This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft File: 6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json) Hash identifier: rkJkMVp/g1l8bu5yunHmfeaVwgk9q1EFeEKylewcXWs= Subject key identifier: 85:6D:59:7F:E5:9A:B4:1B:E3:B9:01:00:95:C7:EB:F3:52:8A:ED:64 Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91 Certificate issuer: /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91 Certificate serial: 019B3D5999C1E12626750A8A0B667008F3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft Manifest number: 025E Signing time: Sat 20 Dec 2025 20:00:40 +0000 Manifest this update: Sat 20 Dec 2025 20:00:40 +0000 Manifest next update: Sun 21 Dec 2025 20:00:40 +0000 Files and hashes: 1: 2PO56c07BT5UqW7VHJgEtBZRuc4.roa (hash: j6nnqb1GzOx8EAgfl33x3DbOrwgUFnv8OKDrDXb3GYE=) 2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: /gv0Jk1ihL3iW3/Y0hGGn06eP6OKJ+CAd6zmpKnamdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:99:c1:e1:26:26:75:0a:8a:0b:66:70:08:f3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91 Validity Not Before: Dec 20 20:00:40 2025 GMT Not After : Dec 21 20:00:40 2025 GMT Subject: CN=856d597fe59ab41be3b9010095c7ebf3528aed64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:1c:fe:78:b7:f6:dd:0e:94:cf:80:8e:5d: ae:f1:b8:7e:45:ef:26:fa:be:d2:62:11:6a:04:0e: 70:b6:55:64:5d:5e:9f:4f:07:e9:11:31:6d:a8:b7: 9a:62:8b:25:c6:92:f1:76:f6:b0:f4:c0:8f:fa:4c: 2e:d0:99:6b:cf:86:4a:25:ab:9c:5b:d9:e2:4a:bf: e9:61:a5:7b:2c:ee:90:60:93:33:6f:24:54:7d:f0: 29:ee:6d:4b:03:df:ba:2d:03:3f:2e:3f:53:e3:18: bf:35:29:0e:55:b6:6e:a7:f7:80:42:a5:64:45:68: 36:86:8b:24:ff:fe:cf:94:79:de:f4:81:2b:55:70: 34:99:a0:5e:b5:33:b1:72:29:18:e4:d6:aa:61:b4: 11:e3:e5:74:46:73:d2:3e:40:f8:04:98:25:bf:39: aa:96:6f:06:e1:ce:31:66:2a:9f:0e:73:f1:6e:f3: 82:b6:dd:28:a2:73:e3:06:1b:30:b7:22:98:ee:db: 27:53:3a:8c:11:2c:09:f2:bb:6e:bf:ec:65:5c:0c: 6b:2d:03:87:91:db:ca:ee:7b:41:76:8f:0c:ba:3f: 62:0b:8b:f9:07:4e:b5:09:99:74:03:41:e7:96:57: 1a:50:e2:31:fc:13:3a:50:bf:ff:2f:57:a3:4e:41: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:59:7F:E5:9A:B4:1B:E3:B9:01:00:95:C7:EB:F3:52:8A:ED:64 X509v3 Authority Key Identifier: keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:be:f0:f1:ac:df:0e:f5:91:b3:5f:4d:d1:01:38:2d:fe:58: e2:0a:ae:76:a3:32:c5:c9:43:e5:2b:8c:b1:9f:e3:96:af:84: 51:56:e2:e9:ec:0b:12:39:3b:f8:b1:a3:ac:97:6e:73:0d:5d: c6:ae:8e:4a:77:6e:ae:f0:84:fa:8a:34:7b:f6:e9:80:71:90: ea:6f:54:74:02:78:75:78:34:37:c9:f8:64:a5:86:92:d0:1c: 96:cc:0a:f2:9f:d4:40:a6:41:8e:e4:c4:cc:48:d2:78:4c:55: a8:e2:ef:10:5c:6f:e1:2d:1a:5d:89:af:c9:d9:07:a9:1e:5d: 81:f5:b3:61:07:b9:38:d6:ba:3d:98:f2:7e:55:74:b0:a0:a0: b5:6e:e9:ec:5b:e1:1f:44:b6:ba:60:85:4d:ae:78:5a:04:50: 84:81:ee:4a:81:08:7e:ec:ca:e5:a6:a5:c2:16:1b:5a:b0:54: bc:ac:1b:34:f8:28:1c:2a:3e:2c:6a:3e:7f:6c:ac:fd:47:da: 69:d7:ee:bc:1b:81:e8:da:85:a2:c9:97:e8:ed:f9:29:55:fd: 9f:99:c6:b5:41:fe:c0:e3:7c:aa:f7:04:2d:34:fa:f6:c6:c2: f3:5f:fc:75:37:bf:16:71:62:e9:ee:77:cf:9e:ea:19:72:c7: 94:4f:88:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZnB4SYmdQqKC2ZwCPOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWJmZWUxZDdjOGNjODc2MDczMzMzYzRjYWE4ODFhMzdi MzZjOTEwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD Eyg4NTZkNTk3ZmU1OWFiNDFiZTNiOTAxMDA5NWM3ZWJmMzUyOGFlZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkIc/ni39t0OlM+Ajl2u8bh+Re8m +r7SYhFqBA5wtlVkXV6fTwfpETFtqLeaYoslxpLxdvaw9MCP+kwu0Jlrz4ZKJauc W9niSr/pYaV7LO6QYJMzbyRUffAp7m1LA9+6LQM/Lj9T4xi/NSkOVbZup/eAQqVk RWg2hosk//7PlHne9IErVXA0maBetTOxcikY5NaqYbQR4+V0RnPSPkD4BJglvzmq lm8G4c4xZiqfDnPxbvOCtt0oonPjBhswtyKY7tsnUzqMESwJ8rtuv+xlXAxrLQOH kdvK7ntBdo8Muj9iC4v5B061CZl0A0HnllcaUOIx/BM6UL//L1ejTkEHVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVtWX/lmrQb47kBAJXH6/NSiu1kMB8GA1UdIwQY MBaAFOqr/uHXyMyHYHMzPEyqiBo3s2yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAt YjdjZDUyNzAzZThkLzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAtYjdjZDUyNzAzZThk LzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL7w8azf DvWRs19N0QE4Lf5Y4gqudqMyxclD5SuMsZ/jlq+EUVbi6ewLEjk7+LGjrJducw1d xq6OSndurvCE+oo0e/bpgHGQ6m9UdAJ4dXg0N8n4ZKWGktAclswK8p/UQKZBjuTE zEjSeExVqOLvEFxv4S0aXYmvydkHqR5dgfWzYQe5ONa6PZjyflV0sKCgtW7p7Fvh H0S2umCFTa54WgRQhIHuSoEIfuzK5aalwhYbWrBUvKwbNPgoHCo+LGo+f2ys/Ufa adfuvBuB6NqFosmX6O35KVX9n5nGtUH+wON8qvcELTT69sbC81/8dTe/FnFi6e53 z57qGXLHlE+Igw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:20 2025 by rpki-client