This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json) Hash identifier: a5kmsoHSxZmGIHlV1hTk0uJM6eUtPx24RZbYpEVdtic= Subject key identifier: F5:D2:16:DC:F9:BD:E9:53:38:9D:DD:4D:95:C3:9E:1C:4F:B4:91:16 Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f Certificate serial: 019B5DF7E1244934FF4E9A0E8B6BD4AD075D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft Manifest number: 04EC Signing time: Sat 27 Dec 2025 04:01:24 +0000 Manifest this update: Sat 27 Dec 2025 04:01:24 +0000 Manifest next update: Sun 28 Dec 2025 04:01:24 +0000 Files and hashes: 1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: fBsqK0gJCBqcD3yZ7QSHCl/FrW6cibnaTZTyu4XFOTY=) 2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:e1:24:49:34:ff:4e:9a:0e:8b:6b:d4:ad:07:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f Validity Not Before: Dec 27 04:01:24 2025 GMT Not After : Dec 28 04:01:24 2025 GMT Subject: CN=f5d216dcf9bde953389ddd4d95c39e1c4fb49116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:bf:52:5a:b1:2b:73:66:75:78:64:4f:a0: 67:ab:45:c8:4b:ae:10:b7:7c:d8:53:06:a6:c5:53: 2c:5e:34:8f:b6:2a:49:04:fc:79:54:39:76:4d:5b: b3:0b:dd:aa:43:2a:ae:8c:58:74:80:f5:e7:cf:80: bf:64:f1:83:fb:c3:4d:34:95:2f:cb:47:bf:4e:60: 63:16:43:d2:dd:cd:f2:58:a1:0f:7c:ae:01:45:06: b4:2c:e1:67:39:b9:b5:e6:10:f7:5f:de:cf:cd:99: d8:e6:4a:55:43:9f:f6:18:a2:32:bd:18:93:ca:dd: 0a:27:bf:b6:87:57:1f:dd:66:4d:76:9f:98:fa:7c: 39:95:5a:5e:10:a3:9d:e4:81:9f:13:5e:23:75:e9: a6:88:3e:c0:61:89:4f:62:51:7c:59:4c:39:b6:a6: 9b:20:06:dd:f5:89:20:1b:3e:c7:5d:c9:c0:bf:10: a5:8d:88:26:f0:07:47:b3:2d:a5:9b:7f:5b:12:87: 5d:e9:93:22:8f:72:9c:31:73:23:19:93:39:02:fc: 91:94:06:3c:62:fd:4f:d4:aa:db:39:b0:5d:d1:1e: 1d:fb:35:d6:9a:bd:e6:8d:0d:6c:de:9d:4d:a2:82: 48:55:27:30:4d:32:a4:69:dd:c3:9f:cd:00:3c:f8: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D2:16:DC:F9:BD:E9:53:38:9D:DD:4D:95:C3:9E:1C:4F:B4:91:16 X509v3 Authority Key Identifier: keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2b:d8:75:71:02:63:b5:11:50:b9:51:e2:05:ca:a7:de:8f: 6c:c2:4c:65:d8:61:6e:40:5b:f2:d4:3a:45:f7:6f:c8:b0:91: 41:3b:44:13:79:12:1c:7a:b1:0c:f6:87:71:77:1a:c1:26:ec: 56:6e:97:68:e1:fe:0c:dc:2d:af:46:21:14:54:f5:d5:cc:5a: ce:16:cb:ca:71:76:99:9d:a4:8c:76:09:3f:06:1e:eb:48:00: cb:98:41:3a:10:9d:12:5d:55:ea:81:44:e9:23:54:95:23:fe: cb:f0:12:0a:79:5a:5a:d2:e1:2c:4b:cd:34:c7:87:79:a7:2c: 5a:cd:18:e8:fc:89:93:18:d1:a2:bb:c2:14:bc:47:c6:44:e2: 1c:91:31:8f:e2:31:58:c1:24:9e:81:31:0e:7a:d7:ca:93:17: 2d:5e:6d:f5:60:fd:d3:fb:44:f0:ca:12:15:3c:55:c5:6e:08: c1:70:f8:88:a0:a9:92:29:c7:74:bb:74:4d:b1:ba:e6:fe:54: dc:7c:a6:4f:43:55:4d:05:8a:c0:d5:02:fc:2a:fa:95:75:b5: b0:98:bb:0c:93:eb:c2:10:d4:69:76:9f:b5:1d:12:1c:bc:40: 7d:a7:9f:a2:2a:0a:2a:43:3c:d2:5d:08:98:92:eb:6b:91:41: 02:94:a4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd9+EkSTT/TpoOi2vUrQddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDM5MWQyNDQxNzNmM2UxYWE4MjFkYjc3NDg0YjFhZGE1 MzU1N2YwHhcNMjUxMjI3MDQwMTI0WhcNMjUxMjI4MDQwMTI0WjAzMTEwLwYDVQQD EyhmNWQyMTZkY2Y5YmRlOTUzMzg5ZGRkNGQ5NWMzOWUxYzRmYjQ5MTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1am/UlqxK3NmdXhkT6Bnq0XIS64Q t3zYUwamxVMsXjSPtipJBPx5VDl2TVuzC92qQyqujFh0gPXnz4C/ZPGD+8NNNJUv y0e/TmBjFkPS3c3yWKEPfK4BRQa0LOFnObm15hD3X97PzZnY5kpVQ5/2GKIyvRiT yt0KJ7+2h1cf3WZNdp+Y+nw5lVpeEKOd5IGfE14jdemmiD7AYYlPYlF8WUw5tqab IAbd9YkgGz7HXcnAvxCljYgm8AdHsy2lm39bEodd6ZMij3KcMXMjGZM5AvyRlAY8 Yv1P1KrbObBd0R4d+zXWmr3mjQ1s3p1NooJIVScwTTKkad3Dn80APPiXGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXSFtz5velTOJ3dTZXDnhxPtJEWMB8GA1UdIwQY MBaAFOkDkdJEFz8+Gqgh23dISxraU1V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMt NDZiZTc5ODcwYmU4LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMtNDZiZTc5ODcwYmU4 LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABivYdXEC Y7URULlR4gXKp96PbMJMZdhhbkBb8tQ6RfdvyLCRQTtEE3kSHHqxDPaHcXcawSbs Vm6XaOH+DNwtr0YhFFT11cxazhbLynF2mZ2kjHYJPwYe60gAy5hBOhCdEl1V6oFE 6SNUlSP+y/ASCnlaWtLhLEvNNMeHeacsWs0Y6PyJkxjRorvCFLxHxkTiHJExj+Ix WMEknoExDnrXypMXLV5t9WD90/tE8MoSFTxVxW4IwXD4iKCpkinHdLt0TbG65v5U 3HymT0NVTQWKwNUC/Cr6lXW1sJi7DJPrwhDUaXaftR0SHLxAfaefoioKKkM80l0I mJLra5FBApSkGw== -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:27 2025 by rpki-client