This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft File: 6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json) Hash identifier: vYk8cVY8UN1UrbHvHC+8BspIijlOHorWxg1yirnvH/E= Subject key identifier: FF:95:BA:76:07:5A:5B:54:F2:7B:71:65:69:AA:BD:32:32:F1:EB:68 Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 Certificate issuer: /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Certificate serial: 019B0E928DCC3D5849B68F32142B3C916C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft Manifest number: 0283 Signing time: Thu 11 Dec 2025 18:00:44 +0000 Manifest this update: Thu 11 Dec 2025 18:00:44 +0000 Manifest next update: Fri 12 Dec 2025 18:00:44 +0000 Files and hashes: 1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: fevRtqrz4SHrIQfVmy2MJT0UXn9TrRakWqtSWcB0G1o=) 2: Z6Ua_m1uC5vkIPTZcIRy60EkawI.roa (hash: MctTd7jsNaKXKyaY6wZK28mWbw3asQJpuRF6a3Ofl8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:8d:cc:3d:58:49:b6:8f:32:14:2b:3c:91:6c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80 Validity Not Before: Dec 11 18:00:44 2025 GMT Not After : Dec 12 18:00:44 2025 GMT Subject: CN=ff95ba76075a5b54f27b716569aabd3232f1eb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:fb:77:fa:98:d8:69:f8:08:eb:35:e3:99: 29:39:f3:34:a9:3f:0a:b5:f0:61:8a:e9:aa:81:a2: 10:c5:58:95:c8:9d:e8:cd:22:2d:81:cb:a1:02:01: 6c:b7:7e:25:12:b5:15:08:22:d0:b2:31:82:99:01: 58:8d:11:b1:92:85:86:f9:0d:79:68:0a:46:cd:b5: c7:9d:a1:fc:a2:32:68:70:df:b0:b1:73:34:a6:45: 42:13:15:d6:d6:64:bf:ca:e0:d2:bc:a6:09:6f:5d: 6e:ef:a6:9d:bb:73:27:99:4f:70:66:17:dc:be:df: 12:d0:41:86:be:bc:90:ec:af:8e:21:65:0b:90:15: ac:dc:5d:96:68:94:65:db:86:32:ca:3f:f7:9d:7a: cf:70:19:87:cb:2b:ac:f2:33:fe:1a:8f:26:2d:23: aa:65:04:93:3d:16:f1:a7:c3:0b:7f:49:60:db:7f: 0f:2a:ac:40:74:cc:b9:69:66:73:e5:34:a3:ad:6a: 1d:07:07:69:0f:69:43:71:92:4e:6f:c2:b2:f8:a9: e2:ab:67:ae:c7:fa:f7:1c:25:9a:90:31:0e:ed:da: ae:d8:fb:6d:37:aa:fd:5d:8a:7f:7d:82:52:84:75: 23:32:b9:55:92:80:84:97:36:0e:e8:67:3f:2d:ea: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:BA:76:07:5A:5B:54:F2:7B:71:65:69:AA:BD:32:32:F1:EB:68 X509v3 Authority Key Identifier: keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:26:43:06:70:78:1c:00:0d:dd:8d:18:9f:be:e5:a9:94:c5: cd:50:9a:1e:81:f2:7e:f1:31:68:ba:ef:1d:1a:74:04:f3:dd: 62:42:02:06:70:80:24:1b:b2:87:45:4e:5e:38:c9:8c:df:81: d3:f5:28:44:0e:69:ec:06:cc:e9:53:4a:32:02:9d:4c:b8:93: b5:74:5a:fb:3e:8a:4d:97:79:73:3e:a5:5f:c8:09:a0:20:d5: 3d:fc:15:b2:f0:10:a4:f6:b6:ce:2a:b7:b0:bf:b4:52:3c:b7: 4f:c1:30:e3:84:fa:2e:66:ef:d1:8f:ff:ed:90:c1:30:24:ab: a6:a8:ca:25:80:cf:57:96:55:cd:62:8e:12:cd:fb:9f:5d:28: bf:59:9e:08:70:ef:9a:c5:7d:56:c1:82:80:5b:b1:09:db:fc: fa:3b:78:8b:92:0c:6e:22:20:37:52:bd:57:57:4d:a0:44:14: e2:c6:b0:df:01:0c:0c:ed:9a:f3:19:fd:8f:4b:93:30:85:f0: 5d:fb:c1:8e:3a:a8:65:c9:d6:b3:3d:a5:9a:df:91:40:70:ea: 8e:61:66:7e:c1:60:2f:30:49:b9:7a:5e:b7:63:85:fd:03:fd: 0c:84:c6:37:11:7c:66:ed:8e:8d:4d:a0:a6:5d:5d:ea:9d:70: 86:5c:b7:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOko3MPVhJto8yFCs8kWwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4 YTZlODAwHhcNMjUxMjExMTgwMDQ0WhcNMjUxMjEyMTgwMDQ0WjAzMTEwLwYDVQQD EyhmZjk1YmE3NjA3NWE1YjU0ZjI3YjcxNjU2OWFhYmQzMjMyZjFlYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9b7d/qY2Gn4COs145kpOfM0qT8K tfBhiumqgaIQxViVyJ3ozSItgcuhAgFst34lErUVCCLQsjGCmQFYjRGxkoWG+Q15 aApGzbXHnaH8ojJocN+wsXM0pkVCExXW1mS/yuDSvKYJb11u76adu3MnmU9wZhfc vt8S0EGGvryQ7K+OIWULkBWs3F2WaJRl24Yyyj/3nXrPcBmHyyus8jP+Go8mLSOq ZQSTPRbxp8MLf0lg238PKqxAdMy5aWZz5TSjrWodBwdpD2lDcZJOb8Ky+Kniq2eu x/r3HCWakDEO7dqu2PttN6r9XYp/fYJShHUjMrlVkoCElzYO6Gc/LerpJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+VunYHWltU8ntxZWmqvTIy8etoMB8GA1UdIwQY MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt NzFiOTM4YWU0Y2NkLzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECZDBnB4 HAAN3Y0Yn77lqZTFzVCaHoHyfvExaLrvHRp0BPPdYkICBnCAJBuyh0VOXjjJjN+B 0/UoRA5p7AbM6VNKMgKdTLiTtXRa+z6KTZd5cz6lX8gJoCDVPfwVsvAQpPa2ziq3 sL+0Ujy3T8Ew44T6Lmbv0Y//7ZDBMCSrpqjKJYDPV5ZVzWKOEs37n10ov1meCHDv msV9VsGCgFuxCdv8+jt4i5IMbiIgN1K9V1dNoEQU4saw3wEMDO2a8xn9j0uTMIXw XfvBjjqoZcnWsz2lmt+RQHDqjmFmfsFgLzBJuXpet2OF/QP9DITGNxF8Zu2OjU2g pl1d6p1whly3gw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:27 2025 by rpki-client