This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json) Hash identifier: q+6ycYMdWOwSF2npwOOKxQiYgSqxt67+ckFsZtQplCU= Subject key identifier: 6A:C6:6E:48:AE:F4:D1:CF:33:87:FF:D1:E7:1D:89:FA:5D:DB:63:00 Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9 Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9 Certificate serial: 019B3D90A227E3A06F50B6C47CBD4073C8A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft Manifest number: 10DF Signing time: Sat 20 Dec 2025 21:00:47 +0000 Manifest this update: Sat 20 Dec 2025 21:00:47 +0000 Manifest next update: Sun 21 Dec 2025 21:00:47 +0000 Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: 1XZ9l8pJ4+NGcAHBk9n22BiI17/XfhC3+xCX+3+Lp3c=) 2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a2:27:e3:a0:6f:50:b6:c4:7c:bd:40:73:c8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9 Validity Not Before: Dec 20 21:00:47 2025 GMT Not After : Dec 21 21:00:47 2025 GMT Subject: CN=6ac66e48aef4d1cf3387ffd1e71d89fa5ddb6300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:ab:20:94:36:07:4c:ab:f8:bf:bc:21:7c: 18:5e:12:7d:0a:1a:fe:42:3b:79:21:ce:c4:db:7d: 13:97:3a:5c:ee:b3:4d:9f:bc:3c:55:c5:a7:7b:17: 94:e5:d3:01:6f:2c:92:df:34:3f:70:54:e0:2d:02: 23:92:49:5e:84:64:1c:f2:07:25:7c:54:b5:0e:3c: 2d:9e:55:08:cd:80:0c:d6:e9:85:ce:32:06:ad:2f: 13:71:9c:69:50:2c:0f:aa:17:41:1c:04:15:fe:2d: 10:df:56:05:ec:37:0d:35:d4:b5:10:71:11:4d:4e: 09:59:d2:16:47:3e:8f:b7:60:3b:c9:72:b1:33:f0: fb:52:24:f7:48:f9:e5:16:76:9e:69:d4:86:28:d8: 12:85:de:20:14:aa:13:83:35:01:42:c2:8b:a4:d4: 7f:19:c7:6d:69:ad:33:f7:02:65:a8:6c:b5:75:13: c5:11:6a:0d:39:4a:d9:5e:fe:a4:a1:6d:68:92:ea: 29:59:74:1f:21:a5:95:07:22:f6:0c:f8:f9:a4:11: 8f:b0:fc:32:b4:45:a4:f1:01:3e:d7:91:ab:1e:e3: b5:89:23:e8:23:11:2d:29:31:59:d9:0e:4c:2f:9b: 7d:31:28:02:cb:ce:d6:7f:1f:02:f9:b5:cf:9a:e3: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C6:6E:48:AE:F4:D1:CF:33:87:FF:D1:E7:1D:89:FA:5D:DB:63:00 X509v3 Authority Key Identifier: keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:eb:a1:39:be:60:ad:1d:86:f7:a2:66:a1:3f:a2:b2:9b: eb:44:d9:82:81:ed:52:3e:fd:66:33:68:e6:9a:a1:72:d1:d1: 16:82:20:16:46:7a:a7:bd:73:6a:c6:1a:76:67:b5:54:e1:f6: fa:87:79:85:3b:4a:fc:f1:9c:eb:f3:dc:49:75:52:ba:c1:d4: 15:23:44:bb:e7:11:18:be:bd:e7:11:70:4f:2b:01:f8:c0:67: 43:16:10:fc:86:87:86:73:b2:c5:1c:e4:a2:95:d2:be:c8:48: f0:0b:cc:a0:2c:94:d3:9c:25:7b:ff:b1:3c:ee:2b:91:62:c8: 41:df:02:80:a7:98:f6:c7:a7:ba:67:c5:65:17:67:85:a4:3a: ad:ac:15:37:a8:ae:28:48:b5:b7:50:5a:a1:03:34:20:51:e8: 42:30:af:dd:77:55:85:01:4b:6a:25:76:19:02:98:f4:57:55: 2d:e3:36:e3:1d:d4:c0:5c:04:24:6c:e3:da:21:a4:6f:b8:5f: 91:f1:8b:e1:ce:dd:87:08:3a:57:96:17:d1:dd:c1:76:ba:78: cd:98:c4:77:29:d8:dc:9e:c1:f1:24:20:64:e1:0f:19:9b:01: 73:e7:54:cd:13:95:0a:34:5e:1c:41:1d:70:0d:09:b0:e0:37: 0f:a6:2a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKIn46BvULbEfL1Ac8ihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZTcyNzExMzZiMjFhMTU4YWVmNDA5ZDMwZTJjNjAwMWQ1 YjBkYTkwHhcNMjUxMjIwMjEwMDQ3WhcNMjUxMjIxMjEwMDQ3WjAzMTEwLwYDVQQD Eyg2YWM2NmU0OGFlZjRkMWNmMzM4N2ZmZDFlNzFkODlmYTVkZGI2MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQWrIJQ2B0yr+L+8IXwYXhJ9Chr+ Qjt5Ic7E230Tlzpc7rNNn7w8VcWnexeU5dMBbyyS3zQ/cFTgLQIjkklehGQc8gcl fFS1DjwtnlUIzYAM1umFzjIGrS8TcZxpUCwPqhdBHAQV/i0Q31YF7DcNNdS1EHER TU4JWdIWRz6Pt2A7yXKxM/D7UiT3SPnlFnaeadSGKNgShd4gFKoTgzUBQsKLpNR/ Gcdtaa0z9wJlqGy1dRPFEWoNOUrZXv6koW1okuopWXQfIaWVByL2DPj5pBGPsPwy tEWk8QE+15GrHuO1iSPoIxEtKTFZ2Q5ML5t9MSgCy87Wfx8C+bXPmuNCWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrGbkiu9NHPM4f/0ecdifpd22MAMB8GA1UdIwQY MBaAFOjnJxE2shoViu9AnTDixgAdWw2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYt ODM1NmQyZDQyNzcxLzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYtODM1NmQyZDQyNzcx LzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYezroTm+ YK0dhveiZqE/orKb60TZgoHtUj79ZjNo5pqhctHRFoIgFkZ6p71zasYadme1VOH2 +od5hTtK/PGc6/PcSXVSusHUFSNEu+cRGL695xFwTysB+MBnQxYQ/IaHhnOyxRzk opXSvshI8AvMoCyU05wle/+xPO4rkWLIQd8CgKeY9senumfFZRdnhaQ6rawVN6iu KEi1t1BaoQM0IFHoQjCv3XdVhQFLaiV2GQKY9FdVLeM24x3UwFwEJGzj2iGkb7hf kfGL4c7dhwg6V5YX0d3Bdrp4zZjEdynY3J7B8SQgZOEPGZsBc+dUzROVCjReHEEd cA0JsOA3D6YqZA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:46:04 2025 by rpki-client