This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: rt4r+LXb5S175ReLIUhKdRln+cH0Av8juSs6j8i4U/8= Subject key identifier: EC:11:09:44:B1:AC:8F:2C:C9:02:9F:14:32:A9:04:29:EA:F9:7A:B9 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 5F59FD2E9C9A346579A289F1C1C1BE368B4C7179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 0586 Signing time: Sat 06 Dec 2025 18:06:18 +0000 Manifest this update: Sat 06 Dec 2025 18:01:18 +0000 Manifest next update: Sun 07 Dec 2025 18:26:18 +0000 Files and hashes: 1: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=) 2: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: jhbKV4Jf8ffBCsxI61aRV4clSOVkTG4BFHqWAVz8XYA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:59:fd:2e:9c:9a:34:65:79:a2:89:f1:c1:c1:be:36:8b:4c:71:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Dec 6 18:01:18 2025 GMT Not After : Dec 7 18:26:18 2025 GMT Subject: CN=EC110944B1AC8F2CC9029F1432A90429EAF97AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:5d:7d:3e:fe:a8:cf:7c:fb:49:be:c2:b4: e7:f9:08:0b:90:e9:9b:46:63:aa:7d:4b:02:27:7f: 85:b5:9b:d8:93:c8:b9:e1:d2:0d:57:3e:a2:dc:a2: 90:4b:22:6e:ed:e3:03:6f:b2:d0:22:d5:0b:81:56: 01:89:18:1c:b3:72:ef:a1:19:f8:f8:cb:d4:a9:b7: 05:92:b8:de:5b:96:71:ef:a8:43:38:a5:b7:64:aa: 42:96:b6:3d:1d:d4:a4:9f:ab:a0:f8:60:f5:ba:96: 50:72:1c:64:4b:22:d3:30:9a:ca:dd:56:f5:47:8d: 4b:23:b1:fc:04:ef:09:7a:6f:ff:2e:6e:a6:17:8e: 40:53:5d:a2:1e:71:0b:9a:d7:11:a0:d7:8c:2c:55: 4c:24:df:37:f4:5b:41:23:c3:97:f5:c2:99:5e:b9: c1:a9:ae:9f:2c:36:2e:7d:80:e8:c6:21:47:81:11: ae:6d:6b:aa:a9:56:44:24:dd:a3:7f:7e:e3:a8:12: 60:2f:35:04:d1:e3:91:28:16:75:fc:5b:2a:d4:6c: 6e:1a:f1:14:5b:6c:f8:3b:52:d1:8a:3f:ac:82:a0: bb:19:77:c1:56:e9:bc:2f:a5:e9:0c:5d:37:a7:e0: 75:b9:a3:97:f2:d9:06:b0:fe:b8:66:f7:fd:75:01: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:11:09:44:B1:AC:8F:2C:C9:02:9F:14:32:A9:04:29:EA:F9:7A:B9 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a1:c2:b4:ac:7e:22:f2:f2:23:6a:23:4d:3b:bb:11:c4:be: 14:73:f2:b0:55:16:33:0a:62:90:cf:88:f6:6e:ad:26:f5:78: 38:87:d8:e8:0c:93:38:3d:23:df:9a:10:fd:bb:bf:16:94:4b: 19:e1:f2:d5:ba:95:7e:71:6a:e6:8c:9d:07:38:55:18:f8:d2: 5d:94:aa:a7:02:af:cf:6a:79:ed:41:4a:fb:41:da:21:9d:81: 99:29:0e:c3:fc:64:67:10:cb:c8:d8:8e:a2:63:ad:90:be:42: 78:7f:78:b4:da:b9:08:9d:46:3e:4f:29:c6:d0:72:26:e8:b3: 7a:82:fc:ff:9b:f0:ee:93:be:22:73:55:37:1e:04:3c:65:39: ca:77:80:52:8b:c7:93:38:fc:1d:da:78:6a:a8:3d:ff:fd:f6: 3d:de:58:1d:95:4f:49:56:f7:5c:d7:ec:a8:63:33:8e:ec:e9: 31:37:61:89:c1:ea:74:45:39:14:42:fe:1f:d4:dd:8a:5a:f3: 5c:6c:35:2c:4d:0e:b6:09:3a:17:ed:0b:09:b7:61:30:e6:2e: 50:7c:9b:d2:30:36:eb:ef:ae:6e:b5:57:db:dd:25:82:71:1b: a2:b0:fb:c1:83:a4:e4:92:f9:cd:2a:2b:d4:32:98:8b:8f:30: e3:bc:9f:d3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX1n9LpyaNGV5oonxwcG+NotMcXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTEyMDYxODAxMThaFw0yNTEyMDcxODI2MThaMDMxMTAvBgNV BAMTKEVDMTEwOTQ0QjFBQzhGMkNDOTAyOUYxNDMyQTkwNDI5RUFGOTdBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTV19Pv6oz3z7Sb7CtOf5CAuQ 6ZtGY6p9SwInf4W1m9iTyLnh0g1XPqLcopBLIm7t4wNvstAi1QuBVgGJGByzcu+h Gfj4y9SptwWSuN5blnHvqEM4pbdkqkKWtj0d1KSfq6D4YPW6llByHGRLItMwmsrd VvVHjUsjsfwE7wl6b/8ubqYXjkBTXaIecQua1xGg14wsVUwk3zf0W0Ejw5f1wple ucGprp8sNi59gOjGIUeBEa5ta6qpVkQk3aN/fuOoEmAvNQTR45EoFnX8WyrUbG4a 8RRbbPg7UtGKP6yCoLsZd8FW6bwvpekMXTen4HW5o5fy2Qaw/rhm9/11AcT3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7BEJRLGsjyzJAp8UMqkEKer5erkwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6HCtKx+IvLyI2ojTTu7 EcS+FHPysFUWMwpikM+I9m6tJvV4OIfY6AyTOD0j35oQ/bu/FpRLGeHy1bqVfnFq 5oydBzhVGPjSXZSqpwKvz2p57UFK+0HaIZ2BmSkOw/xkZxDLyNiOomOtkL5CeH94 tNq5CJ1GPk8pxtByJuizeoL8/5vw7pO+InNVNx4EPGU5yneAUovHkzj8Hdp4aqg9 //32Pd5YHZVPSVb3XNfsqGMzjuzpMTdhicHqdEU5FEL+H9TdilrzXGw1LE0Otgk6 F+0LCbdhMOYuUHyb0jA26++ubrVX290lgnEborD7wYOk5JL5zSor1DKYi48w47yf 0w== -----END CERTIFICATE-----Generated at Sun Dec 7 08:10:59 2025 by rpki-client