This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json) Hash identifier: FXQ5saX01Y5KuDPBtwe44ODZtd9RTbP1nSxzVBvVNaQ= Subject key identifier: DC:0D:9A:6D:84:94:D4:4E:42:D6:BF:3D:93:7A:22:B6:4E:EB:1C:A0 Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Certificate serial: 019AF50B96A24927FCAEC7537BE42AED6EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft Manifest number: 0CAC Signing time: Sat 06 Dec 2025 19:02:48 +0000 Manifest this update: Sat 06 Dec 2025 19:02:48 +0000 Manifest next update: Sun 07 Dec 2025 19:02:48 +0000 Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=) 2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: vuEt9nl128gRZXhsw1cq+YP4QvV5bJ3Dfd2+J6cuIps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:96:a2:49:27:fc:ae:c7:53:7b:e4:2a:ed:6e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Validity Not Before: Dec 6 19:02:48 2025 GMT Not After : Dec 7 19:02:48 2025 GMT Subject: CN=dc0d9a6d8494d44e42d6bf3d937a22b64eeb1ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:d9:f4:cb:ba:6a:48:06:c4:c4:cb:d3:c2: 9c:38:f3:b9:bc:a7:ae:36:a0:d4:a5:88:ff:73:b8: 04:f9:3d:9b:50:45:94:37:23:8f:a3:d5:84:a9:e8: 2e:57:9b:9e:12:cc:da:e3:29:27:ab:d3:fd:cf:1a: d8:d5:fc:f0:22:a2:e0:37:49:3d:1f:3f:49:59:35: 33:44:c5:24:3d:00:ac:78:a0:31:29:47:97:4c:23: 82:44:e8:44:1e:5e:f8:fa:9f:79:0b:21:9b:70:62: ab:da:71:8e:24:34:f4:f2:c5:88:21:0f:fc:29:bc: a4:59:27:27:2a:79:bc:cd:c7:15:6e:79:cc:f8:37: 66:ed:44:06:79:7f:eb:32:bb:40:36:75:d0:61:03: aa:9a:c1:46:d0:38:4c:37:3a:13:c2:11:ea:9a:65: 1b:e3:24:6d:55:c8:ef:d5:a4:a1:e1:5e:98:3b:58: 63:a2:87:fa:51:07:e5:62:57:86:4a:3a:25:fc:78: d6:bc:e8:ea:ab:5d:a2:82:fc:73:d4:18:ea:64:c8: c6:6c:29:11:0b:6e:a1:94:14:64:a8:f9:b8:a8:e9: a0:d7:29:ce:f6:96:63:b0:c5:d9:ee:b3:f5:28:fa: 6c:99:c1:1b:e7:61:ee:34:53:ad:74:30:ff:36:33: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0D:9A:6D:84:94:D4:4E:42:D6:BF:3D:93:7A:22:B6:4E:EB:1C:A0 X509v3 Authority Key Identifier: keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:ca:20:6a:3a:9e:f1:44:aa:03:8a:2f:73:29:f5:f0:ca:df: 7d:97:73:85:a7:3b:2c:0a:b3:51:ad:ce:51:02:df:e6:44:b9: ad:30:35:b5:de:bb:25:37:00:ec:38:a4:13:a3:d6:95:24:82: 69:39:9a:62:0a:86:32:70:e9:a7:69:e0:7d:76:0a:cc:a7:3c: db:62:89:61:82:d6:f1:97:6f:98:a6:9f:2b:14:2d:ab:5f:c7: 48:94:c7:af:fb:5a:15:c3:41:0d:6a:5f:56:2e:4c:de:94:49: 58:c1:ad:1b:ff:e6:c5:77:d6:be:1f:30:15:b8:92:c1:36:20: 5a:30:4e:1c:73:e0:10:de:ea:67:1b:c7:f3:86:d7:d6:e5:32: 54:64:d2:5b:71:63:3e:85:7f:be:26:5a:e0:64:6c:d5:35:b0: 66:3d:58:68:75:b6:b3:66:ef:89:c5:ec:9c:c4:1f:2e:e8:3c: 55:e2:25:61:f8:e2:fc:0e:38:de:6b:a7:d7:86:aa:0c:1a:22: f2:12:73:85:e1:44:e5:3c:c4:46:98:af:72:50:18:14:52:9f: 96:5a:d3:7d:9c:c1:04:a0:8e:b5:2c:62:23:fb:c6:10:86:9e: df:87:9b:7e:26:44:7a:21:0f:1c:19:b4:37:77:c5:1d:95:1f: cb:89:7c:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5aiSSf8rsdTe+Qq7W7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTRlMzYzOTc0YjJlZjkwZWNiMDUzNDBhZjVkYWY2YjI0 MTYwY2IwHhcNMjUxMjA2MTkwMjQ4WhcNMjUxMjA3MTkwMjQ4WjAzMTEwLwYDVQQD EyhkYzBkOWE2ZDg0OTRkNDRlNDJkNmJmM2Q5MzdhMjJiNjRlZWIxY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nvZ9Mu6akgGxMTL08KcOPO5vKeu NqDUpYj/c7gE+T2bUEWUNyOPo9WEqeguV5ueEsza4yknq9P9zxrY1fzwIqLgN0k9 Hz9JWTUzRMUkPQCseKAxKUeXTCOCROhEHl74+p95CyGbcGKr2nGOJDT08sWIIQ/8 KbykWScnKnm8zccVbnnM+Ddm7UQGeX/rMrtANnXQYQOqmsFG0DhMNzoTwhHqmmUb 4yRtVcjv1aSh4V6YO1hjoof6UQflYleGSjol/HjWvOjqq12igvxz1BjqZMjGbCkR C26hlBRkqPm4qOmg1ynO9pZjsMXZ7rP1KPpsmcEb52HuNFOtdDD/NjMiDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwNmm2ElNROQta/PZN6IrZO6xygMB8GA1UdIwQY MBaAFGuk42OXSy75DssFNAr12vayQWDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMt ZWNkN2ZlZTdjMWIwLzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMtZWNkN2ZlZTdjMWIw LzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzsogajqe 8USqA4ovcyn18MrffZdzhac7LAqzUa3OUQLf5kS5rTA1td67JTcA7DikE6PWlSSC aTmaYgqGMnDpp2ngfXYKzKc822KJYYLW8ZdvmKafKxQtq1/HSJTHr/taFcNBDWpf Vi5M3pRJWMGtG//mxXfWvh8wFbiSwTYgWjBOHHPgEN7qZxvH84bX1uUyVGTSW3Fj PoV/viZa4GRs1TWwZj1YaHW2s2bvicXsnMQfLug8VeIlYfji/A443mun14aqDBoi 8hJzheFE5TzERpivclAYFFKfllrTfZzBBKCOtSxiI/vGEIae34ebfiZEeiEPHBm0 N3fFHZUfy4l8Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:56 2025 by rpki-client