This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft File: C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json) Hash identifier: 2EGQZNtk1M+T6pO5pM+ZVljPKAxNf4LDfIMduTJG0UE= Subject key identifier: A5:CD:05:CC:E9:C9:AD:93:B9:E9:F0:7B:DD:CE:69:62:7D:63:C9:5E Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83 Certificate issuer: /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583 Certificate serial: 019B51180ECA4AC0C29BEDF259F0C70E1F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft Manifest number: 0E72 Signing time: Wed 24 Dec 2025 16:01:29 +0000 Manifest this update: Wed 24 Dec 2025 16:01:29 +0000 Manifest next update: Thu 25 Dec 2025 16:01:29 +0000 Files and hashes: 1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: PYzKGCLrh9gKV8bBgWOqg+KykFUo0ceOZAf+BjgWLcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:18:0e:ca:4a:c0:c2:9b:ed:f2:59:f0:c7:0e:1f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583 Validity Not Before: Dec 24 16:01:29 2025 GMT Not After : Dec 25 16:01:29 2025 GMT Subject: CN=a5cd05cce9c9ad93b9e9f07bddce69627d63c95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:ac:4c:47:81:e1:45:d7:20:8f:11:e2:88: 95:5d:e4:82:66:69:56:7b:f5:32:df:63:1c:ac:f7: 2b:2e:05:89:91:81:af:48:a7:0d:7c:0d:ff:b1:05: ad:4e:36:f7:53:4b:76:d6:e9:19:36:62:ab:2c:ce: 0f:03:b1:d8:bc:32:bb:11:92:41:44:df:8e:8d:fe: 64:d8:58:f4:87:81:f9:38:bc:f7:1b:26:a8:c0:dd: b5:be:19:e4:75:64:7c:d9:0f:3d:04:4f:bd:0b:86: 8f:a9:bb:d5:80:fd:99:03:1b:24:df:cf:03:ca:47: 8a:b0:4e:31:70:16:b1:78:f0:cd:fb:7a:dd:0c:bc: 63:4f:7a:96:6a:6c:3d:d3:89:7f:49:e1:7f:de:cd: 3c:78:16:da:aa:1b:53:ac:64:fa:8e:18:32:a6:93: 69:b7:52:be:74:fb:77:7e:ff:0c:bb:4c:cd:8b:74: a7:24:48:6a:4a:ee:66:1b:b6:93:58:97:29:d5:59: fb:99:b1:df:49:67:ba:b5:75:d6:9d:16:7f:f4:c0: 30:8b:dc:bb:a5:96:72:89:8c:f3:33:a3:d1:ad:69: 6a:cc:ee:ac:10:f4:dc:2d:6f:ed:89:8a:65:d5:f3: d6:83:72:c0:b1:24:4b:40:a5:ec:20:b5:49:66:46: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:05:CC:E9:C9:AD:93:B9:E9:F0:7B:DD:CE:69:62:7D:63:C9:5E X509v3 Authority Key Identifier: keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8e:78:b7:2f:7a:a8:22:3a:ca:2f:09:1d:1a:40:84:3b:b4: 30:59:d9:be:00:21:f6:bc:e9:6f:0e:a5:db:b8:2f:30:88:b6: 0c:47:a5:f5:5c:ac:a9:c7:e4:1d:07:e7:a7:ca:1d:18:ed:4f: 04:0c:88:74:ce:ca:53:b3:1d:17:91:b2:a2:ef:90:39:80:66: 13:bf:6a:fd:e9:18:73:4b:4e:94:03:e0:a1:fd:bd:2e:35:da: c8:bc:55:d6:c8:d1:4c:3b:12:79:a3:00:ff:19:f3:13:61:ac: ef:39:fa:93:22:df:8e:45:1f:c5:ae:1a:25:f5:54:32:d0:85: 6d:92:23:a6:78:32:ae:60:a8:6d:92:57:db:85:55:23:0b:d9: b4:26:0e:81:67:b8:cb:24:b0:27:7f:9c:1c:4e:3d:12:76:b2: 88:8f:6b:30:d7:2a:de:ca:e5:d8:a3:33:77:7d:f8:8c:04:60: 16:bb:37:fe:f1:7a:39:d1:a1:26:24:92:67:10:29:6a:ce:90: da:65:9b:c2:98:1c:2c:a7:a5:b7:1f:38:93:73:d5:db:8a:e4: 95:37:a2:e5:ce:fe:59:b8:35:1f:d2:4b:e9:d2:1c:3e:62:d7: e9:aa:0c:a5:da:a0:80:fa:9b:e0:43:3e:73:1e:fb:d5:40:8c: b2:c4:c9:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRGA7KSsDCm+3yWfDHDh8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTBiZTA5NGE1YTkzZDA3Y2UxOWU0NmJlNjJmOWZmY2U2 MzQ1ODMwHhcNMjUxMjI0MTYwMTI5WhcNMjUxMjI1MTYwMTI5WjAzMTEwLwYDVQQD EyhhNWNkMDVjY2U5YzlhZDkzYjllOWYwN2JkZGNlNjk2MjdkNjNjOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzWsTEeB4UXXII8R4oiVXeSCZmlW e/Uy32McrPcrLgWJkYGvSKcNfA3/sQWtTjb3U0t21ukZNmKrLM4PA7HYvDK7EZJB RN+Ojf5k2Fj0h4H5OLz3GyaowN21vhnkdWR82Q89BE+9C4aPqbvVgP2ZAxsk388D ykeKsE4xcBaxePDN+3rdDLxjT3qWamw904l/SeF/3s08eBbaqhtTrGT6jhgyppNp t1K+dPt3fv8Mu0zNi3SnJEhqSu5mG7aTWJcp1Vn7mbHfSWe6tXXWnRZ/9MAwi9y7 pZZyiYzzM6PRrWlqzO6sEPTcLW/tiYpl1fPWg3LAsSRLQKXsILVJZkbuwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXNBczpya2Tuenwe93OaWJ9Y8leMB8GA1UdIwQY MBaAFAugvglKWpPQfOGeRr5i+f/OY0WDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEt YmZjYWIzMmRhZmM2LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEtYmZjYWIzMmRhZmM2 LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI54ty96 qCI6yi8JHRpAhDu0MFnZvgAh9rzpbw6l27gvMIi2DEel9VysqcfkHQfnp8odGO1P BAyIdM7KU7MdF5Gyou+QOYBmE79q/ekYc0tOlAPgof29LjXayLxV1sjRTDsSeaMA /xnzE2Gs7zn6kyLfjkUfxa4aJfVUMtCFbZIjpngyrmCobZJX24VVIwvZtCYOgWe4 yySwJ3+cHE49EnayiI9rMNcq3srl2KMzd334jARgFrs3/vF6OdGhJiSSZxApas6Q 2mWbwpgcLKeltx84k3PV24rklTei5c7+Wbg1H9JL6dIcPmLX6aoMpdqggPqb4EM+ cx771UCMssTJlw== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:24 2025 by rpki-client