This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft File: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json) Hash identifier: VVjMKGuGYD7uIm2d3UFnd0DY9goo3jj4PVs46Mxnb/U= Subject key identifier: CF:2A:7F:82:28:01:47:3A:A7:94:EC:6E:C2:17:91:E4:C8:FD:02:25 Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4 Certificate issuer: /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4 Certificate serial: 019B1F8745CEC7AFEA795BB7E5471DE51D94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft Manifest number: 0E5E Signing time: Mon 15 Dec 2025 01:01:57 +0000 Manifest this update: Mon 15 Dec 2025 01:01:57 +0000 Manifest next update: Tue 16 Dec 2025 01:01:57 +0000 Files and hashes: 1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: fTDEWEGHaUMWkFSgA47p1emjlH1eJga9iE23OUEz/uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:45:ce:c7:af:ea:79:5b:b7:e5:47:1d:e5:1d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4 Validity Not Before: Dec 15 01:01:57 2025 GMT Not After : Dec 16 01:01:57 2025 GMT Subject: CN=cf2a7f822801473aa794ec6ec21791e4c8fd0225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:5c:68:b7:d4:e0:d5:38:3a:e1:6e:6b:42: 72:27:ff:1b:36:46:9a:92:84:42:f1:dd:1b:f6:ae: 09:76:cd:be:b7:3c:76:ce:0c:b3:64:61:b9:9d:13: 1e:50:cc:6c:07:2e:c2:a2:ad:e1:03:e2:b5:e6:4d: 16:70:19:1c:f3:20:50:cf:fd:a6:b0:77:5b:a7:0b: 8f:b2:2a:64:24:39:b4:23:08:51:06:f1:b7:89:87: 52:ee:30:67:89:d0:be:e3:69:29:cc:60:6a:6d:d2: 74:d4:3f:a9:72:95:e4:b9:78:00:4b:13:fd:69:a6: b2:b1:38:46:fa:2c:2e:72:5c:81:b8:68:1e:29:0b: d9:ca:59:b7:7a:3e:6a:2e:01:84:d0:0a:15:7e:41: 1d:bb:4a:82:be:da:1b:81:81:e5:01:79:1f:be:cc: b1:d5:5c:9c:8b:ed:14:71:c2:c5:2e:48:72:2a:8c: 10:64:04:70:42:01:8c:b7:c7:75:67:86:00:47:0b: 57:16:55:72:b7:78:0e:1f:be:e0:c0:9a:42:64:35: 28:ff:4e:d3:20:21:8d:3c:4e:51:1f:b6:f0:a1:32: db:36:96:f1:05:d8:9c:2f:ca:b0:f3:02:1a:53:fc: 92:47:a9:e0:68:c1:bb:ce:3f:ee:fd:67:96:c2:4f: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2A:7F:82:28:01:47:3A:A7:94:EC:6E:C2:17:91:E4:C8:FD:02:25 X509v3 Authority Key Identifier: keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b6:12:58:77:8c:c9:75:ed:94:44:09:73:12:a1:e3:4d:62: 6f:46:af:b8:11:48:88:fa:b9:77:cd:3b:71:e6:b3:87:18:20: 28:c8:ad:0f:be:04:bb:06:9d:2a:c2:42:7a:19:01:07:81:db: 09:34:c0:c8:88:30:c8:f2:da:9c:79:a3:0a:38:f3:f0:f0:54: 77:ec:0c:aa:ae:32:10:9d:69:db:a6:65:d8:5a:6e:21:6b:8c: 12:29:38:65:9c:ab:8b:45:03:62:cb:b8:a7:01:05:d1:fe:2f: 05:8e:6b:79:7b:29:16:a4:82:95:ba:1e:04:02:41:05:6a:93: 7c:5b:d7:e1:d6:76:d0:d5:65:bb:3d:2b:9d:7b:1d:df:21:6b: ad:25:1e:89:6e:2f:81:ec:51:e4:8e:4d:11:6b:92:0c:14:a2: 4a:10:14:33:e3:df:c3:34:13:d6:12:b5:9f:4e:fe:bd:ac:8e: 9f:f0:3c:af:e9:67:1b:f0:29:c2:bc:88:4b:f4:65:23:d4:1c: ac:53:a1:94:e2:76:a2:93:66:15:97:71:7c:03:2c:2a:6a:7b: 5b:04:62:de:4f:a3:6c:eb:45:ca:6d:e8:cf:21:7d:9c:77:4c: 26:7d:d2:6c:4d:bf:2b:d6:b8:95:96:f2:1c:f3:3a:68:de:23: fc:93:70:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh0XOx6/qeVu35Ucd5R2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MjU4ZTE1MGU5MjJmY2E1Y2I4NWI2ZmUxYzY4YjgwNWM5 YjZlZjQwHhcNMjUxMjE1MDEwMTU3WhcNMjUxMjE2MDEwMTU3WjAzMTEwLwYDVQQD EyhjZjJhN2Y4MjI4MDE0NzNhYTc5NGVjNmVjMjE3OTFlNGM4ZmQwMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4lcaLfU4NU4OuFua0JyJ/8bNkaa koRC8d0b9q4Jds2+tzx2zgyzZGG5nRMeUMxsBy7Coq3hA+K15k0WcBkc8yBQz/2m sHdbpwuPsipkJDm0IwhRBvG3iYdS7jBnidC+42kpzGBqbdJ01D+pcpXkuXgASxP9 aaaysThG+iwuclyBuGgeKQvZylm3ej5qLgGE0AoVfkEdu0qCvtobgYHlAXkfvsyx 1Vyci+0UccLFLkhyKowQZARwQgGMt8d1Z4YARwtXFlVyt3gOH77gwJpCZDUo/07T ICGNPE5RH7bwoTLbNpbxBdicL8qw8wIaU/ySR6ngaMG7zj/u/WeWwk+wGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8qf4IoAUc6p5TsbsIXkeTI/QIlMB8GA1UdIwQY MBaAFOgljhUOki/KXLhbb+HGi4Bcm270MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkNXT0ZRNlNMOHBjdUZ0djRjYUxnRnliYnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85MGRjYjctYjkxZS00OWE4LTk3ZDkt NDNmNmU4MWYxYWU4LzEvNkNXT0ZRNlNMOHBjdUZ0djRjYUxnRnliYnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85MGRjYjctYjkxZS00OWE4LTk3ZDktNDNmNmU4MWYxYWU4 LzEvNkNXT0ZRNlNMOHBjdUZ0djRjYUxnRnliYnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbYSWHeM yXXtlEQJcxKh401ib0avuBFIiPq5d807ceazhxggKMitD74EuwadKsJCehkBB4Hb CTTAyIgwyPLanHmjCjjz8PBUd+wMqq4yEJ1p26Zl2FpuIWuMEik4ZZyri0UDYsu4 pwEF0f4vBY5reXspFqSClboeBAJBBWqTfFvX4dZ20NVluz0rnXsd3yFrrSUeiW4v gexR5I5NEWuSDBSiShAUM+PfwzQT1hK1n07+vayOn/A8r+lnG/ApwryIS/RlI9Qc rFOhlOJ2opNmFZdxfAMsKmp7WwRi3k+jbOtFym3ozyF9nHdMJn3SbE2/K9a4lZby HPM6aN4j/JNwAA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:47:47 2025 by rpki-client