This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft File: 6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json) Hash identifier: KvJSStFAHkELT2P3I2lbRUdiaSw28sWEOey2O5H3u+U= Subject key identifier: 05:6B:ED:83:0C:68:2B:04:84:0E:EB:E8:F7:E4:13:83:25:8B:8A:14 Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 Certificate issuer: /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Certificate serial: 019B2D78BE6F7099EFF1AEE7CB34675E0A14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft Manifest number: 0293 Signing time: Wed 17 Dec 2025 18:00:46 +0000 Manifest this update: Wed 17 Dec 2025 18:00:46 +0000 Manifest next update: Thu 18 Dec 2025 18:00:46 +0000 Files and hashes: 1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: QCif9sW41C1U/ZwNJL4RqzGBgyFCNUGp2Kno6Tycfjc=) 2: Z6Ua_m1uC5vkIPTZcIRy60EkawI.roa (hash: MctTd7jsNaKXKyaY6wZK28mWbw3asQJpuRF6a3Ofl8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:be:6f:70:99:ef:f1:ae:e7:cb:34:67:5e:0a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Validity Not Before: Dec 17 18:00:46 2025 GMT Not After : Dec 18 18:00:46 2025 GMT Subject: CN=056bed830c682b04840eebe8f7e41383258b8a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:a1:5f:5f:f5:ff:07:80:a5:8f:2e:96:e3: 39:b7:4c:6b:e7:70:9f:dc:94:b2:51:cd:e5:e4:31: 6b:49:5d:08:c9:9d:b8:32:66:57:86:ca:8a:d5:7b: 75:6a:7f:3f:19:01:7c:c1:92:81:e7:00:0b:02:2c: f6:2a:16:47:4f:53:6f:57:d9:b9:2b:33:95:11:84: 48:b1:eb:d1:48:10:19:9f:58:c9:d1:fc:ce:e2:7b: 43:99:98:a2:41:d3:b2:8a:3f:b6:ba:a9:39:12:2c: fd:7e:a1:37:38:03:4a:e9:1b:43:68:bb:42:2a:d7: e1:20:87:94:fe:c1:1e:5e:e7:e0:d6:6c:24:09:15: f7:e6:85:27:9e:76:97:01:df:cf:73:8d:f8:d2:a7: 63:81:85:c2:6e:a8:d3:ab:c4:04:a5:3f:a6:8a:df: ad:90:20:59:78:26:81:69:01:e1:95:ba:22:f1:93: ca:f2:86:b6:52:72:88:39:83:92:18:f0:e8:c2:cd: f7:37:a6:97:c2:96:d6:56:11:71:99:04:e3:b2:30: 42:b1:f3:36:5e:22:89:fe:9b:36:75:9e:5a:b0:80: e7:f8:fc:8e:1b:db:96:21:82:a7:ee:92:58:c9:3e: ce:be:32:fc:25:a2:97:f6:82:34:a5:9b:c2:a3:1f: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6B:ED:83:0C:68:2B:04:84:0E:EB:E8:F7:E4:13:83:25:8B:8A:14 X509v3 Authority Key Identifier: keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ec:a7:85:c7:21:69:32:94:4b:81:fa:e5:2d:2a:8d:97:27: 56:2e:d2:5f:91:81:b6:96:98:ae:63:95:3b:c4:11:89:1f:8c: ce:a4:6c:8a:9e:46:ff:34:7a:4d:f6:d5:c1:cc:e9:77:44:fe: 16:ef:d4:f3:42:f2:83:2a:51:e7:7a:5f:23:ef:ae:1d:ef:0f: 30:87:a7:42:31:24:d3:9a:70:d5:3f:08:9d:c0:73:aa:c4:96: 84:5b:f3:c4:bf:4c:04:d9:97:88:af:1e:5a:56:20:47:75:7c: 2d:2c:82:69:26:77:eb:1f:fb:76:8f:b2:f5:b5:01:db:f9:3b: 3f:34:ac:ff:3f:3a:28:48:68:7e:2a:72:0f:ca:15:9b:a0:72: f6:b7:63:ef:56:eb:27:97:11:67:43:af:12:ce:d6:db:ec:46: 0f:0d:1d:6f:97:53:df:10:aa:4b:dc:ef:dd:52:50:1c:a3:6b: 1b:b7:ae:ed:14:2c:15:aa:5b:75:49:6c:4c:4f:af:74:e3:ac: 7c:c4:b4:0f:9e:f2:4e:0c:ce:02:f3:22:ba:20:8d:1f:04:a0: c7:b3:ab:ff:fa:04:b0:78:28:7b:3a:75:cc:9b:92:61:f9:2b: ac:8c:65:24:74:ef:c6:c8:6c:e0:5d:14:0a:1d:3d:4d:58:b5: 0c:90:93:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteL5vcJnv8a7nyzRnXgoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4 YTZlODAwHhcNMjUxMjE3MTgwMDQ2WhcNMjUxMjE4MTgwMDQ2WjAzMTEwLwYDVQQD EygwNTZiZWQ4MzBjNjgyYjA0ODQwZWViZThmN2U0MTM4MzI1OGI4YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGmhX1/1/weApY8uluM5t0xr53Cf 3JSyUc3l5DFrSV0IyZ24MmZXhsqK1Xt1an8/GQF8wZKB5wALAiz2KhZHT1NvV9m5 KzOVEYRIsevRSBAZn1jJ0fzO4ntDmZiiQdOyij+2uqk5Eiz9fqE3OANK6RtDaLtC KtfhIIeU/sEeXufg1mwkCRX35oUnnnaXAd/Pc4340qdjgYXCbqjTq8QEpT+mit+t kCBZeCaBaQHhlboi8ZPK8oa2UnKIOYOSGPDows33N6aXwpbWVhFxmQTjsjBCsfM2 XiKJ/ps2dZ5asIDn+PyOG9uWIYKn7pJYyT7OvjL8JaKX9oI0pZvCox8KhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVr7YMMaCsEhA7r6PfkE4Mli4oUMB8GA1UdIwQY MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt NzFiOTM4YWU0Y2NkLzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+ynhcch aTKUS4H65S0qjZcnVi7SX5GBtpaYrmOVO8QRiR+MzqRsip5G/zR6TfbVwczpd0T+ Fu/U80LygypR53pfI++uHe8PMIenQjEk05pw1T8IncBzqsSWhFvzxL9MBNmXiK8e WlYgR3V8LSyCaSZ36x/7do+y9bUB2/k7PzSs/z86KEhofipyD8oVm6By9rdj71br J5cRZ0OvEs7W2+xGDw0db5dT3xCqS9zv3VJQHKNrG7eu7RQsFapbdUlsTE+vdOOs fMS0D57yTgzOAvMiuiCNHwSgx7Or//oEsHgoezp1zJuSYfkrrIxlJHTvxshs4F0U Ch09TVi1DJCTIA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:54:29 2025 by rpki-client