This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft File: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft (raw, json) Hash identifier: BniZ4xpjtIYScAQ5wwSM+Tu+hLLYpD9sLSTy0M1D5do= Subject key identifier: 9B:B3:F2:27:5E:3B:DB:90:2C:6C:DE:AD:85:59:FF:B9:CC:D6:79:E0 Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 Certificate issuer: /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Certificate serial: 019B552ADC4E83275A16BCF3903E0FC797DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft Manifest number: FD Signing time: Thu 25 Dec 2025 11:00:30 +0000 Manifest this update: Thu 25 Dec 2025 11:00:30 +0000 Manifest next update: Fri 26 Dec 2025 11:00:30 +0000 Files and hashes: 1: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl (hash: knNZsJfil9IuBuZyfxWJNkYEiZZqgME3aruBsVFBTOs=) 2: XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa (hash: HdEWtXPo3qjkpM4rtcD6m0eh6joeQyAPSggK9PU/vxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2a:dc:4e:83:27:5a:16:bc:f3:90:3e:0f:c7:97:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Validity Not Before: Dec 25 11:00:30 2025 GMT Not After : Dec 26 11:00:30 2025 GMT Subject: CN=9bb3f2275e3bdb902c6cdead8559ffb9ccd679e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:cb:dd:25:43:5a:2f:6e:8c:0a:a3:2d:6f: ce:3e:2d:e5:a1:bd:fc:f2:5f:eb:0c:66:13:e7:f5: 6b:d1:e5:f0:d5:2d:8f:63:5a:78:8d:1d:44:fc:c1: 51:e6:09:6e:60:8c:32:4d:b7:06:33:9a:d3:9d:b9: 79:d3:b1:e6:a0:f3:a8:ca:63:13:97:db:b2:66:f4: 69:1e:ab:7e:1c:10:8a:a3:e5:27:11:4c:08:84:64: 05:d4:c6:f0:65:e2:46:1e:cf:c3:2a:aa:9a:0d:76: 7b:e8:bc:3b:0c:2e:50:60:42:71:82:05:82:27:92: 43:5a:56:d7:52:53:ee:66:18:fb:d6:8c:ee:19:eb: e5:d9:aa:1b:64:2d:dc:37:58:e3:0f:cc:f3:3e:38: c2:26:28:3e:c4:1a:4c:04:5e:d2:c2:71:3a:67:3d: 34:49:da:dd:76:c8:ba:bc:04:e5:48:b9:e4:15:f8: ff:e1:22:70:88:7c:a2:ad:f6:b0:f8:46:a7:16:fd: 2e:d9:aa:26:e9:dd:c2:1f:2b:7b:62:0d:42:9a:91: 48:73:1e:da:48:4f:37:f7:97:1b:6a:70:26:17:b1: 3d:81:af:b7:ee:10:c6:21:f4:ac:d3:bc:5b:a9:52: 27:97:de:46:44:32:89:de:fa:5b:41:a9:01:6f:62: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:F2:27:5E:3B:DB:90:2C:6C:DE:AD:85:59:FF:B9:CC:D6:79:E0 X509v3 Authority Key Identifier: keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4b:28:d9:a2:6b:f8:d3:8e:1d:25:7b:3d:ca:60:da:29:cc: a0:5a:e0:47:70:33:df:4f:6c:f0:24:fd:79:09:4f:77:8f:db: db:2e:50:33:9d:b4:57:02:85:a8:96:a1:03:ea:74:57:e9:a9: 7b:7e:fa:5b:70:d8:46:6b:99:d4:bf:eb:ec:2e:05:a3:dc:8c: 58:d7:64:ec:8b:08:61:1f:11:93:e9:17:4b:64:b3:3a:92:60: 63:6f:92:29:dc:2e:fc:73:29:a2:36:d7:40:36:59:e6:cc:86: ee:f1:d0:10:2a:4d:f8:c7:7b:a2:92:d7:70:0b:41:0d:ed:b4: 05:26:ff:d9:3f:18:fe:a8:29:f5:13:0f:33:97:38:68:15:0d: fa:fc:a8:95:dc:64:3f:6e:39:0c:9b:fe:de:90:cd:89:bb:30: ae:17:14:27:32:f1:12:7f:3e:36:97:4c:de:8a:0c:b4:b3:64: 23:8c:31:c0:00:ad:59:da:c2:92:ae:52:6b:36:eb:20:b0:17: 22:5c:a9:ff:ec:dd:7d:56:03:4e:b2:12:97:68:70:9d:81:a8: 59:a8:90:a0:a7:77:43:8b:2a:10:99:d1:fb:7e:cf:6c:c1:46: 13:13:fc:0f:1e:14:35:82:4d:81:c6:67:e2:42:4a:19:22:a5: c0:c1:c7:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKtxOgydaFrzzkD4Px5fcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWU1YzA5ZDk5MDRlYjc0NGY5MDY3MzhjZjlmMDdmMjNm YjU1NjcwHhcNMjUxMjI1MTEwMDMwWhcNMjUxMjI2MTEwMDMwWjAzMTEwLwYDVQQD Eyg5YmIzZjIyNzVlM2JkYjkwMmM2Y2RlYWQ4NTU5ZmZiOWNjZDY3OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEjL3SVDWi9ujAqjLW/OPi3lob38 8l/rDGYT5/Vr0eXw1S2PY1p4jR1E/MFR5gluYIwyTbcGM5rTnbl507HmoPOoymMT l9uyZvRpHqt+HBCKo+UnEUwIhGQF1MbwZeJGHs/DKqqaDXZ76Lw7DC5QYEJxggWC J5JDWlbXUlPuZhj71ozuGevl2aobZC3cN1jjD8zzPjjCJig+xBpMBF7SwnE6Zz00 Sdrddsi6vATlSLnkFfj/4SJwiHyirfaw+EanFv0u2aom6d3CHyt7Yg1CmpFIcx7a SE8395cbanAmF7E9ga+37hDGIfSs07xbqVInl95GRDKJ3vpbQakBb2KlzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuz8ideO9uQLGzerYVZ/7nM1nngMB8GA1UdIwQY MBaAFOquXAnZkE63RPkGc4z58H8j+1VnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUt YWYzYzhmNTgzNDQ5LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUtYWYzYzhmNTgzNDQ5 LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0so2aJr +NOOHSV7Pcpg2inMoFrgR3Az309s8CT9eQlPd4/b2y5QM520VwKFqJahA+p0V+mp e376W3DYRmuZ1L/r7C4Fo9yMWNdk7IsIYR8Rk+kXS2SzOpJgY2+SKdwu/HMpojbX QDZZ5syG7vHQECpN+Md7opLXcAtBDe20BSb/2T8Y/qgp9RMPM5c4aBUN+vyoldxk P245DJv+3pDNibswrhcUJzLxEn8+NpdM3ooMtLNkI4wxwACtWdrCkq5SazbrILAX Ilyp/+zdfVYDTrISl2hwnYGoWaiQoKd3Q4sqEJnR+37PbMFGExP8Dx4UNYJNgcZn 4kJKGSKlwMHH5Q== -----END CERTIFICATE-----Generated at Thu Dec 25 18:03:10 2025 by rpki-client