This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json) Hash identifier: 1IqNCeVMHxEShLELz3DMB2d0AgRP4yRVuqa1NViyKCY= Subject key identifier: A5:C4:52:BA:03:24:38:24:4A:32:38:7D:EB:CB:7C:10:FE:3D:A7:4E Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Certificate serial: 019B3DC8224E9D6A9440780FAC8275FF0D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 22:01:24 +0000 Manifest this update: Sat 20 Dec 2025 22:01:24 +0000 Manifest next update: Sun 21 Dec 2025 22:01:24 +0000 Files and hashes: 1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: 9nM2sZ2DZQyZh60K1o+EYRwRqch2EHU+gCsRZhylIuc=) 2: XGdgxOrZAEASnwG-E4mJgIZXt9A.roa (hash: r7+Ew2fux06ZFhsm5QtmYCoespwgwuFRQ3Ky/AsDSy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:22:4e:9d:6a:94:40:78:0f:ac:82:75:ff:0d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Validity Not Before: Dec 20 22:01:24 2025 GMT Not After : Dec 21 22:01:24 2025 GMT Subject: CN=a5c452ba032438244a32387debcb7c10fe3da74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:3a:f6:1b:89:dc:a0:2c:4b:f4:7e:be:05: 1d:c2:f5:dc:ed:36:3e:64:5c:78:f0:0a:f8:53:b2: d7:ba:70:19:15:f4:75:a1:35:55:45:40:21:13:42: 0a:a6:d6:75:d1:2f:35:59:b0:99:99:1b:3a:81:d7: 67:df:4a:b1:b5:e2:80:e2:4e:bc:af:61:c2:5d:08: 59:92:97:0f:d1:df:dc:3d:15:1b:8d:c0:e8:f6:c9: 73:ae:b9:01:a1:0d:be:45:37:df:8b:00:a1:f8:6b: 3c:9e:42:6f:ed:90:2b:b1:51:d6:2a:24:55:61:11: 73:6e:ef:33:30:f0:72:a4:a6:e9:7b:9a:29:dc:00: cd:75:36:bc:e7:be:ff:77:5f:9e:d1:68:ce:d1:d1: e7:b7:a4:54:1c:98:3c:53:8d:24:e9:91:08:e0:1d: f8:e9:f2:4f:25:e3:d8:2b:7d:5f:12:f6:9a:63:1e: 52:e0:55:19:71:96:4d:7b:73:4b:37:f4:9d:4f:ab: eb:28:a7:28:36:08:68:d3:43:6c:cd:e9:f3:44:62: a7:19:bf:e7:fd:9b:67:80:a3:02:41:17:ce:ff:8b: 12:ea:01:f6:9a:c8:64:14:f1:82:c2:da:60:d1:6f: 4f:eb:c9:73:21:51:cf:de:3f:c9:30:e6:02:b1:21: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C4:52:BA:03:24:38:24:4A:32:38:7D:EB:CB:7C:10:FE:3D:A7:4E X509v3 Authority Key Identifier: keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:85:90:c1:03:2c:95:03:a8:27:bd:37:50:fc:53:65:d8:66: 03:ae:c9:e7:a9:5f:25:3c:bc:1a:e1:49:69:35:4d:6d:fd:3b: e0:2f:e8:4c:cd:fb:b4:8b:50:2b:72:43:ee:bf:1e:2b:e4:35: dd:2d:43:6a:4a:b7:3b:fa:fe:93:2c:44:ba:75:31:1d:d4:a7: 68:9b:71:3e:da:8c:de:b0:c0:a1:17:61:ff:19:94:2a:b5:f8: 95:34:ed:58:97:78:aa:a8:3a:a5:88:66:e1:a8:2c:5b:e8:f0: 81:5e:e8:48:6e:96:26:32:8c:de:33:4a:06:fe:8a:24:bb:34: 39:73:9d:03:be:08:c8:cc:20:dc:e7:ed:33:8a:4c:6e:04:57: 20:46:60:c3:55:b4:41:15:7b:a4:e4:e1:80:d8:fd:08:0a:cd: ab:c1:39:52:21:ee:c0:d2:4b:56:03:cb:42:ea:2f:84:40:b3: ed:fd:cb:35:78:58:c5:35:1a:a0:11:d4:d1:a2:ad:71:e7:bc: 57:84:ee:e7:64:96:ad:28:8d:5c:65:a6:9b:e0:99:d4:70:83: e5:d0:a6:60:b1:a9:de:01:57:ab:1c:0b:98:12:09:e4:5f:81: ca:09:da:c4:4e:c4:91:93:40:c0:79:18:71:3c:00:4d:a5:ac: 9d:07:3d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yCJOnWqUQHgPrIJ1/w2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZjQwOTAyYTAwM2Q4ZmU2ZjdjNzc0MmViNDdkNzBiNTBh ZGUwMzYwHhcNMjUxMjIwMjIwMTI0WhcNMjUxMjIxMjIwMTI0WjAzMTEwLwYDVQQD EyhhNWM0NTJiYTAzMjQzODI0NGEzMjM4N2RlYmNiN2MxMGZlM2RhNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgE69huJ3KAsS/R+vgUdwvXc7TY+ ZFx48Ar4U7LXunAZFfR1oTVVRUAhE0IKptZ10S81WbCZmRs6gddn30qxteKA4k68 r2HCXQhZkpcP0d/cPRUbjcDo9slzrrkBoQ2+RTffiwCh+Gs8nkJv7ZArsVHWKiRV YRFzbu8zMPBypKbpe5op3ADNdTa8577/d1+e0WjO0dHnt6RUHJg8U40k6ZEI4B34 6fJPJePYK31fEvaaYx5S4FUZcZZNe3NLN/SdT6vrKKcoNgho00NszenzRGKnGb/n /ZtngKMCQRfO/4sS6gH2mshkFPGCwtpg0W9P68lzIVHP3j/JMOYCsSHF/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXEUroDJDgkSjI4fevLfBD+PadOMB8GA1UdIwQY MBaAFOj0CQKgA9j+b3x3QutH1wtQreA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMt N2E3OGM4YzRlMDUxLzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMtN2E3OGM4YzRlMDUx LzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIWQwQMs lQOoJ703UPxTZdhmA67J56lfJTy8GuFJaTVNbf074C/oTM37tItQK3JD7r8eK+Q1 3S1Dakq3O/r+kyxEunUxHdSnaJtxPtqM3rDAoRdh/xmUKrX4lTTtWJd4qqg6pYhm 4agsW+jwgV7oSG6WJjKM3jNKBv6KJLs0OXOdA74IyMwg3OftM4pMbgRXIEZgw1W0 QRV7pOThgNj9CArNq8E5UiHuwNJLVgPLQuovhECz7f3LNXhYxTUaoBHU0aKtcee8 V4Tu52SWrSiNXGWmm+CZ1HCD5dCmYLGp3gFXqxwLmBIJ5F+BygnaxE7EkZNAwHkY cTwATaWsnQc9/w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:34 2025 by rpki-client