This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft File: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json) Hash identifier: hcH4urcpDbznTH496oG2fJaqmtAuFMOS4EBd90CJ7HM= Subject key identifier: F9:FD:D5:8E:95:23:AD:1C:F9:2B:E1:2F:95:1B:06:E1:CD:57:1A:8C Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B Certificate issuer: /CN=d02ea90148d4e688c9492d9467159cd10575591b Certificate serial: 019B38A2BBFBB8B5AAC0B1E4DA4617F2FEFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft Manifest number: 08B5 Signing time: Fri 19 Dec 2025 22:02:27 +0000 Manifest this update: Fri 19 Dec 2025 22:02:27 +0000 Manifest next update: Sat 20 Dec 2025 22:02:27 +0000 Files and hashes: 1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: q9SIbPmStLXKfmj259Qufv13xHIPZp5bfAeCeKqY4dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:bb:fb:b8:b5:aa:c0:b1:e4:da:46:17:f2:fe:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b Validity Not Before: Dec 19 22:02:27 2025 GMT Not After : Dec 20 22:02:27 2025 GMT Subject: CN=f9fdd58e9523ad1cf92be12f951b06e1cd571a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:34:6a:f8:e0:82:a2:a3:80:40:5b:04:64: 44:14:31:8e:be:cd:ca:c9:ff:70:0a:72:db:ed:c0: 24:e6:6b:52:b8:e6:8f:3a:8d:f0:72:52:91:cb:19: d2:3c:ba:f0:05:e0:b4:3b:b9:18:77:12:f8:bb:2b: 01:53:b6:19:fc:72:c2:90:7e:9e:28:7b:09:0a:d4: 5d:0d:ef:ad:4f:21:1b:76:9a:4a:17:c8:fc:ef:c3: 1b:41:66:34:db:37:2d:f3:b8:99:b8:47:f4:3b:e8: 08:2d:3f:83:db:5a:57:f5:e6:30:53:b6:33:d6:a5: e4:0c:b0:a8:24:04:88:1d:71:90:fd:10:84:8b:79: ce:07:b3:7c:63:86:cf:b8:21:bd:c0:02:d5:64:20: c9:60:7a:50:a3:ef:73:93:76:7a:cc:fb:e8:24:a5: 25:47:e3:6f:b7:36:3f:92:fb:d7:a7:a5:60:68:c8: 6c:27:6f:c0:36:04:43:43:02:a7:2b:0d:3a:8b:fd: 5a:f3:48:88:fc:a2:cc:2b:62:76:ad:c1:72:2d:3f: cd:6b:07:53:ec:5a:86:41:98:be:32:00:b9:f5:78: a5:2a:04:d2:14:9d:07:45:93:fd:db:5c:a5:bd:af: 72:88:46:77:ee:0a:8b:54:7f:bf:f2:28:06:f2:ee: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:D5:8E:95:23:AD:1C:F9:2B:E1:2F:95:1B:06:E1:CD:57:1A:8C X509v3 Authority Key Identifier: keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ba:6b:ab:09:a1:f4:cd:f3:c5:32:6e:b3:6f:26:d4:42:82: e1:71:49:04:aa:6c:9d:75:56:d6:0e:ec:5c:95:82:5b:9b:71: 55:90:f9:c4:88:76:e7:89:8b:f9:58:6e:15:40:74:df:ed:84: 06:26:ba:3d:68:92:02:2b:27:8e:4d:4c:76:e5:6f:49:b4:3b: b9:f1:1b:2c:f6:e4:00:7f:fd:e5:d5:f7:08:d0:07:4c:5b:e7: 78:6f:bd:9f:b5:71:32:09:06:2f:84:30:ec:2b:94:b2:32:26: 50:2a:cd:51:74:73:ca:9f:7a:63:1c:43:2d:cd:04:03:01:21: 5a:33:0d:7e:55:73:09:e5:59:42:8b:b9:43:86:54:28:0a:53: 4d:53:30:f7:da:d9:c3:45:79:1b:1e:7c:18:f5:68:b5:7a:3d: a6:9b:6d:19:38:56:91:48:d6:be:bb:53:ac:e9:d4:f6:61:d5: e7:f7:20:00:c6:20:fd:13:dc:f1:ff:fb:73:14:01:10:7c:ce: e3:2a:9b:3b:2b:2b:06:c3:f7:94:e3:31:c9:73:e0:64:db:f8: 87:1c:86:29:e3:e1:40:64:72:a3:3f:82:69:cc:f7:ee:a4:eb: 23:63:38:50:42:1d:19:9f:28:9d:aa:0a:94:40:7c:a5:18:85: 30:30:1a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4orv7uLWqwLHk2kYX8v77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMmVhOTAxNDhkNGU2ODhjOTQ5MmQ5NDY3MTU5Y2QxMDU3 NTU5MWIwHhcNMjUxMjE5MjIwMjI3WhcNMjUxMjIwMjIwMjI3WjAzMTEwLwYDVQQD EyhmOWZkZDU4ZTk1MjNhZDFjZjkyYmUxMmY5NTFiMDZlMWNkNTcxYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL40avjggqKjgEBbBGREFDGOvs3K yf9wCnLb7cAk5mtSuOaPOo3wclKRyxnSPLrwBeC0O7kYdxL4uysBU7YZ/HLCkH6e KHsJCtRdDe+tTyEbdppKF8j878MbQWY02zct87iZuEf0O+gILT+D21pX9eYwU7Yz 1qXkDLCoJASIHXGQ/RCEi3nOB7N8Y4bPuCG9wALVZCDJYHpQo+9zk3Z6zPvoJKUl R+NvtzY/kvvXp6VgaMhsJ2/ANgRDQwKnKw06i/1a80iI/KLMK2J2rcFyLT/NawdT 7FqGQZi+MgC59XilKgTSFJ0HRZP921ylva9yiEZ37gqLVH+/8igG8u429wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn91Y6VI60c+SvhL5UbBuHNVxqMMB8GA1UdIwQY MBaAFNAuqQFI1OaIyUktlGcVnNEFdVkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kMmE4ODctMGFlNS00NDFjLWEzOTMt ZmRjM2IzZmNlODNhLzEvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kMmE4ODctMGFlNS00NDFjLWEzOTMtZmRjM2IzZmNlODNh LzEvMEM2cEFValU1b2pKU1MyVVp4V2MwUVYxV1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrprqwmh 9M3zxTJus28m1EKC4XFJBKpsnXVW1g7sXJWCW5txVZD5xIh254mL+VhuFUB03+2E Bia6PWiSAisnjk1MduVvSbQ7ufEbLPbkAH/95dX3CNAHTFvneG+9n7VxMgkGL4Qw 7CuUsjImUCrNUXRzyp96YxxDLc0EAwEhWjMNflVzCeVZQou5Q4ZUKApTTVMw99rZ w0V5Gx58GPVotXo9ppttGThWkUjWvrtTrOnU9mHV5/cgAMYg/RPc8f/7cxQBEHzO 4yqbOysrBsP3lOMxyXPgZNv4hxyGKePhQGRyoz+Cacz37qTrI2M4UEIdGZ8onaoK lEB8pRiFMDAacQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:22:00 2025 by rpki-client