This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json) Hash identifier: 6at6ZwOdVO6AbXj2C17oT/x/2mIey5zdk1tCRtOrxQo= Subject key identifier: 0E:F5:22:6D:25:44:DB:D7:D7:CD:C5:ED:E8:8F:82:BE:34:C4:B3:A1 Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5 Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5 Certificate serial: 019B631E9C65E045F48097AE956B6116D2B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft Manifest number: 0BB3 Signing time: Sun 28 Dec 2025 04:01:49 +0000 Manifest this update: Sun 28 Dec 2025 04:01:49 +0000 Manifest next update: Mon 29 Dec 2025 04:01:49 +0000 Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: SJWJVWI9S2hxQhF6eYG3l6mzkJw/jmiSt7vZiUbfqAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:9c:65:e0:45:f4:80:97:ae:95:6b:61:16:d2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5 Validity Not Before: Dec 28 04:01:49 2025 GMT Not After : Dec 29 04:01:49 2025 GMT Subject: CN=0ef5226d2544dbd7d7cdc5ede88f82be34c4b3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:51:9c:0b:0b:28:89:97:99:3e:ef:96:30: fe:9c:a2:05:b7:cc:c6:42:15:f9:17:26:80:1e:e7: 37:d2:9e:35:64:70:ab:b7:6b:6d:1f:e2:d4:c2:69: ce:92:8c:a0:b4:54:62:37:63:0e:63:02:75:2b:e4: ca:6c:41:2a:99:f2:1c:0b:d7:27:4e:ec:48:cc:a5: f1:d9:6a:63:db:80:53:d3:0c:a8:a3:2e:26:ff:42: d7:3e:a2:6f:bb:ca:8d:11:e6:f8:de:ab:38:0c:9c: 18:ec:0f:91:1d:9e:12:51:70:1d:3e:3c:74:09:50: 10:d0:6c:2d:fd:2a:f2:35:a7:91:72:d7:26:26:aa: d8:a1:fe:f7:0d:fc:df:31:17:28:6e:51:1e:b7:64: c8:68:3f:70:b2:42:72:96:14:3a:1c:75:3c:e5:83: 17:62:be:f7:75:3a:2d:87:66:6a:9f:a3:a5:3a:7b: e0:b3:55:14:88:e0:81:b0:c5:ed:07:c3:83:4f:96: a3:63:28:e7:f6:1f:71:6d:5b:57:13:fd:bb:1c:e5: 9f:a9:a9:ae:37:d3:cb:e2:a9:a2:18:5f:d4:1f:d4: a2:1d:3e:d1:a7:45:0d:bd:7b:68:73:3b:41:5d:9a: b1:5c:73:35:4f:03:c4:59:f8:58:cd:ca:23:81:e7: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F5:22:6D:25:44:DB:D7:D7:CD:C5:ED:E8:8F:82:BE:34:C4:B3:A1 X509v3 Authority Key Identifier: keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9c:d5:08:a9:72:c3:a4:b1:8d:1c:13:e0:52:e5:7b:56:7d: c9:3a:ee:25:cd:0c:40:05:9b:bb:19:d1:1f:a5:9b:c5:77:0a: 2a:6a:c0:ac:65:cc:91:1b:d3:f9:77:83:d4:64:dc:12:cf:0f: 50:54:07:c9:80:48:0c:fe:bb:88:ff:3c:39:90:34:57:8d:f1: a0:d5:7e:ba:0d:2d:50:0a:85:14:0e:14:5b:46:54:70:16:ac: 7c:f4:c3:af:18:c7:c2:07:41:9c:cc:77:f1:bd:4f:7b:8c:3b: eb:70:5d:64:a9:3a:d5:51:7c:30:7b:cd:4d:16:8d:e2:39:7c: d4:98:8e:73:d8:f6:11:39:6d:70:c2:3e:89:f3:ce:eb:5e:78: 50:3f:0a:65:6e:79:cb:50:52:64:e7:3d:b2:0e:99:6a:26:cc: 08:7f:a5:1a:66:73:1f:f3:b6:8a:b2:1c:d8:76:2e:fc:63:59: 16:13:5b:6d:a6:1f:21:8b:91:cb:5f:0c:09:e9:fb:61:a5:ee: e8:63:d7:a5:c1:01:c0:b8:15:12:7d:0b:f7:5b:78:3c:41:4b: 7d:8c:d7:e3:73:9e:91:ef:cf:bd:03:5f:d9:6c:57:e8:58:94: 36:48:0d:e5:49:76:d5:ec:6b:04:ac:d6:58:6e:d6:83:4a:f0: aa:aa:1f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHpxl4EX0gJeulWthFtK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYWEwNWM2ZjhmOWJmZDcwZTNkNDFmZTA1YmFmYzUwZDEy NTNiZjUwHhcNMjUxMjI4MDQwMTQ5WhcNMjUxMjI5MDQwMTQ5WjAzMTEwLwYDVQQD EygwZWY1MjI2ZDI1NDRkYmQ3ZDdjZGM1ZWRlODhmODJiZTM0YzRiM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEhRnAsLKImXmT7vljD+nKIFt8zG QhX5FyaAHuc30p41ZHCrt2ttH+LUwmnOkoygtFRiN2MOYwJ1K+TKbEEqmfIcC9cn TuxIzKXx2Wpj24BT0wyooy4m/0LXPqJvu8qNEeb43qs4DJwY7A+RHZ4SUXAdPjx0 CVAQ0Gwt/SryNaeRctcmJqrYof73DfzfMRcoblEet2TIaD9wskJylhQ6HHU85YMX Yr73dToth2Zqn6OlOnvgs1UUiOCBsMXtB8ODT5ajYyjn9h9xbVtXE/27HOWfqamu N9PL4qmiGF/UH9SiHT7Rp0UNvXtocztBXZqxXHM1TwPEWfhYzcojgefDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA71Im0lRNvX183F7eiPgr40xLOhMB8GA1UdIwQY MBaAFGuqBcb4+b/XDj1B/gW6/FDRJTv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYt ZjMyMTFkOTE1MjBkLzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYtZjMyMTFkOTE1MjBk LzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZzVCKly w6SxjRwT4FLle1Z9yTruJc0MQAWbuxnRH6WbxXcKKmrArGXMkRvT+XeD1GTcEs8P UFQHyYBIDP67iP88OZA0V43xoNV+ug0tUAqFFA4UW0ZUcBasfPTDrxjHwgdBnMx3 8b1Pe4w763BdZKk61VF8MHvNTRaN4jl81JiOc9j2ETltcMI+ifPO6154UD8KZW55 y1BSZOc9sg6ZaibMCH+lGmZzH/O2irIc2HYu/GNZFhNbbaYfIYuRy18MCen7YaXu 6GPXpcEBwLgVEn0L91t4PEFLfYzX43Oeke/PvQNf2WxX6FiUNkgN5Ul21exrBKzW WG7Wg0rwqqof8w== -----END CERTIFICATE-----Generated at Sun Dec 28 06:40:07 2025 by rpki-client