This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json) Hash identifier: vMTnkKahh1+/T/6DRia0TCasU2QYy75hJG6Bm8M9i/4= Subject key identifier: 15:F8:56:D8:85:BF:68:88:FB:9B:F3:9D:4E:0C:9C:60:5D:6C:0C:2B Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f Certificate serial: 019B7835BC55A66C9C50990B44155CD495CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft Manifest number: 1736 Signing time: Thu 01 Jan 2026 06:19:06 +0000 Manifest this update: Thu 01 Jan 2026 06:19:06 +0000 Manifest next update: Fri 02 Jan 2026 06:19:06 +0000 Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: klFWyCy8gBCtipOnpx9y3DL8B1eeJuLPBpDJMhTehYQ=) 2: GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa (hash: pJa6GuoaHJHw4hKMbDO80uXWDKK7cJe4mwiQpI9C0zU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 06:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:bc:55:a6:6c:9c:50:99:0b:44:15:5c:d4:95:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f Validity Not Before: Jan 1 06:19:06 2026 GMT Not After : Jan 2 06:19:06 2026 GMT Subject: CN=15f856d885bf6888fb9bf39d4e0c9c605d6c0c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:70:18:e4:ac:fc:99:a6:0c:ca:52:a6:d1: e0:c8:9d:ae:d4:55:d4:62:26:0e:dc:7e:0c:1c:10: c7:91:c3:79:46:20:1b:12:0b:2f:8b:00:78:49:7a: 48:ec:6d:2f:d6:89:0d:3b:da:6b:da:06:f2:75:ae: a0:80:26:8b:a0:7c:f5:78:43:0a:ae:31:e1:f6:a3: 84:96:23:90:b7:9b:5e:59:9a:03:0e:9a:47:24:e5: 07:32:2b:87:63:0c:a9:c2:0f:1b:4c:6a:60:97:e9: 4c:0a:67:11:8a:c8:ad:d0:d4:27:5f:d9:f9:70:49: fb:52:d2:57:d8:e2:55:48:d0:68:92:1f:92:ed:1a: 15:10:14:55:eb:23:3b:b1:89:59:22:39:12:87:59: 55:0f:20:7b:be:c7:da:85:55:77:79:bd:4d:1c:a2: 7a:1f:7b:52:73:94:d9:ae:d9:ba:be:38:60:26:6d: 9b:05:e7:04:be:1b:a3:36:dd:ce:6b:d4:d7:0c:67: 3d:ab:fb:55:e5:da:9c:c4:11:d6:7e:5b:49:83:6c: 2d:f2:cc:8b:7d:5e:ea:8d:be:af:97:ec:03:97:00: d5:03:e0:3f:3b:e9:f3:51:cb:25:24:ad:3c:af:1d: 1b:2a:e7:64:2f:67:36:d8:17:96:84:ce:0f:b1:44: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F8:56:D8:85:BF:68:88:FB:9B:F3:9D:4E:0C:9C:60:5D:6C:0C:2B X509v3 Authority Key Identifier: keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:38:60:76:5f:94:2e:58:3b:a9:e1:fc:ef:7c:86:1b:0f:79: 7e:b2:e4:9b:c1:87:b3:7f:cf:83:db:37:9c:a9:0e:ac:27:32: cb:0c:2b:43:05:00:8b:e2:86:18:77:c0:4b:7c:4f:6d:bb:aa: b1:80:ba:28:a4:d0:8f:df:bd:19:b9:d6:50:d3:3a:7e:8b:de: 4e:0e:b4:19:a8:89:c0:e8:99:79:6c:79:6c:09:1d:5b:32:2b: 95:9b:70:cb:72:cb:8b:22:75:cc:ea:ea:c4:67:4e:85:86:60: 4d:fc:dd:31:23:9d:92:c0:3d:dc:72:08:de:ed:ac:fe:4a:84: 65:9a:75:97:0c:9d:34:3b:5c:e8:58:ea:4b:0e:8e:de:1e:2c: c1:33:c7:38:89:db:4e:98:5b:36:d7:1d:43:a3:b5:49:ae:af: 43:d7:84:d0:d2:e6:ef:dc:55:74:35:24:fb:21:07:5f:53:bf: 87:f2:ac:39:e9:51:9a:04:c3:d2:00:5c:73:24:62:8c:5f:52: 0c:d8:73:f7:27:a1:34:ef:bc:33:fe:62:e9:5b:45:96:cf:c9: 07:51:01:7c:74:d9:f5:c4:18:ee:ac:af:f7:58:98:05:49:f2: 44:ad:f7:14:d3:a3:e5:7a:3c:84:92:4e:e7:aa:55:99:e9:4a: 7e:27:73:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4NbxVpmycUJkLRBVc1JXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1 ODNlM2YwHhcNMjYwMTAxMDYxOTA2WhcNMjYwMTAyMDYxOTA2WjAzMTEwLwYDVQQD EygxNWY4NTZkODg1YmY2ODg4ZmI5YmYzOWQ0ZTBjOWM2MDVkNmMwYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKBwGOSs/JmmDMpSptHgyJ2u1FXU YiYO3H4MHBDHkcN5RiAbEgsviwB4SXpI7G0v1okNO9pr2gbyda6ggCaLoHz1eEMK rjHh9qOEliOQt5teWZoDDppHJOUHMiuHYwypwg8bTGpgl+lMCmcRisit0NQnX9n5 cEn7UtJX2OJVSNBokh+S7RoVEBRV6yM7sYlZIjkSh1lVDyB7vsfahVV3eb1NHKJ6 H3tSc5TZrtm6vjhgJm2bBecEvhujNt3Oa9TXDGc9q/tV5dqcxBHWfltJg2wt8syL fV7qjb6vl+wDlwDVA+A/O+nzUcslJK08rx0bKudkL2c22BeWhM4PsURT8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX4VtiFv2iI+5vznU4MnGBdbAwrMB8GA1UdIwQY MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt NThmYzk0ZDBkNDE0LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0 LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxThgdl+U Llg7qeH873yGGw95frLkm8GHs3/Pg9s3nKkOrCcyywwrQwUAi+KGGHfAS3xPbbuq sYC6KKTQj9+9GbnWUNM6foveTg60GaiJwOiZeWx5bAkdWzIrlZtwy3LLiyJ1zOrq xGdOhYZgTfzdMSOdksA93HII3u2s/kqEZZp1lwydNDtc6FjqSw6O3h4swTPHOInb TphbNtcdQ6O1Sa6vQ9eE0NLm79xVdDUk+yEHX1O/h/KsOelRmgTD0gBccyRijF9S DNhz9yehNO+8M/5i6VtFls/JB1EBfHTZ9cQY7qyv91iYBUnyRK33FNOj5Xo8hJJO 56pVmelKfidzHw== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:33 2026 by rpki-client