This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft File: 1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json) Hash identifier: kL6b9GIRSAw84phQqAqMoajvF4j4BgJ/N7Uz+avI6aM= Subject key identifier: CA:6B:A1:63:65:DC:53:E9:8B:2C:A6:21:2C:A3:77:A7:B2:09:5B:34 Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88 Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888 Certificate serial: 019AF12CC1578464EC9621711D3F3568D09C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft Manifest number: 144C Signing time: Sat 06 Dec 2025 01:00:32 +0000 Manifest this update: Sat 06 Dec 2025 01:00:32 +0000 Manifest next update: Sun 07 Dec 2025 01:00:32 +0000 Files and hashes: 1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: vdUr8Dj1c4ONUGcUQROJe8V/PIuehNl32TvhbP0VUHA=) 2: fd3RLaFFUHr9bPymSzzZKZLcsB4.roa (hash: 3Ik69tfrjCim/XG7P7iIuurAIirGQVM0pHHnR6Ng8tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c1:57:84:64:ec:96:21:71:1d:3f:35:68:d0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888 Validity Not Before: Dec 6 01:00:32 2025 GMT Not After : Dec 7 01:00:32 2025 GMT Subject: CN=ca6ba16365dc53e98b2ca6212ca377a7b2095b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:0c:8f:98:2d:a9:89:f3:7a:52:f7:e3:61: 95:33:97:d5:ce:aa:82:a5:b2:97:3d:d6:5d:bb:31: b9:e1:14:57:31:38:5b:22:14:a4:19:3d:ad:2d:4c: 10:ce:85:70:92:f6:2a:cf:5a:99:50:d6:26:c0:8d: cd:6e:99:fd:02:22:ce:24:d1:0e:e9:5b:22:93:4b: 36:e7:11:14:0b:ef:50:f5:1f:28:bf:cd:36:f0:b8: 71:53:1a:e9:74:4a:7f:85:22:33:fb:97:95:30:bc: 14:bd:3f:a0:be:2d:8f:3d:ba:81:4b:57:9f:e6:fa: 01:03:a3:1d:25:43:69:47:72:8c:e6:ff:d5:9a:78: e2:d7:6e:65:7c:8c:51:a1:63:e6:7a:0b:cd:e4:50: e9:fb:be:7d:ef:76:0e:66:2c:41:b6:bf:95:ba:32: a4:12:b0:4f:dc:89:f9:93:d0:cf:de:de:e1:c6:d8: a9:47:65:b8:86:11:b9:fb:b8:7c:4a:43:f6:1e:75: bc:fc:28:9c:40:9e:6d:55:7d:48:f1:76:14:cb:8c: c6:44:fc:6a:f0:b5:2b:85:be:a6:cd:e0:d7:2f:e2: 57:53:84:8a:60:f4:5f:23:19:d8:f5:7b:ca:5c:01: e7:20:5e:13:32:9f:0c:28:46:cc:c2:7f:01:f9:50: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6B:A1:63:65:DC:53:E9:8B:2C:A6:21:2C:A3:77:A7:B2:09:5B:34 X509v3 Authority Key Identifier: keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:54:1e:3c:89:3b:60:5a:cc:6c:9a:21:42:f1:40:72:a8:9c: 86:fc:c5:03:9b:15:d4:ad:03:cc:dd:83:a3:73:d9:ed:f1:ea: e9:e6:2f:a3:79:25:55:ce:4a:52:b1:b9:01:39:f7:e7:6e:be: e3:d8:8b:a4:d8:fb:51:c9:49:b6:fa:fc:2e:f0:e1:ea:56:22: 93:14:52:b3:e0:af:c3:b9:5e:4f:3e:89:5a:ca:8c:82:89:52: bc:92:a5:4f:49:f0:b4:95:98:64:91:f3:cd:e9:2b:b4:d6:04: b2:04:15:4c:e8:d9:5f:92:38:dd:b9:eb:db:2e:61:b9:3a:c9: 42:5c:d6:9e:cf:68:4a:2f:08:5e:9f:73:55:d8:c4:06:a3:bf: 12:64:05:1d:22:83:6c:77:19:7b:46:12:46:e7:f8:20:a0:9c: 24:45:70:ef:2c:2a:22:69:5b:a0:1a:50:9b:6d:4a:d6:55:6a: 51:dc:aa:17:8d:85:52:aa:70:b7:24:b6:1d:df:ea:3f:32:af: aa:b1:d8:37:bb:57:88:a7:02:d6:3e:06:80:25:3c:15:a6:44: 39:2a:ef:54:fc:35:40:a6:7e:c5:2d:04:02:e4:58:ff:46:49: a0:6a:5e:3d:ed:85:f4:cc:d1:9d:14:df:76:50:48:3a:0f:23: bf:9b:dd:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMFXhGTsliFxHT81aNCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NWQ5YWM2YmYxZjJhMzhlMmMxNzI4NTBlZWY3MDc1YWVi Y2U4ODgwHhcNMjUxMjA2MDEwMDMyWhcNMjUxMjA3MDEwMDMyWjAzMTEwLwYDVQQD EyhjYTZiYTE2MzY1ZGM1M2U5OGIyY2E2MjEyY2EzNzdhN2IyMDk1YjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArogMj5gtqYnzelL342GVM5fVzqqC pbKXPdZduzG54RRXMThbIhSkGT2tLUwQzoVwkvYqz1qZUNYmwI3Nbpn9AiLOJNEO 6Vsik0s25xEUC+9Q9R8ov8028LhxUxrpdEp/hSIz+5eVMLwUvT+gvi2PPbqBS1ef 5voBA6MdJUNpR3KM5v/Vmnji125lfIxRoWPmegvN5FDp+75973YOZixBtr+VujKk ErBP3In5k9DP3t7hxtipR2W4hhG5+7h8SkP2HnW8/CicQJ5tVX1I8XYUy4zGRPxq 8LUrhb6mzeDXL+JXU4SKYPRfIxnY9XvKXAHnIF4TMp8MKEbMwn8B+VBs2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMproWNl3FPpiyymISyjd6eyCVs0MB8GA1UdIwQY MBaAFNZdmsa/Hyo44sFyhQ7vcHWuvOiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWwyYXhyOGZLamppd1hLRkR1OXdkYTY4NklnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZmZiMGQtMjJjNC00MDBhLThhMjMt M2QxMTNlYjkyN2JmLzEvMWwyYXhyOGZLamppd1hLRkR1OXdkYTY4NklnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS82ZmZiMGQtMjJjNC00MDBhLThhMjMtM2QxMTNlYjkyN2Jm LzEvMWwyYXhyOGZLamppd1hLRkR1OXdkYTY4NklnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1QePIk7 YFrMbJohQvFAcqichvzFA5sV1K0DzN2Do3PZ7fHq6eYvo3klVc5KUrG5ATn3526+ 49iLpNj7UclJtvr8LvDh6lYikxRSs+Cvw7leTz6JWsqMgolSvJKlT0nwtJWYZJHz zekrtNYEsgQVTOjZX5I43bnr2y5huTrJQlzWns9oSi8IXp9zVdjEBqO/EmQFHSKD bHcZe0YSRuf4IKCcJEVw7ywqImlboBpQm21K1lVqUdyqF42FUqpwtyS2Hd/qPzKv qrHYN7tXiKcC1j4GgCU8FaZEOSrvVPw1QKZ+xS0EAuRY/0ZJoGpePe2F9MzRnRTf dlBIOg8jv5vd5w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:49 2025 by rpki-client