This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json) Hash identifier: dNwlEkRfA25VOJPVLonQCl8C2b/un78hi5QqXEQZfGM= Subject key identifier: FB:41:D5:B8:1F:8C:37:E8:17:FD:3A:7C:F5:40:4F:1E:CF:77:70:B2 Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Certificate serial: 019AF5E5CE9988D39B5B6ACF9508D99C9EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft Manifest number: 103E Signing time: Sat 06 Dec 2025 23:01:09 +0000 Manifest this update: Sat 06 Dec 2025 23:01:09 +0000 Manifest next update: Sun 07 Dec 2025 23:01:09 +0000 Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: XauESzVE4Mi9HxlEddrIwMw6ATRMDWW+FaspB1BCo10=) 2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ce:99:88:d3:9b:5b:6a:cf:95:08:d9:9c:9e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Validity Not Before: Dec 6 23:01:09 2025 GMT Not After : Dec 7 23:01:09 2025 GMT Subject: CN=fb41d5b81f8c37e817fd3a7cf5404f1ecf7770b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:e4:89:8a:01:a0:e8:7f:97:0d:ff:51:51: 93:f7:d8:94:c1:78:b1:1f:fc:d7:d4:c2:ae:59:8d: 92:b3:6e:3b:d0:0b:7c:bc:38:36:a3:f8:36:87:6c: 7c:3a:41:34:ef:5e:50:eb:b4:1c:a8:65:bd:96:a0: 65:e2:35:cc:b6:7b:e9:b2:63:fd:d2:4c:e3:a2:b7: ce:c7:54:be:1b:59:16:21:65:5b:35:81:0d:b7:1a: 56:98:c0:81:28:96:75:b6:34:5d:a3:13:2a:6a:19: 7a:aa:72:11:f4:32:94:f4:45:a2:69:1f:2c:9a:18: e4:c5:a5:a4:85:a8:85:78:9d:2c:2b:bb:1e:5a:a8: 38:28:3a:64:53:6e:bb:74:64:4c:b3:7e:68:9e:81: 2d:68:bf:7c:c3:31:87:07:4b:7e:04:1b:48:1c:f5: f4:6b:23:bc:d1:68:a5:db:b8:25:29:b4:c6:a6:a3: 3d:e5:d5:a0:bb:98:3d:e9:b3:a4:36:1c:48:c5:15: 39:11:b9:8c:c1:df:54:56:86:3b:6f:43:92:5a:ff: 91:a7:b7:c0:ce:ba:25:7e:38:21:0f:15:13:58:6a: db:1a:08:da:b0:9b:fd:99:18:1d:b1:27:e9:ec:9f: ec:48:74:56:b8:c4:fa:b4:a3:d0:ef:2f:31:c7:cb: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:41:D5:B8:1F:8C:37:E8:17:FD:3A:7C:F5:40:4F:1E:CF:77:70:B2 X509v3 Authority Key Identifier: keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:73:b9:ef:f7:5a:f3:fd:f0:8f:c8:c2:ff:26:40:4c:d4:7c: 6c:20:47:ff:18:a8:e5:b6:f0:fc:fc:4c:30:89:09:39:29:0e: cd:b8:4c:56:6b:3d:82:9a:ab:05:30:a2:4f:46:aa:e7:88:40: 9d:52:9c:57:a0:0f:01:70:a6:ef:ab:79:92:e5:31:10:e9:8e: b0:9f:a2:0b:e9:6a:67:80:13:e8:07:9e:02:65:22:eb:d3:e4: 3f:91:7c:9b:23:ca:ae:f1:d2:33:7f:1e:ab:a4:78:d5:c3:72: f4:c1:a6:a8:bc:7c:44:7d:40:6e:2b:0d:d7:a3:7c:f7:09:e3: 7f:c6:cc:f0:fb:bc:8f:fc:bd:02:a7:f4:52:a0:25:12:d9:9e: a3:5a:23:ea:88:1e:dc:4c:a7:5a:05:fd:e8:d9:23:30:d4:8d: d9:26:e3:19:a4:dd:14:e1:a1:b8:21:e6:95:7a:92:6d:55:43: 72:97:db:30:09:1e:fa:b1:4d:06:84:55:61:55:88:67:4c:ae: 71:03:bf:a8:52:e7:bb:fe:8e:11:df:15:e2:eb:6e:36:6e:83: 67:b7:ac:32:31:99:a0:78:4c:bb:f2:a7:c4:f5:50:21:a6:26: d6:a4:86:4e:0a:80:4b:b0:e5:b5:69:61:36:94:21:37:91:3e: e5:7a:8a:4e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr15c6ZiNObW2rPlQjZnJ6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0 OWRiZGQwHhcNMjUxMjA2MjMwMTA5WhcNMjUxMjA3MjMwMTA5WjAzMTEwLwYDVQQD EyhmYjQxZDViODFmOGMzN2U4MTdmZDNhN2NmNTQwNGYxZWNmNzc3MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0TkiYoBoOh/lw3/UVGT99iUwXix H/zX1MKuWY2Ss2470At8vDg2o/g2h2x8OkE0715Q67QcqGW9lqBl4jXMtnvpsmP9 0kzjorfOx1S+G1kWIWVbNYENtxpWmMCBKJZ1tjRdoxMqahl6qnIR9DKU9EWiaR8s mhjkxaWkhaiFeJ0sK7seWqg4KDpkU267dGRMs35onoEtaL98wzGHB0t+BBtIHPX0 ayO80Wil27glKbTGpqM95dWgu5g96bOkNhxIxRU5EbmMwd9UVoY7b0OSWv+Rp7fA zrolfjghDxUTWGrbGgjasJv9mRgdsSfp7J/sSHRWuMT6tKPQ7y8xx8vuMwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPtB1bgfjDfoF/06fPVATx7Pd3CyMB8GA1UdIwQY MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3O5 7/da8/3wj8jC/yZATNR8bCBH/xio5bbw/PxMMIkJOSkOzbhMVms9gpqrBTCiT0aq 54hAnVKcV6APAXCm76t5kuUxEOmOsJ+iC+lqZ4AT6AeeAmUi69PkP5F8myPKrvHS M38eq6R41cNy9MGmqLx8RH1AbisN16N89wnjf8bM8Pu8j/y9Aqf0UqAlEtmeo1oj 6oge3EynWgX96NkjMNSN2SbjGaTdFOGhuCHmlXqSbVVDcpfbMAke+rFNBoRVYVWI Z0yucQO/qFLnu/6OEd8V4utuNm6DZ7esMjGZoHhMu/KnxPVQIaYm1qSGTgqAS7Dl tWlhNpQhN5E+5XqKTg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:03:32 2025 by rpki-client