This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json) Hash identifier: iSMe6vjGmUZcf29chrT1PZ9VgnNDGB3PifKJwTQ67Cs= Subject key identifier: F7:78:26:51:53:E9:9D:36:87:CA:26:D2:B1:37:0D:62:83:67:C7:93 Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 019B39EB41635910072D66DBB6C6EBE6A385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 04:01:17 +0000 Manifest this update: Sat 20 Dec 2025 04:01:17 +0000 Manifest next update: Sun 21 Dec 2025 04:01:17 +0000 Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: oRRzJv8qOPSPunjpbQuMEnvefP3G+TBzTtACVb04yo4=) 2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=) 3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=) 4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=) 5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=) 6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=) 7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:41:63:59:10:07:2d:66:db:b6:c6:eb:e6:a3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Dec 20 04:01:17 2025 GMT Not After : Dec 21 04:01:17 2025 GMT Subject: CN=f778265153e99d3687ca26d2b1370d628367c793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:3b:91:ec:fc:42:e2:44:8b:f1:ef:e4:8b: de:4e:41:06:82:de:31:80:81:6e:eb:cd:9d:7e:3b: 1c:53:4d:45:7c:a1:10:3c:6e:c2:d6:6d:73:b9:1f: ed:3c:bf:16:64:7f:3b:ba:af:59:f2:2d:b8:8f:14: 8e:83:0f:bf:7a:5e:76:20:0c:bb:d3:bf:aa:ed:e7: 45:47:7f:50:f8:26:73:b8:b9:85:df:7e:4a:96:44: ce:ed:a9:a6:52:00:1c:0f:57:ea:f7:eb:76:8e:35: c0:3c:bf:73:0f:68:39:d8:02:e0:33:85:f6:37:4b: 60:cf:32:ac:f3:d5:37:35:54:b1:65:41:16:7b:01: cd:cd:d3:2f:6b:b1:bf:fd:d0:bf:06:d3:2b:8c:d7: fd:98:0d:e5:21:6b:97:5d:f8:43:a7:61:01:d6:f9: 9e:5c:b8:ed:ef:35:fb:6a:2d:bf:5d:76:8d:36:ae: d7:e6:8a:1a:ff:6f:12:54:d7:6e:1d:57:fc:d8:64: 5f:7b:1e:67:b8:29:c4:0b:34:5b:a5:7e:e1:af:ab: 7c:0e:08:b6:f6:80:aa:b2:07:37:bc:2d:74:8e:62: d5:d3:a0:be:03:5b:ff:9a:d9:98:0c:44:bd:ae:dc: 73:4a:0d:bb:f2:87:70:6c:31:7d:ce:04:63:4e:c5: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:78:26:51:53:E9:9D:36:87:CA:26:D2:B1:37:0D:62:83:67:C7:93 X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fa:a9:db:de:41:e5:78:ca:52:c9:09:40:b1:02:65:5f:d5: 68:bb:09:7f:ef:a0:46:47:a1:56:92:a6:c7:3f:2e:f6:72:bb: e6:d6:39:50:4c:d8:81:23:b9:3b:55:b5:16:7a:aa:0b:90:e2: 36:c2:ee:f3:3f:26:83:74:de:e2:12:12:69:83:1f:de:c3:fa: 55:be:41:df:cc:88:ff:62:6c:47:8f:61:7e:64:08:3b:1f:93: 6c:ca:0f:77:72:18:be:a3:d8:6c:06:81:bf:bb:b8:5f:e1:72: 1a:c3:9f:9f:72:17:72:7d:3b:2a:cc:7a:f4:13:54:c5:13:de: 65:41:93:77:95:7e:62:72:dc:bf:ac:a5:3f:6f:90:0a:83:b2: 87:19:69:be:42:e7:dc:f4:db:79:e7:6d:92:8a:b5:81:74:f6: 43:e1:73:d8:24:9c:57:e1:43:79:0d:58:dd:d0:b7:31:57:1e: 27:d5:19:92:0c:53:35:da:5e:33:26:9c:80:c9:b2:0c:e3:d8: 57:d0:cc:6a:0a:b5:b9:d7:68:a9:34:ac:56:fd:07:e9:91:8d: c7:7d:49:a7:26:e1:0a:23:ac:2f:5c:43:7d:00:f5:97:ca:12: ff:67:68:c8:93:e6:6a:5f:10:c1:2c:7d:1c:e1:1e:67:32:b6: 6b:b2:3f:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs560FjWRAHLWbbtsbr5qOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjUxMjIwMDQwMTE3WhcNMjUxMjIxMDQwMTE3WjAzMTEwLwYDVQQD EyhmNzc4MjY1MTUzZTk5ZDM2ODdjYTI2ZDJiMTM3MGQ2MjgzNjdjNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOw7kez8QuJEi/Hv5IveTkEGgt4x gIFu682dfjscU01FfKEQPG7C1m1zuR/tPL8WZH87uq9Z8i24jxSOgw+/el52IAy7 07+q7edFR39Q+CZzuLmF335KlkTO7ammUgAcD1fq9+t2jjXAPL9zD2g52ALgM4X2 N0tgzzKs89U3NVSxZUEWewHNzdMva7G//dC/BtMrjNf9mA3lIWuXXfhDp2EB1vme XLjt7zX7ai2/XXaNNq7X5ooa/28SVNduHVf82GRfex5nuCnECzRbpX7hr6t8Dgi2 9oCqsgc3vC10jmLV06C+A1v/mtmYDES9rtxzSg278odwbDF9zgRjTsVIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd4JlFT6Z02h8om0rE3DWKDZ8eTMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfqp295B 5XjKUskJQLECZV/VaLsJf++gRkehVpKmxz8u9nK75tY5UEzYgSO5O1W1FnqqC5Di NsLu8z8mg3Te4hISaYMf3sP6Vb5B38yI/2JsR49hfmQIOx+TbMoPd3IYvqPYbAaB v7u4X+FyGsOfn3IXcn07Ksx69BNUxRPeZUGTd5V+YnLcv6ylP2+QCoOyhxlpvkLn 3PTbeedtkoq1gXT2Q+Fz2CScV+FDeQ1Y3dC3MVceJ9UZkgxTNdpeMyacgMmyDOPY V9DMagq1uddoqTSsVv0H6ZGNx31JpybhCiOsL1xDfQD1l8oS/2doyJPmal8QwSx9 HOEeZzK2a7I/dg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:59:05 2025 by rpki-client