This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json) Hash identifier: V0x0qNLtiiVfBmGwD2d+zr6fclAnaMOLZaYGe8ZGJ6I= Subject key identifier: 56:B3:64:05:A0:7D:D2:28:EB:3B:37:70:D1:1A:EF:9D:75:D6:D8:8C Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Certificate serial: 019B4701D3D6A1841714514C92DEC7112D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft Manifest number: 1068 Signing time: Mon 22 Dec 2025 17:01:00 +0000 Manifest this update: Mon 22 Dec 2025 17:01:00 +0000 Manifest next update: Tue 23 Dec 2025 17:01:00 +0000 Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: rWFw1TOg4ljQA/MqbVEWVC91vr7V/yYf9plqigOR7qY=) 2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:d3:d6:a1:84:17:14:51:4c:92:de:c7:11:2d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Validity Not Before: Dec 22 17:01:00 2025 GMT Not After : Dec 23 17:01:00 2025 GMT Subject: CN=56b36405a07dd228eb3b3770d11aef9d75d6d88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:06:97:75:9b:9a:32:a8:7b:57:2a:ad:b7: 4a:19:7f:f8:96:2c:7d:e0:da:1c:e5:dc:91:23:48: 50:f9:39:5c:75:9a:23:2e:e6:f9:4a:be:ba:b2:20: f5:12:49:25:66:84:a8:f0:79:1e:04:4f:15:da:5e: 35:b0:48:54:32:ce:3f:0c:15:6e:61:13:8b:ca:31: e1:f7:69:db:03:f5:ea:45:fb:44:6a:9c:53:47:8b: c3:1f:ab:88:33:e7:01:4e:a4:5b:ee:a2:82:b9:0a: bb:f0:8c:58:75:05:e9:f2:26:7b:e4:f0:57:39:1e: 88:52:51:d5:89:54:17:64:05:aa:20:d3:33:90:72: e8:da:21:6e:3e:b7:e8:81:c3:37:a2:b0:8a:38:d5: b6:cb:15:37:85:e5:11:cb:c5:28:7d:f9:32:b8:34: 48:4a:01:94:8f:b6:db:be:13:e4:19:f9:a5:5f:50: b7:c6:7c:47:41:09:fd:56:1f:9a:14:7c:99:6d:07: 17:6c:7b:4d:10:18:37:c3:28:1f:4d:b6:e4:ca:12: cd:fc:c9:00:4d:2a:31:4b:75:12:92:5a:9b:3f:35: d6:0c:13:6f:b5:f1:02:07:5c:b8:2c:16:8d:c1:53: 37:01:2e:fd:b9:7e:c9:bf:2e:21:6d:80:3f:d7:31: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B3:64:05:A0:7D:D2:28:EB:3B:37:70:D1:1A:EF:9D:75:D6:D8:8C X509v3 Authority Key Identifier: keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:26:e6:a7:ce:23:14:c4:a7:34:40:de:6d:8e:0d:19:d4:ce: 57:06:e7:29:f1:ea:57:1c:c7:86:cb:2c:39:b9:b4:21:a0:17: 39:96:1d:ab:64:5b:38:7a:f9:03:51:4e:a2:63:bb:59:03:95: 52:87:b4:fc:99:70:79:31:e8:83:92:bb:50:17:f8:0b:da:71: 28:41:b3:78:3c:60:e6:01:9a:48:9f:36:ee:9c:ef:00:48:c5: 4a:46:32:49:c8:21:f3:cb:90:66:e5:50:71:2d:b1:c7:06:eb: 10:91:36:c8:e6:35:be:9c:39:98:34:c4:cf:5a:0f:57:4c:8d: 9b:28:56:cf:b9:fa:b7:2a:be:ff:f7:2e:72:6a:15:fe:e3:f6: a9:ef:b6:40:e7:94:33:74:66:9b:ad:12:ad:03:2e:33:f3:5a: 57:6c:43:1d:ab:93:ee:32:5a:15:91:67:e3:b3:d0:68:75:b5: d8:c5:74:8b:64:d8:86:01:34:41:b7:db:4b:da:4e:25:ed:37: 49:3a:68:2d:62:77:e1:04:d4:52:63:6f:e3:f8:5f:6c:27:24: cf:86:68:e5:f7:4e:31:bb:c5:73:4d:1d:f3:fb:a1:55:15:50: 71:5d:2c:67:2b:6e:0d:66:a9:e0:1a:dc:08:da:a6:89:78:41: 82:22:44:73 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtHAdPWoYQXFFFMkt7HES0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0 OWRiZGQwHhcNMjUxMjIyMTcwMTAwWhcNMjUxMjIzMTcwMTAwWjAzMTEwLwYDVQQD Eyg1NmIzNjQwNWEwN2RkMjI4ZWIzYjM3NzBkMTFhZWY5ZDc1ZDZkODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM4Gl3WbmjKoe1cqrbdKGX/4lix9 4Noc5dyRI0hQ+TlcdZojLub5Sr66siD1EkklZoSo8HkeBE8V2l41sEhUMs4/DBVu YROLyjHh92nbA/XqRftEapxTR4vDH6uIM+cBTqRb7qKCuQq78IxYdQXp8iZ75PBX OR6IUlHViVQXZAWqINMzkHLo2iFuPrfogcM3orCKONW2yxU3heURy8UoffkyuDRI SgGUj7bbvhPkGfmlX1C3xnxHQQn9Vh+aFHyZbQcXbHtNEBg3wygfTbbkyhLN/MkA TSoxS3USklqbPzXWDBNvtfECB1y4LBaNwVM3AS79uX7Jvy4hbYA/1zG8qwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFazZAWgfdIo6zs3cNEa75111tiMMB8GA1UdIwQY MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCbm p84jFMSnNEDebY4NGdTOVwbnKfHqVxzHhsssObm0IaAXOZYdq2RbOHr5A1FOomO7 WQOVUoe0/JlweTHog5K7UBf4C9pxKEGzeDxg5gGaSJ827pzvAEjFSkYyScgh88uQ ZuVQcS2xxwbrEJE2yOY1vpw5mDTEz1oPV0yNmyhWz7n6tyq+//cucmoV/uP2qe+2 QOeUM3Rmm60SrQMuM/NaV2xDHauT7jJaFZFn47PQaHW12MV0i2TYhgE0QbfbS9pO Je03STpoLWJ34QTUUmNv4/hfbCckz4Zo5fdOMbvFc00d8/uhVRVQcV0sZytuDWap 4BrcCNqmiXhBgiJEcw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:06 2025 by rpki-client