This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json) Hash identifier: iQ4azVgiKaFYATlAn3+ojT2EjCMX7w1QXm5lCMG8r/c= Subject key identifier: D8:56:A6:DD:75:D8:D2:0A:DC:C7:79:EB:C4:51:E7:CE:2C:37:BA:00 Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Certificate serial: 019AF088E7F5E7BF880DBA62DE4D1F861B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 22:01:35 +0000 Manifest this update: Fri 05 Dec 2025 22:01:35 +0000 Manifest next update: Sat 06 Dec 2025 22:01:35 +0000 Files and hashes: 1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: Dh1g0OSDJg4jpqCgCbNWPREkwIgvGNdizlBsqQsRwik=) 2: XGdgxOrZAEASnwG-E4mJgIZXt9A.roa (hash: r7+Ew2fux06ZFhsm5QtmYCoespwgwuFRQ3Ky/AsDSy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:e7:f5:e7:bf:88:0d:ba:62:de:4d:1f:86:1b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Validity Not Before: Dec 5 22:01:35 2025 GMT Not After : Dec 6 22:01:35 2025 GMT Subject: CN=d856a6dd75d8d20adcc779ebc451e7ce2c37ba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:9f:80:a4:35:79:16:49:cf:b0:51:79:20: dc:89:70:a2:07:dc:16:98:db:0a:72:05:ca:2c:2f: c0:2d:d8:43:72:99:24:56:ce:32:5c:94:02:7e:f1: e3:e6:c3:65:f8:36:b9:9d:6b:e6:07:89:c2:e2:99: 38:8c:7e:d8:db:86:af:b8:90:4b:30:97:aa:42:dd: 1e:43:24:81:9a:77:79:bc:57:66:09:cb:60:a4:89: 83:55:f5:de:10:ed:e8:f4:5c:1e:c6:4a:ae:81:2f: 4e:39:22:f4:30:56:ba:89:53:38:9c:76:eb:16:52: bf:2b:b4:f9:0f:d3:d6:28:fa:42:b0:60:da:f4:64: 96:93:de:14:23:b6:c3:c2:f9:03:56:48:8d:94:d2: e3:fb:64:ed:8d:a0:c6:98:67:68:c6:18:5a:cb:62: 97:85:26:86:82:63:68:d9:6c:e6:f5:b7:6b:43:f9: 02:51:c1:40:4c:0d:da:9e:90:30:8f:ea:ac:6e:e8: d6:f6:1d:cc:44:11:be:52:d0:c2:f5:ed:d7:97:b5: 9b:9a:43:98:48:57:fb:8f:c4:57:6f:d6:31:f2:83: 5a:df:6c:1d:67:ba:1f:de:b5:09:97:80:fe:b4:45: 39:ae:30:a1:e4:f0:9e:13:0b:0c:55:25:fb:fb:de: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:56:A6:DD:75:D8:D2:0A:DC:C7:79:EB:C4:51:E7:CE:2C:37:BA:00 X509v3 Authority Key Identifier: keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e4:ed:74:c8:6f:ae:cc:f6:b9:1e:c8:ca:c1:42:3b:2d:5d: 27:e6:d9:ce:67:8f:8a:d8:fa:59:19:6e:b6:05:1f:f2:0f:b5: 23:16:7a:b8:cf:a9:77:73:bf:b9:c8:49:46:66:b2:18:84:34: 16:f2:f4:b4:61:b1:0f:96:05:d1:1a:69:17:0e:72:a8:55:f6: 3d:19:3f:99:e9:d4:3c:f5:85:5e:9e:37:df:57:f2:61:8a:b2: 7c:78:31:32:da:ff:c2:9a:1d:25:0d:ea:31:20:13:c6:00:61: 24:68:c9:42:ad:1d:51:5a:f0:68:30:17:56:3d:f9:4e:d1:56: ce:83:e2:cd:a9:66:72:d6:30:cf:d8:6d:3e:2d:0b:af:78:f1: 3a:ef:8b:50:8a:fb:30:4f:74:a1:15:3b:e0:f1:5d:1a:b1:0e: ed:fa:d4:96:a2:92:9a:04:12:18:9b:58:83:89:9d:36:86:c5: ec:1b:c3:16:e0:94:fd:1a:d4:5f:37:f5:68:43:25:b0:06:28: 8b:7f:19:ea:ae:86:80:e0:b6:b5:c0:eb:40:ca:a3:32:de:ef: 7f:5c:67:da:ab:fe:52:73:32:4b:8d:78:8d:58:e8:fa:f1:98: 99:25:f9:91:70:74:4a:26:fa:47:30:a8:05:39:9e:7d:cc:f0: 01:b5:95:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiOf157+IDbpi3k0fhhsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZjQwOTAyYTAwM2Q4ZmU2ZjdjNzc0MmViNDdkNzBiNTBh ZGUwMzYwHhcNMjUxMjA1MjIwMTM1WhcNMjUxMjA2MjIwMTM1WjAzMTEwLwYDVQQD EyhkODU2YTZkZDc1ZDhkMjBhZGNjNzc5ZWJjNDUxZTdjZTJjMzdiYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqOfgKQ1eRZJz7BReSDciXCiB9wW mNsKcgXKLC/ALdhDcpkkVs4yXJQCfvHj5sNl+Da5nWvmB4nC4pk4jH7Y24avuJBL MJeqQt0eQySBmnd5vFdmCctgpImDVfXeEO3o9FwexkqugS9OOSL0MFa6iVM4nHbr FlK/K7T5D9PWKPpCsGDa9GSWk94UI7bDwvkDVkiNlNLj+2TtjaDGmGdoxhhay2KX hSaGgmNo2Wzm9bdrQ/kCUcFATA3anpAwj+qsbujW9h3MRBG+UtDC9e3Xl7WbmkOY SFf7j8RXb9Yx8oNa32wdZ7of3rUJl4D+tEU5rjCh5PCeEwsMVSX7+94mbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhWpt112NIK3Md568RR584sN7oAMB8GA1UdIwQY MBaAFOj0CQKgA9j+b3x3QutH1wtQreA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMt N2E3OGM4YzRlMDUxLzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMtN2E3OGM4YzRlMDUx LzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeTtdMhv rsz2uR7IysFCOy1dJ+bZzmePitj6WRlutgUf8g+1IxZ6uM+pd3O/uchJRmayGIQ0 FvL0tGGxD5YF0RppFw5yqFX2PRk/menUPPWFXp4331fyYYqyfHgxMtr/wpodJQ3q MSATxgBhJGjJQq0dUVrwaDAXVj35TtFWzoPizalmctYwz9htPi0Lr3jxOu+LUIr7 ME90oRU74PFdGrEO7frUlqKSmgQSGJtYg4mdNobF7BvDFuCU/RrUXzf1aEMlsAYo i38Z6q6GgOC2tcDrQMqjMt7vf1xn2qv+UnMyS414jVjo+vGYmSX5kXB0Sib6RzCo BTmefczwAbWVvA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:02 2025 by rpki-client