This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json) Hash identifier: vwL0BGSROGzibwzXHdIOn9KVoPRdXRsQwFBORBfGI5M= Subject key identifier: 50:9C:5F:1F:80:AB:B0:FB:D3:55:AB:88:3E:8E:E2:C5:31:A2:FE:73 Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88 Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188 Certificate serial: 019B424AA47BEA435C2EEEF1BF263FEAD68D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft Manifest number: 0A48 Signing time: Sun 21 Dec 2025 19:02:26 +0000 Manifest this update: Sun 21 Dec 2025 19:02:26 +0000 Manifest next update: Mon 22 Dec 2025 19:02:26 +0000 Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: vRTBrdPVXHyC6vlY7CCLsB19I4erY0PTKnYmNyo3OSQ=) 2: _MxMNpyNBthjBmfib_9uhPuqPf0.roa (hash: EolAt4dLQVvdwjyApcTjs0rowC2XcqD4wINaXLiU8UM=) 3: qtuqIB5CtIi31UAhEs4p3pi5c2Y.roa (hash: /hLyLmNfmw61h29Ovfaz4hXm3fgjqU+pple47V8gAy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:a4:7b:ea:43:5c:2e:ee:f1:bf:26:3f:ea:d6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188 Validity Not Before: Dec 21 19:02:26 2025 GMT Not After : Dec 22 19:02:26 2025 GMT Subject: CN=509c5f1f80abb0fbd355ab883e8ee2c531a2fe73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2e:48:66:72:97:99:00:c9:c9:e0:13:cd:89: 7e:78:69:77:18:75:c1:8f:80:83:1d:3e:00:af:7b: 92:c0:e1:ad:ed:a9:84:c1:4d:29:dc:02:dd:4b:f6: 39:20:f7:44:78:0f:60:2a:23:35:27:40:47:1c:1d: 57:77:86:af:c2:72:7c:d0:c6:04:26:69:d8:64:2d: a2:7d:e4:4a:d1:71:24:c1:38:53:80:da:17:3b:e1: f6:ba:d9:af:4d:8f:f4:16:80:1e:e4:45:84:8e:a1: 71:b7:ef:b0:0e:3f:ca:5e:81:23:99:7f:4e:3e:61: 58:60:cc:82:5d:af:be:11:09:3f:6c:1b:8b:8f:1c: d6:74:ed:b6:3b:57:13:80:c4:a1:f1:74:1d:f0:0c: 56:c8:0b:80:7f:b2:10:63:4e:9b:53:32:21:8e:72: 18:c5:f0:42:ba:b3:30:45:38:06:38:cf:00:8b:2b: e2:88:56:29:3c:46:36:31:f2:f5:78:83:0e:13:7d: fb:6e:f6:04:cb:4c:96:d7:af:40:73:a0:9e:9a:ff: ec:86:af:2d:54:f9:b6:b8:8e:32:03:c8:06:13:c4: af:58:8e:5c:2e:20:4b:09:f2:8f:7c:1b:a2:85:80: cf:4a:97:57:43:ff:ea:95:22:c2:56:1e:c3:14:e7: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9C:5F:1F:80:AB:B0:FB:D3:55:AB:88:3E:8E:E2:C5:31:A2:FE:73 X509v3 Authority Key Identifier: keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:c7:b3:50:7b:15:0a:10:79:d4:8c:b3:ab:39:55:20:3f: df:b3:8a:3d:c6:63:bb:00:d9:64:4c:ed:5a:49:db:d3:d7:38: 1e:50:e2:5a:8f:3d:5e:f8:0b:cf:15:59:e9:b9:4d:a7:f5:5d: ae:a0:04:04:3a:5c:d3:a2:fa:f5:c0:ec:ef:87:67:34:25:41: f7:e6:c8:3e:6d:3a:98:76:43:84:90:a5:80:76:f1:c2:54:10: c0:10:75:80:89:6b:ea:07:a3:7a:3d:6b:3f:6b:9b:ca:a3:e0: c0:e1:38:be:f1:71:d6:dc:cd:19:5e:20:35:37:81:1c:aa:63: 51:ec:3f:6f:57:a2:cc:9f:e4:b6:c2:71:9e:0f:97:19:6c:91: 6b:94:ad:1f:b1:f7:08:2c:27:91:e3:55:89:d9:76:a5:4f:31: f3:40:46:7b:6d:00:9e:d6:b0:35:8d:de:29:9a:5e:cf:7a:d8: b4:1f:92:a0:92:24:23:ed:d7:9d:90:b4:f6:89:92:c2:de:97: 25:0d:da:49:67:05:e3:de:08:07:72:1e:ea:f9:0c:4f:08:d0: cc:59:b2:a0:b7:1f:14:c7:04:13:87:b7:5b:8b:58:ee:28:ed: 0d:21:62:c0:64:e0:e3:b4:c1:79:a0:55:5f:5d:98:64:e5:8e: 90:d9:b7:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSqR76kNcLu7xvyY/6taNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWNjZmQyMWFiZDdmZTNmYTBkNmJiMzFkZjQ4MjBiZmI1 YTQxODgwHhcNMjUxMjIxMTkwMjI2WhcNMjUxMjIyMTkwMjI2WjAzMTEwLwYDVQQD Eyg1MDljNWYxZjgwYWJiMGZiZDM1NWFiODgzZThlZTJjNTMxYTJmZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y5IZnKXmQDJyeATzYl+eGl3GHXB j4CDHT4Ar3uSwOGt7amEwU0p3ALdS/Y5IPdEeA9gKiM1J0BHHB1Xd4avwnJ80MYE JmnYZC2ifeRK0XEkwThTgNoXO+H2utmvTY/0FoAe5EWEjqFxt++wDj/KXoEjmX9O PmFYYMyCXa++EQk/bBuLjxzWdO22O1cTgMSh8XQd8AxWyAuAf7IQY06bUzIhjnIY xfBCurMwRTgGOM8AiyviiFYpPEY2MfL1eIMOE337bvYEy0yW169Ac6Cemv/shq8t VPm2uI4yA8gGE8SvWI5cLiBLCfKPfBuihYDPSpdXQ//qlSLCVh7DFOf8fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCcXx+Aq7D701WriD6O4sUxov5zMB8GA1UdIwQY MBaAFOmsz9IavX/j+g1rsx30ggv7WkGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMt NzViNjg0Zjg5MGI0LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMtNzViNjg0Zjg5MGI0 LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECLHs1B7 FQoQedSMs6s5VSA/37OKPcZjuwDZZEztWknb09c4HlDiWo89XvgLzxVZ6blNp/Vd rqAEBDpc06L69cDs74dnNCVB9+bIPm06mHZDhJClgHbxwlQQwBB1gIlr6gejej1r P2ubyqPgwOE4vvFx1tzNGV4gNTeBHKpjUew/b1eizJ/ktsJxng+XGWyRa5StH7H3 CCwnkeNVidl2pU8x80BGe20AntawNY3eKZpez3rYtB+SoJIkI+3XnZC09omSwt6X JQ3aSWcF494IB3Ie6vkMTwjQzFmyoLcfFMcEE4e3W4tY7ijtDSFiwGTg47TBeaBV X12YZOWOkNm3bg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:34:29 2025 by rpki-client