This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json) Hash identifier: MZBsLmPu2VUgctMEBnB5CIN+EZIo6Q5qL1KT/ZWRbl8= Subject key identifier: 26:92:4F:12:37:03:D8:8E:12:76:BF:1C:AD:31:72:4D:47:FE:5E:97 Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29 Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29 Certificate serial: 019AF31CD777B528AAFDE336AD2507607A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft Manifest number: 0EB1 Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: Khxw7wcNGxWZy8/aGYb4rdPbu/y66JrNlWRpPE3T6Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d7:77:b5:28:aa:fd:e3:36:ad:25:07:60:7a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=26924f123703d88e1276bf1cad31724d47fe5e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:00:d6:91:ac:19:c5:58:df:8e:f6:6a:db: e5:a6:b8:10:77:98:f3:23:a9:ae:30:89:33:50:6f: 01:2e:a8:50:37:8e:88:94:b4:9d:8d:8f:d6:8f:81: 54:a4:86:6a:0b:8e:85:ae:2a:d1:c8:98:fa:2c:f8: d4:30:2d:6f:6e:2f:75:00:e7:61:34:3b:b7:99:0c: ad:d1:61:6e:18:55:77:e8:12:e4:e0:99:d5:2a:c9: ea:b4:b8:a9:f4:71:f8:7d:77:78:79:1e:fd:d5:29: 26:58:ba:6c:8a:df:b9:4c:ac:9e:ad:0c:37:ab:66: b4:b2:58:de:1f:43:8e:64:22:09:88:62:d6:d0:9e: 05:f3:ae:91:ae:c6:90:1e:a0:ce:da:72:d1:24:8a: 66:f9:f0:88:33:46:59:bf:5b:ce:68:62:c6:41:db: 13:04:f3:25:b0:13:00:45:32:c1:a7:c8:c3:13:18: e7:22:a6:c2:35:60:3e:8a:ba:12:2c:9e:8a:20:84: ef:f8:6c:d4:4a:a0:b0:69:21:b3:a7:73:2b:74:83: ed:2e:23:f4:f7:7a:f4:7f:26:41:b8:4f:0c:29:52: c0:3d:10:82:57:80:a6:bd:e0:fe:9c:15:c6:c1:e0: 4a:74:b9:ef:27:28:a4:13:da:c0:07:0a:58:27:5d: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:92:4F:12:37:03:D8:8E:12:76:BF:1C:AD:31:72:4D:47:FE:5E:97 X509v3 Authority Key Identifier: keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:0f:95:47:5d:e3:e2:05:99:5c:61:5c:a4:6d:0d:41:9f:4c: 59:2b:c6:09:a9:21:22:1d:4c:33:39:66:16:e9:04:b5:50:f2: 49:1b:cf:0f:2c:23:9f:64:43:e0:7d:66:85:97:69:c2:e9:6c: ab:61:2a:ee:08:37:64:07:7e:82:98:13:09:97:ba:d7:b6:8b: ba:d2:49:5e:53:07:41:8a:f9:90:98:35:a9:44:5d:76:f2:a2: ea:93:54:a7:15:10:90:65:a4:7a:70:74:fc:05:64:61:b6:1d: 93:b9:00:4c:0f:2a:5c:bc:a1:0e:6d:e2:ef:2b:98:f5:70:db: ba:9c:b0:02:4a:2c:bf:9b:30:f4:74:15:e4:69:4d:7a:54:90: 08:6f:35:c1:36:4d:b0:ee:44:7c:e4:a4:95:c7:90:ce:69:1b: 67:05:e1:fd:cd:ba:ed:2c:31:71:ca:5a:cc:95:de:5e:ab:4b: 6f:38:fa:73:03:ff:3c:20:24:8a:83:cc:bd:32:48:da:27:bf: 25:2a:a1:ce:0d:82:20:43:4e:8a:64:5e:a4:6e:a4:22:6a:c3: 51:47:fe:62:fe:ee:38:e5:c5:1b:53:ef:26:be:5b:24:d3:90: 30:9c:ef:24:e7:7e:e6:55:d2:c0:08:6a:59:0b:0a:06:a9:f3: b0:ba:20:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNd3tSiq/eM2rSUHYHp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODcwMTI3MTZiNjZlZTgyMjY0MmMyZjBhMWI5MDE0OGI1 YzdiMjkwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD EygyNjkyNGYxMjM3MDNkODhlMTI3NmJmMWNhZDMxNzI0ZDQ3ZmU1ZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrwA1pGsGcVY3472atvlprgQd5jz I6muMIkzUG8BLqhQN46IlLSdjY/Wj4FUpIZqC46FrirRyJj6LPjUMC1vbi91AOdh NDu3mQyt0WFuGFV36BLk4JnVKsnqtLip9HH4fXd4eR791SkmWLpsit+5TKyerQw3 q2a0sljeH0OOZCIJiGLW0J4F866RrsaQHqDO2nLRJIpm+fCIM0ZZv1vOaGLGQdsT BPMlsBMARTLBp8jDExjnIqbCNWA+iroSLJ6KIITv+GzUSqCwaSGzp3MrdIPtLiP0 93r0fyZBuE8MKVLAPRCCV4CmveD+nBXGweBKdLnvJyikE9rABwpYJ10bEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaSTxI3A9iOEna/HK0xck1H/l6XMB8GA1UdIwQY MBaAFOqHAScWtm7oImQsLwobkBSLXHspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUt YzlmZjFlZTZhZDk1LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUtYzlmZjFlZTZhZDk1 LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArg+VR13j 4gWZXGFcpG0NQZ9MWSvGCakhIh1MMzlmFukEtVDySRvPDywjn2RD4H1mhZdpwuls q2Eq7gg3ZAd+gpgTCZe617aLutJJXlMHQYr5kJg1qURddvKi6pNUpxUQkGWkenB0 /AVkYbYdk7kATA8qXLyhDm3i7yuY9XDbupywAkosv5sw9HQV5GlNelSQCG81wTZN sO5EfOSklceQzmkbZwXh/c267SwxccpazJXeXqtLbzj6cwP/PCAkioPMvTJI2ie/ JSqhzg2CIENOimRepG6kImrDUUf+Yv7uOOXFG1PvJr5bJNOQMJzvJOd+5lXSwAhq WQsKBqnzsLog5g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:51 2025 by rpki-client