This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft File: C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json) Hash identifier: 5eQScQNS+mXh8KEsS4GmPsP8IyRXs8gFyrjyFJq/vHk= Subject key identifier: A9:4D:11:25:21:A6:B8:0B:C5:29:85:26:34:30:AB:D2:7D:17:97:DC Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00 Certificate issuer: /CN=0ba6739d4af2098597190aa092830dea9c17a700 Certificate serial: 019AF088CCFB354FA09ECB3B9DC5DCD8292E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft Manifest number: 0D73 Signing time: Fri 05 Dec 2025 22:01:28 +0000 Manifest this update: Fri 05 Dec 2025 22:01:28 +0000 Manifest next update: Sat 06 Dec 2025 22:01:28 +0000 Files and hashes: 1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: jjU0i54jmKxzjK9Eh2/AzLg51zeST4UBw/NsENj5ZWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:cc:fb:35:4f:a0:9e:cb:3b:9d:c5:dc:d8:29:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700 Validity Not Before: Dec 5 22:01:28 2025 GMT Not After : Dec 6 22:01:28 2025 GMT Subject: CN=a94d112521a6b80bc52985263430abd27d1797dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:cc:c4:3a:e2:4d:a1:2a:0e:64:7a:91:6a: a1:d7:ad:c2:43:42:e1:38:86:c6:0e:db:94:a8:fe: cd:f5:e3:9a:04:ac:bf:d5:71:d6:e5:6e:01:d9:0f: b8:c3:af:9d:32:b3:e4:51:28:97:0b:2e:c3:69:76: e4:fa:e6:3d:25:0e:e5:91:de:a5:45:84:ba:ff:0c: 1c:46:a0:42:5e:50:43:4f:bb:ee:c4:2e:67:5f:d7: b5:46:58:80:6f:7c:07:f2:00:51:9a:00:2e:46:16: b1:8e:c0:fa:60:dc:46:b5:d7:4d:b4:ca:ab:e3:c8: d6:2c:5f:f2:f2:ec:b9:1e:ac:17:a7:2e:10:98:4b: d1:d6:36:e0:25:10:88:b8:5f:44:c9:42:42:fd:06: 77:1b:e0:2a:67:70:9c:75:25:07:8b:60:07:f0:66: f5:ae:11:b4:18:ed:a2:29:53:92:0e:f1:33:05:71: 32:96:67:10:a4:e5:0f:95:ed:9d:dd:cf:97:86:81: 69:84:8d:f0:cb:22:7a:98:6b:63:c8:34:d0:e6:58: 72:ac:a2:94:61:0e:d2:ef:4b:c3:ae:10:25:39:60: aa:b3:a1:ba:80:13:76:d0:7f:2f:6e:a9:c6:91:dc: a1:fd:0e:99:ac:9f:02:94:ea:10:de:8a:bd:da:4e: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:11:25:21:A6:B8:0B:C5:29:85:26:34:30:AB:D2:7D:17:97:DC X509v3 Authority Key Identifier: keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:38:71:bf:7e:cb:ee:f6:45:05:a0:4e:cc:51:17:96:07:13: cc:16:8f:1f:1e:d4:82:7b:48:50:a5:a5:5c:12:3e:0d:31:51: 51:5d:a0:ee:06:df:ea:ef:08:83:34:ee:54:af:8a:01:4a:bd: 3a:d5:32:7a:1b:09:a0:25:81:b9:ac:60:d5:01:2c:a6:e4:99: 23:4c:fe:1e:23:eb:c5:5e:ad:0b:50:df:ec:ca:ab:18:4a:89: b7:3b:42:7f:16:15:09:38:81:6a:ab:88:95:3d:94:4c:59:54: d9:32:2d:79:80:39:97:91:b3:35:f7:da:02:68:fa:28:56:4e: 9d:35:4f:06:59:ea:03:47:2f:91:69:34:70:4f:e6:97:c1:b1: 1c:58:a9:d9:34:5d:16:69:e3:6d:d5:f0:71:36:8d:31:1b:f7: 74:4d:99:42:aa:c6:10:4d:02:75:cc:79:93:53:21:3f:60:a4: 10:72:8f:0c:04:39:ed:c1:11:b6:70:1e:ec:8c:53:1a:4f:ec: d8:ee:e2:37:07:86:e0:95:c6:c6:aa:4b:ba:4f:83:23:ea:79: 35:fd:c9:a4:3e:b4:c9:61:b5:72:57:d0:a6:0c:09:5b:53:6c: c4:32:dd:f4:bd:f5:02:da:44:a4:fc:f4:39:f4:5d:ef:a0:fc: 63:7a:9a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMz7NU+gnss7ncXc2CkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTY3MzlkNGFmMjA5ODU5NzE5MGFhMDkyODMwZGVhOWMx N2E3MDAwHhcNMjUxMjA1MjIwMTI4WhcNMjUxMjA2MjIwMTI4WjAzMTEwLwYDVQQD EyhhOTRkMTEyNTIxYTZiODBiYzUyOTg1MjYzNDMwYWJkMjdkMTc5N2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv/MxDriTaEqDmR6kWqh163CQ0Lh OIbGDtuUqP7N9eOaBKy/1XHW5W4B2Q+4w6+dMrPkUSiXCy7DaXbk+uY9JQ7lkd6l RYS6/wwcRqBCXlBDT7vuxC5nX9e1RliAb3wH8gBRmgAuRhaxjsD6YNxGtddNtMqr 48jWLF/y8uy5HqwXpy4QmEvR1jbgJRCIuF9EyUJC/QZ3G+AqZ3CcdSUHi2AH8Gb1 rhG0GO2iKVOSDvEzBXEylmcQpOUPle2d3c+XhoFphI3wyyJ6mGtjyDTQ5lhyrKKU YQ7S70vDrhAlOWCqs6G6gBN20H8vbqnGkdyh/Q6ZrJ8ClOoQ3oq92k7wCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlNESUhprgLxSmFJjQwq9J9F5fcMB8GA1UdIwQY MBaAFAumc51K8gmFlxkKoJKDDeqcF6cAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYt YTQzYWVjNjIzMmFhLzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYtYTQzYWVjNjIzMmFh LzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjhxv37L 7vZFBaBOzFEXlgcTzBaPHx7UgntIUKWlXBI+DTFRUV2g7gbf6u8IgzTuVK+KAUq9 OtUyehsJoCWBuaxg1QEspuSZI0z+HiPrxV6tC1Df7MqrGEqJtztCfxYVCTiBaquI lT2UTFlU2TIteYA5l5GzNffaAmj6KFZOnTVPBlnqA0cvkWk0cE/ml8GxHFip2TRd FmnjbdXwcTaNMRv3dE2ZQqrGEE0Cdcx5k1MhP2CkEHKPDAQ57cERtnAe7IxTGk/s 2O7iNweG4JXGxqpLuk+DI+p5Nf3JpD60yWG1clfQpgwJW1NsxDLd9L31AtpEpPz0 OfRd76D8Y3qaeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:22 2025 by rpki-client