This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft File: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json) Hash identifier: QC5GqPK5PZDN/hUWOGB/cvG6z4f2MUO9biChPT7GBtk= Subject key identifier: 5A:85:F6:62:EB:B8:21:33:DE:F1:5F:46:34:CA:74:8C:5E:2A:59:BD Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8 Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8 Certificate serial: 019AF12D676BBA4E1F9B1FA9D93A462EDA00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft Manifest number: 022A Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: DTZaH0HVjux6cd3NSeJCMVlISJ5STFXsQsd/M3Af3LE=) 2: xQC18Di_ctqtLNxYWbMtSnGwz5c.roa (hash: KunZ5Y32qy4l7Ei6v6cWQmt4QYuY/vwQLNAYzWY5uXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:67:6b:ba:4e:1f:9b:1f:a9:d9:3a:46:2e:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8 Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=5a85f662ebb82133def15f4634ca748c5e2a59bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:49:ed:44:75:a5:f0:1d:41:88:40:ac:9f: 09:16:aa:7b:38:23:da:e6:32:8b:6a:0a:00:5b:01: eb:6c:98:64:36:8a:e6:f1:c1:cf:10:d9:c1:a3:f1: 08:a2:9b:b6:88:28:d8:47:3f:f4:d7:c2:a1:49:2b: 7b:a6:a1:18:5e:88:b0:0d:90:42:b8:aa:f9:6f:6a: f3:18:76:b4:0c:51:dc:1b:f0:74:eb:8b:3c:05:8f: 0a:f7:5a:42:6f:b3:9a:07:63:8e:68:c4:19:71:3a: 6f:1c:72:0c:8a:77:fa:c1:e1:c6:bb:08:fc:8f:25: 86:ce:c1:ec:63:56:77:7b:89:c4:a1:68:58:2f:b5: c5:f0:60:c6:a2:d1:f6:c2:a1:29:fe:04:80:a0:cc: ea:a1:fd:10:96:e0:79:72:aa:5b:c1:52:85:36:21: e8:a5:7f:37:b5:3d:51:fa:1f:c6:9e:74:bf:a7:cb: 56:8a:20:d9:06:54:33:44:87:17:8f:88:ac:bc:9e: d4:83:06:1d:0f:60:b9:60:2c:fc:a7:48:a3:81:a2: df:f0:b0:1c:f4:cd:b8:bc:08:02:2c:60:90:c7:f9: 18:ae:03:c5:cf:d9:65:72:40:5f:d1:6c:a1:35:cf: ab:e1:f8:c4:52:81:50:d0:ce:0f:bd:1e:af:79:ed: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:85:F6:62:EB:B8:21:33:DE:F1:5F:46:34:CA:74:8C:5E:2A:59:BD X509v3 Authority Key Identifier: keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d1:0e:41:ce:be:fd:98:b8:10:c0:7f:26:b1:7f:fd:96:c5: 8f:42:1e:f9:bb:bd:d0:73:62:11:23:d6:3e:26:f4:75:7d:18: c2:04:88:13:13:94:f1:9e:eb:e5:4b:17:c0:5f:31:fa:ae:c8: ec:f0:fa:4a:1a:fd:fe:80:6e:14:7f:88:d7:21:98:13:7b:51: 60:39:3f:41:18:25:01:2e:a6:ad:73:31:4a:34:25:53:f9:0c: ac:1f:1d:84:ed:9c:4b:ed:76:ab:1e:a4:74:cc:84:ac:1e:8f: d7:50:bf:7c:5a:4b:1c:af:38:70:1f:6d:81:7d:1a:6e:1a:dd: 88:84:6e:6c:72:74:52:b4:62:88:67:35:5b:e9:d4:92:70:5f: 65:10:a4:5d:fe:8e:8f:10:7d:3a:77:a3:91:86:ce:47:9f:77: 53:a5:3e:8c:bc:e2:c2:19:d1:11:79:d6:ba:03:1b:f9:80:23: ed:91:85:7f:f1:93:be:0a:91:49:05:3b:93:f5:97:3c:d0:60: a3:9d:05:e7:8b:e1:cc:da:24:5a:09:40:4c:01:39:e3:c8:3a: fb:67:80:97:8f:43:09:d4:e5:79:0c:00:4b:eb:b8:a1:34:aa: 91:22:4c:38:76:cd:8d:f2:56:ee:15:93:24:fe:ec:5f:4d:0e: 05:11:91:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWdruk4fmx+p2TpGLtoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5 MjExYzgwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD Eyg1YTg1ZjY2MmViYjgyMTMzZGVmMTVmNDYzNGNhNzQ4YzVlMmE1OWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMNJ7UR1pfAdQYhArJ8JFqp7OCPa 5jKLagoAWwHrbJhkNorm8cHPENnBo/EIopu2iCjYRz/018KhSSt7pqEYXoiwDZBC uKr5b2rzGHa0DFHcG/B064s8BY8K91pCb7OaB2OOaMQZcTpvHHIMinf6weHGuwj8 jyWGzsHsY1Z3e4nEoWhYL7XF8GDGotH2wqEp/gSAoMzqof0QluB5cqpbwVKFNiHo pX83tT1R+h/GnnS/p8tWiiDZBlQzRIcXj4isvJ7UgwYdD2C5YCz8p0ijgaLf8LAc 9M24vAgCLGCQx/kYrgPFz9llckBf0WyhNc+r4fjEUoFQ0M4PvR6vee0l4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqF9mLruCEz3vFfRjTKdIxeKlm9MB8GA1UdIwQY MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt NzA1MjJkODE0ZTBjLzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtEOQc6+ /Zi4EMB/JrF//ZbFj0Ie+bu90HNiESPWPib0dX0YwgSIExOU8Z7r5UsXwF8x+q7I 7PD6Shr9/oBuFH+I1yGYE3tRYDk/QRglAS6mrXMxSjQlU/kMrB8dhO2cS+12qx6k dMyErB6P11C/fFpLHK84cB9tgX0abhrdiIRubHJ0UrRiiGc1W+nUknBfZRCkXf6O jxB9OnejkYbOR593U6U+jLziwhnREXnWugMb+YAj7ZGFf/GTvgqRSQU7k/WXPNBg o50F54vhzNokWglATAE548g6+2eAl49DCdTleQwAS+u4oTSqkSJMOHbNjfJW7hWT JP7sX00OBRGR9g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:12 2025 by rpki-client