This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft File: 1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json) Hash identifier: iJbsvFwPgStoYmlRbIJIU5dA2uN/JV9gkbsRhgCNSpQ= Subject key identifier: 03:F1:B5:D9:2E:DE:5F:50:24:81:6D:06:34:4E:C4:FD:71:2A:FD:67 Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D Certificate issuer: /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d Certificate serial: 019AF5E629E63AB1113F02BB44AE1D039657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft Manifest number: 054E Signing time: Sat 06 Dec 2025 23:01:32 +0000 Manifest this update: Sat 06 Dec 2025 23:01:32 +0000 Manifest next update: Sun 07 Dec 2025 23:01:32 +0000 Files and hashes: 1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: 1x9qxX7nrj2JE0D/PEpUZiXFpkoJi5YCb/AOyFiPtkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:29:e6:3a:b1:11:3f:02:bb:44:ae:1d:03:96:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d Validity Not Before: Dec 6 23:01:32 2025 GMT Not After : Dec 7 23:01:32 2025 GMT Subject: CN=03f1b5d92ede5f5024816d06344ec4fd712afd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:a8:c1:6f:96:1b:22:1e:f7:3f:c8:da:d2: f6:a0:bf:bb:6e:bb:4d:bc:c7:45:6c:ed:6e:3d:3a: f4:5e:60:d6:2e:77:16:be:e1:ff:7d:f2:0c:fa:3e: 72:63:13:e0:35:b8:50:bf:39:c5:9a:22:d8:aa:15: 39:d6:de:1e:03:10:93:b0:74:94:6b:98:c5:85:59: aa:48:94:f0:eb:83:ec:0b:a5:76:08:97:f7:ad:85: e2:39:bc:40:60:dd:19:9d:2a:70:0b:d5:5b:f3:4a: 29:40:2b:f8:e9:a3:68:89:4e:c0:7a:be:90:62:27: a6:f8:55:82:fc:3e:f8:2c:1e:85:f4:e7:bf:41:9e: 79:27:11:58:7d:07:1f:a3:fd:7f:91:4c:36:d7:dc: 35:e0:ca:b6:50:44:3d:75:ae:44:30:e7:45:9d:e8: 1e:40:14:60:ca:e8:64:c1:28:98:dc:b3:3a:34:2f: 23:2d:99:92:c3:4a:19:85:df:d4:90:73:ac:8e:a9: f8:06:71:fd:7a:a0:49:dc:53:6a:45:d1:c0:bc:7d: 8a:cf:a9:46:b6:34:e6:3e:0a:af:0e:2b:03:8f:ad: ba:3a:0e:2e:c1:d2:b6:5b:33:f4:92:2a:9a:ae:95: c4:62:59:fa:7d:fb:f5:6b:6f:b0:50:34:4a:c1:d4: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F1:B5:D9:2E:DE:5F:50:24:81:6D:06:34:4E:C4:FD:71:2A:FD:67 X509v3 Authority Key Identifier: keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:68:db:ce:0b:0e:ca:04:b5:a2:de:bf:2a:33:88:23:10:2f: a3:03:c2:f2:31:e9:8c:11:6a:29:b9:6e:17:ad:21:25:d1:3a: c0:35:b7:be:a0:61:a8:eb:ee:be:ae:71:d4:72:92:c6:55:ab: 63:9d:55:41:7e:7f:2d:d6:01:57:29:17:c4:c2:fb:a3:59:3a: 73:7d:a2:d4:b9:3a:6d:1e:4d:82:a0:32:f5:b0:52:41:3e:6e: fc:a4:8b:97:f2:19:4b:a2:a3:70:cc:53:a2:3f:f1:6e:29:02: 68:a9:27:b6:9b:8d:44:76:72:26:d9:6d:06:c1:96:74:d8:5e: e0:c6:4e:39:75:4e:15:be:eb:06:3f:31:70:5c:67:b3:3b:5d: 63:77:16:6e:3d:18:45:bd:d0:3a:81:97:ff:c3:43:7e:ea:4a: 25:26:17:76:d3:b1:39:ae:a3:4f:db:9f:e5:54:5c:b5:06:d5: 11:10:a5:91:18:6e:0f:ab:19:5d:d0:24:af:1e:5c:45:f3:1d: 26:47:ae:41:10:06:ff:e8:0d:8c:c8:f0:0f:3e:a6:91:5c:db: 64:06:bc:0e:a1:15:4c:54:be:75:02:0a:d7:e4:22:76:0b:c4: 0a:93:8c:d8:a6:8c:e8:cd:12:4d:ea:91:31:7e:b1:77:0e:8a: 9c:19:0d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15inmOrERPwK7RK4dA5ZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZWVhOTJjNDI0NTQwNTA0NmJlOWI4Y2E2YzBjMjBlNmEy YjE0MGQwHhcNMjUxMjA2MjMwMTMyWhcNMjUxMjA3MjMwMTMyWjAzMTEwLwYDVQQD EygwM2YxYjVkOTJlZGU1ZjUwMjQ4MTZkMDYzNDRlYzRmZDcxMmFmZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8GowW+WGyIe9z/I2tL2oL+7brtN vMdFbO1uPTr0XmDWLncWvuH/ffIM+j5yYxPgNbhQvznFmiLYqhU51t4eAxCTsHSU a5jFhVmqSJTw64PsC6V2CJf3rYXiObxAYN0ZnSpwC9Vb80opQCv46aNoiU7Aer6Q Yiem+FWC/D74LB6F9Oe/QZ55JxFYfQcfo/1/kUw219w14Mq2UEQ9da5EMOdFnege QBRgyuhkwSiY3LM6NC8jLZmSw0oZhd/UkHOsjqn4BnH9eqBJ3FNqRdHAvH2Kz6lG tjTmPgqvDisDj626Og4uwdK2WzP0kiqarpXEYln6ffv1a2+wUDRKwdTwwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPxtdku3l9QJIFtBjROxP1xKv1nMB8GA1UdIwQY MBaAFNXuqSxCRUBQRr6bjKbAwg5qKxQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2Yt NTM1NTIzYmQzZmZiLzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2YtNTM1NTIzYmQzZmZi LzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2jbzgsO ygS1ot6/KjOIIxAvowPC8jHpjBFqKbluF60hJdE6wDW3vqBhqOvuvq5x1HKSxlWr Y51VQX5/LdYBVykXxML7o1k6c32i1Lk6bR5NgqAy9bBSQT5u/KSLl/IZS6KjcMxT oj/xbikCaKkntpuNRHZyJtltBsGWdNhe4MZOOXVOFb7rBj8xcFxnsztdY3cWbj0Y Rb3QOoGX/8NDfupKJSYXdtOxOa6jT9uf5VRctQbVERClkRhuD6sZXdAkrx5cRfMd JkeuQRAG/+gNjMjwDz6mkVzbZAa8DqEVTFS+dQIK1+QidgvECpOM2KaM6M0STeqR MX6xdw6KnBkNcg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:20:18 2025 by rpki-client