This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft File: C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json) Hash identifier: lsBtdInaTrjNfYqTSw3E0DNoju65jhXGfkJgeq3SJuY= Subject key identifier: FB:08:05:1B:6F:44:3B:77:5F:E8:3E:6A:14:A3:4E:77:F9:F3:C0:74 Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83 Certificate issuer: /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583 Certificate serial: 019B34200176DF88440AB3F4FE6E95180789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft Manifest number: 0E63 Signing time: Fri 19 Dec 2025 01:01:11 +0000 Manifest this update: Fri 19 Dec 2025 01:01:11 +0000 Manifest next update: Sat 20 Dec 2025 01:01:11 +0000 Files and hashes: 1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: VjddLpwiaPsh0lEPGlcxQuDq5h6OHiQwv4P2j/S7Atg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:01:76:df:88:44:0a:b3:f4:fe:6e:95:18:07:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583 Validity Not Before: Dec 19 01:01:11 2025 GMT Not After : Dec 20 01:01:11 2025 GMT Subject: CN=fb08051b6f443b775fe83e6a14a34e77f9f3c074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:7b:2c:59:61:ca:37:ba:e9:4c:b0:08:20: 6d:9f:75:b1:dd:b1:a3:46:6b:71:26:37:0d:77:0c: 49:fc:fd:7e:e8:fb:c1:3d:a4:47:bf:f4:44:6e:12: 59:0a:0c:21:71:42:32:95:8a:15:ae:38:d9:cf:d9: 13:d2:61:ee:73:1a:aa:95:a4:8d:2f:04:be:c4:f9: 78:92:2a:6e:e7:6e:04:eb:b7:cf:a7:d1:5f:50:fa: 84:04:ac:7d:ff:93:58:93:84:cb:bb:63:d0:08:e1: 22:ee:64:f9:7d:c2:c4:84:35:ea:00:6d:40:50:bf: 92:cd:41:ed:72:d3:76:51:67:0c:a3:24:28:53:2e: 7c:da:e2:51:92:81:ac:30:66:ee:75:9d:f1:0b:bd: ae:f2:73:00:bd:25:b9:f3:4c:8c:eb:ee:f2:f5:5b: 62:1a:87:2a:7b:5b:dd:ac:4b:d5:e9:fe:3b:0f:ef: 97:90:77:c9:9d:22:0d:5d:6a:14:48:6e:17:78:3d: 1a:6b:63:c3:15:fe:54:35:a3:44:72:c7:4a:fc:5b: 6e:b2:3c:73:f0:56:28:a2:a4:e9:a5:eb:1f:30:d6: c8:fa:86:6c:28:c1:07:cf:ee:15:d5:fc:86:e9:10: 31:51:6c:85:95:f0:05:bd:57:4e:1d:9d:37:97:f1: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:08:05:1B:6F:44:3B:77:5F:E8:3E:6A:14:A3:4E:77:F9:F3:C0:74 X509v3 Authority Key Identifier: keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a7:ba:a4:6c:52:3a:97:1e:67:31:85:8b:40:1c:3a:1f:94: 3d:09:f4:ec:95:f9:59:7b:d2:f0:2b:a4:c7:7f:c4:c3:54:28: c7:4f:24:9f:04:34:64:ad:68:57:0e:e2:12:5a:00:8a:97:8c: 27:cc:9e:c3:ce:91:51:1e:ab:8e:b1:18:f3:39:6c:c0:b9:82: e2:18:3e:1f:7f:4f:01:23:76:29:dd:62:2d:2e:be:97:81:82: 6e:fe:4f:95:bd:15:50:52:4b:33:c9:d6:88:cb:d0:5c:86:e5: 28:f7:a7:6b:e4:e9:f3:96:7a:ec:40:27:e1:9d:a0:3a:97:75: 20:29:ba:6c:bf:62:b0:73:1d:3e:3d:45:26:75:59:87:f8:c7: d9:ed:f6:8f:63:ae:92:fc:42:a7:ff:c8:4e:11:51:df:83:5c: bb:09:54:2c:ff:bf:7a:14:2e:0b:14:b9:ec:45:c3:74:0e:22: e4:4e:44:9b:b5:1d:18:65:36:0b:cd:28:6b:22:d5:93:53:69: 92:8e:33:5e:a8:5f:76:dc:37:2f:b0:c6:d0:4b:46:67:dd:91: ea:37:e3:b5:02:e2:2e:cd:29:7e:eb:48:18:db:94:67:88:b7: 94:2f:78:d2:e2:cf:09:2c:db:00:44:44:f9:a8:f3:59:41:74: 4e:ac:8a:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IAF234hECrP0/m6VGAeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTBiZTA5NGE1YTkzZDA3Y2UxOWU0NmJlNjJmOWZmY2U2 MzQ1ODMwHhcNMjUxMjE5MDEwMTExWhcNMjUxMjIwMDEwMTExWjAzMTEwLwYDVQQD EyhmYjA4MDUxYjZmNDQzYjc3NWZlODNlNmExNGEzNGU3N2Y5ZjNjMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIh7LFlhyje66UywCCBtn3Wx3bGj RmtxJjcNdwxJ/P1+6PvBPaRHv/REbhJZCgwhcUIylYoVrjjZz9kT0mHucxqqlaSN LwS+xPl4kipu524E67fPp9FfUPqEBKx9/5NYk4TLu2PQCOEi7mT5fcLEhDXqAG1A UL+SzUHtctN2UWcMoyQoUy582uJRkoGsMGbudZ3xC72u8nMAvSW580yM6+7y9Vti Gocqe1vdrEvV6f47D++XkHfJnSINXWoUSG4XeD0aa2PDFf5UNaNEcsdK/Ftusjxz 8FYooqTppesfMNbI+oZsKMEHz+4V1fyG6RAxUWyFlfAFvVdOHZ03l/HaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsIBRtvRDt3X+g+ahSjTnf588B0MB8GA1UdIwQY MBaAFAugvglKWpPQfOGeRr5i+f/OY0WDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEt YmZjYWIzMmRhZmM2LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEtYmZjYWIzMmRhZmM2 LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKe6pGxS OpceZzGFi0AcOh+UPQn07JX5WXvS8Cukx3/Ew1Qox08knwQ0ZK1oVw7iEloAipeM J8yew86RUR6rjrEY8zlswLmC4hg+H39PASN2Kd1iLS6+l4GCbv5Plb0VUFJLM8nW iMvQXIblKPena+Tp85Z67EAn4Z2gOpd1ICm6bL9isHMdPj1FJnVZh/jH2e32j2Ou kvxCp//IThFR34NcuwlULP+/ehQuCxS57EXDdA4i5E5Em7UdGGU2C80oayLVk1Np ko4zXqhfdtw3L7DG0EtGZ92R6jfjtQLiLs0pfutIGNuUZ4i3lC940uLPCSzbAERE +ajzWUF0TqyKcA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:19:11 2025 by rpki-client