This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json) Hash identifier: CyQ4/+wMLtRkvayXfH2d70n5hT7toRnKXOXEtQw8TIg= Subject key identifier: 0C:C7:89:89:AD:E6:54:7C:66:14:9E:C7:5C:F2:CF:51:5A:1B:E1:6D Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4 Certificate serial: 019AF208CD24BB0F6E1F90642B24F35661BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: azPsykV9LsELvaDbcr5/DaQltCN4wnQ8MdzXbO1nhys=) 2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cd:24:bb:0f:6e:1f:90:64:2b:24:f3:56:61:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4 Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=0cc78989ade6547c66149ec75cf2cf515a1be16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:21:45:cf:a0:a4:fb:b8:ee:2e:df:3d:5f: 9d:28:9e:30:47:e2:42:37:a6:1d:30:c4:20:08:8d: 39:d4:cf:e7:7d:6a:3c:c9:8d:d0:65:c9:73:5b:3e: 3c:60:2d:d5:f0:44:c2:33:17:b9:91:ca:e7:ae:60: 4b:57:fc:62:71:47:c9:90:01:a7:66:69:72:ba:48: 67:e6:23:09:64:a7:00:b5:27:59:2e:30:0c:6b:dd: d8:9e:2e:0b:06:aa:19:88:96:8d:f5:85:6d:e6:ed: f9:76:63:04:ce:d7:51:9f:a6:63:97:6e:15:b7:8e: 05:85:de:1d:d0:69:de:bc:e7:c4:dc:34:96:68:2a: 10:7b:eb:25:53:d0:6a:c5:4f:c5:83:39:02:c2:5c: 1f:fe:8b:c1:58:70:26:60:2b:4c:07:30:6a:57:ed: 59:19:20:5c:58:61:a8:4b:c7:8c:b9:b8:00:06:1d: 94:91:31:a1:69:17:0f:e5:e4:0d:14:b8:6a:48:90: da:1e:59:d3:51:61:48:ec:13:1d:fe:33:d8:bc:57: dd:bd:e2:18:04:fb:66:2d:38:1e:5b:e8:75:10:03: 6f:d8:8f:39:f4:12:b4:12:9a:96:38:2f:ab:91:b4: be:71:98:48:b9:39:67:42:5b:4a:c1:69:e4:73:e7: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C7:89:89:AD:E6:54:7C:66:14:9E:C7:5C:F2:CF:51:5A:1B:E1:6D X509v3 Authority Key Identifier: keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:37:4c:e3:9c:a9:41:97:81:4f:42:8f:55:33:4d:9b:21:ef: 95:f4:eb:62:86:4d:1a:91:34:75:f5:d0:47:78:1e:d0:f9:91: 27:83:14:59:5f:af:7b:2c:c0:c8:52:96:7c:75:82:53:f0:46: 85:31:71:7b:6d:ba:4b:94:4b:37:5c:05:b1:b9:ed:16:9e:97: cf:29:81:8e:f8:40:ad:4a:bc:97:4c:da:ee:c0:98:69:5d:19: c1:64:83:37:84:c8:64:d0:aa:e8:03:ad:58:54:5e:97:7c:61: b7:ac:21:ce:41:0d:bd:33:b0:27:6b:d3:e6:89:0c:de:ff:8b: 70:ee:56:08:e2:85:63:5a:25:b5:b7:08:92:f9:7b:37:51:75: 91:c5:e9:f5:ff:a9:21:fb:9d:84:35:3a:49:2f:13:72:64:17: c9:99:88:ed:3e:c8:df:a7:76:70:94:24:fb:a6:ef:10:7b:df: 05:f2:47:32:ef:82:d8:39:e1:c8:b0:bc:8d:17:99:4e:ab:c1: 96:46:d6:56:eb:f6:85:c9:f0:87:5c:e7:2e:05:a5:01:0e:f7: f1:b2:9d:55:f7:81:aa:ea:03:88:99:16:b6:aa:a8:3c:dd:0f: b0:85:bc:99:a4:bf:9b:4c:74:e6:14:0b:12:29:f1:f9:94:79: 78:d8:89:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM0kuw9uH5BkKyTzVmG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MmVhOTJlY2M5YjBkMzU0YjVmZDcwMmUwOTkxZjE1MGEz MDlmZTQwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EygwY2M3ODk4OWFkZTY1NDdjNjYxNDllYzc1Y2YyY2Y1MTVhMWJlMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OAhRc+gpPu47i7fPV+dKJ4wR+JC N6YdMMQgCI051M/nfWo8yY3QZclzWz48YC3V8ETCMxe5kcrnrmBLV/xicUfJkAGn Zmlyukhn5iMJZKcAtSdZLjAMa93Yni4LBqoZiJaN9YVt5u35dmMEztdRn6Zjl24V t44Fhd4d0GnevOfE3DSWaCoQe+slU9BqxU/FgzkCwlwf/ovBWHAmYCtMBzBqV+1Z GSBcWGGoS8eMubgABh2UkTGhaRcP5eQNFLhqSJDaHlnTUWFI7BMd/jPYvFfdveIY BPtmLTgeW+h1EANv2I859BK0EpqWOC+rkbS+cZhIuTlnQltKwWnkc+eYfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzHiYmt5lR8ZhSex1zyz1FaG+FtMB8GA1UdIwQY MBaAFNYuqS7Mmw01S1/XAuCZHxUKMJ/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTct NTQ1OTQ3OTVlZWEyLzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83YjU4MTQtN2M3Ni00OTVjLWE2ZTctNTQ1OTQ3OTVlZWEy LzEvMWk2cExzeWJEVFZMWDljQzRKa2ZGUW93bi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzdM45yp QZeBT0KPVTNNmyHvlfTrYoZNGpE0dfXQR3ge0PmRJ4MUWV+veyzAyFKWfHWCU/BG hTFxe226S5RLN1wFsbntFp6XzymBjvhArUq8l0za7sCYaV0ZwWSDN4TIZNCq6AOt WFRel3xht6whzkENvTOwJ2vT5okM3v+LcO5WCOKFY1oltbcIkvl7N1F1kcXp9f+p IfudhDU6SS8TcmQXyZmI7T7I36d2cJQk+6bvEHvfBfJHMu+C2DnhyLC8jReZTqvB lkbWVuv2hcnwh1znLgWlAQ738bKdVfeBquoDiJkWtqqoPN0PsIW8maS/m0x05hQL Einx+ZR5eNiJyg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:56 2025 by rpki-client