This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json) Hash identifier: x03/ksVLHnLyIFMZ19KtXnO6gYOzt5D10ajEeM5mpt0= Subject key identifier: AC:4C:69:21:6A:4C:A5:89:6C:E4:F0:F1:E1:16:4D:0A:CD:C9:84:AB Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc Certificate serial: 019B67685038A3C112D1CDABDF03DD4F8C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft Manifest number: 0E83 Signing time: Mon 29 Dec 2025 00:00:47 +0000 Manifest this update: Mon 29 Dec 2025 00:00:47 +0000 Manifest next update: Tue 30 Dec 2025 00:00:47 +0000 Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=) 2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: EHDKuMRvEyiKEXd8v+O+TZAFtj0gAHUntwTdn1gVQCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:50:38:a3:c1:12:d1:cd:ab:df:03:dd:4f:8c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc Validity Not Before: Dec 29 00:00:47 2025 GMT Not After : Dec 30 00:00:47 2025 GMT Subject: CN=ac4c69216a4ca5896ce4f0f1e1164d0acdc984ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:e9:ee:dd:75:f7:49:f0:ef:e8:56:55:39: 66:4c:eb:d3:be:9a:dc:66:1c:f7:8f:53:d2:60:a6: 2e:09:f4:9c:3e:ef:5d:5a:c6:7e:bc:52:c9:87:8b: 75:d3:fe:2d:e4:9e:50:89:56:36:aa:7f:5e:f6:62: 9f:12:37:9d:67:25:2b:24:96:4a:0d:6a:bd:1d:17: 4d:e6:a9:d5:ac:f1:de:5d:eb:37:16:91:73:81:ee: 07:e2:cd:f9:e9:8f:d9:7f:7b:c8:62:3e:c0:ff:6e: f4:55:b6:b8:02:51:7d:35:69:2f:b6:72:f9:2e:25: 74:61:cf:78:f2:88:ca:57:06:c9:4d:ca:00:6f:0e: b2:46:7a:bc:9d:a8:a7:1b:86:5a:3e:80:3a:d5:e5: 7c:4d:24:15:a8:b7:91:2e:94:f8:6a:f9:9f:d4:23: b8:f5:c0:64:83:82:e4:19:39:35:40:ff:fe:cf:84: 46:3e:c3:33:2a:1c:19:15:b8:7c:8e:47:6c:b2:13: b4:8e:e5:f0:4a:6e:fc:00:5b:da:e8:b6:e2:2b:0a: 30:bd:f6:9a:57:26:8c:75:4c:29:85:6d:a2:aa:e2: 6c:90:45:58:3d:52:c6:83:1d:ab:77:cb:9e:cf:e7: 42:e5:d2:55:77:ed:51:44:7d:e7:4a:92:b5:ca:a4: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4C:69:21:6A:4C:A5:89:6C:E4:F0:F1:E1:16:4D:0A:CD:C9:84:AB X509v3 Authority Key Identifier: keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5a:a1:fb:5d:e5:a1:c0:7b:11:30:c3:9c:58:18:1d:9f:e0: de:92:1b:cc:ff:f9:6f:70:8e:a2:72:d8:5e:20:ec:4e:c6:9b: b6:5b:a7:3d:50:41:af:fc:d0:38:1c:b7:34:d4:99:a0:cb:55: 36:4f:95:29:71:f7:34:92:04:33:c8:0c:bf:b4:75:f7:b3:d1: b4:95:0b:bf:b8:f7:a5:f2:8e:ee:a3:fb:d2:8d:c2:de:c2:77: b5:00:0d:5d:1b:81:b9:65:78:1e:03:8b:a3:b6:71:96:46:ae: 42:82:42:ff:c7:37:56:d2:51:90:79:28:be:c0:47:53:2e:57: b7:e1:a4:5f:ae:19:ad:36:db:63:c9:47:ba:2d:c0:4f:4d:da: a8:91:7d:ee:cb:ad:ea:d3:bc:b7:d2:59:32:ab:e3:96:28:27: 07:0f:5e:d8:b5:88:eb:9c:70:7b:74:bc:7f:6e:c0:30:55:38: e2:f0:b3:38:6f:29:d4:5a:97:e1:fc:d2:71:d9:87:0f:04:7d: fd:3e:32:69:7e:b4:99:e7:2e:df:6f:a4:bc:dc:a4:7e:f4:38: bb:9b:9f:8b:d7:f8:fa:58:1d:9a:20:71:d4:4d:19:6e:55:59: ca:a5:c0:f5:ee:26:04:9f:42:d7:84:2d:97:9e:02:3c:20:0d: de:73:f3:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaFA4o8ES0c2r3wPdT4xlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTQxZDM0MTNkZGFjYzkxZmUwZjQ0MjZhODI4NjgxY2Yz MGUwZmMwHhcNMjUxMjI5MDAwMDQ3WhcNMjUxMjMwMDAwMDQ3WjAzMTEwLwYDVQQD EyhhYzRjNjkyMTZhNGNhNTg5NmNlNGYwZjFlMTE2NGQwYWNkYzk4NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX7p7t1190nw7+hWVTlmTOvTvprc Zhz3j1PSYKYuCfScPu9dWsZ+vFLJh4t10/4t5J5QiVY2qn9e9mKfEjedZyUrJJZK DWq9HRdN5qnVrPHeXes3FpFzge4H4s356Y/Zf3vIYj7A/270Vba4AlF9NWkvtnL5 LiV0Yc948ojKVwbJTcoAbw6yRnq8nainG4ZaPoA61eV8TSQVqLeRLpT4avmf1CO4 9cBkg4LkGTk1QP/+z4RGPsMzKhwZFbh8jkdsshO0juXwSm78AFva6LbiKwowvfaa VyaMdUwphW2iquJskEVYPVLGgx2rd8uez+dC5dJVd+1RRH3nSpK1yqRoYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxMaSFqTKWJbOTw8eEWTQrNyYSrMB8GA1UdIwQY MBaAFP+kHTQT3azJH+D0QmqChoHPMOD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZRZE5CUGRyTWtmNFBSQ2FvS0dnYzh3NFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84MmQ4MjQtNGUwMi00NmQ0LTg1NGEt YmQwNTEyY2U0OTA1LzEvXzZRZE5CUGRyTWtmNFBSQ2FvS0dnYzh3NFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84MmQ4MjQtNGUwMi00NmQ0LTg1NGEtYmQwNTEyY2U0OTA1 LzEvXzZRZE5CUGRyTWtmNFBSQ2FvS0dnYzh3NFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlqh+13l ocB7ETDDnFgYHZ/g3pIbzP/5b3COonLYXiDsTsabtlunPVBBr/zQOBy3NNSZoMtV Nk+VKXH3NJIEM8gMv7R197PRtJULv7j3pfKO7qP70o3C3sJ3tQANXRuBuWV4HgOL o7ZxlkauQoJC/8c3VtJRkHkovsBHUy5Xt+GkX64ZrTbbY8lHui3AT03aqJF97sut 6tO8t9JZMqvjlignBw9e2LWI65xwe3S8f27AMFU44vCzOG8p1FqX4fzScdmHDwR9 /T4yaX60mecu32+kvNykfvQ4u5ufi9f4+lgdmiBx1E0ZblVZyqXA9e4mBJ9C14Qt l54CPCAN3nPzoA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:07:45 2025 by rpki-client