This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft File: 1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json) Hash identifier: e4qo4miaX1MscgMJRZc6j1SA73NLk3KpD2qN/V1/x1c= Subject key identifier: 43:C5:3D:1B:27:57:7F:37:D6:72:C6:DD:94:66:F1:39:9D:0D:BB:4E Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D Certificate issuer: /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d Certificate serial: 019B2FD590FB4F7D5920E2A4D49E6675E25D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft Manifest number: 056C Signing time: Thu 18 Dec 2025 05:01:24 +0000 Manifest this update: Thu 18 Dec 2025 05:01:24 +0000 Manifest next update: Fri 19 Dec 2025 05:01:24 +0000 Files and hashes: 1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: bomjy3xEctwWzJe0cjfwZwzoMP5VH9NJ/ICCntXfcI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:90:fb:4f:7d:59:20:e2:a4:d4:9e:66:75:e2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d Validity Not Before: Dec 18 05:01:24 2025 GMT Not After : Dec 19 05:01:24 2025 GMT Subject: CN=43c53d1b27577f37d672c6dd9466f1399d0dbb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:a9:0e:dd:15:30:db:5c:c3:94:7a:31:c4: d4:b8:f5:f5:91:f7:64:74:64:06:ee:f1:d2:3f:81: 36:2e:83:79:c7:c1:4d:00:57:1a:66:7a:fd:fc:43: 1d:f7:2e:e2:e2:14:9d:92:7d:80:4c:cf:98:23:d7: 36:86:54:ed:75:f7:95:25:0f:5c:d8:78:39:b4:ac: 23:59:b6:1b:b8:96:1e:e2:51:03:fb:12:5e:9f:79: ad:39:a2:be:bf:89:2d:28:08:38:a9:40:5b:69:1b: 5e:ce:59:44:0b:68:8e:1b:44:7a:1f:c3:8f:ad:8d: cf:26:cb:d7:4c:b7:42:ef:6b:75:40:49:24:4c:ac: 67:a2:d9:e3:45:1b:68:e0:c2:3f:89:68:19:5b:27: 6b:23:87:50:f5:92:79:fe:63:10:d1:ad:0e:3e:fc: f4:e7:3c:c0:51:f1:d0:22:58:3b:17:5b:f6:c3:4a: 2a:d9:09:2c:82:8b:d0:8d:93:97:22:7f:03:31:4d: 91:ae:56:fe:0c:e5:8d:28:74:32:3d:90:99:82:c7: f5:a2:84:83:20:a8:79:03:44:a7:a0:cd:19:ef:b4: 4a:68:19:0e:d2:43:b6:95:44:38:93:6a:27:37:91: 30:40:e4:08:53:28:99:d5:c4:79:8e:64:fc:58:e8: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C5:3D:1B:27:57:7F:37:D6:72:C6:DD:94:66:F1:39:9D:0D:BB:4E X509v3 Authority Key Identifier: keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d5:48:02:dd:e5:cf:3e:66:67:2e:98:5f:36:0c:fe:d9:ea: 15:74:4b:25:15:c4:f9:83:a8:fb:4f:74:9a:91:d0:b2:9c:8a: 05:41:de:9a:41:52:a6:66:01:dd:99:a8:e5:33:78:83:18:62: d1:08:48:71:6a:61:5e:a3:97:74:e2:45:bf:65:0d:b2:6b:2a: b2:ce:c4:05:89:0d:f6:83:8a:5a:8a:3b:6e:bd:87:fd:91:60: 73:a2:6a:cb:ef:8e:1c:15:7e:60:29:04:eb:b8:2d:a0:3a:c6: b3:6a:7b:d0:3a:88:84:84:02:41:c3:db:db:37:56:f0:31:5a: 00:2b:ad:fa:71:dc:34:7d:c1:f3:34:0d:a8:14:19:31:2a:f3: 3b:c1:da:86:cf:61:70:a5:68:a9:8a:75:51:af:ba:18:0c:d3: 36:73:6d:d5:84:dc:45:8a:cd:2f:0a:5c:8f:20:fa:74:48:a6: 2d:bc:b9:d9:d6:93:34:d5:1d:55:f5:cf:5e:bd:9a:c3:35:52: 30:eb:6d:b2:30:07:76:cc:af:a4:a6:49:15:cb:f4:8d:f7:e9: 6f:cb:bc:a8:24:17:3f:85:8f:ee:be:d5:19:b1:4c:6d:67:b7: 70:a2:16:bd:56:af:9f:8d:32:16:cd:24:7d:7f:7c:02:af:61: 85:0c:92:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1ZD7T31ZIOKk1J5mdeJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZWVhOTJjNDI0NTQwNTA0NmJlOWI4Y2E2YzBjMjBlNmEy YjE0MGQwHhcNMjUxMjE4MDUwMTI0WhcNMjUxMjE5MDUwMTI0WjAzMTEwLwYDVQQD Eyg0M2M1M2QxYjI3NTc3ZjM3ZDY3MmM2ZGQ5NDY2ZjEzOTlkMGRiYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1mpDt0VMNtcw5R6McTUuPX1kfdk dGQG7vHSP4E2LoN5x8FNAFcaZnr9/EMd9y7i4hSdkn2ATM+YI9c2hlTtdfeVJQ9c 2Hg5tKwjWbYbuJYe4lED+xJen3mtOaK+v4ktKAg4qUBbaRtezllEC2iOG0R6H8OP rY3PJsvXTLdC72t1QEkkTKxnotnjRRto4MI/iWgZWydrI4dQ9ZJ5/mMQ0a0OPvz0 5zzAUfHQIlg7F1v2w0oq2QksgovQjZOXIn8DMU2Rrlb+DOWNKHQyPZCZgsf1ooSD IKh5A0SnoM0Z77RKaBkO0kO2lUQ4k2onN5EwQOQIUyiZ1cR5jmT8WOiceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPFPRsnV3831nLG3ZRm8TmdDbtOMB8GA1UdIwQY MBaAFNXuqSxCRUBQRr6bjKbAwg5qKxQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2Yt NTM1NTIzYmQzZmZiLzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2YtNTM1NTIzYmQzZmZi LzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtVIAt3l zz5mZy6YXzYM/tnqFXRLJRXE+YOo+090mpHQspyKBUHemkFSpmYB3Zmo5TN4gxhi 0QhIcWphXqOXdOJFv2UNsmsqss7EBYkN9oOKWoo7br2H/ZFgc6Jqy++OHBV+YCkE 67gtoDrGs2p70DqIhIQCQcPb2zdW8DFaACut+nHcNH3B8zQNqBQZMSrzO8Hahs9h cKVoqYp1Ua+6GAzTNnNt1YTcRYrNLwpcjyD6dEimLby52daTNNUdVfXPXr2awzVS MOttsjAHdsyvpKZJFcv0jffpb8u8qCQXP4WP7r7VGbFMbWe3cKIWvVavn40yFs0k fX98Aq9hhQySbQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:30:23 2025 by rpki-client