This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json) Hash identifier: 58s+oPVkHb9Rh8EiHi/b5IEOMpYChA8HhqVtBAlgb7o= Subject key identifier: 5C:D0:41:28:30:BF:E0:25:07:C8:43:75:4F:DA:CE:2C:6A:D7:98:40 Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 019AF2770895767D7C5B29EC93A7A61ECF27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: xwfbLDBjXmh20PxCCN9cbqKccNKrvRlt5rqCH5tJNHU=) 2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=) 3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=) 4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=) 5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=) 6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=) 7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:08:95:76:7d:7c:5b:29:ec:93:a7:a6:1e:cf:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=5cd0412830bfe02507c843754fdace2c6ad79840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:4d:a2:b8:ed:b7:fc:0e:1c:ae:f8:2c:5f: 2b:a0:32:02:e8:2f:57:60:32:85:d6:8c:1b:69:80: 04:f7:26:b5:68:e0:22:86:00:d8:63:8b:f2:4c:87: e8:e2:e7:a6:9e:77:19:60:62:ba:d2:16:cc:c0:c6: 1d:6c:1f:b7:6f:fb:4e:87:c7:2b:4b:62:e0:cb:6e: 31:4f:91:a2:56:be:6a:31:73:74:e2:f6:8d:81:3b: b9:fb:1b:ab:b1:93:80:05:28:19:22:8d:3d:0c:7a: e5:a5:1e:4b:b6:d2:97:00:e5:95:89:e9:62:07:5c: 94:26:7b:93:c3:eb:0d:06:d9:db:53:cd:6e:f3:d1: 12:07:f2:44:1f:8a:91:c5:44:46:b8:a5:93:bb:43: 93:00:11:b6:21:3f:7a:35:d4:6e:32:98:64:8f:93: e5:f2:5f:fa:d9:cf:92:2c:32:b0:97:3f:ad:86:e9: 8d:cf:e4:6a:4e:9b:78:b1:49:75:a7:2e:d2:d4:ae: 75:95:1d:a1:9e:5c:d0:33:e6:fc:b7:2d:6b:fb:a7: f4:65:f2:fc:fd:9a:22:ec:73:51:80:d3:04:a2:ab: a2:b0:4a:d1:d1:e8:ea:3b:55:1a:12:ae:ab:d6:fe: a0:70:80:d1:6a:78:82:19:be:21:6e:92:be:76:fe: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:41:28:30:BF:E0:25:07:C8:43:75:4F:DA:CE:2C:6A:D7:98:40 X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ee:57:df:3f:f8:b7:14:bb:7b:61:0f:d2:32:e5:63:8f:b3: 5f:5d:d7:7f:b5:a5:cd:df:66:37:17:6c:47:0f:b6:d1:90:d6: 33:e1:2c:b7:61:03:eb:d6:ca:43:35:43:cd:d3:c8:9d:20:0b: e8:48:db:84:fe:71:b1:c6:dd:9f:fc:41:13:1d:e3:5d:4c:1a: fb:d8:e0:4d:03:26:18:c1:ba:a8:36:6a:b4:c2:70:8d:6a:0d: a6:18:7a:b7:d4:a0:bb:c9:d5:5b:5f:41:ca:9d:96:1c:43:12: 95:96:80:68:33:d8:e0:19:5e:05:a8:d1:c7:6b:e2:94:c2:55: ce:f0:0b:13:51:b1:0c:e4:ef:3a:a2:83:60:2e:f8:f3:e6:18: d7:fc:12:bf:89:9c:03:b3:e2:60:65:3c:49:c8:43:2e:38:6f: 70:06:95:a4:33:44:32:52:f2:c0:47:64:dc:12:29:30:07:bf: bd:a5:40:eb:aa:94:4a:43:22:0d:f8:f5:38:e4:d8:33:8b:88: 98:5e:4e:e1:a4:60:b7:63:f1:c3:b1:5a:6c:57:f0:cb:ed:ef: 2c:c9:46:4d:3d:b7:e1:ec:4a:e7:f2:49:73:6b:45:74:d3:36: 97:db:28:c4:08:3b:1b:09:97:13:1a:9a:4b:c8:8a:46:ad:5a: 8f:62:56:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwiVdn18Wynsk6emHs8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD Eyg1Y2QwNDEyODMwYmZlMDI1MDdjODQzNzU0ZmRhY2UyYzZhZDc5ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuZNorjtt/wOHK74LF8roDIC6C9X YDKF1owbaYAE9ya1aOAihgDYY4vyTIfo4uemnncZYGK60hbMwMYdbB+3b/tOh8cr S2Lgy24xT5GiVr5qMXN04vaNgTu5+xursZOABSgZIo09DHrlpR5LttKXAOWVieli B1yUJnuTw+sNBtnbU81u89ESB/JEH4qRxURGuKWTu0OTABG2IT96NdRuMphkj5Pl 8l/62c+SLDKwlz+thumNz+RqTpt4sUl1py7S1K51lR2hnlzQM+b8ty1r+6f0ZfL8 /Zoi7HNRgNMEoquisErR0ejqO1UaEq6r1v6gcIDRaniCGb4hbpK+dv5IwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzQQSgwv+AlB8hDdU/azixq15hAMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe5X3z/4 txS7e2EP0jLlY4+zX13Xf7Wlzd9mNxdsRw+20ZDWM+Est2ED69bKQzVDzdPInSAL 6EjbhP5xscbdn/xBEx3jXUwa+9jgTQMmGMG6qDZqtMJwjWoNphh6t9Sgu8nVW19B yp2WHEMSlZaAaDPY4BleBajRx2vilMJVzvALE1GxDOTvOqKDYC748+YY1/wSv4mc A7PiYGU8SchDLjhvcAaVpDNEMlLywEdk3BIpMAe/vaVA66qUSkMiDfj1OOTYM4uI mF5O4aRgt2Pxw7FabFfwy+3vLMlGTT234exK5/JJc2tFdNM2l9soxAg7GwmXExqa S8iKRq1aj2JWyg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:50 2025 by rpki-client