This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft File: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft (raw, json) Hash identifier: x8v0mhMtNehAIZGjqBxanG8TDMNIl7zZve7wSnoofCM= Subject key identifier: 25:AC:29:DC:76:A1:BC:88:B8:5A:70:F7:C5:E8:D5:20:24:F3:C3:49 Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 Certificate issuer: /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Certificate serial: 019B590826A4F1E121F35B852925FC93EE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft Manifest number: FF Signing time: Fri 26 Dec 2025 05:01:04 +0000 Manifest this update: Fri 26 Dec 2025 05:01:04 +0000 Manifest next update: Sat 27 Dec 2025 05:01:04 +0000 Files and hashes: 1: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl (hash: KvLqUY3cGxIXihsLY9QPRhGfzazmd/VUjOOYMbv7FYk=) 2: XtYhA40CIXZ13ODIzU5Jf7LL4LU.roa (hash: HdEWtXPo3qjkpM4rtcD6m0eh6joeQyAPSggK9PU/vxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:26:a4:f1:e1:21:f3:5b:85:29:25:fc:93:ee:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567 Validity Not Before: Dec 26 05:01:04 2025 GMT Not After : Dec 27 05:01:04 2025 GMT Subject: CN=25ac29dc76a1bc88b85a70f7c5e8d52024f3c349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:a5:cb:08:39:d9:41:d7:40:b8:7f:d5:60: 3a:86:4d:cd:7c:d4:d2:e8:42:23:47:38:e4:cf:74: 92:9c:65:44:a0:e0:6a:c8:73:b6:1c:19:80:a7:d2: f3:03:52:fc:8a:58:ea:22:41:86:5d:26:7f:4b:b1: 39:29:73:a3:17:30:98:4c:e5:68:60:89:17:f2:11: b8:d7:ce:18:3a:bc:9f:ec:be:c3:f8:fa:bc:3c:a2: 5b:4d:59:cb:aa:39:81:95:fc:c5:08:c4:0f:04:b4: a5:38:25:19:26:3e:a6:42:ea:55:3c:15:55:81:7a: 95:00:b9:ff:ab:26:e1:92:11:e3:1d:77:b6:40:fc: 76:d1:f5:70:e7:5d:54:01:23:d3:36:eb:e2:a7:62: ba:66:4f:0f:9c:7f:5a:da:94:cd:2b:58:b7:3a:ba: 3a:96:8b:1f:b0:f9:d6:a4:ca:ae:28:72:58:6c:5f: 73:30:dc:77:7f:7a:c4:20:3f:14:d4:b2:5b:d2:36: 94:4e:98:f9:1b:69:12:56:c4:d5:30:72:a7:a4:09: db:5e:ee:86:e7:08:a7:86:7c:ae:ca:11:ec:9e:b0: 51:1d:1c:78:83:0f:f0:da:61:8d:8b:61:ba:87:45: bd:d8:13:c6:b3:5d:63:66:79:9f:3a:03:79:e3:c2: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AC:29:DC:76:A1:BC:88:B8:5A:70:F7:C5:E8:D5:20:24:F3:C3:49 X509v3 Authority Key Identifier: keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1b:de:af:74:82:49:b9:91:fb:ef:1e:27:0d:8d:9d:81:e4: b1:48:52:ac:5f:63:a8:31:b6:04:94:ff:d1:b1:ad:d0:b7:57: 4b:da:b3:ef:8c:99:f4:fa:38:57:d7:06:c1:32:e7:f9:46:46: 83:3c:d3:05:e7:77:b2:99:fd:e6:c7:a5:af:ed:e0:77:9c:f8: ba:19:a6:7f:56:c0:44:84:d2:9e:35:0e:c1:c0:87:bc:ec:3a: 3c:f0:b0:37:19:ec:36:1c:af:4e:8d:eb:9e:69:9e:95:43:d1: 7d:f1:c2:7d:40:93:dd:64:54:56:70:f0:bd:e2:df:0d:fd:1b: 32:59:d7:c5:4a:d9:61:0b:ee:3a:44:31:e0:17:bf:04:22:d8: 45:e0:6b:52:2b:e0:ee:13:48:c5:2c:02:5e:52:62:4d:fa:47: bf:e4:23:78:7a:89:03:c2:34:c0:a0:75:8a:7e:cc:40:bd:1a: 70:1f:78:43:75:c9:94:19:36:bd:97:38:ef:4d:47:5e:53:65: 82:35:41:42:45:e6:80:68:14:be:3b:ad:cd:64:b9:b1:8e:13: 3b:28:78:26:e1:29:53:62:81:88:3a:d6:b2:b6:13:22:55:79: c2:d0:06:62:76:68:15:9e:27:20:0e:22:82:17:99:76:ce:21: 99:05:04:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCCak8eEh81uFKSX8k+5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWU1YzA5ZDk5MDRlYjc0NGY5MDY3MzhjZjlmMDdmMjNm YjU1NjcwHhcNMjUxMjI2MDUwMTA0WhcNMjUxMjI3MDUwMTA0WjAzMTEwLwYDVQQD EygyNWFjMjlkYzc2YTFiYzg4Yjg1YTcwZjdjNWU4ZDUyMDI0ZjNjMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Glywg52UHXQLh/1WA6hk3NfNTS 6EIjRzjkz3SSnGVEoOBqyHO2HBmAp9LzA1L8iljqIkGGXSZ/S7E5KXOjFzCYTOVo YIkX8hG4184YOryf7L7D+Pq8PKJbTVnLqjmBlfzFCMQPBLSlOCUZJj6mQupVPBVV gXqVALn/qybhkhHjHXe2QPx20fVw511UASPTNuvip2K6Zk8PnH9a2pTNK1i3Oro6 losfsPnWpMquKHJYbF9zMNx3f3rEID8U1LJb0jaUTpj5G2kSVsTVMHKnpAnbXu6G 5winhnyuyhHsnrBRHRx4gw/w2mGNi2G6h0W92BPGs11jZnmfOgN548IOqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWsKdx2obyIuFpw98Xo1SAk88NJMB8GA1UdIwQY MBaAFOquXAnZkE63RPkGc4z58H8j+1VnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUt YWYzYzhmNTgzNDQ5LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yOWM2YjAtYjJlYy00NzEyLWI3YzUtYWYzYzhmNTgzNDQ5 LzEvNnE1Y0NkbVFUcmRFLVFaempQbndmeVA3VldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxver3SC SbmR++8eJw2NnYHksUhSrF9jqDG2BJT/0bGt0LdXS9qz74yZ9Po4V9cGwTLn+UZG gzzTBed3spn95selr+3gd5z4uhmmf1bARITSnjUOwcCHvOw6PPCwNxnsNhyvTo3r nmmelUPRffHCfUCT3WRUVnDwveLfDf0bMlnXxUrZYQvuOkQx4Be/BCLYReBrUivg 7hNIxSwCXlJiTfpHv+QjeHqJA8I0wKB1in7MQL0acB94Q3XJlBk2vZc4701HXlNl gjVBQkXmgGgUvjutzWS5sY4TOyh4JuEpU2KBiDrWsrYTIlV5wtAGYnZoFZ4nIA4i gheZds4hmQUEsA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:18 2025 by rpki-client