This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft File: r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json) Hash identifier: QkxPL43AcTxJkFKF36fTSLP+RF2lTEtwduTMXZLfwpw= Subject key identifier: D7:3B:E6:12:9C:BE:DE:84:E4:5C:CC:CC:EA:B3:BF:6B:C2:D4:CF:1D Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA Certificate issuer: /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa Certificate serial: 019AF12D5BF649131C083713B89085E3F41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: 4sg2mnJN1h8scSq0FvGLGS+/JDwZ9f3BguHvscaWnKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5b:f6:49:13:1c:08:37:13:b8:90:85:e3:f4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=d73be6129cbede84e45ccccceab3bf6bc2d4cf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:1c:9a:e5:79:fa:52:9f:50:e6:42:42:13: 5e:00:ee:6d:0f:27:9b:d1:5c:40:a1:03:b1:24:89: 0c:7a:84:d2:67:a6:a2:c1:37:8e:e3:41:a7:d2:d5: e8:ef:aa:e1:0d:c8:4f:e9:8a:02:eb:9b:86:eb:60: c2:32:46:d2:a0:25:65:bc:57:21:61:17:c3:02:8f: df:83:be:37:e5:47:bf:47:00:73:36:d1:8a:c6:a5: cb:7b:a1:73:e3:1d:f7:3f:75:0f:4a:57:e4:02:5b: 62:a4:f4:46:b1:93:8d:e9:c0:75:4f:ea:95:4f:9c: 7f:da:5a:aa:b7:5d:5a:13:d4:65:97:7e:c0:59:e3: 0e:0a:eb:89:d3:10:53:4c:bb:95:00:4b:0a:f3:ca: d2:a5:f5:97:3e:6d:b5:26:2d:21:c9:ab:6f:5a:53: 8b:2a:53:2a:e0:1f:80:68:64:b0:4b:aa:e1:06:54: 9c:2f:6f:17:9d:48:f1:4e:43:bd:b7:ab:c5:89:8a: 19:6d:51:c5:8a:32:8a:66:60:c9:eb:ca:e5:f2:28: ec:1e:74:b0:58:ea:15:02:35:8e:36:1e:f0:01:e0: b0:91:4f:53:21:14:09:5f:98:fc:45:0a:5a:64:fa: e7:5a:c6:18:2e:02:f7:3b:63:b7:a4:34:f6:78:f1: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3B:E6:12:9C:BE:DE:84:E4:5C:CC:CC:EA:B3:BF:6B:C2:D4:CF:1D X509v3 Authority Key Identifier: keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e4:0f:b3:8a:e7:94:7e:f6:b6:42:77:f5:98:71:f8:f6:cc: ce:4b:7c:21:b5:05:f0:07:13:f9:0e:f7:bd:23:39:14:dd:5e: 7e:c7:cb:2a:ce:92:94:f5:bf:d9:a2:36:9e:82:6e:a0:90:12: e3:41:1b:e5:40:c4:de:f2:95:b7:03:c4:ef:3f:ae:11:2f:e3: 22:71:f6:f1:d5:03:65:05:75:bc:d5:a2:f3:21:22:80:82:cd: a5:2e:87:5a:e3:6f:de:0d:87:22:e9:f6:02:6b:71:a3:88:96: 41:fd:86:2b:9d:93:ed:66:a5:c4:e5:27:55:1c:b6:42:e3:70: d0:c1:cb:16:5a:44:65:f4:54:d7:18:59:85:84:6e:b6:61:91: a8:16:1e:62:b1:d3:77:7f:2e:a3:74:06:14:5d:8d:f4:d6:e8: 49:ca:45:d8:29:97:83:ba:b3:f6:2b:45:03:75:ae:6a:d3:6f: 65:bd:0b:15:54:f4:ac:50:53:72:c6:46:c1:8d:0e:ea:bf:7b: 83:63:05:06:86:95:bf:e9:a0:82:d1:44:7e:18:9d:d3:85:a0: 37:56:6e:31:78:65:fd:82:81:a8:d2:8b:41:44:b4:f9:30:1e: 21:18:8e:aa:1d:c7:6c:fd:89:d8:86:99:c9:4d:34:5c:6b:e2: 37:62:ad:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVv2SRMcCDcTuJCF4/QfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNGU4NjJmOGViNTVmNGY4MjU0ZTJjODU4YjcyZjQzMzk3 ZmUzZmEwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EyhkNzNiZTYxMjljYmVkZTg0ZTQ1Y2NjY2NlYWIzYmY2YmMyZDRjZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSkcmuV5+lKfUOZCQhNeAO5tDyeb 0VxAoQOxJIkMeoTSZ6aiwTeO40Gn0tXo76rhDchP6YoC65uG62DCMkbSoCVlvFch YRfDAo/fg7435Ue/RwBzNtGKxqXLe6Fz4x33P3UPSlfkAltipPRGsZON6cB1T+qV T5x/2lqqt11aE9Rll37AWeMOCuuJ0xBTTLuVAEsK88rSpfWXPm21Ji0hyatvWlOL KlMq4B+AaGSwS6rhBlScL28XnUjxTkO9t6vFiYoZbVHFijKKZmDJ68rl8ijsHnSw WOoVAjWONh7wAeCwkU9TIRQJX5j8RQpaZPrnWsYYLgL3O2O3pDT2ePEkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNc75hKcvt6E5FzMzOqzv2vC1M8dMB8GA1UdIwQY MBaAFK9Ohi+OtV9PglTiyFi3L0M5f+P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0Yzct NTBkMmY3YTEwOTYyLzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0YzctNTBkMmY3YTEwOTYy LzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+QPs4rn lH72tkJ39Zhx+PbMzkt8IbUF8AcT+Q73vSM5FN1efsfLKs6SlPW/2aI2noJuoJAS 40Eb5UDE3vKVtwPE7z+uES/jInH28dUDZQV1vNWi8yEigILNpS6HWuNv3g2HIun2 Amtxo4iWQf2GK52T7WalxOUnVRy2QuNw0MHLFlpEZfRU1xhZhYRutmGRqBYeYrHT d38uo3QGFF2N9NboScpF2CmXg7qz9itFA3WuatNvZb0LFVT0rFBTcsZGwY0O6r97 g2MFBoaVv+mggtFEfhid04WgN1ZuMXhl/YKBqNKLQUS0+TAeIRiOqh3HbP2J2IaZ yU00XGviN2KtJg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:59 2025 by rpki-client