This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json) Hash identifier: FgkbEw2gYy7NN2opVwqwd0a0Lwwthcu9x96O3U1yA5E= Subject key identifier: A9:EA:6B:DB:51:61:17:97:93:39:E7:9F:1E:58:5B:48:45:15:19:32 Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e Certificate serial: 019B435C35E156D7C0CE90FCBD29DF13AF9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft Manifest number: 016E Signing time: Mon 22 Dec 2025 00:01:15 +0000 Manifest this update: Mon 22 Dec 2025 00:01:15 +0000 Manifest next update: Tue 23 Dec 2025 00:01:15 +0000 Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: gL1mNhbMVs06WZUDnuTq8jYba7ifWmd0ms8uYmZO+0g=) 2: qoiIuGZpsZyjR8YLAPW0kfgioQM.roa (hash: Bdnsy6A3scDmTAkeEHQfOrfRTQ0txD1RF6hmP7OF1Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:35:e1:56:d7:c0:ce:90:fc:bd:29:df:13:af:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e Validity Not Before: Dec 22 00:01:15 2025 GMT Not After : Dec 23 00:01:15 2025 GMT Subject: CN=a9ea6bdb516117979339e79f1e585b4845151932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:6e:2d:bd:4c:87:9d:d0:bf:00:dd:5e:72: 8e:f7:ed:c1:32:fd:6b:17:be:29:0b:7b:32:e2:e8: 36:15:a6:87:09:71:b7:b1:56:dc:a3:f8:15:de:65: fd:e8:b9:94:01:c0:aa:eb:8c:b4:a8:fe:f5:fb:dc: b4:aa:46:bc:2a:fe:55:77:22:5a:89:77:aa:0b:a3: 35:57:da:d3:30:48:4e:73:8a:22:88:f6:6d:91:49: 3d:69:a8:cd:8f:41:4f:60:d0:d5:d1:b0:6d:fc:eb: 2f:57:4e:81:e7:8c:dc:8f:5c:2e:ef:de:dd:15:3a: 50:3b:cd:b3:79:54:81:4d:1a:f4:5a:4f:27:97:25: 6b:e0:59:06:41:bb:94:b5:53:4b:e7:0c:be:3f:a9: 6d:08:a5:14:66:0c:83:09:9f:1f:51:4c:96:82:ee: 78:57:0b:5c:a9:b1:7e:62:a4:ad:8b:13:ec:2f:f0: a2:0e:7d:af:0a:d6:24:8f:dc:60:fa:86:35:56:7b: a2:45:68:fc:cc:f6:8d:6c:3f:f4:f1:cb:d0:76:22: 92:76:de:47:f5:3f:9d:96:c6:b0:f5:7f:f5:a5:73: 06:ac:d5:ed:61:c8:e6:5e:b7:8f:db:69:be:81:81: 67:29:24:9f:94:33:d3:88:d6:09:64:19:13:9c:13: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:6B:DB:51:61:17:97:93:39:E7:9F:1E:58:5B:48:45:15:19:32 X509v3 Authority Key Identifier: keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:25:3c:47:2f:63:53:e1:f9:82:59:5f:0b:8e:95:18:b7:19: e6:04:c3:aa:d3:38:75:46:b5:4a:38:8d:7a:f0:a3:dc:10:10: 71:61:7e:68:00:b1:aa:c5:b4:e3:47:13:e7:63:4b:31:97:d9: c2:55:5b:77:ed:eb:27:48:45:84:72:e8:1a:a8:4d:d1:b7:ac: e3:ae:0b:4f:b3:16:7d:3d:43:a6:54:c7:1a:a4:bc:a3:ed:ed: 09:85:aa:c2:c3:db:0a:42:c8:d8:d1:bc:57:9b:a7:72:f6:66: f8:02:d7:b5:92:f5:14:ce:eb:6d:e4:fe:3a:64:b7:08:43:1d: d3:a1:9b:04:04:48:a6:54:76:30:0e:fe:97:9b:e4:5a:a4:b0: 1b:2d:ed:1a:22:44:8c:50:25:71:2a:25:01:b0:42:93:6e:13: e4:3b:40:20:67:17:d8:f7:ee:45:87:0d:a4:51:1c:dc:25:20: f9:5d:2a:80:bd:4b:b9:e0:6c:4f:b0:d7:14:10:00:f7:be:7d: 92:26:d1:29:aa:9a:f8:c0:ec:2e:13:78:af:7b:84:fd:03:d5: e9:9f:67:b7:03:af:b9:9e:01:01:dd:b2:8d:cd:31:a4:d3:0e: 3d:64:5d:b4:b2:99:ce:92:90:71:44:9b:54:64:c0:0c:a7:9a: 24:22:1e:82 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtDXDXhVtfAzpD8vSnfE6+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTc5MThiYmY1YWE4MGYxNDQ5MzdhZDE5NjVlYTAzZjAy NWMyMmUwHhcNMjUxMjIyMDAwMTE1WhcNMjUxMjIzMDAwMTE1WjAzMTEwLwYDVQQD EyhhOWVhNmJkYjUxNjExNzk3OTMzOWU3OWYxZTU4NWI0ODQ1MTUxOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwNuLb1Mh53QvwDdXnKO9+3BMv1r F74pC3sy4ug2FaaHCXG3sVbco/gV3mX96LmUAcCq64y0qP71+9y0qka8Kv5VdyJa iXeqC6M1V9rTMEhOc4oiiPZtkUk9aajNj0FPYNDV0bBt/OsvV06B54zcj1wu797d FTpQO82zeVSBTRr0Wk8nlyVr4FkGQbuUtVNL5wy+P6ltCKUUZgyDCZ8fUUyWgu54 VwtcqbF+YqStixPsL/CiDn2vCtYkj9xg+oY1VnuiRWj8zPaNbD/08cvQdiKSdt5H 9T+dlsaw9X/1pXMGrNXtYcjmXreP22m+gYFnKSSflDPTiNYJZBkTnBO1+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKnqa9tRYReXkznnnx5YW0hFFRkyMB8GA1UdIwQY MBaAFPunkYu/WqgPFEk3rRll6gPwJcIuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02ZVJpNzlhcUE4VVNUZXRHV1hxQV9BbHdpNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODIyMjIxLTc3ZmYtNDJmNC1iMDUy LWE0MzFkN2FkNjhkZC8xLzEtNmVSaTc5YXFBOFVTVGV0R1dYcUFfQWx3aTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg4LzgyMjIyMS03N2ZmLTQyZjQtYjA1Mi1hNDMxZDdhZDY4 ZGQvMS8xLTZlUmk3OWFxQThVU1RldEdXWHFBX0Fsd2k0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSU8 Ry9jU+H5gllfC46VGLcZ5gTDqtM4dUa1SjiNevCj3BAQcWF+aACxqsW040cT52NL MZfZwlVbd+3rJ0hFhHLoGqhN0bes464LT7MWfT1DplTHGqS8o+3tCYWqwsPbCkLI 2NG8V5uncvZm+ALXtZL1FM7rbeT+OmS3CEMd06GbBARIplR2MA7+l5vkWqSwGy3t GiJEjFAlcSolAbBCk24T5DtAIGcX2PfuRYcNpFEc3CUg+V0qgL1LueBsT7DXFBAA 9759kibRKaqa+MDsLhN4r3uE/QPV6Z9ntwOvuZ4BAd2yjc0xpNMOPWRdtLKZzpKQ cUSbVGTADKeaJCIegg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:58:14 2025 by rpki-client