This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft File: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json) Hash identifier: LJ8o52OSvurJmcG4kngIPkuLLu9djrMOdeoDuQBFf1k= Subject key identifier: F8:8F:41:6E:51:A7:A5:08:17:5D:8C:77:18:AB:54:C1:4C:D5:01:3C Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4 Certificate issuer: /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4 Certificate serial: 019AF12ECE3C451A630D1EDA6FA454C0CB29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: tSTyRmglmvXxYuDThR1rhjaUa3PUOvMM8ZJJt7n3Mmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ce:3c:45:1a:63:0d:1e:da:6f:a4:54:c0:cb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4 Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=f88f416e51a7a508175d8c7718ab54c14cd5013c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:8f:fa:08:12:c7:05:0f:38:51:01:5c:c8: 0a:81:a4:a9:8e:d1:cf:e3:8a:78:4b:90:46:2d:49: 0c:d5:01:2a:ae:e8:8e:af:e6:ec:3f:99:9a:85:26: 6a:d5:16:56:aa:8d:3d:a9:05:b1:5a:23:a3:32:ca: 29:0b:3d:f5:b7:b7:92:27:d1:71:0c:46:f9:a1:95: 77:01:39:0f:16:29:45:e3:35:ce:e0:4f:4e:9f:22: ad:00:27:c5:cb:1c:59:f8:01:c5:a8:54:4a:30:4c: ec:1c:78:50:78:07:4c:8e:1f:42:3b:50:ef:ef:2b: 64:7c:cd:46:33:9d:70:1c:79:43:fb:c1:3a:19:02: 6f:7e:02:03:85:d5:a6:d1:5f:82:29:b0:41:bf:0e: e8:30:67:42:c4:fb:d7:35:af:03:9e:3e:51:5d:4f: 78:3e:12:48:bb:fc:d9:62:92:ad:3a:77:56:2c:48: cd:e0:3c:fe:e7:91:09:2f:5f:5e:61:ce:ff:03:d9: 85:18:f8:74:ef:7e:01:fa:21:aa:46:1a:17:b1:11: 4d:0b:7f:b7:ae:23:f6:4f:0b:f7:f9:25:71:74:40: dc:64:0b:87:7d:67:2f:49:c4:42:eb:d5:ab:24:57: 0b:9f:47:1a:70:f7:55:43:0b:35:65:86:60:f4:61: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8F:41:6E:51:A7:A5:08:17:5D:8C:77:18:AB:54:C1:4C:D5:01:3C X509v3 Authority Key Identifier: keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f3:e5:02:19:4b:75:27:0a:d0:48:ae:cf:9b:7c:d7:a1:73: 08:08:46:33:30:56:c7:5e:b4:26:8c:1c:3c:29:d2:9c:b9:98: 73:26:53:5b:70:86:eb:99:05:78:8e:b3:a7:6b:05:86:c7:58: 7c:95:f8:5b:aa:c3:51:86:7b:f6:89:d4:5b:05:11:e5:e4:62: 34:fc:c9:18:09:ed:bf:8e:54:66:3f:7d:e2:af:fc:b2:e4:0c: f7:e5:0c:c3:24:5b:f3:4b:f7:13:7e:8e:79:31:d1:c0:59:e3: 4b:3f:dd:75:9e:3d:42:e6:55:30:f1:70:16:ea:e3:ce:07:b9: 95:0b:44:88:39:96:9f:58:a9:77:e0:90:44:75:c4:bb:6c:e4: 5f:16:65:c3:2f:33:a8:94:34:ca:10:e7:9d:c1:60:eb:af:3e: 9e:33:6a:60:39:bf:b0:88:ae:c0:a2:c4:fe:49:be:be:ed:71: 96:a0:ab:e4:22:6d:32:71:c0:e8:7f:5b:c1:c3:8b:25:c6:fc: d6:c8:1e:2f:bc:cf:c0:25:b6:c9:b0:5a:60:48:8b:b3:9a:9a: fc:e0:cf:36:ea:4e:de:07:c9:b1:63:30:0f:07:b4:3e:9d:5a: f2:b4:dc:16:29:51:ea:86:12:da:b4:2e:6c:cf:d0:34:a1:13: a0:1a:7c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLs48RRpjDR7ab6RUwMspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MjU4ZTE1MGU5MjJmY2E1Y2I4NWI2ZmUxYzY4YjgwNWM5 YjZlZjQwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD EyhmODhmNDE2ZTUxYTdhNTA4MTc1ZDhjNzcxOGFiNTRjMTRjZDUwMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunaP+ggSxwUPOFEBXMgKgaSpjtHP 44p4S5BGLUkM1QEqruiOr+bsP5mahSZq1RZWqo09qQWxWiOjMsopCz31t7eSJ9Fx DEb5oZV3ATkPFilF4zXO4E9OnyKtACfFyxxZ+AHFqFRKMEzsHHhQeAdMjh9CO1Dv 7ytkfM1GM51wHHlD+8E6GQJvfgIDhdWm0V+CKbBBvw7oMGdCxPvXNa8Dnj5RXU94 PhJIu/zZYpKtOndWLEjN4Dz+55EJL19eYc7/A9mFGPh0734B+iGqRhoXsRFNC3+3 riP2Twv3+SVxdEDcZAuHfWcvScRC69WrJFcLn0cacPdVQws1ZYZg9GHDBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiPQW5Rp6UIF12MdxirVMFM1QE8MB8GA1UdIwQY MBaAFOgljhUOki/KXLhbb+HGi4Bcm270MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkNXT0ZRNlNMOHBjdUZ0djRjYUxnRnliYnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85MGRjYjctYjkxZS00OWE4LTk3ZDkt NDNmNmU4MWYxYWU4LzEvNkNXT0ZRNlNMOHBjdUZ0djRjYUxnRnliYnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85MGRjYjctYjkxZS00OWE4LTk3ZDktNDNmNmU4MWYxYWU4 LzEvNkNXT0ZRNlNMOHBjdUZ0djRjYUxnRnliYnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfPlAhlL dScK0Eiuz5t816FzCAhGMzBWx160JowcPCnSnLmYcyZTW3CG65kFeI6zp2sFhsdY fJX4W6rDUYZ79onUWwUR5eRiNPzJGAntv45UZj994q/8suQM9+UMwyRb80v3E36O eTHRwFnjSz/ddZ49QuZVMPFwFurjzge5lQtEiDmWn1ipd+CQRHXEu2zkXxZlwy8z qJQ0yhDnncFg668+njNqYDm/sIiuwKLE/km+vu1xlqCr5CJtMnHA6H9bwcOLJcb8 1sgeL7zPwCW2ybBaYEiLs5qa/ODPNupO3gfJsWMwDwe0Pp1a8rTcFilR6oYS2rQu bM/QNKEToBp8/w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:06 2025 by rpki-client