This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json) Hash identifier: YIWduxvQWGhzOhEdXaQBi8TkgK7iEr4507+gQenSnJ8= Subject key identifier: DF:9F:28:59:21:26:C0:6E:8A:32:BD:7C:C8:5E:A0:8B:93:B4:4B:73 Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4 Certificate serial: 019B5A5216CFB3DF3B087A57E35C2C85F8B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:01:27 +0000 Manifest this update: Fri 26 Dec 2025 11:01:27 +0000 Manifest next update: Sat 27 Dec 2025 11:01:27 +0000 Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: 1/NWKClXGID2r7XSBWq5tH7M9drgVV4SqQf1S5DmaCQ=) 2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:16:cf:b3:df:3b:08:7a:57:e3:5c:2c:85:f8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4 Validity Not Before: Dec 26 11:01:27 2025 GMT Not After : Dec 27 11:01:27 2025 GMT Subject: CN=df9f28592126c06e8a32bd7cc85ea08b93b44b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3c:03:e6:c7:33:0a:1a:33:e2:a0:db:af:13: 5b:7c:4b:a7:9e:37:e8:44:f6:0f:11:bc:83:29:26: 00:8d:0d:fd:d4:3a:42:b0:09:0a:a1:88:73:f4:44: a9:11:dd:b3:52:0e:cf:85:37:83:f6:1f:59:7f:e2: 35:db:ea:ae:b4:56:e1:44:42:41:f8:2a:15:56:bc: 3f:d1:f2:60:a9:d7:af:b0:95:45:32:59:23:90:75: a7:bb:7f:79:9f:7c:6a:a1:de:8c:24:bf:8e:27:95: b9:15:af:ab:ab:ae:56:32:ad:74:67:25:95:bc:2c: 12:45:81:3e:be:6a:08:14:db:c4:07:b3:98:1c:76: 04:33:29:a2:85:a7:8a:03:59:46:01:af:4f:37:ad: 58:05:1c:70:b0:6c:63:ac:54:71:3c:86:f3:0e:58: 14:a6:ab:f8:b5:ed:3a:39:1a:ad:14:e1:bc:b6:c9: 2f:f8:4b:34:d3:f8:ec:48:68:55:89:45:5c:6a:a6: 69:4d:5c:f1:8f:61:ef:0d:7d:d2:a9:c4:0a:5f:3c: eb:6c:70:77:02:5e:86:c5:5b:85:10:46:5e:69:78: 4f:4c:92:e0:ca:93:04:59:b0:93:40:be:e4:d6:f1: 89:11:94:a9:22:71:85:66:f7:40:48:7e:6b:4b:9b: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9F:28:59:21:26:C0:6E:8A:32:BD:7C:C8:5E:A0:8B:93:B4:4B:73 X509v3 Authority Key Identifier: keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e2:4e:3c:53:51:7e:d1:f7:b7:68:d8:46:30:94:75:37:1c: 28:2f:0f:31:66:83:2a:6e:5e:3d:13:5a:91:a3:c8:c7:d1:4e: 5f:d4:cb:d4:54:06:06:a1:a4:89:5c:fc:ab:b3:1b:53:ea:09: f8:11:7e:9b:a3:bd:76:75:be:02:48:0b:9a:52:8c:00:83:a8: 9c:e0:47:ad:88:8f:9c:5d:76:85:98:73:c9:9b:1c:64:49:bb: 17:05:36:85:ec:b3:fc:e0:a8:88:18:b6:95:6c:19:82:b4:2b: ad:33:8f:d1:4b:40:2c:81:54:38:26:38:55:b7:6f:35:06:85: 74:5e:0a:da:56:6a:a3:0d:9e:2e:55:aa:ba:13:f9:52:ec:95: f1:07:60:2d:74:9c:12:28:2d:f9:de:72:21:c0:ed:0f:c9:de: 80:08:1f:5a:da:09:3a:4e:ba:cd:2e:fc:e3:4f:3f:39:05:17: 48:d6:61:95:f9:29:fc:65:0c:df:a5:16:ea:06:b0:d9:01:05: 39:b5:d2:25:63:53:41:3f:56:b1:c6:08:ab:93:cb:2f:77:51: f0:eb:61:1b:ec:8c:bb:87:d9:57:8d:e3:54:e8:35:34:76:a9: 4b:6a:ab:b8:67:5a:65:1c:a6:3c:34:d6:d2:1f:51:62:b7:f6: 12:69:e4:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUhbPs987CHpX41wshfi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MmVhOTJlY2M5YjBkMzU0YjVmZDcwMmUwOTkxZjE1MGEz MDlmZTQwHhcNMjUxMjI2MTEwMTI3WhcNMjUxMjI3MTEwMTI3WjAzMTEwLwYDVQQD EyhkZjlmMjg1OTIxMjZjMDZlOGEzMmJkN2NjODVlYTA4YjkzYjQ0YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TwD5sczChoz4qDbrxNbfEunnjfo RPYPEbyDKSYAjQ391DpCsAkKoYhz9ESpEd2zUg7PhTeD9h9Zf+I12+qutFbhREJB +CoVVrw/0fJgqdevsJVFMlkjkHWnu395n3xqod6MJL+OJ5W5Fa+rq65WMq10ZyWV vCwSRYE+vmoIFNvEB7OYHHYEMymihaeKA1lGAa9PN61YBRxwsGxjrFRxPIbzDlgU pqv4te06ORqtFOG8tskv+Es00/jsSGhViUVcaqZpTVzxj2HvDX3SqcQKXzzrbHB3 Al6GxVuFEEZeaXhPTJLgypMEWbCTQL7k1vGJEZSpInGFZvdASH5rS5swDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+fKFkhJsBuijK9fMheoIuTtEtzMB8GA1UdIwQY MBaAFNYuqS7Mmw01S1/XAuCZHxUKMJ/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTct NTQ1OTQ3OTVlZWEyLzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTctNTQ1OTQ3OTVlZWEy LzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuJOPFNR ftH3t2jYRjCUdTccKC8PMWaDKm5ePRNakaPIx9FOX9TL1FQGBqGkiVz8q7MbU+oJ +BF+m6O9dnW+AkgLmlKMAIOonOBHrYiPnF12hZhzyZscZEm7FwU2heyz/OCoiBi2 lWwZgrQrrTOP0UtALIFUOCY4VbdvNQaFdF4K2lZqow2eLlWquhP5UuyV8QdgLXSc Eigt+d5yIcDtD8negAgfWtoJOk66zS78408/OQUXSNZhlfkp/GUM36UW6gaw2QEF ObXSJWNTQT9WscYIq5PLL3dR8OthG+yMu4fZV43jVOg1NHapS2qruGdaZRymPDTW 0h9RYrf2Emnkkg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:23 2025 by rpki-client