This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft File: 1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json) Hash identifier: nLzN6g3YykiUcX+TKHYO3gWGflhtb1KXYHk4fbgDHVc= Subject key identifier: 27:0B:51:28:13:45:4E:31:2E:08:CF:47:0F:2E:6A:2A:19:0E:94:E1 Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9 Certificate serial: 019AF1D195EF88483E0560A972E6D086D561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: uclEB4HMX6JOps4iQgCpT0bBhVgKsOjZCO1rJ64GGrQ=) 2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=) 3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=) 4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:ef:88:48:3e:05:60:a9:72:e6:d0:86:d5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=270b512813454e312e08cf470f2e6a2a190e94e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:41:4e:0d:87:17:f4:74:be:fe:c0:48:ba: f7:98:e4:46:94:42:73:8b:81:96:a4:95:3a:68:72: 7f:45:d2:40:0f:65:8d:0b:8a:56:f0:aa:78:60:41: 5a:e0:61:b6:f2:d4:82:88:11:a5:b5:31:18:ac:22: 75:16:4a:06:cf:ad:1a:b3:06:eb:7a:98:41:0b:41: 71:a3:68:fb:56:6d:77:be:30:ee:69:aa:26:14:8b: 9f:fb:f1:b4:82:cb:2c:23:82:99:3f:06:5b:ac:00: b3:50:ea:c3:54:b7:db:25:0b:e2:9b:5b:77:1b:65: 09:42:eb:16:08:84:96:91:56:c8:45:d3:8b:73:a0: ac:1d:d4:6f:21:40:eb:a0:09:ba:fc:87:bd:a2:2e: da:0f:d1:29:14:66:c8:7f:37:33:3c:9c:08:c8:77: 5c:1d:62:fc:0c:5a:1b:a2:38:c7:77:d7:bf:82:07: d6:a1:4d:9c:83:ce:29:d9:de:b8:1a:2a:a3:43:0b: 66:11:13:90:32:0f:dd:c4:a5:2d:d5:61:63:6c:c9: fc:8c:53:24:fb:32:92:69:ca:43:bd:c4:ca:d5:2d: 49:0c:04:44:68:a1:39:94:95:78:c8:da:91:bf:f5: b6:9d:21:6b:24:51:01:57:2f:b3:29:d4:5a:9f:d6: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:51:28:13:45:4E:31:2E:08:CF:47:0F:2E:6A:2A:19:0E:94:E1 X509v3 Authority Key Identifier: keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e8:9b:d1:85:74:e9:62:37:76:a8:eb:5b:38:b6:46:bc:d3: 85:bc:54:8e:f4:b3:bd:af:2c:f6:c2:f2:a6:40:38:48:af:9a: 9c:59:71:18:3a:1c:37:13:4a:cb:cd:51:03:1f:1e:15:1e:88: 0b:b2:1b:76:ae:06:e3:6a:57:1e:c0:ef:58:89:a7:5a:4d:60: 5e:5e:4f:aa:a1:55:d0:dc:05:0c:32:6f:b9:4b:e2:3e:25:65: fb:e4:da:31:f9:eb:50:a1:0d:57:b6:23:b1:e4:0d:a5:31:8b: 09:d1:9b:ab:33:a2:d3:97:b1:87:43:71:b3:a5:44:44:9d:69: d0:5c:1e:24:0a:26:9c:c2:2d:6e:bf:99:cd:4a:ef:47:ce:07: ef:aa:d6:b9:45:e5:ee:59:fe:6f:e6:bb:e0:42:b5:9d:a3:03: 52:34:78:9e:34:ab:18:ef:3d:0e:71:d7:27:22:d9:d0:1f:a9: b0:67:71:c6:fa:c8:77:dc:71:67:dc:ff:fb:e3:a6:cc:d0:1e: 31:d9:65:27:ec:7d:64:d5:ed:9a:f7:f8:ec:7d:4e:77:48:26: 75:c6:08:6d:e4:36:d6:cc:c1:bd:85:de:c9:f5:fd:7d:6b:8c: 5d:1c:06:1f:be:6e:c3:86:d3:54:7a:fa:9b:fa:8b:f8:f9:6b: e0:40:ee:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZXviEg+BWCpcubQhtVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3M2U4MzE0NmE0Mzg2OWY2NTc0NTFlNzZkMGEzMDVmMTVh N2FlZTkwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EygyNzBiNTEyODEzNDU0ZTMxMmUwOGNmNDcwZjJlNmEyYTE5MGU5NGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAxBTg2HF/R0vv7ASLr3mORGlEJz i4GWpJU6aHJ/RdJAD2WNC4pW8Kp4YEFa4GG28tSCiBGltTEYrCJ1FkoGz60aswbr ephBC0Fxo2j7Vm13vjDuaaomFIuf+/G0gsssI4KZPwZbrACzUOrDVLfbJQvim1t3 G2UJQusWCISWkVbIRdOLc6CsHdRvIUDroAm6/Ie9oi7aD9EpFGbIfzczPJwIyHdc HWL8DFobojjHd9e/ggfWoU2cg84p2d64GiqjQwtmEROQMg/dxKUt1WFjbMn8jFMk +zKSacpDvcTK1S1JDAREaKE5lJV4yNqRv/W2nSFrJFEBVy+zKdRan9YL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcLUSgTRU4xLgjPRw8uaioZDpThMB8GA1UdIwQY MBaAFNc+gxRqQ4afZXRR520KMF8Vp67pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDkt ZDNiMjdhMDIyNWIwLzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDktZDNiMjdhMDIyNWIw LzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuib0YV0 6WI3dqjrWzi2RrzThbxUjvSzva8s9sLypkA4SK+anFlxGDocNxNKy81RAx8eFR6I C7Ibdq4G42pXHsDvWImnWk1gXl5PqqFV0NwFDDJvuUviPiVl++TaMfnrUKENV7Yj seQNpTGLCdGbqzOi05exh0Nxs6VERJ1p0FweJAomnMItbr+ZzUrvR84H76rWuUXl 7ln+b+a74EK1naMDUjR4njSrGO89DnHXJyLZ0B+psGdxxvrId9xxZ9z/++OmzNAe MdllJ+x9ZNXtmvf47H1Od0gmdcYIbeQ21szBvYXeyfX9fWuMXRwGH75uw4bTVHr6 m/qL+Plr4EDu7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:03 2025 by rpki-client