This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft File: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json) Hash identifier: x36sXOxKGKEFj5WhPqoEd/YSYs22Iyr5pxfcI84YnAs= Subject key identifier: 8F:D5:FD:9B:8C:66:E2:E7:C7:F8:87:DF:AC:0C:61:13:21:BE:36:A2 Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21 Certificate issuer: /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921 Certificate serial: 019AF19AE53723FE44199C2E25497B873C92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft Manifest number: 01DF Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: tuyggngVR7XY5ZOxh92HuSczldsZqf4MRyzy58GpRLo=) 2: sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa (hash: gT5e4Ztf/S3QhI6J9gtGfZQnZoP1YRQUOZiUmNVTEo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e5:37:23:fe:44:19:9c:2e:25:49:7b:87:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=8fd5fd9b8c66e2e7c7f887dfac0c611321be36a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:a9:a1:d0:fc:83:8d:0b:1e:42:37:bc:0e: 49:b1:af:eb:61:dd:8e:0e:d3:af:ce:f5:48:ff:76: 49:28:88:b1:bb:5e:d7:27:07:d3:21:05:13:36:bb: b2:3b:0e:d9:16:91:59:d8:c8:28:46:23:97:91:bc: f5:bf:b7:75:71:d2:09:48:a4:d3:81:d6:a3:97:4a: b5:c4:32:f8:00:72:95:54:14:92:28:56:11:41:2a: 67:6b:f9:94:7a:67:06:c5:d8:f4:de:1c:0e:6d:58: 91:dd:2a:f4:9b:66:89:27:8e:5b:a7:6c:b3:f3:73: 11:a8:03:59:00:d0:4f:99:d5:49:8f:2b:a0:25:26: 95:5e:dd:c8:2b:75:2f:f2:62:e6:0d:51:fb:0e:8b: 4f:5c:d7:30:79:7c:0a:07:94:54:31:e5:53:a3:19: 01:3a:6f:b1:d1:fb:e2:21:0a:1f:78:8f:f7:9c:f0: 6f:48:05:a6:3d:0d:e1:f8:50:84:bc:7e:b4:9f:2d: f8:73:d9:bd:f3:51:e3:03:48:57:51:d5:25:c5:e4: 59:c4:74:1a:b5:b9:c7:cf:e3:1e:31:2d:1e:a4:fe: 8e:6e:ca:35:e9:31:19:2b:05:63:7b:97:69:73:84: 35:13:e7:c1:41:9d:8f:e4:a5:8d:6f:b5:3f:ba:bb: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D5:FD:9B:8C:66:E2:E7:C7:F8:87:DF:AC:0C:61:13:21:BE:36:A2 X509v3 Authority Key Identifier: keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6e:ab:dd:0b:1a:2b:87:26:4d:f1:fc:4e:f1:79:b9:f9:44: b2:ca:cf:e5:08:6e:9e:8a:16:c9:68:e6:31:69:bf:0e:2b:e4: eb:cf:79:5e:1e:51:68:58:28:2c:5c:d9:19:23:7f:82:b4:03: 8c:93:53:3f:39:a5:1b:d6:46:25:02:08:40:a8:c2:29:9d:d5: ed:35:af:7b:5c:1d:dd:79:1d:7f:45:20:d2:ca:ea:18:20:4d: fa:cd:da:22:6a:cd:d2:d4:cd:c4:68:25:a6:b8:33:50:77:d2: 0b:15:4d:75:7a:25:33:90:aa:b5:16:90:8e:a0:bb:5c:b9:21: 98:ae:90:90:11:9d:54:60:ce:8d:3b:20:87:25:a0:a5:cf:aa: 5e:91:52:c5:57:39:21:c8:58:02:cf:6f:dd:33:5d:4a:61:52: d2:b7:a0:2e:49:0d:1a:e3:82:d8:2a:e5:d1:0e:5b:d9:27:6d: 95:69:f1:fd:01:7d:f6:8a:89:3b:0d:07:94:5b:0d:aa:e3:b8: 70:21:b4:c8:74:e1:18:54:90:61:ad:a7:88:fb:f4:07:13:ff: c6:4a:3b:d2:79:bc:65:af:12:18:78:2c:e8:f1:72:10:d1:04: c8:79:3e:a6:b9:cb:28:27:eb:d6:db:f0:74:06:33:01:fe:eb: 41:f0:19:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuU3I/5EGZwuJUl7hzySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMGViZmI0Y2FlNTY2OWM0OWYzMDRiZTAzNWFhNDU3Yjhk MzU5MjEwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg4ZmQ1ZmQ5YjhjNjZlMmU3YzdmODg3ZGZhYzBjNjExMzIxYmUzNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulCpodD8g40LHkI3vA5Jsa/rYd2O DtOvzvVI/3ZJKIixu17XJwfTIQUTNruyOw7ZFpFZ2MgoRiOXkbz1v7d1cdIJSKTT gdajl0q1xDL4AHKVVBSSKFYRQSpna/mUemcGxdj03hwObViR3Sr0m2aJJ45bp2yz 83MRqANZANBPmdVJjyugJSaVXt3IK3Uv8mLmDVH7DotPXNcweXwKB5RUMeVToxkB Om+x0fviIQofeI/3nPBvSAWmPQ3h+FCEvH60ny34c9m981HjA0hXUdUlxeRZxHQa tbnHz+MeMS0epP6Obso16TEZKwVje5dpc4Q1E+fBQZ2P5KWNb7U/urt+9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/V/ZuMZuLnx/iH36wMYRMhvjaiMB8GA1UdIwQY MBaAFDwOv7TK5WacSfMEvgNapFe401khMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mMWZjN2MtNDkyMi00OTFkLWE2MGQt ZjJkMjNhYWU1MmM2LzEvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mMWZjN2MtNDkyMi00OTFkLWE2MGQtZjJkMjNhYWU1MmM2 LzEvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf26r3Qsa K4cmTfH8TvF5uflEssrP5QhunooWyWjmMWm/Divk6895Xh5RaFgoLFzZGSN/grQD jJNTPzmlG9ZGJQIIQKjCKZ3V7TWve1wd3Xkdf0Ug0srqGCBN+s3aImrN0tTNxGgl prgzUHfSCxVNdXolM5CqtRaQjqC7XLkhmK6QkBGdVGDOjTsghyWgpc+qXpFSxVc5 IchYAs9v3TNdSmFS0regLkkNGuOC2Crl0Q5b2SdtlWnx/QF99oqJOw0HlFsNquO4 cCG0yHThGFSQYa2niPv0BxP/xko70nm8Za8SGHgs6PFyENEEyHk+prnLKCfr1tvw dAYzAf7rQfAZZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:45 2025 by rpki-client