificate serial: 019AF2ADAC041ACFFE6E0B9E0539FBC54396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft Manifest number: 0C1A Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: h8+o+3eEYB3sNoyl4vXi7RQxd1aL3hDIZN8Iq40TiR0=) 2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ac:04:1a:cf:fe:6e:0b:9e:05:39:fb:c5:43:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=23762fe0d85384d5f691d1db9d8ff69714c241f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:e3:be:87:60:5c:48:c7:59:b5:dd:c1:2a: 68:ce:42:f8:dd:b2:39:f2:15:b1:ee:96:3a:29:75: 81:c2:fc:e8:a7:4f:47:c9:58:f4:a2:23:17:17:fe: d6:cc:43:ec:9f:97:52:51:e5:19:4c:00:cc:dc:af: db:df:0e:19:ac:95:6b:6b:b7:4f:18:96:01:af:20: c6:34:f5:d1:4b:42:5e:b2:19:5f:70:40:65:85:12: 35:c0:36:6f:7b:eb:b4:c3:c9:44:e1:e3:c4:f4:ae: af:97:49:87:6c:43:ab:38:c2:c7:a3:dd:89:4a:24: 6d:6c:41:34:a7:75:9a:fb:99:d1:31:e8:79:f2:d8: a7:95:2d:fc:ac:b5:07:94:ea:76:a3:1d:cd:30:ad: b1:c7:8a:ea:ae:8e:af:3d:f3:28:08:c4:96:67:49: d4:2b:56:02:d8:d2:bb:78:22:b1:72:56:2f:44:42: 2d:4a:55:cb:41:ad:d3:ad:f2:d2:cf:7c:8a:7f:2b: 71:5e:3d:d4:07:04:43:8b:76:70:35:b7:0b:20:2c: f1:96:2a:41:39:40:07:ac:63:ef:62:5a:41:c1:5c: 29:71:db:f0:81:e9:07:45:95:82:49:40:0c:8a:31: 95:7a:ab:b1:bc:28:f9:3f:04:1f:2b:88:95:48:4f: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:76:2F:E0:D8:53:84:D5:F6:91:D1:DB:9D:8F:F6:97:14:C2:41:F6 X509v3 Authority Key Identifier: keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a1:b7:84:0f:fd:a7:fe:0f:fa:98:a5:ea:da:08:d8:5d:c7: 52:5d:4c:fd:a2:4e:92:a1:37:b9:e1:2f:79:0a:ac:39:7c:a5: 8b:41:f5:2d:aa:f1:89:e3:2c:4e:1f:e1:6e:dc:a0:62:3a:5d: c6:4b:1b:6c:68:17:d1:1d:09:b1:4d:71:9c:b1:c5:a3:35:8a: f1:fd:68:d5:1f:af:0e:45:3f:f6:6a:95:78:44:eb:53:1a:83: 7b:bb:23:70:fe:34:b6:71:01:e3:48:bb:42:15:3e:f6:ad:d0: 0c:8b:26:48:19:d4:e9:13:e5:4c:42:03:5c:0c:20:ca:e3:65: 7c:d4:25:4a:01:ac:f8:09:07:68:df:db:d5:e9:45:32:03:fd: 22:e0:3a:6a:cd:e1:fb:86:06:09:fa:f8:52:f9:54:b5:c4:5f: ee:f0:22:e4:13:a2:08:17:7e:15:27:0c:91:0a:00:1d:89:3f: be:11:53:cb:4a:22:74:63:49:40:12:56:68:c3:e4:a1:3a:8c: dd:b8:7c:46:e6:9a:5f:5e:82:ab:22:51:a0:66:2d:68:8a:aa: ad:fb:86:1a:2b:d3:8e:43:cf:02:76:f2:c2:5c:a5:57:64:0e: e3:5e:17:3b:b2:dd:7f:d3:34:cb:82:88:16:8b:44:bd:b9:a5: 99:9d:b3:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrawEGs/+bgueBTn7xUOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy YzNjZWIwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EygyMzc2MmZlMGQ4NTM4NGQ1ZjY5MWQxZGI5ZDhmZjY5NzE0YzI0MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXrjvodgXEjHWbXdwSpozkL43bI5 8hWx7pY6KXWBwvzop09HyVj0oiMXF/7WzEPsn5dSUeUZTADM3K/b3w4ZrJVra7dP GJYBryDGNPXRS0JeshlfcEBlhRI1wDZve+u0w8lE4ePE9K6vl0mHbEOrOMLHo92J SiRtbEE0p3Wa+5nRMeh58tinlS38rLUHlOp2ox3NMK2xx4rqro6vPfMoCMSWZ0nU K1YC2NK7eCKxclYvREItSlXLQa3TrfLSz3yKfytxXj3UBwRDi3ZwNbcLICzxlipB OUAHrGPvYlpBwVwpcdvwgekHRZWCSUAMijGVequxvCj5PwQfK4iVSE/k0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN2L+DYU4TV9pHR252P9pcUwkH2MB8GA1UdIwQY MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt YzlkZTIyYjkxNmNhLzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKG3hA/9 p/4P+pil6toI2F3HUl1M/aJOkqE3ueEveQqsOXyli0H1LarxieMsTh/hbtygYjpd xksbbGgX0R0JsU1xnLHFozWK8f1o1R+vDkU/9mqVeETrUxqDe7sjcP40tnEB40i7 QhU+9q3QDIsmSBnU6RPlTEIDXAwgyuNlfNQlSgGs+AkHaN/b1elFMgP9IuA6as3h +4YGCfr4UvlUtcRf7vAi5BOiCBd+FScMkQoAHYk/vhFTy0oidGNJQBJWaMPkoTqM 3bh8RuaaX16CqyJRoGYtaIqqrfuGGivTjkPPAnbywlylV2QO414XO7Ldf9M0y4KI FotEvbmlmZ2zLw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:51 2025 by rpki-client