This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json) Hash identifier: d7kQ17xQZsdGP3YwtK4QprZQEN5uyZ2x40uZQexWKD4= Subject key identifier: AE:3C:2A:72:D3:C1:10:76:EB:DD:AD:36:77:74:FE:51:BA:F3:80:4A Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f Certificate serial: 019AF1D23D6EFB77FCB15A12CAC95BA914A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: 6M/MGsTAw0SSkA7EeGzwjDelwJNpbf2M0desUizvWBY=) 2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:6e:fb:77:fc:b1:5a:12:ca:c9:5b:a9:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=ae3c2a72d3c11076ebddad367774fe51baf3804a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:af:56:12:a5:a4:ea:c6:fc:fc:dd:d9:1e: bc:a9:de:67:25:20:ad:4c:ce:46:57:4b:e2:21:dd: 77:bc:9f:9a:be:1a:47:e7:32:23:81:d1:7f:2d:cd: c9:c9:34:d7:b1:d2:08:e8:9b:aa:3e:1b:36:23:03: 68:2d:2c:a4:f0:fd:2d:be:dc:eb:61:37:23:91:ca: 06:9a:09:7e:b2:ef:46:a0:63:41:71:a6:be:43:ca: cf:9d:48:28:ee:fc:c8:d9:dd:92:72:90:e8:51:9e: 02:b7:8c:c5:89:dc:0b:05:2d:23:4f:7c:7c:46:8c: 97:4f:87:31:0d:03:d2:8e:c2:af:bf:e3:7a:60:56: d2:34:92:f7:a9:74:6e:ae:ef:07:ff:02:33:20:2f: d9:3f:1b:0a:3b:67:05:91:4f:b2:7c:9a:a9:1c:94: e6:83:a4:69:15:66:c8:7b:01:fd:8f:3e:9b:13:2a: 36:95:33:b3:7c:0f:df:0e:17:ee:f1:35:b8:15:3c: 80:66:70:f3:2d:73:32:11:35:bb:16:d3:e3:5e:f1: df:c4:85:cc:bd:0e:b8:16:13:7f:b0:8d:e9:73:1e: bd:09:59:c0:14:8b:18:2f:d1:0b:7e:3a:68:ed:78: 39:6f:0e:34:04:76:9f:76:b4:ae:56:91:ad:d9:ac: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:2A:72:D3:C1:10:76:EB:DD:AD:36:77:74:FE:51:BA:F3:80:4A X509v3 Authority Key Identifier: keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:37:ef:c9:34:4f:c3:2d:76:6a:a9:de:2f:b7:17:8f:47:75: 09:18:d2:07:e6:20:48:56:0b:8b:2c:9f:ff:83:88:a8:f8:ba: 63:44:f0:5b:44:c6:61:c8:39:c3:42:f6:c3:17:c0:b7:29:95: b2:ba:b4:c2:86:07:d6:12:63:16:6d:20:70:a9:99:7b:60:ff: 48:a7:a7:fb:83:b5:95:93:17:20:da:6e:6c:8f:77:87:31:b1: 7d:26:02:16:8a:61:9a:a1:78:35:20:b0:64:49:8e:80:a6:c2: 3b:57:d3:1a:b0:23:29:14:7b:d1:de:29:1d:e2:bc:e4:53:35: 81:74:0f:d8:71:5a:8f:5f:00:13:24:38:db:2f:8c:df:87:b2: 72:83:c5:21:32:ff:4a:80:cb:8b:0c:80:c1:f6:c8:d7:94:0b: c7:a2:26:0f:9f:cf:d7:14:ef:6b:68:ca:ef:4e:15:1e:48:dc: b0:5e:af:33:d9:ea:c0:f8:8a:02:e9:0d:ad:74:1b:5e:fd:0d: 99:60:85:21:44:a6:89:eb:f4:c5:58:54:ab:0a:27:01:79:22: 85:3f:0f:9e:ee:2f:d8:0a:d1:c2:f1:c2:c4:91:19:11:90:f2: 8e:52:ee:d0:45:9c:26:b3:c7:2c:b6:b1:e0:4d:11:cb:11:91: bc:5b:bf:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j1u+3f8sVoSyslbqRSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1 ODNlM2YwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EyhhZTNjMmE3MmQzYzExMDc2ZWJkZGFkMzY3Nzc0ZmU1MWJhZjM4MDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCmvVhKlpOrG/Pzd2R68qd5nJSCt TM5GV0viId13vJ+avhpH5zIjgdF/Lc3JyTTXsdII6JuqPhs2IwNoLSyk8P0tvtzr YTcjkcoGmgl+su9GoGNBcaa+Q8rPnUgo7vzI2d2ScpDoUZ4Ct4zFidwLBS0jT3x8 RoyXT4cxDQPSjsKvv+N6YFbSNJL3qXRuru8H/wIzIC/ZPxsKO2cFkU+yfJqpHJTm g6RpFWbIewH9jz6bEyo2lTOzfA/fDhfu8TW4FTyAZnDzLXMyETW7FtPjXvHfxIXM vQ64FhN/sI3pcx69CVnAFIsYL9ELfjpo7Xg5bw40BHafdrSuVpGt2awgTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK48KnLTwRB2692tNnd0/lG684BKMB8GA1UdIwQY MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt NThmYzk0ZDBkNDE0LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0 LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzfvyTRP wy12aqneL7cXj0d1CRjSB+YgSFYLiyyf/4OIqPi6Y0TwW0TGYcg5w0L2wxfAtymV srq0woYH1hJjFm0gcKmZe2D/SKen+4O1lZMXINpubI93hzGxfSYCFophmqF4NSCw ZEmOgKbCO1fTGrAjKRR70d4pHeK85FM1gXQP2HFaj18AEyQ42y+M34eycoPFITL/ SoDLiwyAwfbI15QLx6ImD5/P1xTva2jK704VHkjcsF6vM9nqwPiKAukNrXQbXv0N mWCFIUSmiev0xVhUqwonAXkihT8Pnu4v2ArRwvHCxJEZEZDyjlLu0EWcJrPHLLax 4E0RyxGRvFu/Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:05 2025 by rpki-client