This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft File: 6qv-4dfIzIdgczM8TKqIGjezbJE.mft (raw, json) Hash identifier: yxFqZJAXMr6mAgWfQ733wNGpDE3Wwh58nHXqPiTXiqk= Subject key identifier: 71:3E:37:D3:93:93:C6:47:06:CA:D4:37:16:7C:33:74:3F:8E:BD:75 Authority key identifier: EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91 Certificate issuer: /CN=eaabfee1d7c8cc876073333c4caa881a37b36c91 Certificate serial: 019B0F00C6D6A86832867B24D3BA99FCD707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft Manifest number: 0246 Signing time: Thu 11 Dec 2025 20:01:07 +0000 Manifest this update: Thu 11 Dec 2025 20:01:07 +0000 Manifest next update: Fri 12 Dec 2025 20:01:07 +0000 Files and hashes: 1: 2PO56c07BT5UqW7VHJgEtBZRuc4.roa (hash: j6nnqb1GzOx8EAgfl33x3DbOrwgUFnv8OKDrDXb3GYE=) 2: 6qv-4dfIzIdgczM8TKqIGjezbJE.crl (hash: v6ETSVmIJrew13s7CyTXlQ3BL3BSpFS7juhIla6+Utw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c6:d6:a8:68:32:86:7b:24:d3:ba:99:fc:d7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaabfee1d7c8cc876073333c4caa881a37b36c91 Validity Not Before: Dec 11 20:01:07 2025 GMT Not After : Dec 12 20:01:07 2025 GMT Subject: CN=713e37d39393c64706cad437167c33743f8ebd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:e8:45:8b:47:3d:b8:8d:f4:31:84:02:13: a6:84:85:a7:4e:0b:55:f0:e8:e0:c2:fc:f1:f2:9b: e4:fa:d5:b6:db:09:de:ce:e2:a7:71:e5:c4:0a:3f: 0a:cc:09:d7:8c:08:f6:62:70:61:bd:8c:6a:26:aa: c2:ff:8a:6c:68:12:e0:ed:8a:63:b7:69:9f:40:e5: 89:53:d7:d6:f8:f1:a0:6d:5b:52:f8:c5:78:c0:69: 15:8b:72:c8:54:d4:fd:ae:d3:f8:ab:79:4c:19:56: 68:b1:f3:f1:ac:ba:a8:9c:aa:e9:fa:18:aa:66:83: f0:06:66:a1:b3:f3:a6:f7:6f:75:da:42:0d:cd:cc: a1:6c:94:dd:1d:1b:36:34:6c:91:50:8c:6b:44:91: 84:ef:b7:39:74:ab:af:c7:b7:44:5b:6c:a3:72:b1: 5e:7d:2c:0c:8a:29:28:5d:45:7d:b3:2e:04:9d:2d: 6b:a6:77:e6:7d:92:df:1f:6d:a4:26:c0:93:df:a0: 3b:37:65:54:e1:5a:a3:6d:d8:18:77:0b:61:ea:b8: a1:18:72:0d:15:58:37:36:d7:a0:e6:10:59:2d:8f: 95:ac:2c:87:7a:f2:d1:14:77:cb:65:7f:a7:cc:d2: 1e:22:2f:a8:af:03:a1:8f:b9:28:58:10:18:79:a8: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3E:37:D3:93:93:C6:47:06:CA:D4:37:16:7C:33:74:3F:8E:BD:75 X509v3 Authority Key Identifier: keyid:EA:AB:FE:E1:D7:C8:CC:87:60:73:33:3C:4C:AA:88:1A:37:B3:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qv-4dfIzIdgczM8TKqIGjezbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d6f1ab-2c9b-4f70-92b0-b7cd52703e8d/1/6qv-4dfIzIdgczM8TKqIGjezbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:08:2c:1e:23:f0:c4:8e:17:6f:da:14:30:d5:a1:97:4b:0d: 0a:47:c3:c7:e7:94:ea:0e:3f:24:e8:4b:f8:3f:3d:dd:04:40: a3:92:29:a3:2d:ca:13:b7:72:aa:13:e1:98:b0:42:e6:ab:26: 64:f1:b6:fb:b1:d5:31:f3:85:93:ba:05:8f:3d:f3:b0:87:f8: 16:59:2b:c9:a5:3c:13:f3:e1:a4:f0:49:33:a4:44:8b:97:05: f5:d4:1a:3b:d7:48:56:41:4e:56:4d:3c:66:3b:b2:a4:11:6b: 66:f2:91:11:44:74:68:f3:35:e9:89:06:7e:39:ab:39:89:a1: 71:e9:a3:fb:e3:69:b2:19:a4:ad:e0:2c:7a:92:e6:0c:17:e6: 9f:a9:89:73:ce:34:be:a9:15:0d:d5:f6:37:56:35:ce:b9:6a: c7:62:8d:ee:3f:4c:48:a7:f7:87:42:8f:55:da:0a:60:de:54: 6c:77:f1:eb:4d:ee:9f:b4:68:8d:7a:bd:cf:07:11:79:fa:0f: 0e:f8:ad:0a:a9:5c:77:65:39:a3:55:13:b2:95:8c:e9:8f:23: 0f:2a:f5:fa:23:3c:0c:0d:b8:5d:f2:92:b6:7b:82:54:21:5c: 54:60:1f:f2:1d:f5:63:17:da:af:58:f0:dd:82:09:0b:c6:69: 44:9f:36:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMbWqGgyhnsk07qZ/NcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWJmZWUxZDdjOGNjODc2MDczMzMzYzRjYWE4ODFhMzdi MzZjOTEwHhcNMjUxMjExMjAwMTA3WhcNMjUxMjEyMjAwMTA3WjAzMTEwLwYDVQQD Eyg3MTNlMzdkMzkzOTNjNjQ3MDZjYWQ0MzcxNjdjMzM3NDNmOGViZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O7oRYtHPbiN9DGEAhOmhIWnTgtV 8Ojgwvzx8pvk+tW22wnezuKnceXECj8KzAnXjAj2YnBhvYxqJqrC/4psaBLg7Ypj t2mfQOWJU9fW+PGgbVtS+MV4wGkVi3LIVNT9rtP4q3lMGVZosfPxrLqonKrp+hiq ZoPwBmahs/Om92912kINzcyhbJTdHRs2NGyRUIxrRJGE77c5dKuvx7dEW2yjcrFe fSwMiikoXUV9sy4EnS1rpnfmfZLfH22kJsCT36A7N2VU4VqjbdgYdwth6rihGHIN FVg3Nteg5hBZLY+VrCyHevLRFHfLZX+nzNIeIi+orwOhj7koWBAYeaiPhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE+N9OTk8ZHBsrUNxZ8M3Q/jr11MB8GA1UdIwQY MBaAFOqr/uHXyMyHYHMzPEyqiBo3s2yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAt YjdjZDUyNzAzZThkLzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kNmYxYWItMmM5Yi00ZjcwLTkyYjAtYjdjZDUyNzAzZThk LzEvNnF2LTRkZkl6SWRnY3pNOFRLcUlHamV6YkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQgsHiPw xI4Xb9oUMNWhl0sNCkfDx+eU6g4/JOhL+D893QRAo5Ipoy3KE7dyqhPhmLBC5qsm ZPG2+7HVMfOFk7oFjz3zsIf4FlkryaU8E/PhpPBJM6REi5cF9dQaO9dIVkFOVk08 ZjuypBFrZvKREUR0aPM16YkGfjmrOYmhcemj++NpshmkreAsepLmDBfmn6mJc840 vqkVDdX2N1Y1zrlqx2KN7j9MSKf3h0KPVdoKYN5UbHfx603un7RojXq9zwcRefoP DvitCqlcd2U5o1UTspWM6Y8jDyr1+iM8DA24XfKStnuCVCFcVGAf8h31Yxfar1jw 3YIJC8ZpRJ82ZQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:31 2025 by rpki-client