This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft File: 6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json) Hash identifier: Z8yc19Dii6CsmTirnyYAcLr5QWBLM2tUh0TBn51Vg6M= Subject key identifier: 04:48:46:5C:BB:E2:84:C7:68:5E:98:EB:5B:46:C3:CE:73:FA:1E:1F Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 Certificate issuer: /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Certificate serial: 019B21E27367F62A228A17A9788D61E706B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft Manifest number: 028D Signing time: Mon 15 Dec 2025 12:00:47 +0000 Manifest this update: Mon 15 Dec 2025 12:00:47 +0000 Manifest next update: Tue 16 Dec 2025 12:00:47 +0000 Files and hashes: 1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: daYRz6t9a/AQcSo91/zMR5fYC/tdvgrmyWmVUCcBlRc=) 2: Z6Ua_m1uC5vkIPTZcIRy60EkawI.roa (hash: MctTd7jsNaKXKyaY6wZK28mWbw3asQJpuRF6a3Ofl8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:73:67:f6:2a:22:8a:17:a9:78:8d:61:e7:06:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Validity Not Before: Dec 15 12:00:47 2025 GMT Not After : Dec 16 12:00:47 2025 GMT Subject: CN=0448465cbbe284c7685e98eb5b46c3ce73fa1e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:81:df:91:eb:54:1c:f0:26:de:ef:b3:51: f5:14:f8:03:87:fe:0c:23:75:88:24:64:28:a6:df: 14:86:31:52:b0:a6:35:60:be:38:f3:b0:72:c7:b6: fd:e9:11:51:2a:2f:9a:26:87:29:fe:08:a6:2f:80: 9d:0a:61:f6:2c:7c:4e:64:a2:93:39:6d:97:94:8d: d9:9e:73:7a:eb:c4:c4:ac:b7:1a:b9:5e:49:36:de: d2:20:62:61:a7:f4:67:35:05:50:55:b1:62:dd:d0: a9:1c:f4:d1:d2:f1:3c:24:94:6a:26:67:4f:16:91: a8:d0:aa:c9:1d:67:de:bf:58:cb:ca:9d:60:d6:d3: 98:0a:84:09:98:03:be:ee:1d:b3:e4:59:b2:f1:3a: b8:36:51:26:bc:0d:71:48:d7:17:53:60:b6:2d:d5: ca:19:b2:27:aa:7e:82:4c:59:a0:fa:32:2d:1c:d8: 03:cb:87:bd:cd:24:00:b4:26:09:01:67:ea:0b:b7: 3d:29:27:30:32:c4:57:40:d8:83:80:f1:f2:01:ad: 13:e1:0c:45:dc:e3:33:8f:d1:8e:fa:90:7b:9f:e7: 01:b0:8b:39:ea:a0:4c:82:9c:48:86:f3:21:51:fb: 8a:35:d0:08:c4:e9:c4:24:d0:a8:dd:2d:fb:d0:38: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:48:46:5C:BB:E2:84:C7:68:5E:98:EB:5B:46:C3:CE:73:FA:1E:1F X509v3 Authority Key Identifier: keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0f:e3:e0:17:15:60:5e:fe:ce:27:c9:69:9a:eb:47:d6:df: 4c:b4:3c:34:75:ce:2c:6b:e6:74:f5:c6:59:65:61:a1:65:b0: 0c:c6:74:2c:3d:44:ef:f5:b0:c3:b3:a0:b6:f1:be:36:82:7c: 1b:2b:7c:8d:fd:0c:ae:d4:19:74:49:79:b8:c7:34:a1:12:93: 6f:d3:54:33:ef:9d:43:46:de:df:a8:c2:a2:3b:1e:8a:29:2a: b0:3e:97:76:8f:8c:c0:d8:d0:d0:2a:5d:92:40:e4:d4:bc:73: 93:51:98:e3:e4:b5:2a:0a:20:e5:d3:60:2f:75:2e:60:bd:36: 4c:a4:06:91:01:9c:0c:3c:39:30:46:76:70:bb:de:be:41:08: 30:3c:49:d2:a1:74:89:27:2e:95:4a:c9:89:98:93:ec:91:eb: 77:e3:e2:cc:ad:b9:eb:c7:22:58:16:28:cd:68:5d:b4:46:0c: 42:82:a9:b6:ec:98:16:79:e6:d8:b8:fb:20:65:eb:4f:8d:ca: 6d:56:8a:d7:c9:08:f5:d5:f4:62:90:3c:2e:43:dc:96:90:3c: 04:b2:27:06:62:28:fd:c9:19:d3:32:34:45:8a:ab:62:29:c8: f7:e0:a2:2b:6c:3e:64:74:64:17:9b:7b:4f:c7:ce:d7:2f:91: fd:22:44:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4nNn9ioiihepeI1h5wazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4 YTZlODAwHhcNMjUxMjE1MTIwMDQ3WhcNMjUxMjE2MTIwMDQ3WjAzMTEwLwYDVQQD EygwNDQ4NDY1Y2JiZTI4NGM3Njg1ZTk4ZWI1YjQ2YzNjZTczZmExZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykOB35HrVBzwJt7vs1H1FPgDh/4M I3WIJGQopt8UhjFSsKY1YL4487Byx7b96RFRKi+aJocp/gimL4CdCmH2LHxOZKKT OW2XlI3ZnnN668TErLcauV5JNt7SIGJhp/RnNQVQVbFi3dCpHPTR0vE8JJRqJmdP FpGo0KrJHWfev1jLyp1g1tOYCoQJmAO+7h2z5Fmy8Tq4NlEmvA1xSNcXU2C2LdXK GbInqn6CTFmg+jItHNgDy4e9zSQAtCYJAWfqC7c9KScwMsRXQNiDgPHyAa0T4QxF 3OMzj9GO+pB7n+cBsIs56qBMgpxIhvMhUfuKNdAIxOnEJNCo3S370DilFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARIRly74oTHaF6Y61tGw85z+h4fMB8GA1UdIwQY MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt NzFiOTM4YWU0Y2NkLzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ/j4BcV YF7+zifJaZrrR9bfTLQ8NHXOLGvmdPXGWWVhoWWwDMZ0LD1E7/Www7OgtvG+NoJ8 Gyt8jf0MrtQZdEl5uMc0oRKTb9NUM++dQ0be36jCojseiikqsD6Xdo+MwNjQ0Cpd kkDk1Lxzk1GY4+S1Kgog5dNgL3UuYL02TKQGkQGcDDw5MEZ2cLvevkEIMDxJ0qF0 iSculUrJiZiT7JHrd+PizK2568ciWBYozWhdtEYMQoKptuyYFnnm2Lj7IGXrT43K bVaK18kI9dX0YpA8LkPclpA8BLInBmIo/ckZ0zI0RYqrYinI9+CiK2w+ZHRkF5t7 T8fO1y+R/SJETg== -----END CERTIFICATE-----Generated at Mon Dec 15 17:08:10 2025 by rpki-client