This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json) Hash identifier: lFg5JJP/8nbjq4FS8OMrk0jM5KRuW6dQpOaIAzC+ObQ= Subject key identifier: 4E:29:F9:7F:3E:3C:38:D8:AD:A7:3F:46:F3:4E:27:88:75:D1:84:D0 Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92 Certificate serial: 019AF0F5F2211FED19D5FDCABB36ABF5AF8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft Manifest number: 0CAF Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=) 2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: l3Z6D2Tndx/ImmLIVwlmujwlxbnny8jvV1Ao0p4f5uM=) 3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=) 4: RG7fXecCgltP9RGkiJ-aVXS-wsM.roa (hash: qs5jUi+jVQdO/5VzCetY5ouvlERqA5awKhxjDrx/XnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f2:21:1f:ed:19:d5:fd:ca:bb:36:ab:f5:af:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=4e29f97f3e3c38d8ada73f46f34e278875d184d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:c3:d9:e6:2a:6d:db:61:3e:7b:4c:bd:5a: 0d:85:0e:61:5d:4c:af:2d:28:dd:47:8e:eb:bd:25: 3a:a4:5f:51:07:44:38:b0:3c:38:9e:f1:90:3a:f1: 49:07:59:48:a6:f5:04:cb:58:64:d4:7e:fc:70:72: 78:c5:57:b0:7b:61:8e:30:0f:3f:52:8c:c8:a6:69: a7:cd:89:64:14:a8:b4:ec:1e:d1:a8:e1:9b:64:d6: 95:01:ad:45:9f:9b:0c:a4:a4:09:2b:04:2b:2e:cd: 9f:b5:d9:a7:cc:4f:39:66:fc:64:ed:0f:89:5e:a8: 20:d6:42:f9:ed:57:bc:9d:0f:8b:74:4f:6d:a6:e9: 81:27:3a:47:88:9a:19:16:5a:7a:3d:9b:0a:b9:e3: d4:81:37:84:79:07:10:f3:18:69:85:3b:7e:92:ff: ef:29:7d:21:e6:9c:70:8c:d6:64:4b:88:c3:b1:18: c9:45:a7:7b:9d:f0:b7:7d:f2:1e:07:2d:ce:9f:61: 26:0c:0d:c1:0c:98:f0:e9:ac:cb:f1:e6:98:3b:f7: aa:af:c1:be:5d:60:55:71:50:a5:63:8b:c5:d9:4a: 2a:f0:2f:67:32:ca:15:65:e0:02:42:51:63:a1:1c: 54:7b:49:98:86:8b:8e:0d:85:86:91:d5:9f:8f:20: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:F9:7F:3E:3C:38:D8:AD:A7:3F:46:F3:4E:27:88:75:D1:84:D0 X509v3 Authority Key Identifier: keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c4:11:cf:b0:be:b6:fc:97:ec:02:37:b2:07:e9:aa:10:b4: 39:41:8b:46:f1:fa:fc:f9:38:36:83:bb:44:2b:fb:d1:39:61: 4f:86:02:bd:2b:be:a3:17:19:27:80:07:5e:2c:e4:4a:cb:ed: b4:d2:f7:5c:10:14:0c:5f:cd:07:22:a6:47:11:83:38:1e:aa: 72:eb:69:a8:a4:3c:b5:0f:56:cc:e7:b5:7d:ca:99:49:26:8f: 8f:55:ac:2d:f9:24:a6:46:90:62:4b:2a:02:40:bf:e7:fa:87: 64:84:84:6a:ef:94:ad:76:f1:f4:d3:63:21:8a:b9:53:26:69: 24:39:e3:26:fc:88:46:2d:5f:13:e8:1f:23:fc:51:2b:b3:95: 6b:88:2d:1b:a7:bd:11:96:b7:e1:fb:b4:52:f2:9a:d4:50:10: be:45:74:fb:94:dc:8a:e6:a1:75:e7:31:99:3f:f1:62:d2:1d: 36:44:73:c2:23:79:75:ca:4e:87:89:8e:e1:3b:d8:b3:da:f4: 60:74:02:72:fc:0c:d7:33:84:df:44:b4:5e:20:75:7f:cc:7f: 94:c1:fe:3d:da:02:17:0d:7e:e8:25:1a:6c:d5:cb:63:aa:39: 76:5d:9b:1d:2e:da:53:21:08:2e:51:e6:e2:0d:b6:45:aa:6c: f0:11:d8:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fIhH+0Z1f3Kuzar9a+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5 MmFjOTIwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD Eyg0ZTI5Zjk3ZjNlM2MzOGQ4YWRhNzNmNDZmMzRlMjc4ODc1ZDE4NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvnD2eYqbdthPntMvVoNhQ5hXUyv LSjdR47rvSU6pF9RB0Q4sDw4nvGQOvFJB1lIpvUEy1hk1H78cHJ4xVewe2GOMA8/ UozIpmmnzYlkFKi07B7RqOGbZNaVAa1Fn5sMpKQJKwQrLs2ftdmnzE85Zvxk7Q+J Xqgg1kL57Ve8nQ+LdE9tpumBJzpHiJoZFlp6PZsKuePUgTeEeQcQ8xhphTt+kv/v KX0h5pxwjNZkS4jDsRjJRad7nfC3ffIeBy3On2EmDA3BDJjw6azL8eaYO/eqr8G+ XWBVcVClY4vF2Uoq8C9nMsoVZeACQlFjoRxUe0mYhouODYWGkdWfjyAhTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4p+X8+PDjYrac/RvNOJ4h10YTQMB8GA1UdIwQY MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt NTdlOTBjNTZhMGUyLzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsQRz7C+ tvyX7AI3sgfpqhC0OUGLRvH6/Pk4NoO7RCv70TlhT4YCvSu+oxcZJ4AHXizkSsvt tNL3XBAUDF/NByKmRxGDOB6qcutpqKQ8tQ9WzOe1fcqZSSaPj1WsLfkkpkaQYksq AkC/5/qHZISEau+UrXbx9NNjIYq5UyZpJDnjJvyIRi1fE+gfI/xRK7OVa4gtG6e9 EZa34fu0UvKa1FAQvkV0+5TciuahdecxmT/xYtIdNkRzwiN5dcpOh4mO4TvYs9r0 YHQCcvwM1zOE30S0XiB1f8x/lMH+PdoCFw1+6CUabNXLY6o5dl2bHS7aUyEILlHm 4g22Raps8BHYLg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:10 2025 by rpki-client