This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json) Hash identifier: qi0O4OhJG73h/GzJKoxY0NOCGeaTszIET6AgsI8T1R4= Subject key identifier: 91:83:F4:07:63:51:81:19:CC:4F:84:10:55:58:AF:FD:FD:BD:AC:CE Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f Certificate serial: 019B3B34DAC4ED80680EDCDC588B8E792F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft Manifest number: 1716 Signing time: Sat 20 Dec 2025 10:01:18 +0000 Manifest this update: Sat 20 Dec 2025 10:01:18 +0000 Manifest next update: Sun 21 Dec 2025 10:01:18 +0000 Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: GvLSKenDIS1QdUXhzUByut6cOmA6tBBWt5DrwJ9J6KE=) 2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:da:c4:ed:80:68:0e:dc:dc:58:8b:8e:79:2f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f Validity Not Before: Dec 20 10:01:18 2025 GMT Not After : Dec 21 10:01:18 2025 GMT Subject: CN=9183f40763518119cc4f84105558affdfdbdacce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:3c:8d:90:1b:f2:0f:57:d2:42:68:52:6b: 81:6f:50:c7:35:db:7c:c8:80:43:d9:81:c4:d0:c5: ad:0f:13:5e:39:0c:14:1c:a0:06:3f:a3:86:b5:d9: f5:e0:9d:ba:08:84:6a:d3:ab:e8:45:d5:72:92:6c: 13:d3:96:c9:da:18:fa:73:a7:16:8c:6b:58:86:f9: 9d:f3:13:28:34:db:49:96:6c:de:ce:61:cf:af:36: 5b:7c:01:fa:17:b6:6b:2f:e1:db:ae:34:60:15:0b: 9b:73:a7:54:28:ba:7f:fd:91:87:3b:77:82:60:54: 51:28:d1:1e:01:de:84:78:54:ff:0b:27:11:28:92: 67:9f:37:ec:fc:3e:75:90:00:5f:76:0d:e7:d1:26: 13:01:9a:ec:13:26:0d:13:f1:45:0e:f8:83:99:84: e2:e6:29:81:16:a7:a0:c5:de:e8:38:33:c7:1c:ee: 05:6c:e8:f7:ce:ae:8a:bb:4c:33:b9:92:57:5f:68: 46:c3:bd:3f:3b:1f:ed:3b:22:71:ca:c7:28:b0:fa: 8c:0c:5a:ec:35:6e:dd:0f:76:f0:63:ff:ff:48:9f: 18:6f:2a:f8:9d:e2:d9:36:70:08:8e:db:31:5c:3e: 01:95:90:1b:4a:d9:f7:82:e1:22:a3:39:0b:c0:bc: 1b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:F4:07:63:51:81:19:CC:4F:84:10:55:58:AF:FD:FD:BD:AC:CE X509v3 Authority Key Identifier: keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ef:01:7c:68:34:3e:e1:b3:46:10:47:f9:c5:65:d8:60:f2: 5f:02:85:bb:44:77:58:f6:f5:9b:53:3e:a2:03:83:58:af:01: 27:f8:9e:44:11:84:4f:c3:66:21:0b:fd:10:5c:38:7c:a7:8b: c1:92:6b:a4:9f:fc:72:3a:cc:67:f9:aa:36:5d:9b:73:e5:15: d2:a6:ac:97:5d:b4:1b:34:2f:98:de:49:2f:53:84:8d:89:81: 2d:10:9b:cb:fa:28:27:98:9c:e6:3a:db:76:a3:7a:8a:47:f7: 0b:26:cd:d0:d3:b3:17:72:f8:41:a2:6a:8e:57:b3:2e:db:3e: 67:3a:cb:ad:ed:ec:05:6e:a1:ee:c3:fb:c4:a9:77:39:52:81: b7:98:44:06:be:0f:20:5c:70:d0:de:aa:33:e8:f2:43:d8:01: e5:b7:9b:a7:9a:56:2c:90:71:0a:09:d5:2b:09:72:12:09:96: 96:a9:06:01:f8:8d:de:bb:04:90:f8:c0:76:25:28:32:fe:24: e0:5d:8a:fa:d6:da:b4:04:3b:57:a7:34:8a:98:bd:dc:ce:80: 6a:49:cf:60:b9:e8:e5:f9:e6:6e:78:8e:8f:4f:31:02:96:1d: 1a:a1:69:3a:4a:25:3e:3b:12:44:c4:e1:b6:11:82:00:23:8e: 80:4d:0e:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NNrE7YBoDtzcWIuOeS8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1 ODNlM2YwHhcNMjUxMjIwMTAwMTE4WhcNMjUxMjIxMTAwMTE4WjAzMTEwLwYDVQQD Eyg5MTgzZjQwNzYzNTE4MTE5Y2M0Zjg0MTA1NTU4YWZmZGZkYmRhY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1s8jZAb8g9X0kJoUmuBb1DHNdt8 yIBD2YHE0MWtDxNeOQwUHKAGP6OGtdn14J26CIRq06voRdVykmwT05bJ2hj6c6cW jGtYhvmd8xMoNNtJlmzezmHPrzZbfAH6F7ZrL+HbrjRgFQubc6dUKLp//ZGHO3eC YFRRKNEeAd6EeFT/CycRKJJnnzfs/D51kABfdg3n0SYTAZrsEyYNE/FFDviDmYTi 5imBFqegxd7oODPHHO4FbOj3zq6Ku0wzuZJXX2hGw70/Ox/tOyJxyscosPqMDFrs NW7dD3bwY///SJ8Ybyr4neLZNnAIjtsxXD4BlZAbStn3guEiozkLwLwbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGD9AdjUYEZzE+EEFVYr/39vazOMB8GA1UdIwQY MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt NThmYzk0ZDBkNDE0LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0 LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxu8BfGg0 PuGzRhBH+cVl2GDyXwKFu0R3WPb1m1M+ogODWK8BJ/ieRBGET8NmIQv9EFw4fKeL wZJrpJ/8cjrMZ/mqNl2bc+UV0qasl120GzQvmN5JL1OEjYmBLRCby/ooJ5ic5jrb dqN6ikf3CybN0NOzF3L4QaJqjlezLts+ZzrLre3sBW6h7sP7xKl3OVKBt5hEBr4P IFxw0N6qM+jyQ9gB5bebp5pWLJBxCgnVKwlyEgmWlqkGAfiN3rsEkPjAdiUoMv4k 4F2K+tbatAQ7V6c0ipi93M6AaknPYLno5fnmbniOj08xApYdGqFpOkolPjsSRMTh thGCACOOgE0O9w== -----END CERTIFICATE-----Generated at Sat Dec 20 19:58:44 2025 by rpki-client