This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft File: 6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json) Hash identifier: KTXJvfQ8txmQ7Kvg9llpCWZ9k/RoPQVpg/YUfrWjaqU= Subject key identifier: 40:69:CA:A8:C1:B4:01:94:2F:8F:BD:02:D9:82:C2:41:E3:6F:20:73 Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e Certificate serial: 019AF31BB619A2F1A0ABB3B9676E9166943B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft Manifest number: 16B7 Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: 31Lnqd98aILf2Q9ICfWlWSchBQQ.roa (hash: DcqcrHdJNZRvLJWfvAXOgG6RHZHxR0/3JTue0isYM5w=) 2: 4AyXvezl-yqEPm9B7grorGuuaCU.roa (hash: nr0Tbymm5gT2Px5I4yZcmfEB00Mwgpc5V9ZF1AUNTUw=) 3: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: wz7vsY0mRz9agvzgGjReWsWiUQMcQ84CDdSttiYHW5Q=) 4: MVj_UryY6usDMGQf7jrICRKU9Xc.roa (hash: TvJrrNTxB79t+M5iqPy3C87lEZr00PLUFyfmpQY3E3Q=) 5: ptaM1onrhJcKal0fw9HXf-WMHZY.roa (hash: O+DKgB5l1bVNFuSJ+/nDkTvI9UVJFEJCp07K7RKqMQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b6:19:a2:f1:a0:ab:b3:b9:67:6e:91:66:94:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=4069caa8c1b401942f8fbd02d982c241e36f2073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:be:f6:52:fb:d1:ea:23:9b:59:57:0f:ec: ca:d0:4c:c2:42:54:c3:ca:cb:1d:a7:90:2d:ab:02: 15:72:b0:15:db:5e:1a:c3:7b:96:5d:5f:ba:13:00: 6d:09:ea:b1:5a:ae:47:43:f4:d5:a9:43:a5:80:8d: a9:13:c4:72:01:5a:a2:43:27:74:d4:d8:19:41:30: f3:65:05:96:26:c3:0f:07:af:a7:d8:27:54:c1:9d: cb:b7:3d:9e:da:b8:44:28:6c:da:bf:dc:ba:af:4e: 99:a5:ca:40:65:d5:48:bb:1e:32:72:a0:0c:52:7a: af:56:3b:6d:d0:42:83:6b:54:05:de:80:35:01:21: 13:97:47:6f:fc:69:3e:5f:ce:f2:a2:3f:11:51:86: e2:03:ec:47:41:69:dc:29:ca:14:55:6f:c8:38:99: 4c:1d:17:10:36:33:21:c6:9a:eb:36:34:95:03:4f: 2c:35:63:91:bf:98:92:5e:05:b2:2a:36:dd:e1:b4: 6b:21:b5:ff:b2:ca:8d:73:c3:0e:f5:04:4e:46:f5: e4:25:b4:05:55:61:68:4a:4b:07:d6:98:56:4f:d0: 48:9a:95:7f:2f:70:03:ef:7f:75:fc:f1:fd:1e:7a: 0e:ff:2f:40:64:d4:dc:82:68:e5:a9:b9:d3:97:fc: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:69:CA:A8:C1:B4:01:94:2F:8F:BD:02:D9:82:C2:41:E3:6F:20:73 X509v3 Authority Key Identifier: keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:2d:f7:57:78:6b:f2:a1:43:7d:f6:be:45:bc:a0:97:65:68: ff:11:4a:93:f8:99:ed:b4:fe:82:be:21:68:fb:9f:22:d5:d2: 67:07:a4:ba:7c:cf:40:16:77:21:28:f4:08:bc:a2:71:64:db: 2e:b3:bd:94:fb:60:aa:0f:f2:dd:81:d1:f8:c0:91:06:7a:64: f6:78:f3:2b:21:81:c6:3c:d8:48:5e:4a:22:7f:b9:c4:ae:a7: 2a:76:e1:e1:45:42:85:76:27:28:80:6a:1d:82:70:e7:b3:28: ae:2d:04:24:5a:63:2a:43:41:c5:fe:29:89:b8:d0:2c:3b:ec: 67:42:3d:f8:67:34:3d:be:78:52:f2:6a:07:90:90:6b:0e:01: 0c:2c:44:a9:11:24:a4:d2:81:25:c8:11:36:d1:c2:63:ca:a5: 5a:c5:5b:2a:8c:73:fe:95:76:6d:82:92:1c:0a:5a:3d:bd:12: 48:ae:73:a3:12:74:92:27:de:d5:2a:c1:70:e0:9d:ff:06:90: 3a:3a:f0:27:6b:5f:3c:b9:b3:68:c9:b5:a4:ba:8e:ab:6a:97: f0:fc:50:db:79:2e:3f:a9:20:8b:fd:b0:e1:a0:a4:eb:e0:1d: 5b:0c:1f:ad:29:07:d2:ae:a8:72:74:4e:32:3c:41:31:e0:b9: 16:52:71:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7YZovGgq7O5Z26RZpQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OGMwNDc3MWUyYmZhYzhmNjBmMWI0YzljYmQwOTNhYWZl YTk3NGUwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD Eyg0MDY5Y2FhOGMxYjQwMTk0MmY4ZmJkMDJkOTgyYzI0MWUzNmYyMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9i+9lL70eojm1lXD+zK0EzCQlTD yssdp5AtqwIVcrAV214aw3uWXV+6EwBtCeqxWq5HQ/TVqUOlgI2pE8RyAVqiQyd0 1NgZQTDzZQWWJsMPB6+n2CdUwZ3Ltz2e2rhEKGzav9y6r06ZpcpAZdVIux4ycqAM UnqvVjtt0EKDa1QF3oA1ASETl0dv/Gk+X87yoj8RUYbiA+xHQWncKcoUVW/IOJlM HRcQNjMhxprrNjSVA08sNWORv5iSXgWyKjbd4bRrIbX/ssqNc8MO9QRORvXkJbQF VWFoSksH1phWT9BImpV/L3AD7391/PH9HnoO/y9AZNTcgmjlqbnTl/zSxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBpyqjBtAGUL4+9AtmCwkHjbyBzMB8GA1UdIwQY MBaAFOiMBHceK/rI9g8bTJy9CTqv6pdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUt YmE2NDVmMTk5MTVhLzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUtYmE2NDVmMTk5MTVh LzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsy33V3hr 8qFDffa+Rbygl2Vo/xFKk/iZ7bT+gr4haPufItXSZwekunzPQBZ3ISj0CLyicWTb LrO9lPtgqg/y3YHR+MCRBnpk9njzKyGBxjzYSF5KIn+5xK6nKnbh4UVChXYnKIBq HYJw57Mori0EJFpjKkNBxf4pibjQLDvsZ0I9+Gc0Pb54UvJqB5CQaw4BDCxEqREk pNKBJcgRNtHCY8qlWsVbKoxz/pV2bYKSHApaPb0SSK5zoxJ0kife1SrBcOCd/waQ OjrwJ2tfPLmzaMm1pLqOq2qX8PxQ23kuP6kgi/2w4aCk6+AdWwwfrSkH0q6ocnRO MjxBMeC5FlJxNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:09 2025 by rpki-client