This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json) Hash identifier: hpX5cOHY1vZTaQ5SvSD+pP0Lf3M5oI3N3MlV7ImNDV0= Subject key identifier: E6:E7:73:C8:77:B0:DE:EA:08:A0:94:33:91:0B:46:FC:94:BB:F2:9E Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04 Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04 Certificate serial: 019AF31C7DF8899FBC6304BFEF9DBB00655B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft Manifest number: 099A Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: g+0NDVNuHEXXkaBXu7tPsLXKrfmeavmTH/QJfZYmkMg=) 2: bYwJVKNEie6jgjCIP7suKHbkq0A.roa (hash: gBYweOoSxODSbbYi3S03mFZJ+Vs6bHOyqwK1v3lQMdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7d:f8:89:9f:bc:63:04:bf:ef:9d:bb:00:65:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04 Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=e6e773c877b0deea08a09433910b46fc94bbf29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:61:e5:2c:7d:9c:f3:04:7b:7f:d1:6d:91: 55:49:d0:b5:1e:bf:35:28:fd:cb:37:b6:40:f4:0b: 27:29:45:c4:a4:63:fd:11:47:36:08:58:40:7b:15: d8:76:2b:27:57:b2:44:79:19:db:6a:b4:36:79:af: 24:01:35:a7:f3:9d:fd:16:7e:f6:c6:05:08:05:74: 42:ae:f8:5b:99:55:12:6b:41:ec:bf:3d:6f:cd:3d: 41:b6:55:a3:f5:39:bf:24:ef:bc:b8:c3:3a:16:dc: 18:12:e8:d4:ff:ce:69:6b:51:df:3b:3d:77:b1:b6: c3:b3:be:d9:cd:4d:a5:8c:5e:bf:b1:75:0a:af:70: b1:ce:3f:a1:23:bf:05:43:7a:77:20:1f:d2:76:7d: a8:4c:e8:53:be:98:cd:84:ec:28:cf:7b:e6:74:c1: f0:0a:84:2f:d1:38:cb:9d:29:a0:55:c3:c2:b3:45: 5f:d1:41:8a:19:c1:a5:c8:b5:7c:8e:4c:7c:16:bc: d5:99:4c:a4:db:aa:51:e1:97:4b:0f:65:80:55:6d: 7b:43:a3:91:b0:78:bd:ee:d7:c2:ae:d5:dd:6b:fd: 5c:54:8d:f0:44:e3:cb:6e:5c:ef:4b:b8:e4:b8:00: d3:4f:92:00:fe:3e:9c:60:2e:a8:ee:85:3d:e6:02: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E7:73:C8:77:B0:DE:EA:08:A0:94:33:91:0B:46:FC:94:BB:F2:9E X509v3 Authority Key Identifier: keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c3:27:f8:56:50:e2:7d:cc:07:c1:d6:a5:2f:52:3e:2f:f2: d9:0f:6c:7e:f5:bf:f7:bd:35:bc:9d:d4:d7:f6:77:bf:78:67: cf:4e:7b:70:e1:5b:76:e9:05:5c:0d:b7:ce:41:07:ad:6c:da: dd:1c:75:67:da:95:9c:1d:40:dd:43:b6:db:df:ec:05:da:a4: 1e:41:54:68:81:3c:40:f0:d4:95:33:b5:e6:8f:96:46:bd:80: 58:f0:a8:1a:de:3c:87:7f:60:63:02:c8:cf:f7:21:88:42:54: e4:4d:84:72:38:0c:eb:d4:ca:65:9b:a1:76:97:67:14:bf:28: 64:7b:4c:dd:d8:aa:08:c7:68:34:46:11:de:b6:a0:66:bc:ea: d1:25:e4:42:c4:82:25:fe:2a:a4:55:0d:72:ca:af:90:ba:25: 15:ae:f3:68:a5:f0:c5:26:0b:9b:65:db:d2:cc:5f:94:00:47: 67:62:2e:32:39:10:d8:80:4d:8a:c9:b8:cf:f1:c6:93:ba:ba: 21:07:84:32:46:70:d3:b0:e3:42:b3:ce:28:4b:d7:e9:6f:70: 96:cc:44:26:14:9d:63:4c:36:1b:7a:40:1e:dc:53:74:5a:17: 40:bc:ec:44:1a:11:0a:8f:f6:35:f1:c8:b1:b8:04:b2:2d:ec: b6:bc:ad:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH34iZ+8YwS/7527AGVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MjAyMzdlNzI1Y2YwYTUzZWY0M2E3NGI1NTY5NTUxYWZm NzRlMDQwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD EyhlNmU3NzNjODc3YjBkZWVhMDhhMDk0MzM5MTBiNDZmYzk0YmJmMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Nh5Sx9nPMEe3/RbZFVSdC1Hr81 KP3LN7ZA9AsnKUXEpGP9EUc2CFhAexXYdisnV7JEeRnbarQ2ea8kATWn8539Fn72 xgUIBXRCrvhbmVUSa0Hsvz1vzT1BtlWj9Tm/JO+8uMM6FtwYEujU/85pa1HfOz13 sbbDs77ZzU2ljF6/sXUKr3Cxzj+hI78FQ3p3IB/Sdn2oTOhTvpjNhOwoz3vmdMHw CoQv0TjLnSmgVcPCs0Vf0UGKGcGlyLV8jkx8FrzVmUyk26pR4ZdLD2WAVW17Q6OR sHi97tfCrtXda/1cVI3wROPLblzvS7jkuADTT5IA/j6cYC6o7oU95gKHtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObnc8h3sN7qCKCUM5ELRvyUu/KeMB8GA1UdIwQY MBaAFOkgI35yXPClPvQ6dLVWlVGv904EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgt ZWIxMTM5YTMzZDBhLzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgtZWIxMTM5YTMzZDBh LzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMMn+FZQ 4n3MB8HWpS9SPi/y2Q9sfvW/9701vJ3U1/Z3v3hnz057cOFbdukFXA23zkEHrWza 3Rx1Z9qVnB1A3UO229/sBdqkHkFUaIE8QPDUlTO15o+WRr2AWPCoGt48h39gYwLI z/chiEJU5E2EcjgM69TKZZuhdpdnFL8oZHtM3diqCMdoNEYR3ragZrzq0SXkQsSC Jf4qpFUNcsqvkLolFa7zaKXwxSYLm2Xb0sxflABHZ2IuMjkQ2IBNism4z/HGk7q6 IQeEMkZw07DjQrPOKEvX6W9wlsxEJhSdY0w2G3pAHtxTdFoXQLzsRBoRCo/2NfHI sbgEsi3stryt9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:29 2025 by rpki-client