This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json) Hash identifier: Re/2WL2wRYyvNYvPchsf09o0X6SUANAsr0Op+scT0yI= Subject key identifier: E2:26:D2:95:74:78:3D:25:61:CE:73:E7:B5:A8:39:BA:62:3D:CC:3D Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92 Certificate serial: 019AAB6FFC3E2B08B79B00FEA72C79F6BD88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft Manifest number: 0C8B Signing time: Sat 22 Nov 2025 12:00:34 +0000 Manifest this update: Sat 22 Nov 2025 12:00:34 +0000 Manifest next update: Sun 23 Nov 2025 12:00:34 +0000 Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=) 2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: qVKW0JdF7I9uzlJ2Ok0clSgfosPAx0aZ2+ou4SQxHww=) 3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=) 4: RG7fXecCgltP9RGkiJ-aVXS-wsM.roa (hash: qs5jUi+jVQdO/5VzCetY5ouvlERqA5awKhxjDrx/XnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:6f:fc:3e:2b:08:b7:9b:00:fe:a7:2c:79:f6:bd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92 Validity Not Before: Nov 22 12:00:34 2025 GMT Not After : Nov 23 12:00:34 2025 GMT Subject: CN=e226d29574783d2561ce73e7b5a839ba623dcc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:4d:4e:9f:36:42:88:9f:59:ba:bd:73:c6: 6a:66:05:40:6e:79:c5:41:b0:ab:72:ae:1c:13:fe: 9a:60:98:47:c0:a0:d3:ec:0b:4f:f2:03:24:91:c3: d2:19:1c:58:0f:7a:58:ce:6c:d8:49:ad:d1:82:9b: b1:69:b2:cb:3b:1d:69:dd:9c:1b:38:eb:06:3a:fb: be:90:18:d5:dd:3d:0f:d3:76:de:d1:e9:73:f5:3a: f4:f9:a9:37:14:74:9c:ac:8a:a1:14:94:d6:66:ca: f7:56:ea:55:4b:cb:c3:4c:11:96:6a:a4:44:a7:a2: 37:76:5d:ff:7e:78:12:e5:88:79:d8:14:94:de:84: c1:4b:ad:70:ae:11:4a:c7:10:d4:a6:80:39:e0:a9: 1b:a1:b6:08:9a:cb:62:bc:de:ac:a1:66:fb:d9:19: b0:ea:66:1f:88:db:fd:39:ee:b1:d9:d1:2e:08:32: 77:15:83:cc:4d:49:a2:8b:1d:aa:ca:d6:d3:1c:d6: 0e:49:87:cf:ca:69:3a:42:a5:52:6e:22:ab:ab:9f: b7:2a:64:fa:dc:22:d7:b2:c6:e5:30:ab:34:f6:3f: 50:31:a5:87:25:49:ba:f3:29:df:02:ae:3c:79:05: a9:4f:ee:8f:8a:db:98:a6:04:67:5d:f7:91:ca:62: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:26:D2:95:74:78:3D:25:61:CE:73:E7:B5:A8:39:BA:62:3D:CC:3D X509v3 Authority Key Identifier: keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8d:ad:f1:d0:b7:40:80:65:d6:4a:16:b0:1f:bb:13:13:b1: 05:52:a5:2f:69:20:6f:5c:20:4d:30:a7:ea:a8:52:11:ce:32: c7:9b:50:94:51:99:b3:ec:4e:40:35:89:bd:13:3f:cc:61:e4: da:04:d8:96:2b:b4:33:47:a3:0c:87:d2:f4:b0:83:33:33:c8: 0a:4f:cc:ff:58:6a:a6:28:aa:6b:be:4a:53:2d:ba:35:ba:69: 28:cc:98:d2:2f:0d:ae:bb:90:79:fc:1c:9a:70:29:b8:9f:81: 4b:78:aa:b3:0f:f5:7e:08:d4:42:e2:c0:56:7e:9d:a2:8d:2b: cf:d2:2c:ed:48:fa:59:4c:86:1e:0f:15:2e:9a:ae:37:79:40: 4c:f6:71:15:db:f7:c9:2b:68:6a:76:37:fc:a2:e9:25:08:e0: b6:a0:c5:cf:34:92:3f:e2:4d:45:17:f8:e4:4a:a8:6a:dc:a1: 11:e7:57:54:7a:8a:49:5f:95:68:8c:b3:5f:f0:1a:db:ee:85: aa:18:b6:a4:4c:3a:f4:9f:54:5a:82:59:f6:0c:b5:9d:1c:7b: 4a:fa:36:30:89:0f:5b:78:9f:06:53:99:e8:31:17:da:5e:75: 0d:c7:f6:0e:5a:75:79:a2:09:76:75:64:ca:0b:50:45:9c:f2: 93:f9:4c:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrb/w+Kwi3mwD+pyx59r2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5 MmFjOTIwHhcNMjUxMTIyMTIwMDM0WhcNMjUxMTIzMTIwMDM0WjAzMTEwLwYDVQQD EyhlMjI2ZDI5NTc0NzgzZDI1NjFjZTczZTdiNWE4MzliYTYyM2RjYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwclNTp82QoifWbq9c8ZqZgVAbnnF QbCrcq4cE/6aYJhHwKDT7AtP8gMkkcPSGRxYD3pYzmzYSa3RgpuxabLLOx1p3Zwb OOsGOvu+kBjV3T0P03be0elz9Tr0+ak3FHScrIqhFJTWZsr3VupVS8vDTBGWaqRE p6I3dl3/fngS5Yh52BSU3oTBS61wrhFKxxDUpoA54KkbobYImstivN6soWb72Rmw 6mYfiNv9Oe6x2dEuCDJ3FYPMTUmiix2qytbTHNYOSYfPymk6QqVSbiKrq5+3KmT6 3CLXssblMKs09j9QMaWHJUm68ynfAq48eQWpT+6PituYpgRnXfeRymILlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIm0pV0eD0lYc5z57WoObpiPcw9MB8GA1UdIwQY MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt NTdlOTBjNTZhMGUyLzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACI2t8dC3 QIBl1koWsB+7ExOxBVKlL2kgb1wgTTCn6qhSEc4yx5tQlFGZs+xOQDWJvRM/zGHk 2gTYliu0M0ejDIfS9LCDMzPICk/M/1hqpiiqa75KUy26NbppKMyY0i8NrruQefwc mnApuJ+BS3iqsw/1fgjUQuLAVn6doo0rz9Is7Uj6WUyGHg8VLpquN3lATPZxFdv3 yStoanY3/KLpJQjgtqDFzzSSP+JNRRf45EqoatyhEedXVHqKSV+VaIyzX/Aa2+6F qhi2pEw69J9UWoJZ9gy1nRx7Svo2MIkPW3ifBlOZ6DEX2l51Dcf2Dlp1eaIJdnVk ygtQRZzyk/lMHw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:40:34 2025 by rpki-client