This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json) Hash identifier: QxNRwT42O8k8GERwe+NymoSYq3GDM012QZ9Joz3gaGk= Subject key identifier: BB:53:4A:56:DE:F4:B5:A2:17:F9:D5:30:12:34:BE:38:8C:7A:31:43 Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc Certificate serial: 019AF19B3C846E8A0F1F619506F4F62C9387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=) 2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: ks2fkvG3Qu+2v08OpiiySIeU9zhZ6oOzUPl1ercj9S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3c:84:6e:8a:0f:1f:61:95:06:f4:f6:2c:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=bb534a56def4b5a217f9d5301234be388c7a3143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:78:c7:a5:bf:70:6a:bf:eb:86:d0:ff:f3: dd:68:99:76:cd:90:04:61:d2:86:c4:b0:b4:9d:6a: 1b:6b:20:ed:6c:f9:34:78:bb:e9:c0:e5:78:11:a7: c1:c0:12:03:59:0c:aa:1d:c5:5e:a9:df:14:a7:68: c7:ea:ce:ba:b9:cb:8d:64:81:27:51:6b:7f:b8:c1: 52:91:5c:50:98:6e:5c:ab:e4:a0:8b:cf:44:c0:42: 59:b2:e9:55:b7:f3:bf:4c:02:51:9d:93:69:9f:ba: a7:c5:61:1f:07:18:7a:64:9c:d7:69:6f:e6:35:e8: 28:59:98:f4:2d:84:ca:99:87:49:ab:c4:6c:cd:07: 2f:50:14:22:b4:2e:a5:fe:60:43:57:81:0d:0b:ce: d0:75:4d:09:73:2f:f8:a8:e6:ed:21:ab:8d:8e:16: cb:0a:11:c4:71:b9:49:01:69:d3:9a:0b:3c:77:69: 16:46:cf:ec:7d:96:e1:58:ea:a1:c2:ab:52:d0:41: 24:55:50:1b:cd:9b:58:04:17:8b:f4:ea:f2:6d:ea: 66:c7:cf:44:8c:00:88:5e:4a:bf:3a:83:38:d6:d4: f6:df:bc:11:8a:0a:3f:21:45:8f:fd:b4:65:ab:41: df:0c:87:fb:ea:85:b2:d8:3a:63:43:fb:e7:f7:ec: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:4A:56:DE:F4:B5:A2:17:F9:D5:30:12:34:BE:38:8C:7A:31:43 X509v3 Authority Key Identifier: keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:84:b8:7f:f7:1d:d3:cf:e8:21:c4:07:a3:67:ed:d0:8d:8d: ca:7d:31:74:06:cd:23:ed:78:72:7d:1b:fb:79:1e:89:53:80: e7:d7:49:2c:5a:5c:86:11:84:cd:86:53:22:75:43:ea:f6:6b: 3d:f5:d5:c0:9f:bb:d4:76:34:71:3b:65:ce:6f:da:0b:d3:31: 65:34:92:60:fe:12:7d:c0:5c:71:13:d2:71:9a:a4:4f:37:02: 7e:c4:69:da:80:e5:95:5d:9a:55:fe:7a:61:9a:2a:b7:eb:7b: d3:a3:37:73:bb:97:d8:5b:7a:70:25:7b:e5:b9:13:13:03:b9: 00:99:fd:b6:6e:30:27:c6:1c:2b:c1:b3:1d:9d:e9:ac:37:2b: 97:ae:43:a6:22:99:e7:f2:b8:7a:8a:64:09:04:5c:a3:e9:64: 97:a9:30:d5:a6:29:12:85:1b:c1:49:d5:d5:c1:3d:ec:09:1c: 25:76:44:fa:a7:48:41:dd:e6:f7:9b:e6:75:0f:d2:1c:fd:39: 94:ff:e8:b5:13:37:73:3f:34:94:48:cb:c6:64:76:8a:0f:20: 05:f8:4d:27:7f:1a:aa:32:56:8f:ff:d9:15:dc:5a:f3:de:7e: 15:ff:25:73:21:5c:cd:32:e5:bc:dc:13:34:c0:e4:1b:0f:18: e7:42:65:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzyEbooPH2GVBvT2LJOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTQxZDM0MTNkZGFjYzkxZmUwZjQ0MjZhODI4NjgxY2Yz MGUwZmMwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD EyhiYjUzNGE1NmRlZjRiNWEyMTdmOWQ1MzAxMjM0YmUzODhjN2EzMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEZ4x6W/cGq/64bQ//PdaJl2zZAE YdKGxLC0nWobayDtbPk0eLvpwOV4EafBwBIDWQyqHcVeqd8Up2jH6s66ucuNZIEn UWt/uMFSkVxQmG5cq+Sgi89EwEJZsulVt/O/TAJRnZNpn7qnxWEfBxh6ZJzXaW/m NegoWZj0LYTKmYdJq8RszQcvUBQitC6l/mBDV4ENC87QdU0Jcy/4qObtIauNjhbL ChHEcblJAWnTmgs8d2kWRs/sfZbhWOqhwqtS0EEkVVAbzZtYBBeL9Orybepmx89E jACIXkq/OoM41tT237wRigo/IUWP/bRlq0HfDIf76oWy2DpjQ/vn9+xcgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtTSlbe9LWiF/nVMBI0vjiMejFDMB8GA1UdIwQY MBaAFP+kHTQT3azJH+D0QmqChoHPMOD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZRZE5CUGRyTWtmNFBSQ2FvS0dnYzh3NFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84MmQ4MjQtNGUwMi00NmQ0LTg1NGEt YmQwNTEyY2U0OTA1LzEvXzZRZE5CUGRyTWtmNFBSQ2FvS0dnYzh3NFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84MmQ4MjQtNGUwMi00NmQ0LTg1NGEtYmQwNTEyY2U0OTA1 LzEvXzZRZE5CUGRyTWtmNFBSQ2FvS0dnYzh3NFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4S4f/cd 08/oIcQHo2ft0I2Nyn0xdAbNI+14cn0b+3keiVOA59dJLFpchhGEzYZTInVD6vZr PfXVwJ+71HY0cTtlzm/aC9MxZTSSYP4SfcBccRPScZqkTzcCfsRp2oDllV2aVf56 YZoqt+t706M3c7uX2Ft6cCV75bkTEwO5AJn9tm4wJ8YcK8GzHZ3prDcrl65DpiKZ 5/K4eopkCQRco+lkl6kw1aYpEoUbwUnV1cE97AkcJXZE+qdIQd3m95vmdQ/SHP05 lP/otRM3cz80lEjLxmR2ig8gBfhNJ38aqjJWj//ZFdxa895+Ff8lcyFczTLlvNwT NMDkGw8Y50JlUw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:15 2025 by rpki-client