This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json) Hash identifier: 49+utjsK79u/LEDm7WNzqUBQ6ZHiDerNCXz+2t/e2jo= Subject key identifier: EC:BE:0D:8F:CC:85:0A:FD:07:18:17:21:BC:30:46:B8:57:95:F8:63 Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9 Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9 Certificate serial: 019AF23F95647B44CBF20751AC3A6A66E03C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft Manifest number: 10B8 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: 17i7UX3VBOw+8JWZNCKXNLt2jn9mlgOf7A4VfZr5JHo=) 2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:95:64:7b:44:cb:f2:07:51:ac:3a:6a:66:e0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9 Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=ecbe0d8fcc850afd07181721bc3046b85795f863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:6b:3b:fd:c2:5b:9d:5f:28:3b:c9:c3:6e: fa:a6:8b:6e:a8:a5:b7:fa:1c:5a:94:8c:a3:c9:3a: e9:bb:17:2f:44:42:de:26:49:7d:bf:f8:7d:2d:30: 86:1f:63:eb:3c:ca:cb:c0:90:7c:ec:d3:a5:9e:1b: 7b:a9:b0:95:2b:53:ba:ff:19:83:a3:1d:c5:86:ad: 8a:22:33:8d:17:37:64:29:f2:9a:e5:05:e1:8f:58: c2:42:9a:0d:38:44:e7:7a:2b:8e:54:54:b3:66:5c: 04:61:66:04:f3:f3:44:fb:29:1f:34:69:13:a2:4d: 5d:72:f6:38:f4:c2:72:bf:e1:bd:09:d3:67:5c:a1: e1:0b:69:2c:70:b2:3b:40:8b:cf:c1:b6:3f:0a:01: d8:be:77:d9:c9:f1:c4:24:c2:58:dd:38:53:b4:c2: 63:c3:e6:5b:27:ed:ae:8b:ab:38:92:1b:e8:3b:3a: ba:2e:b6:35:ec:1b:b6:e3:68:ec:05:f1:75:15:ff: 09:73:01:11:04:2d:1c:57:7a:a6:1c:e2:b0:5b:a9: 49:f3:3a:9f:40:dc:f0:74:20:e0:24:85:5e:47:78: e5:6e:98:a1:6e:d0:84:a3:7e:dc:06:f7:9d:53:2a: f5:44:2e:ae:3c:ae:d3:fc:58:42:cd:61:0c:67:a6: 49:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BE:0D:8F:CC:85:0A:FD:07:18:17:21:BC:30:46:B8:57:95:F8:63 X509v3 Authority Key Identifier: keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e3:c9:f4:bb:e5:b5:61:81:5a:c9:eb:ae:aa:e5:0a:fb:2d: 1e:cd:8a:34:4f:c9:9d:19:73:b7:1e:b8:8b:4e:7c:87:a1:b9: 92:c5:81:4f:cd:fc:bc:69:b1:06:23:dc:93:6e:98:5b:73:0a: 6d:64:7b:ec:f7:f5:2f:1f:b6:f4:04:96:f3:39:21:b2:08:6e: 46:a4:b9:bf:11:81:38:78:b7:88:55:99:36:50:12:76:de:ba: 44:0b:cb:92:78:09:94:ce:39:b9:95:e5:c3:5f:f6:d4:de:d5: 08:92:9b:93:0c:10:3b:62:a9:4f:7c:a6:df:d1:d8:14:a3:00: c2:97:e0:54:9d:f7:57:7a:48:36:4a:c6:cb:f3:fb:ab:8c:18: 47:ef:d9:3b:5e:e3:12:b7:cb:51:47:fb:6e:a6:65:6b:d7:81: b0:8b:60:31:d5:1c:6f:eb:45:d1:5b:81:00:ab:8b:67:c1:27: df:c9:a2:5b:f2:6e:22:30:b5:8c:9d:32:1c:76:13:4d:b2:35: 23:58:9b:08:26:af:64:58:17:24:04:83:89:ef:1a:e4:4b:3c: c3:d0:5b:5c:d2:7f:f5:28:d6:0d:e2:e1:51:ee:64:90:8d:84: ff:ef:c8:1f:b6:65:a2:b3:90:f7:03:ae:cc:99:b3:06:d7:42: 62:3d:29:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5Vke0TL8gdRrDpqZuA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZTcyNzExMzZiMjFhMTU4YWVmNDA5ZDMwZTJjNjAwMWQ1 YjBkYTkwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD EyhlY2JlMGQ4ZmNjODUwYWZkMDcxODE3MjFiYzMwNDZiODU3OTVmODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/JrO/3CW51fKDvJw276potuqKW3 +hxalIyjyTrpuxcvRELeJkl9v/h9LTCGH2PrPMrLwJB87NOlnht7qbCVK1O6/xmD ox3Fhq2KIjONFzdkKfKa5QXhj1jCQpoNOETneiuOVFSzZlwEYWYE8/NE+ykfNGkT ok1dcvY49MJyv+G9CdNnXKHhC2kscLI7QIvPwbY/CgHYvnfZyfHEJMJY3ThTtMJj w+ZbJ+2ui6s4khvoOzq6LrY17Bu242jsBfF1Ff8JcwERBC0cV3qmHOKwW6lJ8zqf QNzwdCDgJIVeR3jlbpihbtCEo37cBvedUyr1RC6uPK7T/FhCzWEMZ6ZJQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy+DY/MhQr9BxgXIbwwRrhXlfhjMB8GA1UdIwQY MBaAFOjnJxE2shoViu9AnTDixgAdWw2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYt ODM1NmQyZDQyNzcxLzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYtODM1NmQyZDQyNzcx LzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYePJ9Lvl tWGBWsnrrqrlCvstHs2KNE/JnRlztx64i058h6G5ksWBT838vGmxBiPck26YW3MK bWR77Pf1Lx+29ASW8zkhsghuRqS5vxGBOHi3iFWZNlASdt66RAvLkngJlM45uZXl w1/21N7VCJKbkwwQO2KpT3ym39HYFKMAwpfgVJ33V3pINkrGy/P7q4wYR+/ZO17j ErfLUUf7bqZla9eBsItgMdUcb+tF0VuBAKuLZ8En38miW/JuIjC1jJ0yHHYTTbI1 I1ibCCavZFgXJASDie8a5Es8w9BbXNJ/9SjWDeLhUe5kkI2E/+/IH7ZlorOQ9wOu zJmzBtdCYj0pYg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:31 2025 by rpki-client