This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft File: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json) Hash identifier: fokLwzyqK+W7RGlSmQvM4MfjHqWX8tuHKL3YJvX2oUs= Subject key identifier: AA:F8:B2:86:39:EB:62:01:3B:A0:DE:49:E3:FF:9E:9E:12:73:CC:A0 Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48 Certificate issuer: /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348 Certificate serial: 019AF0BF619CD641A6CA94017B0EB382A9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:01:05 +0000 Manifest this update: Fri 05 Dec 2025 23:01:05 +0000 Manifest next update: Sat 06 Dec 2025 23:01:05 +0000 Files and hashes: 1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: Cw1mVkh2ksV1QkuJdS8lP6wlkFoay2JxQM3pRgUojhg=) 2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:61:9c:d6:41:a6:ca:94:01:7b:0e:b3:82:a9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348 Validity Not Before: Dec 5 23:01:05 2025 GMT Not After : Dec 6 23:01:05 2025 GMT Subject: CN=aaf8b28639eb62013ba0de49e3ff9e9e1273cca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:07:05:2e:3f:2b:1a:13:bf:d9:20:9f:14: 64:68:97:b5:29:e3:92:c5:0c:95:26:dd:6b:ae:03: 3e:3f:75:44:51:09:ae:8b:3d:63:70:ed:55:06:a1: c6:df:25:37:82:6c:d0:3b:f3:46:a8:ea:6b:d9:5c: f1:bc:09:5a:2b:d6:c0:7a:2c:c2:9a:51:7d:f3:3e: 1d:cb:6e:f0:b0:b8:c9:54:5c:f6:4a:c4:e4:a8:21: b3:0d:61:f2:24:29:c1:38:b5:54:84:a7:c1:06:a0: da:51:3d:68:a4:e6:ac:c6:46:b1:f8:fc:a7:38:47: 45:db:91:ec:78:3a:35:0e:40:04:e1:bb:2f:88:75: 3c:a9:2f:e9:e4:22:fd:5e:22:1a:6c:02:6b:54:ad: 68:bc:75:0c:78:60:e9:78:a5:a6:9e:0e:61:29:c5: 1a:f9:14:19:a6:a4:e4:54:36:78:fc:bd:0d:d1:e3: 49:b5:f5:a5:51:c9:88:f1:8e:d4:60:f5:e3:15:07: 29:bf:88:46:a2:c4:01:c1:10:d2:da:6c:58:82:74: 4b:09:75:24:d1:9e:b9:a2:61:4e:4f:e9:6f:7e:e6: 69:12:44:94:03:e4:b5:d4:5d:dd:14:06:3d:5f:41: a3:30:4f:2a:1f:85:4b:6a:21:43:9e:db:19:9d:7b: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:B2:86:39:EB:62:01:3B:A0:DE:49:E3:FF:9E:9E:12:73:CC:A0 X509v3 Authority Key Identifier: keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d7:3f:ff:5c:2b:42:c2:ab:26:4a:a4:9e:e2:16:11:67:2e: a6:fb:0b:c5:89:54:cc:5c:bf:76:18:58:dd:40:d7:ac:00:13: 6a:69:f0:25:96:db:8d:38:57:3b:99:63:d3:00:cd:5d:48:20: cd:59:07:30:2a:85:79:26:5a:9e:e3:8e:74:80:d3:e0:2b:cc: 47:6e:5d:ef:53:45:d2:48:2f:33:60:c0:cb:09:61:ad:fe:b6: de:75:1b:5f:ee:51:73:a7:d2:56:13:d9:1a:6b:3a:10:df:39: a9:e0:68:0d:70:3a:24:12:75:f2:c6:72:7f:2f:c4:68:f2:de: 51:fa:2f:38:a8:23:32:9d:7e:36:74:6a:c6:dc:6b:57:6f:3b: e3:c7:b2:8b:02:02:cb:4e:c6:ba:20:3d:5c:6f:dc:83:f9:ac: 2f:51:5f:e7:10:7e:f0:01:94:d7:4c:71:cb:46:b2:2b:d1:43: 3c:ec:5f:c0:26:97:f0:b0:48:cd:89:3a:d1:f1:9e:66:a5:ff: c1:5f:5d:98:f2:62:51:1e:0a:8f:af:9e:b3:e9:a0:66:60:00: f6:76:47:83:11:43:5d:41:5e:e6:7a:a5:18:b4:fe:62:be:a2: c4:94:a5:ca:32:10:a7:85:00:61:af:ca:d2:38:c3:21:09:a9: 37:36:36:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2Gc1kGmypQBew6zgqnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OTY1MDU3ZjRhYTA5OWIwYTkxOWYzZjBiZDRhNjQ4OGUz MGMzNDgwHhcNMjUxMjA1MjMwMTA1WhcNMjUxMjA2MjMwMTA1WjAzMTEwLwYDVQQD EyhhYWY4YjI4NjM5ZWI2MjAxM2JhMGRlNDllM2ZmOWU5ZTEyNzNjY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5gHBS4/KxoTv9kgnxRkaJe1KeOS xQyVJt1rrgM+P3VEUQmuiz1jcO1VBqHG3yU3gmzQO/NGqOpr2VzxvAlaK9bAeizC mlF98z4dy27wsLjJVFz2SsTkqCGzDWHyJCnBOLVUhKfBBqDaUT1opOasxkax+Pyn OEdF25HseDo1DkAE4bsviHU8qS/p5CL9XiIabAJrVK1ovHUMeGDpeKWmng5hKcUa +RQZpqTkVDZ4/L0N0eNJtfWlUcmI8Y7UYPXjFQcpv4hGosQBwRDS2mxYgnRLCXUk 0Z65omFOT+lvfuZpEkSUA+S11F3dFAY9X0GjME8qH4VLaiFDntsZnXsojQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKr4soY562IBO6DeSeP/np4Sc8ygMB8GA1UdIwQY MBaAFOiWUFf0qgmbCpGfPwvUpkiOMMNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEt ODYzN2FiZjczMWYzLzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEtODYzN2FiZjczMWYz LzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdc//1wr QsKrJkqknuIWEWcupvsLxYlUzFy/dhhY3UDXrAATamnwJZbbjThXO5lj0wDNXUgg zVkHMCqFeSZanuOOdIDT4CvMR25d71NF0kgvM2DAywlhrf623nUbX+5Rc6fSVhPZ Gms6EN85qeBoDXA6JBJ18sZyfy/EaPLeUfovOKgjMp1+NnRqxtxrV28748eyiwIC y07GuiA9XG/cg/msL1Ff5xB+8AGU10xxy0ayK9FDPOxfwCaX8LBIzYk60fGeZqX/ wV9dmPJiUR4Kj6+es+mgZmAA9nZHgxFDXUFe5nqlGLT+Yr6ixJSlyjIQp4UAYa/K 0jjDIQmpNzY2qQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:27 2025 by rpki-client