This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft File: C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json) Hash identifier: mbCBLddHS0mjFhOOwHAhze9reQd0WFjEkuckHdtbuxw= Subject key identifier: 70:00:4C:5E:51:19:60:A4:BE:A3:83:FE:64:FA:CF:AE:EC:7A:EC:FA Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83 Certificate issuer: /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583 Certificate serial: 019B5ABFE30859D7ADED6C30196D9F944430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft Manifest number: 0E77 Signing time: Fri 26 Dec 2025 13:01:23 +0000 Manifest this update: Fri 26 Dec 2025 13:01:23 +0000 Manifest next update: Sat 27 Dec 2025 13:01:23 +0000 Files and hashes: 1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: MEwKLFQsXFOQkST6pRgpIKV34ec2UhGCUg+jMQ2fkVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e3:08:59:d7:ad:ed:6c:30:19:6d:9f:94:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583 Validity Not Before: Dec 26 13:01:23 2025 GMT Not After : Dec 27 13:01:23 2025 GMT Subject: CN=70004c5e511960a4bea383fe64facfaeec7aecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:36:cd:af:85:cf:35:d8:0e:b7:1b:da:80: 19:70:e4:9d:38:1b:90:e6:bd:ae:5f:56:4f:6d:6e: 56:d9:1a:36:ac:e4:60:de:3a:bf:f5:b1:d7:27:d2: 00:64:60:50:c6:0b:3b:11:5b:68:17:00:8e:f2:ee: 86:2d:98:bb:50:51:00:bf:07:9f:76:11:72:03:77: 64:42:0b:3d:29:26:a0:dd:a5:df:62:9d:07:df:2f: 4f:7b:6b:56:f1:06:a4:87:b2:5e:e8:8d:ef:a8:59: e4:50:59:72:26:84:29:fa:80:50:99:42:07:c4:19: b3:a3:69:cb:6c:51:73:cf:6d:cd:b5:88:7b:c1:06: 6a:f7:2d:3e:35:05:ff:42:2f:77:5f:ba:a4:66:6c: 08:85:d7:24:99:27:51:ed:0e:4a:c5:9f:1d:f4:55: 86:29:d5:f9:d6:c7:21:df:10:8f:5b:4d:8a:4b:d5: c6:e8:be:d5:4f:a4:9b:2e:23:f6:2e:a0:3c:2a:bb: 28:4d:94:e8:fa:b3:10:f5:aa:e4:2a:e0:12:5d:33: a6:e4:c3:24:18:38:c4:1c:a9:64:2a:c4:8e:6a:d6: 17:69:d7:58:15:19:eb:c3:1a:30:85:e4:c1:58:e3: 3e:10:c8:31:78:d4:c1:48:c3:e1:ed:84:f6:2a:5d: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:00:4C:5E:51:19:60:A4:BE:A3:83:FE:64:FA:CF:AE:EC:7A:EC:FA X509v3 Authority Key Identifier: keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c4:03:8a:a4:83:24:5d:37:3b:d2:13:57:5c:dc:dc:22:9b: d3:b8:e1:85:ed:81:ea:72:11:a1:e4:83:34:8c:8a:29:9a:3a: 5a:25:18:89:65:5b:b9:f6:71:ec:cb:2c:84:eb:5e:4d:eb:0b: 5d:47:75:0c:83:c0:76:fd:e7:7f:8d:e9:f4:ce:be:87:5b:6d: 6a:d5:7e:92:86:27:de:9c:2f:cb:ae:f6:fe:73:c8:4a:d5:c6: 5f:04:cf:28:e9:df:2b:8a:c2:f6:66:dc:d9:33:71:88:ca:83: 15:11:42:b5:d1:79:40:d6:e3:96:38:17:56:2c:19:57:4f:16: 98:18:70:ed:31:a7:d1:8a:65:83:89:e7:e3:a2:e9:b0:61:d6: 85:2e:30:e5:7e:22:bd:01:09:ce:2b:07:cc:4b:a2:6b:3f:5c: a9:96:cb:18:5e:36:7c:80:0d:45:a1:35:6c:dd:16:35:15:9d: d0:c6:8d:bc:53:71:d0:79:70:db:67:11:98:15:9e:88:06:00: c0:3d:0a:48:11:37:72:87:15:af:9a:d4:46:68:73:35:1e:0a: 3c:31:f9:47:d4:b7:8d:57:f9:cd:7f:59:b6:35:23:51:70:6a: c8:91:b1:71:d1:65:5e:ee:18:a3:75:ef:69:d0:a7:2c:e3:45: 9f:62:ae:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+MIWdet7WwwGW2flEQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTBiZTA5NGE1YTkzZDA3Y2UxOWU0NmJlNjJmOWZmY2U2 MzQ1ODMwHhcNMjUxMjI2MTMwMTIzWhcNMjUxMjI3MTMwMTIzWjAzMTEwLwYDVQQD Eyg3MDAwNGM1ZTUxMTk2MGE0YmVhMzgzZmU2NGZhY2ZhZWVjN2FlY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt602za+FzzXYDrcb2oAZcOSdOBuQ 5r2uX1ZPbW5W2Ro2rORg3jq/9bHXJ9IAZGBQxgs7EVtoFwCO8u6GLZi7UFEAvwef dhFyA3dkQgs9KSag3aXfYp0H3y9Pe2tW8Qakh7Je6I3vqFnkUFlyJoQp+oBQmUIH xBmzo2nLbFFzz23NtYh7wQZq9y0+NQX/Qi93X7qkZmwIhdckmSdR7Q5KxZ8d9FWG KdX51sch3xCPW02KS9XG6L7VT6SbLiP2LqA8KrsoTZTo+rMQ9arkKuASXTOm5MMk GDjEHKlkKsSOatYXaddYFRnrwxowheTBWOM+EMgxeNTBSMPh7YT2Kl0UvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAATF5RGWCkvqOD/mT6z67seuz6MB8GA1UdIwQY MBaAFAugvglKWpPQfOGeRr5i+f/OY0WDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEt YmZjYWIzMmRhZmM2LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEtYmZjYWIzMmRhZmM2 LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcQDiqSD JF03O9ITV1zc3CKb07jhhe2B6nIRoeSDNIyKKZo6WiUYiWVbufZx7MsshOteTesL XUd1DIPAdv3nf43p9M6+h1ttatV+koYn3pwvy672/nPIStXGXwTPKOnfK4rC9mbc 2TNxiMqDFRFCtdF5QNbjljgXViwZV08WmBhw7TGn0Yplg4nn46LpsGHWhS4w5X4i vQEJzisHzEuiaz9cqZbLGF42fIANRaE1bN0WNRWd0MaNvFNx0Hlw22cRmBWeiAYA wD0KSBE3cocVr5rURmhzNR4KPDH5R9S3jVf5zX9ZtjUjUXBqyJGxcdFlXu4Yo3Xv adCnLONFn2Kulg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:09 2025 by rpki-client