This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft File: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json) Hash identifier: rLtl5FhHj1VeUEghXmBLARbdKTRfVwgnRZIfQ5FslyA= Subject key identifier: 1A:B9:86:F5:63:EA:22:9A:19:DF:6A:C5:73:4F:5D:09:AD:37:53:47 Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48 Certificate issuer: /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348 Certificate serial: 019B668CAC3D9C7F0D1616A419E726BB73BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 20:00:53 +0000 Manifest this update: Sun 28 Dec 2025 20:00:53 +0000 Manifest next update: Mon 29 Dec 2025 20:00:53 +0000 Files and hashes: 1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: jyO71Qj87OBL5DPosdu7PGjuXNLVm+qaHyKy3VoD3oY=) 2: VgS-u0ELxQR2AwhETKCUa6iULQU.roa (hash: 7YXeyW9OYhf7wVeeaMa0yi4RPICzvGAFTAe8JBcfnZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:ac:3d:9c:7f:0d:16:16:a4:19:e7:26:bb:73:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348 Validity Not Before: Dec 28 20:00:53 2025 GMT Not After : Dec 29 20:00:53 2025 GMT Subject: CN=1ab986f563ea229a19df6ac5734f5d09ad375347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:36:12:f7:dd:ea:ed:73:34:76:e5:21:dd: 69:76:b8:83:17:cc:a8:84:ae:0f:32:b9:ca:08:05: 59:50:7e:5b:9c:70:cf:80:d4:ba:95:52:cf:36:6d: 40:82:b0:e4:ed:4d:62:e3:02:bf:6c:8e:26:cf:0d: 14:13:71:fd:41:ac:ef:bf:88:47:75:58:6f:7f:6a: 9a:91:83:66:e4:1f:96:62:dc:65:8f:a4:ff:83:70: f9:f3:85:a2:fd:14:b9:d6:d1:0d:23:8d:77:bf:ec: f3:7a:13:f0:81:97:99:67:f0:b5:2c:c0:09:ac:a0: fc:34:b6:d1:d2:39:0a:8e:0a:b3:69:2b:d7:c8:0d: 75:09:65:31:ba:a1:20:35:90:7c:55:15:51:6a:44: 48:75:c0:a5:3a:68:7d:11:e9:d1:69:00:ef:04:b7: 57:f5:8c:b0:52:41:fa:d6:d7:26:85:54:08:01:8b: b6:c3:8c:49:ad:64:0f:43:a3:38:af:4d:2b:7b:af: 29:39:5b:b7:6d:7b:f4:8d:d8:d8:c2:78:50:d7:fc: 6b:6b:4b:a0:ea:26:5f:59:26:45:12:41:55:22:25: 3a:75:d5:c8:b1:e0:a5:a5:f7:25:b0:ab:e1:41:2c: 50:18:65:c8:c9:88:87:b3:25:97:af:0d:19:d4:d1: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:86:F5:63:EA:22:9A:19:DF:6A:C5:73:4F:5D:09:AD:37:53:47 X509v3 Authority Key Identifier: keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:68:b8:7c:f4:17:a2:d4:b5:e8:45:a7:2f:b6:47:db:7a:aa: e4:78:c8:f2:fb:f1:96:af:18:3e:60:cb:62:8f:22:0b:28:ea: ba:ef:24:15:d4:df:fc:4a:af:23:82:6d:fb:17:90:b5:8e:a6: 0a:d8:2e:64:d2:78:2f:4b:41:88:c5:9f:3c:2e:7b:c3:01:de: 3a:9e:8e:71:04:1b:5b:38:4e:e8:6d:ad:84:34:35:13:6e:60: 8c:00:0c:85:2c:0c:20:06:08:fe:1b:f6:94:76:0e:ad:2a:06: 87:23:e3:a3:80:cc:bc:55:d1:3b:d5:eb:17:d6:84:1e:f0:96: 2e:f2:98:a3:02:84:2e:ce:e1:9e:c1:63:58:0a:47:e1:f9:b7: 48:82:bc:8f:24:f1:e5:a2:b6:3f:68:1b:f4:e9:8e:be:5a:4a: d3:21:3e:a3:41:c3:89:8d:b6:d7:05:cd:c9:4f:65:af:99:20: 5f:6f:ac:00:28:ee:30:8a:a6:7f:44:dc:9b:94:22:db:9e:05: 6a:3c:76:3b:9b:85:96:30:68:d8:15:c7:05:17:3e:15:b6:13: 01:e0:f9:d6:4f:e8:b7:5c:79:30:7b:73:fb:ea:d6:f1:79:97: 56:ac:34:de:db:63:e9:2e:51:88:79:c5:0a:e2:0c:7b:a9:97: c2:bc:a0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjKw9nH8NFhakGecmu3O/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OTY1MDU3ZjRhYTA5OWIwYTkxOWYzZjBiZDRhNjQ4OGUz MGMzNDgwHhcNMjUxMjI4MjAwMDUzWhcNMjUxMjI5MjAwMDUzWjAzMTEwLwYDVQQD EygxYWI5ODZmNTYzZWEyMjlhMTlkZjZhYzU3MzRmNWQwOWFkMzc1MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ42Evfd6u1zNHblId1pdriDF8yo hK4PMrnKCAVZUH5bnHDPgNS6lVLPNm1AgrDk7U1i4wK/bI4mzw0UE3H9Qazvv4hH dVhvf2qakYNm5B+WYtxlj6T/g3D584Wi/RS51tENI413v+zzehPwgZeZZ/C1LMAJ rKD8NLbR0jkKjgqzaSvXyA11CWUxuqEgNZB8VRVRakRIdcClOmh9EenRaQDvBLdX 9YywUkH61tcmhVQIAYu2w4xJrWQPQ6M4r00re68pOVu3bXv0jdjYwnhQ1/xra0ug 6iZfWSZFEkFVIiU6ddXIseClpfclsKvhQSxQGGXIyYiHsyWXrw0Z1NH6dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq5hvVj6iKaGd9qxXNPXQmtN1NHMB8GA1UdIwQY MBaAFOiWUFf0qgmbCpGfPwvUpkiOMMNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEt ODYzN2FiZjczMWYzLzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEtODYzN2FiZjczMWYz LzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGi4fPQX otS16EWnL7ZH23qq5HjI8vvxlq8YPmDLYo8iCyjquu8kFdTf/EqvI4Jt+xeQtY6m CtguZNJ4L0tBiMWfPC57wwHeOp6OcQQbWzhO6G2thDQ1E25gjAAMhSwMIAYI/hv2 lHYOrSoGhyPjo4DMvFXRO9XrF9aEHvCWLvKYowKELs7hnsFjWApH4fm3SIK8jyTx 5aK2P2gb9OmOvlpK0yE+o0HDiY221wXNyU9lr5kgX2+sACjuMIqmf0Tcm5Qi254F ajx2O5uFljBo2BXHBRc+FbYTAeD51k/ot1x5MHtz++rW8XmXVqw03ttj6S5RiHnF CuIMe6mXwrygZg== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:58 2025 by rpki-client