This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft File: MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json) Hash identifier: Jjq8PYPrWXxI/8E/bXlGM3mfoWqyXz1kNXeVF9e5kyM= Subject key identifier: 48:FE:85:BF:E5:AF:30:2E:99:F8:DA:D0:46:61:76:F4:72:5A:FC:48 Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F Certificate issuer: /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f Certificate serial: 019B59E4025B33D70FA72F8DC8E347C3177A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft Manifest number: 074F Signing time: Fri 26 Dec 2025 09:01:13 +0000 Manifest this update: Fri 26 Dec 2025 09:01:13 +0000 Manifest next update: Sat 27 Dec 2025 09:01:13 +0000 Files and hashes: 1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: FHhM59+T9c7k0FVmbtFvKHih64a21HhN3Rb5/WuFJRU=) 2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:02:5b:33:d7:0f:a7:2f:8d:c8:e3:47:c3:17:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f Validity Not Before: Dec 26 09:01:13 2025 GMT Not After : Dec 27 09:01:13 2025 GMT Subject: CN=48fe85bfe5af302e99f8dad0466176f4725afc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:b8:91:aa:1c:b0:fd:2c:7e:57:f6:ba:c2: d1:92:f8:af:7c:fe:c4:e5:8d:4f:03:a6:8c:58:bf: b8:9d:7f:b7:c4:5e:e1:46:aa:41:5e:cb:92:59:55: b0:38:49:3c:b8:ff:74:20:32:f1:69:44:f3:cb:1a: 47:ee:36:d4:48:34:23:9a:73:8b:bd:5d:f3:7a:bd: c3:e2:23:2b:53:eb:ec:34:7d:51:77:cb:0c:d4:20: 6c:0c:91:7d:4f:93:0d:79:41:13:f1:38:7a:c4:55: f3:d9:ed:9b:ba:99:92:b5:a2:49:6d:40:03:b7:37: b9:12:4b:13:52:09:2c:14:7c:a9:c5:6d:25:c0:73: 5b:3b:03:d2:62:57:0e:4a:b7:34:a9:4f:d5:a5:73: c8:dc:c7:a4:de:7a:da:b4:10:e9:31:10:4e:21:8c: df:cb:eb:2d:5a:6e:ef:1a:7b:1e:35:5f:be:8a:cd: 20:02:48:91:a3:46:be:da:ed:bc:e3:3b:8a:af:15: bc:01:a3:3e:ce:87:83:e0:43:fb:9f:58:34:6a:2f: 00:86:d2:27:58:e0:53:34:75:88:41:b9:8b:6c:85: 52:53:71:fb:9d:d0:96:2c:56:ae:bb:53:bb:9d:aa: a0:9a:55:3b:62:93:d6:d5:f9:ac:e0:02:08:66:ae: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FE:85:BF:E5:AF:30:2E:99:F8:DA:D0:46:61:76:F4:72:5A:FC:48 X509v3 Authority Key Identifier: keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d8:57:91:34:3f:e6:f8:a5:e4:9b:cc:e9:a6:cc:30:47:74: 78:4f:d9:da:bd:00:ef:bd:8c:a2:19:05:da:a6:0f:49:5b:63: af:4b:97:d7:f7:e5:0d:6d:68:63:22:a8:4d:43:48:66:92:0e: 26:39:39:32:87:ba:e9:f1:a9:ed:c0:fb:af:ad:a4:3e:70:b3: b6:a2:af:09:68:29:39:6d:9f:b7:ce:1a:3f:90:83:3e:8a:91: 82:37:1b:1b:f4:4a:21:90:a6:39:d3:8d:1c:1b:5a:8a:ad:42: ef:c2:fe:00:b8:6e:b1:26:eb:93:49:bd:b1:d2:8d:6b:8f:a9: e0:0c:bc:cb:a4:a6:00:8f:39:6d:b0:7b:63:d6:87:ea:11:b8: 58:9f:f7:85:a8:dc:bf:b3:0a:c1:21:3e:64:86:7c:05:5e:cd: 5b:da:f4:20:2d:3c:c5:7f:b0:5d:f5:85:f8:65:80:9a:eb:3d: 22:2e:5a:eb:a2:cb:32:45:29:be:e5:4b:98:47:8b:61:db:27: 61:2a:5d:6a:45:62:60:b9:8f:aa:e7:90:ff:38:63:3d:00:6b: 06:db:44:ff:d6:9f:e6:75:88:e0:74:da:d5:43:0d:c4:81:39: 39:9b:a1:fd:f4:10:9e:46:87:f8:7b:97:16:9a:74:f8:07:4e: 7a:b3:f3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5AJbM9cPpy+NyONHwxd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxM2ViZTQzNmE3NTYyOWI4ZjNkYjc0YTlhM2ZhMWQ1ZDMw YWQzN2YwHhcNMjUxMjI2MDkwMTEzWhcNMjUxMjI3MDkwMTEzWjAzMTEwLwYDVQQD Eyg0OGZlODViZmU1YWYzMDJlOTlmOGRhZDA0NjYxNzZmNDcyNWFmYzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxi4kaocsP0sflf2usLRkvivfP7E 5Y1PA6aMWL+4nX+3xF7hRqpBXsuSWVWwOEk8uP90IDLxaUTzyxpH7jbUSDQjmnOL vV3zer3D4iMrU+vsNH1Rd8sM1CBsDJF9T5MNeUET8Th6xFXz2e2bupmStaJJbUAD tze5EksTUgksFHypxW0lwHNbOwPSYlcOSrc0qU/VpXPI3Mek3nratBDpMRBOIYzf y+stWm7vGnseNV++is0gAkiRo0a+2u284zuKrxW8AaM+zoeD4EP7n1g0ai8AhtIn WOBTNHWIQbmLbIVSU3H7ndCWLFauu1O7naqgmlU7YpPW1fms4AIIZq4zzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj+hb/lrzAumfja0EZhdvRyWvxIMB8GA1UdIwQY MBaAFDE+vkNqdWKbjz23Spo/odXTCtN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVQ2LVEycDFZcHVQUGJkS21qLWgxZE1LMDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83MmNjMmItN2MxZi00YTM2LWE3MDAt OTYwYzhmMGE5NWIyLzEvTVQ2LVEycDFZcHVQUGJkS21qLWgxZE1LMDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83MmNjMmItN2MxZi00YTM2LWE3MDAtOTYwYzhmMGE5NWIy LzEvTVQ2LVEycDFZcHVQUGJkS21qLWgxZE1LMDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNhXkTQ/ 5vil5JvM6abMMEd0eE/Z2r0A772MohkF2qYPSVtjr0uX1/flDW1oYyKoTUNIZpIO Jjk5Moe66fGp7cD7r62kPnCztqKvCWgpOW2ft84aP5CDPoqRgjcbG/RKIZCmOdON HBtaiq1C78L+ALhusSbrk0m9sdKNa4+p4Ay8y6SmAI85bbB7Y9aH6hG4WJ/3hajc v7MKwSE+ZIZ8BV7NW9r0IC08xX+wXfWF+GWAmus9Ii5a66LLMkUpvuVLmEeLYdsn YSpdakViYLmPqueQ/zhjPQBrBttE/9af5nWI4HTa1UMNxIE5OZuh/fQQnkaH+HuX Fpp0+AdOerPzGw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:04 2025 by rpki-client