This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft File: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft (raw, json) Hash identifier: StM8wzWMq2TGdOVmjGf7sK36FFf861Yj3LkMYfJqezg= Subject key identifier: 60:38:BE:9B:18:11:EC:DB:0A:7B:ED:9B:D5:33:E7:BD:E8:CE:C9:D2 Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 Certificate issuer: /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Certificate serial: 019AF2ADAAD5B78CAFA6F7EA30915FE8F72D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft Manifest number: CA Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl (hash: 7n4yzc5rBLj2bM4eW5NdaOCHmcOW/PpaSnJ0mgQ51uw=) 2: XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa (hash: HdEWtXPo3qjkpM4rtcD6m0eh6joeQyAPSggK9PU/vxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:aa:d5:b7:8c:af:a6:f7:ea:30:91:5f:e8:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=6038be9b1811ecdb0a7bed9bd533e7bde8cec9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:f1:0f:6d:a8:e0:75:64:99:30:21:43:de: c9:89:cd:a9:8f:a2:ef:04:c8:43:fd:b0:45:ca:21: e5:8d:40:85:48:f4:11:d2:26:d5:fd:0c:4e:30:e4: df:75:61:a4:a0:e4:7c:8f:62:04:eb:83:a0:3c:ea: a4:99:29:db:56:ca:55:9b:b7:02:0b:b4:3e:3f:cf: f0:3e:0d:55:a1:b5:bb:22:1e:d7:b3:3b:b3:32:60: 45:91:07:e6:57:2b:81:14:21:cc:0f:a7:57:b8:9e: 2a:cb:da:0b:75:a5:61:0c:18:4f:bf:e5:9d:03:8a: e4:2c:b5:cd:b0:f1:9d:83:8a:a7:82:35:44:81:ea: ac:af:4d:20:d8:0a:0e:4e:26:4e:5c:ee:a7:54:91: 90:cc:9a:49:ea:f8:62:07:5a:ef:4f:71:5f:43:5a: ec:45:dc:32:ab:ac:00:d6:9c:d7:0d:49:1e:c8:3d: 28:c7:8d:b6:22:b8:b1:60:ab:91:e2:f6:b6:1d:cf: fc:37:cf:2a:2c:f2:de:c1:2d:fa:52:23:57:d0:0d: 48:11:1b:54:1a:b1:72:81:7e:31:63:02:b8:08:13: 7a:7e:22:ca:fe:e9:97:df:ec:4d:b6:09:76:03:3b: a6:12:01:3d:66:1e:a2:a4:a6:ee:ba:9b:1b:2d:0c: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:BE:9B:18:11:EC:DB:0A:7B:ED:9B:D5:33:E7:BD:E8:CE:C9:D2 X509v3 Authority Key Identifier: keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:77:b4:89:23:80:4f:46:69:15:ca:17:96:22:29:c7:5f:46: 83:e6:d8:19:01:8a:60:28:e4:4f:46:2d:a5:68:92:47:a9:b7: 7e:85:c9:1a:51:1f:7e:3d:cc:60:7c:e5:ac:d9:de:f2:ad:d6: 78:48:22:a3:26:69:92:c4:3b:5b:3f:f1:d5:a8:fd:46:6d:91: fa:9d:cf:b6:3f:2f:e2:83:17:c7:73:ad:52:01:33:ec:83:5f: 4f:01:77:d1:fe:12:67:c3:61:4b:ea:12:b1:ff:6c:cb:ac:89: d2:0d:aa:e3:97:81:b1:6b:aa:7d:1c:54:41:20:0f:26:2e:b4: 58:dd:77:60:b0:6b:ba:92:72:bd:17:b9:37:90:64:e9:1d:42: 05:01:f5:71:f4:13:1c:7e:eb:3d:8a:99:b8:0c:8d:06:17:3a: 09:c5:e6:4b:c1:4d:1b:f1:d3:34:68:25:3b:63:03:55:83:78: 24:fc:a8:c8:e4:85:1b:1b:ad:6a:0a:06:f6:12:5c:9c:28:c4: 3c:b1:25:c4:9f:0e:1b:31:ec:27:66:03:88:81:7a:0c:31:a4: d6:56:48:7c:9a:ec:08:8f:e4:a8:1d:27:b1:2c:0a:d2:17:0a: 72:8e:0c:e1:4e:d4:9a:98:ff:91:67:02:65:21:0e:4d:f2:12: e6:03:3e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrarVt4yvpvfqMJFf6PctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWU1YzA5ZDk5MDRlYjc0NGY5MDY3MzhjZjlmMDdmMjNm YjU1NjcwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD Eyg2MDM4YmU5YjE4MTFlY2RiMGE3YmVkOWJkNTMzZTdiZGU4Y2VjOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/3xD22o4HVkmTAhQ97Jic2pj6Lv BMhD/bBFyiHljUCFSPQR0ibV/QxOMOTfdWGkoOR8j2IE64OgPOqkmSnbVspVm7cC C7Q+P8/wPg1VobW7Ih7XszuzMmBFkQfmVyuBFCHMD6dXuJ4qy9oLdaVhDBhPv+Wd A4rkLLXNsPGdg4qngjVEgeqsr00g2AoOTiZOXO6nVJGQzJpJ6vhiB1rvT3FfQ1rs Rdwyq6wA1pzXDUkeyD0ox422IrixYKuR4va2Hc/8N88qLPLewS36UiNX0A1IERtU GrFygX4xYwK4CBN6fiLK/umX3+xNtgl2AzumEgE9Zh6ipKbuupsbLQzGlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA4vpsYEezbCnvtm9Uz573ozsnSMB8GA1UdIwQY MBaAFOquXAnZkE63RPkGc4z58H8j+1VnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUt YWYzYzhmNTgzNDQ5LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUtYWYzYzhmNTgzNDQ5 LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADne0iSOA T0ZpFcoXliIpx19Gg+bYGQGKYCjkT0YtpWiSR6m3foXJGlEffj3MYHzlrNne8q3W eEgioyZpksQ7Wz/x1aj9Rm2R+p3Ptj8v4oMXx3OtUgEz7INfTwF30f4SZ8NhS+oS sf9sy6yJ0g2q45eBsWuqfRxUQSAPJi60WN13YLBrupJyvRe5N5Bk6R1CBQH1cfQT HH7rPYqZuAyNBhc6CcXmS8FNG/HTNGglO2MDVYN4JPyoyOSFGxutagoG9hJcnCjE PLElxJ8OGzHsJ2YDiIF6DDGk1lZIfJrsCI/kqB0nsSwK0hcKco4M4U7Umpj/kWcC ZSEOTfIS5gM+bg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:19 2025 by rpki-client