This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json) Hash identifier: ZhLUgxkH2N6ShksNu/bZDRn6+2bg3bbG7dg6KXBDOv4= Subject key identifier: 2B:22:62:B3:A0:CE:E7:05:F8:7E:02:B0:61:F5:5B:1B:0B:70:9B:20 Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd Certificate serial: 019AF12E0E4F0B28241FCE0AACE0249377B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft Manifest number: 0FC9 Signing time: Sat 06 Dec 2025 01:01:58 +0000 Manifest this update: Sat 06 Dec 2025 01:01:58 +0000 Manifest next update: Sun 07 Dec 2025 01:01:58 +0000 Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: gkn/iN8e0c7OJjv4pSnBv22NfMUrpFzbOhfut6XyhxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0e:4f:0b:28:24:1f:ce:0a:ac:e0:24:93:77:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd Validity Not Before: Dec 6 01:01:58 2025 GMT Not After : Dec 7 01:01:58 2025 GMT Subject: CN=2b2262b3a0cee705f87e02b061f55b1b0b709b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:64:c7:19:29:b2:4d:cd:1b:ab:9c:03:19: db:07:82:50:7d:98:ec:d3:c3:41:dc:70:cc:9e:18: 90:e6:8f:e3:59:a9:46:b0:5b:96:ab:ee:1e:9e:52: ff:86:a1:e9:82:cf:ed:86:fa:3c:44:a9:06:b3:ba: b3:3c:64:53:b4:8b:32:66:48:2d:46:14:e1:5e:11: c5:7c:7c:00:91:d1:2a:0b:4e:80:cf:23:f0:60:f9: 49:2e:3e:0a:2e:eb:88:f6:ac:94:a1:0f:36:3d:e5: cd:fd:c4:59:7e:a3:60:e0:aa:72:9c:7a:d1:48:66: b0:43:7c:f4:46:ca:a3:b2:23:c3:d5:13:c9:c1:fc: 26:2a:aa:2c:37:4d:c5:a6:ee:ce:ca:d2:0d:58:b2: 9d:09:ea:fa:2a:6d:fb:93:4d:22:49:35:ad:4c:d7: 59:38:8f:12:90:9b:af:16:81:ca:f5:6d:7c:65:5b: 15:e1:e0:2a:4f:fa:0c:e3:79:15:ba:4f:f8:4f:a5: 3e:21:47:44:eb:16:05:66:a1:62:8b:c2:d2:e8:be: 96:b3:4f:ed:d8:c9:62:c4:6e:c7:6a:1f:1a:20:7d: 36:0c:8d:cf:62:3a:4e:60:82:51:53:a9:1c:18:d2: 20:bb:10:17:29:dd:e7:fb:5c:1e:f5:51:4b:d9:b1: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:62:B3:A0:CE:E7:05:F8:7E:02:B0:61:F5:5B:1B:0B:70:9B:20 X509v3 Authority Key Identifier: keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7a:97:ea:09:19:72:5f:3c:32:e2:10:ba:4b:57:df:fd:90: 83:51:22:3d:14:5f:7c:d8:a0:63:65:55:ce:6a:35:3a:35:38: 28:52:dd:fc:66:d8:9a:29:b4:31:84:87:28:75:eb:4e:82:04: 0e:47:77:3b:c6:85:18:16:06:18:e0:34:10:a2:bd:ef:c1:5e: 62:4f:c4:8d:20:60:b2:40:28:c6:29:4b:d4:17:86:11:ad:1f: 6d:e2:af:3e:c8:0f:df:6a:77:8b:0c:53:e8:f4:c9:8a:2f:4f: 9f:b5:6b:aa:44:06:46:41:3a:45:59:9b:1b:f1:43:e9:37:51: 20:93:fe:cd:bb:01:08:9f:88:b2:6d:95:eb:0b:6b:8b:5e:e8: 63:9c:e7:a0:bd:f1:bb:6e:03:75:23:f4:dc:d8:97:dd:12:82: f5:d2:e2:e4:d4:c5:9a:a6:a0:18:2a:53:a7:c8:5f:ba:3d:cc: d0:f2:a4:22:c0:19:20:ea:b5:16:df:ee:d2:c5:99:80:bf:0a: 2c:8d:0c:bb:7c:fb:88:9c:e7:44:4a:5a:41:20:e8:14:e2:50: d3:a9:22:72:26:fe:b0:dc:0d:72:7c:ca:60:95:01:01:07:68: 97:7a:ff:6f:f8:4f:d5:5f:02:88:9f:35:0f:44:62:f9:1e:25: 75:77:5f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLg5PCygkH84KrOAkk3e3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTJlMjdmZTc1NDI2ZWZjOGI1MmIyNjhlODI5M2E4OTk0 ZTY4ZmQwHhcNMjUxMjA2MDEwMTU4WhcNMjUxMjA3MDEwMTU4WjAzMTEwLwYDVQQD EygyYjIyNjJiM2EwY2VlNzA1Zjg3ZTAyYjA2MWY1NWIxYjBiNzA5YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXpkxxkpsk3NG6ucAxnbB4JQfZjs 08NB3HDMnhiQ5o/jWalGsFuWq+4enlL/hqHpgs/thvo8RKkGs7qzPGRTtIsyZkgt RhThXhHFfHwAkdEqC06AzyPwYPlJLj4KLuuI9qyUoQ82PeXN/cRZfqNg4KpynHrR SGawQ3z0RsqjsiPD1RPJwfwmKqosN03Fpu7OytINWLKdCer6Km37k00iSTWtTNdZ OI8SkJuvFoHK9W18ZVsV4eAqT/oM43kVuk/4T6U+IUdE6xYFZqFii8LS6L6Ws0/t 2MlixG7Hah8aIH02DI3PYjpOYIJRU6kcGNIguxAXKd3n+1we9VFL2bE1CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsiYrOgzucF+H4CsGH1WxsLcJsgMB8GA1UdIwQY MBaAFDui4n/nVCbvyLUrJo6Ck6iZTmj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZMaWYtZFVKdV9JdFNzbWpvS1RxSmxPYVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYzZiODgtNWU2Yi00Y2ZlLWJjOTUt MzNhYzZkYmNmYjk3LzEvTzZMaWYtZFVKdV9JdFNzbWpvS1RxSmxPYVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lYzZiODgtNWU2Yi00Y2ZlLWJjOTUtMzNhYzZkYmNmYjk3 LzEvTzZMaWYtZFVKdV9JdFNzbWpvS1RxSmxPYVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXqX6gkZ cl88MuIQuktX3/2Qg1EiPRRffNigY2VVzmo1OjU4KFLd/GbYmim0MYSHKHXrToIE Dkd3O8aFGBYGGOA0EKK978FeYk/EjSBgskAoxilL1BeGEa0fbeKvPsgP32p3iwxT 6PTJii9Pn7VrqkQGRkE6RVmbG/FD6TdRIJP+zbsBCJ+Ism2V6wtri17oY5znoL3x u24DdSP03NiX3RKC9dLi5NTFmqagGCpTp8hfuj3M0PKkIsAZIOq1Ft/u0sWZgL8K LI0Mu3z7iJznREpaQSDoFOJQ06kicib+sNwNcnzKYJUBAQdol3r/b/hP1V8CiJ81 D0Ri+R4ldXdfKA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:00 2025 by rpki-client