This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft File: 6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json) Hash identifier: fIkwAjZnRmNyqdLMMqmZ1fr1u+zxgop+B2N39DtwvQ4= Subject key identifier: B0:CB:64:99:B7:C3:C2:0F:86:FC:C7:AF:7A:93:F6:84:FC:67:AB:F7 Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Certificate serial: 019B378ED989262F06FA18D4C648CF9B4448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft Manifest number: 0747 Signing time: Fri 19 Dec 2025 17:01:07 +0000 Manifest this update: Fri 19 Dec 2025 17:01:07 +0000 Manifest next update: Sat 20 Dec 2025 17:01:07 +0000 Files and hashes: 1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: nVrXJGs9Sflkn2Diz5E008+NI/gP2MgHwwFqjDqatow=) 2: CPbkzEVmBbI7ZqkmmyW8DeViz24.roa (hash: nYuL9qq+IF9HCzIXZWABjOV3GfyfPuUgUhrIUj9W9wk=) 3: Vrgx7vIvsF8zYOaGSae4akirA8E.roa (hash: ui7bIuQdVcdRVDf8eIFg2mfVrPzlEX+6v4UZ3XVxNiQ=) 4: _D_RKE9zrsJI9vEdORTMyS_CPEY.roa (hash: sb+pf5zLeTQvFz0cOCuvvmv/BmsQJq+3u4wsDH/y9zM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:d9:89:26:2f:06:fa:18:d4:c6:48:cf:9b:44:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Validity Not Before: Dec 19 17:01:07 2025 GMT Not After : Dec 20 17:01:07 2025 GMT Subject: CN=b0cb6499b7c3c20f86fcc7af7a93f684fc67abf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:96:aa:3b:6f:b4:d3:00:9b:a3:30:f7:8f: 30:ea:07:3c:93:fd:b4:12:68:e3:97:27:c4:ac:1c: 07:7f:68:7d:9d:36:5c:11:ee:6a:01:92:df:37:42: b9:fc:9a:78:9b:85:8e:69:11:f9:e6:c6:22:3a:ce: 30:0a:6f:cd:e1:40:02:d3:28:81:1e:f8:24:51:75: cc:64:a9:80:d3:35:22:4a:09:3e:66:72:81:f9:c2: 9a:d3:b6:3f:f7:ca:e2:bb:3a:1d:bc:58:a0:c1:69: 92:25:58:03:be:ca:fb:05:6e:a0:90:fb:3e:52:8b: ab:18:e2:38:e9:b8:88:07:1f:26:aa:8d:14:2c:56: 09:6c:03:75:6a:3d:c9:02:6f:42:eb:71:23:06:4e: 25:9b:fa:a5:6f:21:94:03:42:a7:2e:28:cb:f3:f5: 31:3c:97:2d:85:ad:d7:83:c0:f2:67:21:07:25:35: 85:26:92:19:ed:17:fb:12:f6:55:ec:f4:72:1a:d7: 7d:03:99:d7:ca:92:df:dd:76:46:80:9a:09:8e:6b: b1:56:97:a2:3c:35:42:f1:ff:56:c7:34:5b:4f:be: bb:e8:95:1e:e7:19:35:4e:1b:0a:93:17:13:a7:87: 9c:48:e1:bd:91:c4:02:cc:f3:36:f0:28:56:51:fd: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CB:64:99:B7:C3:C2:0F:86:FC:C7:AF:7A:93:F6:84:FC:67:AB:F7 X509v3 Authority Key Identifier: keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:75:9d:36:78:0b:d7:e4:40:a7:ed:e7:d3:b0:18:36:91:b2: 8c:fd:7f:7e:70:cc:5d:9a:46:3e:1c:7c:42:2f:2f:4f:a8:26: 4d:25:cc:3c:3a:e4:fa:5b:1b:38:49:c0:ab:42:1e:85:e6:2c: 56:92:4e:d5:e3:8c:1b:7d:ca:63:2c:83:28:38:07:d5:b4:d1: a4:d4:d4:c7:b9:c5:f0:d3:61:2f:0c:78:fd:a7:52:7f:0a:d8: b8:63:88:b8:b1:1f:00:2a:f5:9c:23:ba:53:20:27:fd:e6:9d: 59:cb:e2:eb:91:bf:bb:9d:fd:33:48:6c:c9:79:39:d9:8b:a1: 55:e7:72:d7:0a:40:74:64:79:e0:c6:21:d3:cb:d5:bf:cb:c8: 55:64:b5:38:2c:05:e3:5f:b4:87:a7:93:65:c1:62:8e:91:40: 40:41:70:77:fc:ca:d2:f5:92:4c:88:78:13:80:a7:67:5c:a3: a2:df:9e:f6:5b:ea:44:88:3a:c6:dc:4c:c1:c0:28:f5:58:6f: 6e:d5:24:28:bc:d1:42:db:39:ff:89:a4:7d:18:0b:96:85:3c: 4a:3d:86:aa:f8:08:4e:94:87:19:3f:6f:1b:47:a5:b8:50:d1: e6:cf:6c:f6:8f:21:3c:3c:74:f1:81:55:28:92:20:e6:b2:20: f2:71:3a:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtmJJi8G+hjUxkjPm0RIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4 NDFjOTYwHhcNMjUxMjE5MTcwMTA3WhcNMjUxMjIwMTcwMTA3WjAzMTEwLwYDVQQD EyhiMGNiNjQ5OWI3YzNjMjBmODZmY2M3YWY3YTkzZjY4NGZjNjdhYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsGWqjtvtNMAm6Mw948w6gc8k/20 EmjjlyfErBwHf2h9nTZcEe5qAZLfN0K5/Jp4m4WOaRH55sYiOs4wCm/N4UAC0yiB HvgkUXXMZKmA0zUiSgk+ZnKB+cKa07Y/98riuzodvFigwWmSJVgDvsr7BW6gkPs+ UourGOI46biIBx8mqo0ULFYJbAN1aj3JAm9C63EjBk4lm/qlbyGUA0KnLijL8/Ux PJctha3Xg8DyZyEHJTWFJpIZ7Rf7EvZV7PRyGtd9A5nXypLf3XZGgJoJjmuxVpei PDVC8f9WxzRbT7676JUe5xk1ThsKkxcTp4ecSOG9kcQCzPM28ChWUf2BaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDLZJm3w8IPhvzHr3qT9oT8Z6v3MB8GA1UdIwQY MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt NDY1ZDIyM2IyMzJlLzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3WdNngL 1+RAp+3n07AYNpGyjP1/fnDMXZpGPhx8Qi8vT6gmTSXMPDrk+lsbOEnAq0IeheYs VpJO1eOMG33KYyyDKDgH1bTRpNTUx7nF8NNhLwx4/adSfwrYuGOIuLEfACr1nCO6 UyAn/eadWcvi65G/u539M0hsyXk52YuhVedy1wpAdGR54MYh08vVv8vIVWS1OCwF 41+0h6eTZcFijpFAQEFwd/zK0vWSTIh4E4CnZ1yjot+e9lvqRIg6xtxMwcAo9Vhv btUkKLzRQts5/4mkfRgLloU8Sj2GqvgITpSHGT9vG0eluFDR5s9s9o8hPDx08YFV KJIg5rIg8nE63A== -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:20 2025 by rpki-client