This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json) Hash identifier: FyAiyjiNGgt41qdzPumJncEo9pS0949r5Paew8mMW1I= Subject key identifier: 5C:34:06:78:A8:99:0D:88:4E:C1:36:D5:DF:3B:59:2A:43:E5:58:52 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019B10B7EFC9183C84B4352BECA0AF2F2FF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft Manifest number: 01D4 Signing time: Fri 12 Dec 2025 04:00:48 +0000 Manifest this update: Fri 12 Dec 2025 04:00:48 +0000 Manifest next update: Sat 13 Dec 2025 04:00:48 +0000 Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: R9leqmlCXtEbiZebHb9AkQjr0odTgdDdqBgrcIyJGDQ=) 2: ZSFecb5m7-Uo29szadbrmtN6IgA.roa (hash: JpRnQHYlzNbpcuUtllWhr9SiuI0ih37zok5GOb1RqnA=) 3: gsFkUpFIoMM9zjgI35LSOZ5SGws.roa (hash: zNHxoudHpYIw0kCYfeKBFZlkqxD9EgWNQoFiAHyaC1Q=) 4: kOhJZb5pvQekEUNKN2h9wR5e3bA.roa (hash: kPeZ6Lfy+ZAHngmgLvhb/1Y+IEKr+56sKk3ka6G/FWE=) 5: s04AY0c7al_er-KtxkZG_la8-ms.roa (hash: Xy1PgvCl533iuiU4yUJ4k1QIMmXrhbExDpf93B/WjgE=) 6: xC95aRjyTDhgBiOlUCeMozANfsg.roa (hash: g3im20hJizIQ/3Z10K8z6H2sCBC/EP8Gok5T7cZ5jAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b7:ef:c9:18:3c:84:b4:35:2b:ec:a0:af:2f:2f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 12 04:00:48 2025 GMT Not After : Dec 13 04:00:48 2025 GMT Subject: CN=5c340678a8990d884ec136d5df3b592a43e55852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:a2:2f:ec:a0:80:db:64:fa:e9:ca:63:c8: 75:7f:3e:51:db:d5:88:b5:75:9e:35:57:d7:1b:f0: 29:55:6a:d8:9f:1b:29:06:09:ec:28:2f:8e:6c:09: 4e:4e:21:38:9c:ba:27:54:af:ea:95:31:c4:59:87: 02:ec:37:ef:57:9d:33:07:27:c5:e7:65:7f:82:42: da:78:83:61:07:22:b0:7e:0e:87:a6:9b:6a:41:74: c4:f3:77:c4:16:a2:5d:bf:0d:94:da:b0:49:3f:a4: 1a:56:0a:8f:04:8d:f1:b9:f3:1d:6b:dd:8d:d3:88: 33:17:c4:47:06:cd:c6:03:da:87:03:4a:e0:df:4c: e7:f7:ce:ba:ca:ee:54:88:93:25:d8:a1:d9:dd:e1: 79:f5:d2:3f:01:de:45:e0:e1:0c:ed:96:d6:ff:80: fa:6b:05:9f:3a:4a:bf:a1:cd:2e:c0:2c:f6:4f:76: a8:45:9d:ed:a7:be:45:cf:b9:27:5d:2b:be:b4:cc: 42:38:76:7f:8b:3d:fb:77:be:5c:0f:ba:70:45:9f: 6a:f9:67:a5:cd:51:af:be:bd:40:6d:0a:57:3a:ba: 9e:38:8e:89:a7:61:e1:4b:d8:f0:84:71:a3:fb:f8: d4:bf:04:c7:37:64:83:0c:9e:82:2f:80:49:ce:8d: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:34:06:78:A8:99:0D:88:4E:C1:36:D5:DF:3B:59:2A:43:E5:58:52 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f1:21:71:82:47:65:38:56:99:5a:2d:21:e1:f5:47:84:01: 5f:87:37:42:77:71:b3:20:28:b9:1f:18:31:22:72:8a:fc:71: 06:da:c5:e1:bd:6b:b0:a6:b9:06:d9:43:59:a6:8b:20:f4:36: cb:f7:67:c5:2d:a1:b1:9c:d1:35:be:6e:d1:f2:a3:8a:e9:53: 98:32:66:da:ae:e6:cc:d4:ce:ef:a8:7b:f3:9e:53:a8:f2:70: b0:74:70:85:c7:3e:f9:4b:02:c9:e3:ff:81:17:24:96:61:79: 60:3e:c4:0c:cb:8c:c5:ae:b4:67:af:c2:a8:55:c8:b5:3a:47: a8:3b:28:e4:3b:03:81:63:b6:7c:13:ae:90:d8:d7:14:22:bf: 13:53:a1:3f:81:1a:cb:a9:9f:35:6a:4b:75:95:6c:ba:31:88: ff:83:8e:99:d4:87:54:b8:93:63:60:8e:e7:b1:01:29:44:40: f9:c2:64:49:dd:2e:bb:f5:8e:e0:cf:04:ec:9b:31:4f:c1:3d: ac:d0:e6:d1:8e:64:8d:ae:d9:9a:87:4f:54:2e:8c:76:46:b7: 02:85:dd:e4:32:67:b9:16:5d:18:8a:3e:85:aa:3e:bf:80:46: 5f:b9:b3:36:85:de:3c:9c:32:c2:03:c6:1c:63:c4:2b:48:fc: c7:9c:25:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQt+/JGDyEtDUr7KCvLy/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjEyMDQwMDQ4WhcNMjUxMjEzMDQwMDQ4WjAzMTEwLwYDVQQD Eyg1YzM0MDY3OGE4OTkwZDg4NGVjMTM2ZDVkZjNiNTkyYTQzZTU1ODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguOiL+yggNtk+unKY8h1fz5R29WI tXWeNVfXG/ApVWrYnxspBgnsKC+ObAlOTiE4nLonVK/qlTHEWYcC7DfvV50zByfF 52V/gkLaeINhByKwfg6HpptqQXTE83fEFqJdvw2U2rBJP6QaVgqPBI3xufMda92N 04gzF8RHBs3GA9qHA0rg30zn9866yu5UiJMl2KHZ3eF59dI/Ad5F4OEM7ZbW/4D6 awWfOkq/oc0uwCz2T3aoRZ3tp75Fz7knXSu+tMxCOHZ/iz37d75cD7pwRZ9q+Wel zVGvvr1AbQpXOrqeOI6Jp2HhS9jwhHGj+/jUvwTHN2SDDJ6CL4BJzo1IZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw0BniomQ2ITsE21d87WSpD5VhSMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/EhcYJH ZThWmVotIeH1R4QBX4c3QndxsyAouR8YMSJyivxxBtrF4b1rsKa5BtlDWaaLIPQ2 y/dnxS2hsZzRNb5u0fKjiulTmDJm2q7mzNTO76h7855TqPJwsHRwhcc++UsCyeP/ gRcklmF5YD7EDMuMxa60Z6/CqFXItTpHqDso5DsDgWO2fBOukNjXFCK/E1OhP4Ea y6mfNWpLdZVsujGI/4OOmdSHVLiTY2CO57EBKURA+cJkSd0uu/WO4M8E7JsxT8E9 rNDm0Y5kja7ZmodPVC6Mdka3AoXd5DJnuRZdGIo+hao+v4BGX7mzNoXePJwywgPG HGPEK0j8x5wlOw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:51:21 2025 by rpki-client