This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json) Hash identifier: 4G6cxo1DtHX95d3DU5N2gzBypsMM4QyqevIj7/AY5LE= Subject key identifier: C1:0A:81:A0:3E:E4:67:35:76:6D:CB:20:4E:91:B7:B7:25:F9:8B:32 Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92 Certificate serial: 019B4211FC38DD19A6025B1652DFDB579908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft Manifest number: 0CD9 Signing time: Sun 21 Dec 2025 18:00:33 +0000 Manifest this update: Sun 21 Dec 2025 18:00:33 +0000 Manifest next update: Mon 22 Dec 2025 18:00:33 +0000 Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=) 2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: cYdM0NkbKnto+eeH//OLMSQDB+Q78qXFKUn8QMOj8sA=) 3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=) 4: RG7fXecCgltP9RGkiJ-aVXS-wsM.roa (hash: qs5jUi+jVQdO/5VzCetY5ouvlERqA5awKhxjDrx/XnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:11:fc:38:dd:19:a6:02:5b:16:52:df:db:57:99:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92 Validity Not Before: Dec 21 18:00:33 2025 GMT Not After : Dec 22 18:00:33 2025 GMT Subject: CN=c10a81a03ee46735766dcb204e91b7b725f98b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:ba:42:82:28:f7:75:e2:41:2c:a5:17:cb: 46:8b:98:49:67:0c:90:72:27:2d:d6:ab:7e:65:f7: 8f:c8:57:4d:b3:5f:d9:61:c6:53:99:02:7e:7a:f6: cf:e4:88:59:02:0d:e6:77:fa:f1:50:ef:4d:fa:f8: c1:6e:af:bb:90:a4:c0:32:ad:22:fc:e4:fb:a3:bb: 14:e6:fb:35:17:58:7d:ea:53:a4:fb:5e:29:53:49: db:98:19:41:92:64:64:f0:9d:b6:1e:51:55:05:2f: 2c:90:47:50:03:a1:d3:e7:9e:19:40:b0:fd:4d:7d: f4:6a:33:06:8d:76:0e:c6:f7:e0:b7:17:69:4e:78: 37:88:16:a3:fa:87:42:b8:18:dd:d1:c8:ea:21:59: 8e:2c:77:4d:bd:3e:6e:5a:de:97:a4:fa:80:e4:c4: 5d:d5:7a:47:70:e2:1e:0d:12:48:c0:d4:73:a6:be: fe:d2:2f:87:a8:34:e2:87:0c:c3:8f:52:90:1b:d7: 4e:62:b8:76:66:8c:20:ca:30:4e:87:b1:fb:f4:82: 3b:a5:f0:6e:62:12:01:ca:6d:0d:4b:40:80:c5:ab: e8:2c:74:74:90:4a:fe:f9:b8:1f:7d:93:86:2e:a7: aa:88:9b:96:17:e6:4e:9d:fe:1d:36:41:5b:3f:b2: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:81:A0:3E:E4:67:35:76:6D:CB:20:4E:91:B7:B7:25:F9:8B:32 X509v3 Authority Key Identifier: keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:83:a9:e5:64:0d:e3:df:43:46:7f:cb:fc:fa:9f:3d:f5:cc: f1:20:5f:78:d3:22:d3:2f:0a:90:f3:e7:5c:6e:22:c6:41:25: 17:9a:05:ad:7f:cf:67:0c:64:3b:89:fd:f0:c1:73:fb:3a:73: 7d:94:ff:d9:be:97:9a:ef:ee:f8:a3:14:3e:dd:d1:10:fc:c7: 7d:64:24:c0:02:f7:26:d8:1a:fc:6d:25:b9:60:26:e3:f5:ba: 1b:7d:d2:33:74:34:f2:37:70:82:df:82:7e:1f:60:d4:7e:a9: 86:6c:25:7f:1e:58:d4:66:b4:76:f2:76:08:6a:a1:70:d7:64: 8f:be:69:97:15:1f:ad:d7:42:18:4a:c2:e1:56:25:1a:37:b4: a9:4b:08:8d:21:49:87:38:76:f8:93:15:f0:d3:d1:3f:b0:f8: 9f:0a:6e:57:51:6a:f3:f7:0b:1a:0a:6e:2e:a2:50:30:02:04: 65:66:94:c8:89:6a:3f:71:20:c9:61:5b:d9:b7:66:af:05:1e: 02:13:6b:f4:76:0b:7d:16:59:a2:e5:d5:72:33:82:06:16:26: b4:0c:d2:17:bf:f3:20:0e:03:dc:be:a6:ef:ac:5f:d1:b8:03: 88:27:74:17:b3:c3:e5:e1:92:94:55:9e:a9:35:dd:ff:36:c4: 27:31:ff:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEfw43RmmAlsWUt/bV5kIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5 MmFjOTIwHhcNMjUxMjIxMTgwMDMzWhcNMjUxMjIyMTgwMDMzWjAzMTEwLwYDVQQD EyhjMTBhODFhMDNlZTQ2NzM1NzY2ZGNiMjA0ZTkxYjdiNzI1Zjk4YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYW6QoIo93XiQSylF8tGi5hJZwyQ cict1qt+ZfePyFdNs1/ZYcZTmQJ+evbP5IhZAg3md/rxUO9N+vjBbq+7kKTAMq0i /OT7o7sU5vs1F1h96lOk+14pU0nbmBlBkmRk8J22HlFVBS8skEdQA6HT554ZQLD9 TX30ajMGjXYOxvfgtxdpTng3iBaj+odCuBjd0cjqIVmOLHdNvT5uWt6XpPqA5MRd 1XpHcOIeDRJIwNRzpr7+0i+HqDTihwzDj1KQG9dOYrh2ZowgyjBOh7H79II7pfBu YhIBym0NS0CAxavoLHR0kEr++bgffZOGLqeqiJuWF+ZOnf4dNkFbP7Jl7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEKgaA+5Gc1dm3LIE6Rt7cl+YsyMB8GA1UdIwQY MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt NTdlOTBjNTZhMGUyLzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYOp5WQN 499DRn/L/PqfPfXM8SBfeNMi0y8KkPPnXG4ixkElF5oFrX/PZwxkO4n98MFz+zpz fZT/2b6Xmu/u+KMUPt3REPzHfWQkwAL3Jtga/G0luWAm4/W6G33SM3Q08jdwgt+C fh9g1H6phmwlfx5Y1Ga0dvJ2CGqhcNdkj75plxUfrddCGErC4VYlGje0qUsIjSFJ hzh2+JMV8NPRP7D4nwpuV1Fq8/cLGgpuLqJQMAIEZWaUyIlqP3EgyWFb2bdmrwUe AhNr9HYLfRZZouXVcjOCBhYmtAzSF7/zIA4D3L6m76xf0bgDiCd0F7PD5eGSlFWe qTXd/zbEJzH/hw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:47:58 2025 by rpki-client