This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft File: 6TGKUZjc0_ysJJgFU4XZryEQprQ.mft (raw, json) Hash identifier: 4fg2XxWDInOcvxbWZlvuGUQujPSNlmBXGCJC7aeIx/4= Subject key identifier: DC:BF:0C:4E:03:15:A9:51:04:C5:E8:92:77:EB:E5:DC:EB:46:3C:43 Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4 Certificate issuer: /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4 Certificate serial: 019AE7BBC85D2CCA36EFE8147E63D32ACFAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft Manifest number: 06A5 Signing time: Thu 04 Dec 2025 05:00:34 +0000 Manifest this update: Thu 04 Dec 2025 05:00:34 +0000 Manifest next update: Fri 05 Dec 2025 05:00:34 +0000 Files and hashes: 1: 1-BVKVQFCRlMAcE96pNTNBcbIG7s.roa (hash: JOxbdIeMTOyk9ZAjY/swAEcMqcgzzQjrBDhzF90m3Vs=) 2: 3ZU7hgqFBvs-JOWJ6E4MEbiA2bk.roa (hash: /NMweqecvh0z4jYnenJq1VRlGwr+MOCXPTrSyQD9fMA=) 3: 6TGKUZjc0_ysJJgFU4XZryEQprQ.crl (hash: pn4KZW+IY8bC0pTJs+i46bqW8vJcX6pa4ngdPMDVHkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:bb:c8:5d:2c:ca:36:ef:e8:14:7e:63:d3:2a:cf:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4 Validity Not Before: Dec 4 05:00:34 2025 GMT Not After : Dec 5 05:00:34 2025 GMT Subject: CN=dcbf0c4e0315a95104c5e89277ebe5dceb463c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:4c:f4:13:53:c8:97:61:d7:83:4c:10:c5: 4f:96:23:bd:1b:be:31:ae:74:07:d5:42:0f:ed:15: 10:92:3f:f9:57:cc:da:b7:99:58:ab:e5:9a:de:f7: dc:9a:95:91:49:09:80:5d:83:20:83:76:f5:c9:5c: af:74:b0:f8:76:f7:24:9d:fd:58:78:52:61:18:15: e4:25:90:0b:5b:36:aa:67:22:dc:24:8b:29:ee:6d: b4:d4:45:0e:76:17:fe:98:7d:1e:da:64:d4:37:a7: 77:5d:75:53:d6:a9:dd:67:d7:91:aa:78:21:2d:10: b9:6f:f6:17:f2:8d:6e:1b:7b:30:4b:c2:90:2f:6a: b4:4a:9e:10:43:1e:97:45:ce:9a:65:9f:e2:70:fd: 31:45:82:5d:8a:9d:07:83:db:31:98:d5:69:b6:bf: 37:b4:a8:ec:cf:d7:48:d9:c1:40:0f:c4:57:27:10: 44:a8:37:81:91:39:60:7d:bc:30:bb:3c:48:71:6e: ae:b0:14:d6:a2:ce:44:fc:f4:28:3f:ee:bf:35:8b: 4d:9c:d0:5c:a0:1e:f7:74:9f:85:89:f6:2c:70:97: 23:32:fa:80:35:7d:e7:c2:dc:cd:a4:1a:ec:c2:b8: 5f:08:a3:38:e4:5e:4b:ae:b4:eb:cb:fb:f6:93:1f: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BF:0C:4E:03:15:A9:51:04:C5:E8:92:77:EB:E5:DC:EB:46:3C:43 X509v3 Authority Key Identifier: keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:83:87:11:1b:f9:57:4b:1e:8e:f0:43:b0:19:f6:79:0e:dc: ed:a5:eb:0a:a8:ae:31:07:47:ca:75:50:2d:74:da:20:6f:b6: 56:c2:90:a8:60:71:e1:e0:f4:7a:46:45:ce:85:eb:98:03:60: b7:13:e1:3c:9e:32:41:93:86:45:e0:f9:8c:45:ac:21:43:83: aa:fe:ca:ab:ee:f5:15:f5:fb:0d:db:d4:5d:2e:50:14:4b:7a: cb:f0:16:f2:a9:d4:72:54:76:cf:c4:2b:dc:c2:af:da:49:53: 24:d5:04:96:96:3e:cf:29:f5:28:65:52:90:0c:ab:f5:8a:b1: 79:d8:b4:5f:d0:af:73:25:64:9e:7d:92:9f:06:74:c8:9c:06: ec:50:ca:ec:38:ec:3e:b6:e4:6c:28:4b:d1:54:f7:dd:88:4e: cc:fa:bc:7d:a8:c5:0b:f5:f6:f2:e1:e3:d8:f4:5a:f7:d3:2c: 18:64:54:48:c7:fd:ed:97:8e:6e:a4:91:15:08:60:87:95:db: 12:74:a3:e5:8d:c1:49:e9:a5:85:64:8e:8f:28:41:ae:13:5b: 18:ad:1d:64:f2:bb:7a:6a:b9:13:76:4e:df:01:1b:46:0c:02: 4e:d1:6d:83:d0:bc:c2:4f:85:a6:6d:18:47:66:73:c0:e7:5f: 5a:97:75:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnu8hdLMo27+gUfmPTKs+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzE4YTUxOThkY2QzZmNhYzI0OTgwNTUzODVkOWFmMjEx MGE2YjQwHhcNMjUxMjA0MDUwMDM0WhcNMjUxMjA1MDUwMDM0WjAzMTEwLwYDVQQD EyhkY2JmMGM0ZTAzMTVhOTUxMDRjNWU4OTI3N2ViZTVkY2ViNDYzYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYFM9BNTyJdh14NMEMVPliO9G74x rnQH1UIP7RUQkj/5V8zat5lYq+Wa3vfcmpWRSQmAXYMgg3b1yVyvdLD4dvcknf1Y eFJhGBXkJZALWzaqZyLcJIsp7m201EUOdhf+mH0e2mTUN6d3XXVT1qndZ9eRqngh LRC5b/YX8o1uG3swS8KQL2q0Sp4QQx6XRc6aZZ/icP0xRYJdip0Hg9sxmNVptr83 tKjsz9dI2cFAD8RXJxBEqDeBkTlgfbwwuzxIcW6usBTWos5E/PQoP+6/NYtNnNBc oB73dJ+FifYscJcjMvqANX3nwtzNpBrswrhfCKM45F5LrrTry/v2kx8BtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy/DE4DFalRBMXoknfr5dzrRjxDMB8GA1UdIwQY MBaAFOkxilGY3NP8rCSYBVOF2a8hEKa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMt YzMzNzdjMWUzYTJkLzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMtYzMzNzdjMWUzYTJk LzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoOHERv5 V0sejvBDsBn2eQ7c7aXrCqiuMQdHynVQLXTaIG+2VsKQqGBx4eD0ekZFzoXrmANg txPhPJ4yQZOGReD5jEWsIUODqv7Kq+71FfX7DdvUXS5QFEt6y/AW8qnUclR2z8Qr 3MKv2klTJNUElpY+zyn1KGVSkAyr9Yqxedi0X9CvcyVknn2SnwZ0yJwG7FDK7Djs PrbkbChL0VT33YhOzPq8fajFC/X28uHj2PRa99MsGGRUSMf97ZeObqSRFQhgh5Xb EnSj5Y3BSemlhWSOjyhBrhNbGK0dZPK7emq5E3ZO3wEbRgwCTtFtg9C8wk+Fpm0Y R2ZzwOdfWpd1XQ== -----END CERTIFICATE-----Generated at Thu Dec 4 08:36:07 2025 by rpki-client