This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft File: 6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json) Hash identifier: jAKQeg8j4T3QyvuMUIDE/IaYp7hQO8RHBaza3tqiENU= Subject key identifier: A0:35:F9:15:C4:E5:C8:BF:B6:CC:16:9E:31:B9:02:E3:EA:57:22:D2 Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2 Certificate issuer: /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2 Certificate serial: 019AF6534216A14D08656220A23DBDE906DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft Manifest number: 0294 Signing time: Sun 07 Dec 2025 01:00:42 +0000 Manifest this update: Sun 07 Dec 2025 01:00:42 +0000 Manifest next update: Mon 08 Dec 2025 01:00:42 +0000 Files and hashes: 1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=) 2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: DsEChCZGWF5BOUMMF0a3Ht063/IQ8fj7wBIqzZPIhng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:42:16:a1:4d:08:65:62:20:a2:3d:bd:e9:06:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2 Validity Not Before: Dec 7 01:00:42 2025 GMT Not After : Dec 8 01:00:42 2025 GMT Subject: CN=a035f915c4e5c8bfb6cc169e31b902e3ea5722d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:59:40:9f:06:ef:7a:9b:77:f9:3f:75:db: fa:59:a4:77:2c:30:df:30:51:d3:af:12:6b:c7:d0: c6:05:35:8f:fc:71:ac:c3:a0:8d:58:0c:86:7f:74: fe:76:2b:95:00:2e:d2:34:9e:3f:fc:33:83:d1:c1: 3e:e7:06:85:9a:67:18:56:5b:e5:29:49:a3:09:c7: a1:bf:49:b3:ce:67:a8:79:49:f6:fe:e3:28:78:9f: 8f:d9:8a:33:3f:75:b8:2b:90:01:aa:77:1d:d7:7f: 3b:1a:7c:e8:86:3b:11:7b:ba:4b:59:f4:eb:c0:0f: 46:d3:79:92:da:c3:8d:37:13:43:32:ff:35:78:a7: d8:ef:93:94:7a:4f:c2:d0:98:f7:f4:ba:7c:33:8b: c1:ef:52:49:f9:01:46:8b:d0:f3:36:32:73:65:0d: 9c:32:ce:a5:fc:07:4f:1f:42:7c:55:f9:f1:7a:25: 45:62:07:ca:62:b9:6b:a6:d2:0b:22:ba:ce:a2:f1: d1:29:4f:d2:58:1e:e2:ea:e5:a3:5b:92:1a:46:66: 54:33:83:7f:ed:b3:96:41:65:4d:62:cd:e2:1d:0c: 7d:cb:0b:69:0e:aa:72:8e:83:c4:0c:7e:4b:bb:25: 15:c0:95:b6:e9:95:d2:17:b8:99:39:39:61:ce:d6: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:35:F9:15:C4:E5:C8:BF:B6:CC:16:9E:31:B9:02:E3:EA:57:22:D2 X509v3 Authority Key Identifier: keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4a:e4:be:50:08:84:64:76:16:b6:e0:db:33:d1:d7:c3:37: 93:d2:e3:c9:0f:86:66:8c:b9:c3:9c:ce:af:df:f7:9d:72:47: 3c:82:ed:19:3a:c3:59:48:41:c6:73:c4:10:5b:4b:ce:7f:d9: 47:b5:69:69:7a:d0:22:68:f7:d4:41:0d:f0:9d:c3:b6:08:d1: ba:9b:c0:8a:d9:dd:c1:70:cc:81:6e:63:fa:b2:d7:d8:40:7b: 22:ff:23:ac:df:10:09:9e:fc:d2:dc:ad:49:dc:51:d7:d2:9d: 3f:39:02:b1:56:fb:e3:9f:4f:2c:4f:dc:5b:01:99:b6:f6:db: 52:88:ea:6c:1b:9c:af:76:cf:46:0a:19:31:72:ed:94:77:83: 4b:df:46:9a:d4:82:7f:b2:d5:39:ba:07:81:ae:47:25:c9:a8: 72:b4:63:8a:5c:dd:bb:8a:5d:c4:33:57:aa:29:39:c5:54:54: 0c:e1:80:2f:f1:9b:9f:37:c1:85:28:42:f2:14:67:46:42:f4: c3:ff:c2:e0:dc:95:63:03:12:36:6c:93:51:8e:e6:e9:95:9d: ce:c2:79:c7:f5:16:0b:46:b8:43:ee:57:2b:91:d4:07:62:d0: ad:99:e1:8e:60:b6:d0:bd:de:bc:4a:99:a3:c0:30:66:96:84: 28:96:21:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U0IWoU0IZWIgoj296QbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZTBjMmMwZGVlNmY5ZWQ2NWUwNTFlYWE5MDk3ZDAyY2Y1 YmY1ZjIwHhcNMjUxMjA3MDEwMDQyWhcNMjUxMjA4MDEwMDQyWjAzMTEwLwYDVQQD EyhhMDM1ZjkxNWM0ZTVjOGJmYjZjYzE2OWUzMWI5MDJlM2VhNTcyMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxldZQJ8G73qbd/k/ddv6WaR3LDDf MFHTrxJrx9DGBTWP/HGsw6CNWAyGf3T+diuVAC7SNJ4//DOD0cE+5waFmmcYVlvl KUmjCcehv0mzzmeoeUn2/uMoeJ+P2YozP3W4K5ABqncd1387GnzohjsRe7pLWfTr wA9G03mS2sONNxNDMv81eKfY75OUek/C0Jj39Lp8M4vB71JJ+QFGi9DzNjJzZQ2c Ms6l/AdPH0J8VfnxeiVFYgfKYrlrptILIrrOovHRKU/SWB7i6uWjW5IaRmZUM4N/ 7bOWQWVNYs3iHQx9ywtpDqpyjoPEDH5LuyUVwJW26ZXSF7iZOTlhztZ03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA1+RXE5ci/tswWnjG5AuPqVyLSMB8GA1UdIwQY MBaAFOrgwsDe5vntZeBR6qkJfQLPW/XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQt ZDk4ZjVkMDc2Mjk4LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQtZDk4ZjVkMDc2Mjk4 LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0rkvlAI hGR2Frbg2zPR18M3k9LjyQ+GZoy5w5zOr9/3nXJHPILtGTrDWUhBxnPEEFtLzn/Z R7VpaXrQImj31EEN8J3DtgjRupvAitndwXDMgW5j+rLX2EB7Iv8jrN8QCZ780tyt SdxR19KdPzkCsVb7459PLE/cWwGZtvbbUojqbBucr3bPRgoZMXLtlHeDS99GmtSC f7LVOboHga5HJcmocrRjilzdu4pdxDNXqik5xVRUDOGAL/GbnzfBhShC8hRnRkL0 w//C4NyVYwMSNmyTUY7m6ZWdzsJ5x/UWC0a4Q+5XK5HUB2LQrZnhjmC20L3evEqZ o8AwZpaEKJYhjA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:03:58 2025 by rpki-client