This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft File: r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json) Hash identifier: aau5Wic22i29ZBm2q+yx5kTnue9biz+tNLOizX2HVvw= Subject key identifier: C3:EE:EA:3A:D6:ED:20:39:F8:70:CB:8B:C3:FD:BD:08:00:29:94:45 Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA Certificate issuer: /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa Certificate serial: 019B5976C4DCA866F4159B6879AB8E248C0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:01:54 +0000 Manifest this update: Fri 26 Dec 2025 07:01:54 +0000 Manifest next update: Sat 27 Dec 2025 07:01:54 +0000 Files and hashes: 1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: F9UXxMTqsPf6qx5rAUggz4uuPYle3+GhgAn3QxUOwCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:c4:dc:a8:66:f4:15:9b:68:79:ab:8e:24:8c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa Validity Not Before: Dec 26 07:01:54 2025 GMT Not After : Dec 27 07:01:54 2025 GMT Subject: CN=c3eeea3ad6ed2039f870cb8bc3fdbd0800299445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:7e:27:93:0d:32:ac:f9:51:15:98:f1:26: 92:fb:3a:1f:3f:55:70:65:77:fd:60:dc:eb:17:b4: b7:c7:f0:8e:88:93:de:14:b0:cf:f8:32:7d:b6:b0: de:11:97:bf:a8:54:e2:15:e1:73:12:6a:51:58:ce: 47:60:9e:b8:18:86:fd:65:77:f1:2d:bf:9a:41:0d: 7b:5c:f1:a1:0b:af:70:f6:e6:12:c2:81:9d:dc:3b: 99:95:f3:d2:5a:2e:ec:71:e3:2d:5e:b2:62:00:71: cb:26:43:fe:e0:ac:20:d7:ef:46:43:a8:c8:4f:0d: e7:fc:eb:e6:cb:4d:24:22:5d:ba:be:3d:cb:79:a4: 33:62:17:4e:53:02:5b:3e:c2:70:b3:a3:61:ff:80: 70:28:a1:ba:88:54:a1:f8:08:9c:be:12:06:3f:35: 15:6c:26:99:35:50:a8:f9:ae:ad:26:90:11:8a:a9: fd:e3:48:27:df:ba:5a:a3:40:6d:e4:e2:93:e4:25: 7b:15:7d:86:e1:78:20:26:74:d6:ad:32:7a:37:15: 9d:78:6b:8e:c5:34:23:2b:21:7b:a7:f5:5b:e9:7e: 1b:48:47:ad:7a:2d:7e:18:db:9f:96:7d:c0:c2:0c: 0c:6b:70:75:23:40:23:72:a1:ca:b0:ea:5c:bd:66: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EE:EA:3A:D6:ED:20:39:F8:70:CB:8B:C3:FD:BD:08:00:29:94:45 X509v3 Authority Key Identifier: keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0a:3f:a7:d1:18:23:d7:f2:d6:6a:6c:bc:01:6f:9b:7f:f6: d6:ab:a9:8d:19:10:8c:90:9e:59:51:9c:2d:2d:3e:59:45:87: c9:bb:5e:22:cf:c4:36:52:ae:79:fd:22:83:53:f4:37:9a:cf: bb:b7:e2:f0:11:d6:d8:78:2f:bf:11:55:b3:9f:46:9b:63:98: c6:a6:64:bb:2e:49:7a:27:66:7f:81:c8:7c:64:3c:1e:8d:1a: 1f:2b:4c:1e:53:b8:3b:37:d1:b9:9e:05:66:ef:a9:ba:be:09: 62:73:21:b9:46:d8:92:53:04:3c:99:88:58:f6:9c:8f:a6:bd: aa:9b:25:b0:8d:d7:fa:21:9a:21:dd:c6:e9:a4:42:28:fa:8b: 59:54:e0:98:c0:11:99:4b:30:3f:ec:39:28:01:e1:29:db:52: 80:f5:96:46:5d:c9:25:6d:e0:99:e0:4d:d9:8c:82:9a:50:d1: 98:63:5f:1c:6f:2e:f1:7b:b1:1e:e8:29:79:97:5c:b9:a3:69: d2:7f:d5:2c:ea:60:ff:48:0c:8b:85:33:a8:62:62:89:7f:da: 41:31:43:c2:d6:21:b1:82:00:a0:6e:25:6e:f0:00:ef:1e:9d: 0a:d1:1a:6e:16:2e:32:0d:13:a3:f7:4a:0c:45:d9:28:dc:9d: 8c:ec:9c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdsTcqGb0FZtoeauOJIwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNGU4NjJmOGViNTVmNGY4MjU0ZTJjODU4YjcyZjQzMzk3 ZmUzZmEwHhcNMjUxMjI2MDcwMTU0WhcNMjUxMjI3MDcwMTU0WjAzMTEwLwYDVQQD EyhjM2VlZWEzYWQ2ZWQyMDM5Zjg3MGNiOGJjM2ZkYmQwODAwMjk5NDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZF+J5MNMqz5URWY8SaS+zofP1Vw ZXf9YNzrF7S3x/COiJPeFLDP+DJ9trDeEZe/qFTiFeFzEmpRWM5HYJ64GIb9ZXfx Lb+aQQ17XPGhC69w9uYSwoGd3DuZlfPSWi7sceMtXrJiAHHLJkP+4Kwg1+9GQ6jI Tw3n/Ovmy00kIl26vj3LeaQzYhdOUwJbPsJws6Nh/4BwKKG6iFSh+AicvhIGPzUV bCaZNVCo+a6tJpARiqn940gn37pao0Bt5OKT5CV7FX2G4XggJnTWrTJ6NxWdeGuO xTQjKyF7p/Vb6X4bSEetei1+GNufln3AwgwMa3B1I0AjcqHKsOpcvWYKRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPu6jrW7SA5+HDLi8P9vQgAKZRFMB8GA1UdIwQY MBaAFK9Ohi+OtV9PglTiyFi3L0M5f+P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0Yzct NTBkMmY3YTEwOTYyLzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85ZTM3Y2UtMmM3Ny00NTBiLTk0YzctNTBkMmY3YTEwOTYy LzEvcjA2R0w0NjFYMC1DVk9MSVdMY3ZRemxfNF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgo/p9EY I9fy1mpsvAFvm3/21qupjRkQjJCeWVGcLS0+WUWHybteIs/ENlKuef0ig1P0N5rP u7fi8BHW2HgvvxFVs59Gm2OYxqZkuy5Jeidmf4HIfGQ8Ho0aHytMHlO4OzfRuZ4F Zu+pur4JYnMhuUbYklMEPJmIWPacj6a9qpslsI3X+iGaId3G6aRCKPqLWVTgmMAR mUswP+w5KAHhKdtSgPWWRl3JJW3gmeBN2YyCmlDRmGNfHG8u8XuxHugpeZdcuaNp 0n/VLOpg/0gMi4UzqGJiiX/aQTFDwtYhsYIAoG4lbvAA7x6dCtEabhYuMg0To/dK DEXZKNydjOycwQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:13 2025 by rpki-client