This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json) Hash identifier: HDqA9ZoIl1SpdswhmSqgBrOpaVJsAXXE9QEpGH9xTEI= Subject key identifier: BF:D0:FA:C6:A2:34:0B:8F:92:AE:C3:F5:70:CC:01:67:46:1B:82:24 Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc Certificate serial: 019B40C900636D12D426F9F70C65D9FAE4F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 12:01:13 +0000 Manifest this update: Sun 21 Dec 2025 12:01:13 +0000 Manifest next update: Mon 22 Dec 2025 12:01:13 +0000 Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: /Yeqdo4HEIyOFfgzjCKFzG67dqdSq3/ZjO2+5c4hHEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:00:63:6d:12:d4:26:f9:f7:0c:65:d9:fa:e4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc Validity Not Before: Dec 21 12:01:13 2025 GMT Not After : Dec 22 12:01:13 2025 GMT Subject: CN=bfd0fac6a2340b8f92aec3f570cc0167461b8224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:cd:b2:45:d4:02:0c:6b:96:5b:b3:04:a4: ce:17:fe:d7:18:eb:52:80:23:d3:f4:e2:61:e6:77: 92:49:6d:e7:de:1a:dc:fd:40:f0:5f:4c:da:a5:96: 82:b7:36:ac:eb:e8:b1:aa:4f:5a:30:32:e1:de:b3: 1c:1e:c3:94:05:a4:0a:28:d1:a9:f7:db:ca:81:bc: 0e:92:b5:d6:53:87:60:cf:09:b7:73:f8:87:e3:90: b7:b6:19:cc:c8:9d:2e:55:a4:1d:3e:1b:0f:05:09: 8c:c3:58:58:ea:76:0e:79:28:35:47:b9:5f:68:5b: 1f:a3:4d:c1:93:b2:7c:b2:5e:a2:2a:2f:d4:88:9c: 62:39:c1:62:5d:4a:be:fd:30:2e:91:05:89:b8:87: ed:9f:07:97:23:62:3d:51:a6:ea:6d:71:74:50:c1: 38:80:aa:fc:5d:b4:39:dc:e8:9a:0f:13:e6:00:da: 0b:85:42:bf:a2:b5:29:c3:9c:12:09:76:39:77:d5: cc:c2:9a:04:d5:37:87:55:ed:be:9f:fd:c7:14:38: 0e:22:6a:f9:43:f8:7b:38:f3:52:9f:3a:42:03:ba: 38:93:30:64:e5:3a:69:45:1e:af:c0:58:32:ce:31: 3e:f5:8d:89:3d:a7:5c:b6:67:9a:d7:c0:2b:c4:69: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:FA:C6:A2:34:0B:8F:92:AE:C3:F5:70:CC:01:67:46:1B:82:24 X509v3 Authority Key Identifier: keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:22:35:94:e1:82:ac:34:e7:32:b5:bb:89:b3:f2:4b:90:10: 92:1a:b4:bd:71:3f:68:fe:8f:c5:27:46:37:18:f8:8d:36:18: 42:65:18:10:ea:0a:52:ff:1d:e1:87:8f:aa:8e:92:c5:28:77: 87:3f:87:82:71:cb:db:f9:1e:66:1a:65:c8:87:63:57:f3:69: 76:6a:38:8c:bc:8e:67:e6:d2:f9:5c:61:28:4e:2e:c2:7b:5e: 73:6a:97:3a:d7:9f:ba:b2:fa:03:e9:91:2b:80:d4:33:4d:10: 9d:99:fa:d2:12:5c:13:31:f5:52:7e:14:8f:ec:4d:51:02:b6: b2:10:9f:ba:86:bc:09:0e:66:a4:a9:4e:27:db:95:15:81:87: c7:61:df:df:90:b8:bd:db:3a:8f:10:4c:fd:e6:8f:b7:6b:66: 62:35:3d:51:af:80:e7:11:d0:75:bb:88:9c:b4:40:48:63:f8: 83:75:35:25:32:f6:52:0a:04:f1:a5:d3:35:fa:ed:63:f3:eb: 01:b4:27:01:60:1d:05:ec:85:85:d5:01:55:f1:d5:2e:77:7e: 39:8f:67:81:dc:02:53:b0:ed:0c:2c:d4:27:a1:48:56:00:8e: c0:6a:c8:6a:0f:c2:8d:c0:55:0b:75:ab:93:90:c4:01:e2:4a: 0e:b4:10:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyQBjbRLUJvn3DGXZ+uTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDNiM2E1YTcyODBhYTlmZTJiZmZhOTA2NWMyYjJhMDFh NTc3Y2MwHhcNMjUxMjIxMTIwMTEzWhcNMjUxMjIyMTIwMTEzWjAzMTEwLwYDVQQD EyhiZmQwZmFjNmEyMzQwYjhmOTJhZWMzZjU3MGNjMDE2NzQ2MWI4MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWPNskXUAgxrlluzBKTOF/7XGOtS gCPT9OJh5neSSW3n3hrc/UDwX0zapZaCtzas6+ixqk9aMDLh3rMcHsOUBaQKKNGp 99vKgbwOkrXWU4dgzwm3c/iH45C3thnMyJ0uVaQdPhsPBQmMw1hY6nYOeSg1R7lf aFsfo03Bk7J8sl6iKi/UiJxiOcFiXUq+/TAukQWJuIftnweXI2I9UabqbXF0UME4 gKr8XbQ53OiaDxPmANoLhUK/orUpw5wSCXY5d9XMwpoE1TeHVe2+n/3HFDgOImr5 Q/h7OPNSnzpCA7o4kzBk5TppRR6vwFgyzjE+9Y2JPadctmea18ArxGmZpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/Q+saiNAuPkq7D9XDMAWdGG4IkMB8GA1UdIwQY MBaAFOkDs6WnKAqp/iv/qQZcKyoBpXfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUt NGNlYzY5NjgzM2VkLzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUtNGNlYzY5NjgzM2Vk LzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCI1lOGC rDTnMrW7ibPyS5AQkhq0vXE/aP6PxSdGNxj4jTYYQmUYEOoKUv8d4YePqo6SxSh3 hz+HgnHL2/keZhplyIdjV/Npdmo4jLyOZ+bS+VxhKE4uwntec2qXOtefurL6A+mR K4DUM00QnZn60hJcEzH1Un4Uj+xNUQK2shCfuoa8CQ5mpKlOJ9uVFYGHx2Hf35C4 vds6jxBM/eaPt2tmYjU9Ua+A5xHQdbuInLRASGP4g3U1JTL2UgoE8aXTNfrtY/Pr AbQnAWAdBeyFhdUBVfHVLnd+OY9ngdwCU7DtDCzUJ6FIVgCOwGrIag/CjcBVC3Wr k5DEAeJKDrQQ9g== -----END CERTIFICATE-----Generated at Sun Dec 21 22:10:04 2025 by rpki-client