This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft File: 6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json) Hash identifier: 6GWyWrqxIlYAhuZgeJ7xbOYctzbap3uwbXlUnAu7qY8= Subject key identifier: CE:94:C4:EE:D8:52:8F:ED:04:93:B0:FB:C6:2A:6E:27:91:85:AF:EF Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Certificate serial: 019AF3F7172ADDBDA89CD8CA0AAE91E557C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft Manifest number: 0724 Signing time: Sat 06 Dec 2025 14:00:48 +0000 Manifest this update: Sat 06 Dec 2025 14:00:48 +0000 Manifest next update: Sun 07 Dec 2025 14:00:48 +0000 Files and hashes: 1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: OO3SpGnZOSV2T6QkOqPVzujo6ExevDbCGr/XkcniH4A=) 2: CPbkzEVmBbI7ZqkmmyW8DeViz24.roa (hash: nYuL9qq+IF9HCzIXZWABjOV3GfyfPuUgUhrIUj9W9wk=) 3: Vrgx7vIvsF8zYOaGSae4akirA8E.roa (hash: ui7bIuQdVcdRVDf8eIFg2mfVrPzlEX+6v4UZ3XVxNiQ=) 4: _D_RKE9zrsJI9vEdORTMyS_CPEY.roa (hash: sb+pf5zLeTQvFz0cOCuvvmv/BmsQJq+3u4wsDH/y9zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:17:2a:dd:bd:a8:9c:d8:ca:0a:ae:91:e5:57:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Validity Not Before: Dec 6 14:00:48 2025 GMT Not After : Dec 7 14:00:48 2025 GMT Subject: CN=ce94c4eed8528fed0493b0fbc62a6e279185afef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:be:b0:48:d8:6d:c8:b8:94:d0:1a:8c:f0: 03:a4:77:b2:5f:9c:62:67:d6:c6:ef:75:25:c9:4a: b9:76:11:c5:b6:b2:3b:fa:ce:73:48:a9:0a:1a:50: 0c:01:2e:c4:df:0c:39:a9:2d:9d:73:42:d6:55:59: 02:40:b4:01:0c:bf:b8:b8:88:04:30:de:f7:86:8a: e3:14:83:79:87:20:90:81:44:39:04:63:9a:c9:e2: 8b:78:3b:c4:75:9a:69:37:37:07:24:fd:42:39:b2: fe:1c:b6:2a:88:ad:e1:52:c0:d9:a1:27:28:13:0a: 76:59:80:88:de:90:80:b7:01:b4:97:df:de:86:36: f5:c0:fb:31:02:c8:2e:50:89:dd:01:bf:89:44:95: a3:12:5c:fc:5e:65:92:7f:b6:2a:1d:b7:d2:b1:9f: 9b:ba:40:18:ee:86:f6:43:1a:dd:3e:76:91:03:60: 49:22:22:1d:90:52:8f:53:8e:cd:6c:ee:2c:57:53: 06:b7:8a:a6:1b:fa:e4:69:dd:0e:89:da:6a:04:82: 3f:e8:dc:fb:2b:f6:1c:62:3a:fd:41:fb:e0:88:a1: 3f:04:3e:8f:02:67:10:4c:c5:f5:f5:86:ec:80:b0: e1:57:e2:24:c3:86:43:95:ac:0d:9f:98:11:92:46: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:94:C4:EE:D8:52:8F:ED:04:93:B0:FB:C6:2A:6E:27:91:85:AF:EF X509v3 Authority Key Identifier: keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:db:0e:b1:ee:46:ca:65:c4:5e:e6:24:a8:17:3a:4e:a9:3c: 1e:f1:85:c8:67:c0:29:b3:f6:33:07:bf:f7:89:c6:5e:9f:75: 37:bb:8a:1c:b3:ba:c7:07:79:49:43:0c:f2:f4:52:1b:8f:f9: b5:f5:67:f9:24:88:f7:91:f6:bc:33:96:fa:57:17:b7:d4:e3: 88:d6:57:41:a5:4d:65:8a:1a:da:28:9c:bd:5d:6b:b3:d1:5c: a0:89:93:e8:32:69:e2:b3:10:e8:04:ca:1f:56:e2:0c:96:8d: 4b:4f:e0:b1:fb:a0:c4:6c:4a:d0:6c:fd:e5:6f:4b:d7:6a:84: 45:bd:53:52:ae:44:fe:5f:b8:e8:c8:14:c2:2c:ff:8a:8c:86: 95:38:77:43:de:4e:fe:e9:b4:8d:ab:7b:27:f0:c1:ea:cf:76: 8c:1b:93:be:ea:0a:3d:29:df:90:da:3e:2a:47:af:cd:04:c4: 5e:ce:6b:07:fb:2b:9a:8c:cb:62:b5:f4:f7:6d:df:10:f2:69: 13:6b:6e:3a:f7:d4:7a:4a:eb:bc:29:bc:e7:5f:0d:26:c4:e3: 63:40:9e:38:54:64:67:78:d7:45:02:10:ec:45:64:2a:26:8c: 31:e7:c7:6d:58:31:2f:16:9e:67:8c:49:4c:0c:91:c3:55:01: 51:82:d9:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xcq3b2onNjKCq6R5VfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4 NDFjOTYwHhcNMjUxMjA2MTQwMDQ4WhcNMjUxMjA3MTQwMDQ4WjAzMTEwLwYDVQQD EyhjZTk0YzRlZWQ4NTI4ZmVkMDQ5M2IwZmJjNjJhNmUyNzkxODVhZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRq+sEjYbci4lNAajPADpHeyX5xi Z9bG73UlyUq5dhHFtrI7+s5zSKkKGlAMAS7E3ww5qS2dc0LWVVkCQLQBDL+4uIgE MN73horjFIN5hyCQgUQ5BGOayeKLeDvEdZppNzcHJP1CObL+HLYqiK3hUsDZoSco Ewp2WYCI3pCAtwG0l9/ehjb1wPsxAsguUIndAb+JRJWjElz8XmWSf7YqHbfSsZ+b ukAY7ob2QxrdPnaRA2BJIiIdkFKPU47NbO4sV1MGt4qmG/rkad0OidpqBII/6Nz7 K/YcYjr9QfvgiKE/BD6PAmcQTMX19YbsgLDhV+Ikw4ZDlawNn5gRkkbcNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6UxO7YUo/tBJOw+8YqbieRha/vMB8GA1UdIwQY MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt NDY1ZDIyM2IyMzJlLzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNsOse5G ymXEXuYkqBc6Tqk8HvGFyGfAKbP2Mwe/94nGXp91N7uKHLO6xwd5SUMM8vRSG4/5 tfVn+SSI95H2vDOW+lcXt9TjiNZXQaVNZYoa2iicvV1rs9FcoImT6DJp4rMQ6ATK H1biDJaNS0/gsfugxGxK0Gz95W9L12qERb1TUq5E/l+46MgUwiz/ioyGlTh3Q95O /um0jat7J/DB6s92jBuTvuoKPSnfkNo+KkevzQTEXs5rB/srmozLYrX0923fEPJp E2tuOvfUekrrvCm8518NJsTjY0CeOFRkZ3jXRQIQ7EVkKiaMMefHbVgxLxaeZ4xJ TAyRw1UBUYLZ5w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:17 2025 by rpki-client