This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json) Hash identifier: VKfwOMspLh4g0YVtFX6/5Qfx9sh5OdMD1E/ytQ2Zreg= Subject key identifier: C9:94:95:6A:86:4C:7D:86:E5:43:EE:E1:2B:E7:7E:CD:F1:66:59:2F Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f Certificate serial: 019B6D6A5F3389AFCE44528AD50E5D72FB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft Manifest number: 04F4 Signing time: Tue 30 Dec 2025 04:00:46 +0000 Manifest this update: Tue 30 Dec 2025 04:00:46 +0000 Manifest next update: Wed 31 Dec 2025 04:00:46 +0000 Files and hashes: 1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: 65VSoTUvxvdy+0+HkLGqw1d5wAX3oDGszPUEfmEn4mk=) 2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:5f:33:89:af:ce:44:52:8a:d5:0e:5d:72:fb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f Validity Not Before: Dec 30 04:00:46 2025 GMT Not After : Dec 31 04:00:46 2025 GMT Subject: CN=c994956a864c7d86e543eee12be77ecdf166592f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:46:7f:c7:32:e9:32:80:10:dc:8e:8b:f8: 02:21:30:10:b0:64:ea:2e:bb:83:1b:42:10:42:62: 4e:c9:4f:75:d8:57:8c:47:47:64:9f:02:35:57:ff: db:85:f5:71:87:a3:b8:18:b4:18:1d:3b:10:8d:83: b9:65:74:30:04:83:7d:58:cb:80:2b:8b:12:b2:84: 45:b4:b3:b4:33:95:2a:e7:2c:ce:32:43:1f:5b:07: d4:0a:e3:c4:2c:ae:11:1f:c0:1b:b4:d4:7b:ab:29: 36:23:08:26:aa:1d:5e:8d:af:e8:74:12:c3:e1:da: b9:33:1d:8c:fd:52:87:6b:aa:0d:92:dc:86:da:3d: a4:c4:cb:c9:4e:9b:9e:8b:92:69:f2:b2:76:cf:78: 3f:ec:76:22:a2:61:b7:ec:c1:7c:4e:69:89:bf:44: 57:4d:bb:66:19:53:1b:6c:55:ea:6e:49:a1:88:fb: dd:f7:0f:f1:a6:57:f5:f9:90:7b:0c:56:38:7e:4e: eb:af:ce:56:08:54:80:fb:e8:2e:fd:2f:ee:e0:74: 73:42:84:c8:bf:ea:fc:d4:ce:d1:77:52:e6:55:bd: b8:ab:49:2a:ce:31:a2:fd:10:2d:35:04:ef:89:fd: bd:3e:d7:01:fc:9b:4a:3e:af:33:7a:1e:69:26:31: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:94:95:6A:86:4C:7D:86:E5:43:EE:E1:2B:E7:7E:CD:F1:66:59:2F X509v3 Authority Key Identifier: keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d3:c4:4f:b6:b4:d8:fa:fa:c7:39:7a:d6:ca:a9:a7:25:01: c2:8d:e6:d3:76:a6:1d:5d:f4:46:16:1a:f6:d8:18:d4:e7:02: 16:28:8e:4e:47:24:44:bf:39:9a:db:87:45:37:3b:ff:34:28: dd:83:3f:73:d4:fb:67:ac:cb:38:57:b9:bf:51:d3:f1:36:59: 74:4c:02:b0:ae:cd:86:69:86:99:ef:47:ff:62:f6:25:63:64: fc:57:43:5c:4f:45:17:e3:0c:0a:e6:de:08:c0:f6:92:10:9d: 64:b5:1a:d0:e9:7f:f9:10:67:f3:14:f0:3d:40:4f:b0:44:c2: 52:cf:c7:0c:0d:46:e7:22:df:d1:99:95:e6:3d:4a:9b:c4:c0: 7c:42:a9:54:91:13:df:be:e2:f1:4d:7a:1a:20:23:42:6b:bb: 95:4b:f7:b0:67:5d:c6:f3:8f:ee:03:84:9b:d1:95:ba:fb:34: a4:96:11:31:eb:d2:f2:8c:89:b8:50:c8:a5:ad:30:ff:88:9b: dd:1d:85:1e:68:3b:f6:69:66:74:b5:4e:58:62:98:06:0b:70: 24:a7:6f:55:28:a1:d4:31:f8:d4:b4:3e:7c:25:b5:b9:38:1c: 6d:29:04:b0:56:87:63:5c:ee:99:a7:ce:6f:23:09:e8:62:93: 29:08:79:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttal8zia/ORFKK1Q5dcvufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDM5MWQyNDQxNzNmM2UxYWE4MjFkYjc3NDg0YjFhZGE1 MzU1N2YwHhcNMjUxMjMwMDQwMDQ2WhcNMjUxMjMxMDQwMDQ2WjAzMTEwLwYDVQQD EyhjOTk0OTU2YTg2NGM3ZDg2ZTU0M2VlZTEyYmU3N2VjZGYxNjY1OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtspGf8cy6TKAENyOi/gCITAQsGTq LruDG0IQQmJOyU912FeMR0dknwI1V//bhfVxh6O4GLQYHTsQjYO5ZXQwBIN9WMuA K4sSsoRFtLO0M5Uq5yzOMkMfWwfUCuPELK4RH8AbtNR7qyk2Iwgmqh1eja/odBLD 4dq5Mx2M/VKHa6oNktyG2j2kxMvJTpuei5Jp8rJ2z3g/7HYiomG37MF8TmmJv0RX TbtmGVMbbFXqbkmhiPvd9w/xplf1+ZB7DFY4fk7rr85WCFSA++gu/S/u4HRzQoTI v+r81M7Rd1LmVb24q0kqzjGi/RAtNQTvif29PtcB/JtKPq8zeh5pJjGggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmUlWqGTH2G5UPu4Svnfs3xZlkvMB8GA1UdIwQY MBaAFOkDkdJEFz8+Gqgh23dISxraU1V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMt NDZiZTc5ODcwYmU4LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMtNDZiZTc5ODcwYmU4 LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldPET7a0 2Pr6xzl61sqppyUBwo3m03amHV30RhYa9tgY1OcCFiiOTkckRL85mtuHRTc7/zQo 3YM/c9T7Z6zLOFe5v1HT8TZZdEwCsK7NhmmGme9H/2L2JWNk/FdDXE9FF+MMCube CMD2khCdZLUa0Ol/+RBn8xTwPUBPsETCUs/HDA1G5yLf0ZmV5j1Km8TAfEKpVJET 377i8U16GiAjQmu7lUv3sGddxvOP7gOEm9GVuvs0pJYRMevS8oyJuFDIpa0w/4ib 3R2FHmg79mlmdLVOWGKYBgtwJKdvVSih1DH41LQ+fCW1uTgcbSkEsFaHY1zumafO byMJ6GKTKQh5dw== -----END CERTIFICATE-----Generated at Tue Dec 30 09:08:15 2025 by rpki-client