This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json) Hash identifier: nRdPzkBOOqmWKwmY4Ox3LXhauDHkM4B6MpXk0i9hgcg= Subject key identifier: 71:6A:A9:16:AB:0A:48:20:C4:D3:B6:6E:E4:CF:B9:B7:0F:54:4F:66 Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4 Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4 Certificate serial: 019B42EE7A7551A571506D1EED925CA940F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft Manifest number: 141E Signing time: Sun 21 Dec 2025 22:01:23 +0000 Manifest this update: Sun 21 Dec 2025 22:01:23 +0000 Manifest next update: Mon 22 Dec 2025 22:01:23 +0000 Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: /kXTGxZEFaZZPK1GVwc4gm7dtxipCK3pL4EhWsLkgyY=) 2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:7a:75:51:a5:71:50:6d:1e:ed:92:5c:a9:40:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4 Validity Not Before: Dec 21 22:01:23 2025 GMT Not After : Dec 22 22:01:23 2025 GMT Subject: CN=716aa916ab0a4820c4d3b66ee4cfb9b70f544f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:6d:7b:3f:55:f1:1b:ce:f5:40:f1:96:da: 49:ae:f1:73:42:81:38:01:72:4f:82:be:e6:18:a3: bd:1b:82:f3:bc:bf:38:d2:8a:b8:07:09:ca:48:49: fc:3f:13:ad:99:01:93:3a:4f:81:c7:94:c8:4f:47: f8:0b:dd:6c:b4:5e:5e:35:18:84:32:81:56:66:ad: 11:a5:75:f1:c8:e3:b9:55:04:0f:e7:b4:1f:19:bc: 77:0b:62:be:03:db:45:04:22:18:3d:c2:3f:2c:3a: b8:23:ca:fd:21:eb:6a:2a:21:e2:88:a4:dc:27:d8: 13:3c:70:79:c4:4b:4e:34:0e:c1:f6:5c:1a:34:ef: 00:88:11:be:6c:ab:a5:58:80:70:aa:3e:dd:ea:a4: a0:45:28:c8:7c:56:19:78:64:4b:28:e0:4c:06:b7: 4d:8b:99:7a:34:18:3d:1a:39:68:1e:31:42:6f:02: 30:75:29:05:b3:44:fa:ca:e5:a9:3f:77:4f:25:de: da:d0:be:b7:d3:a3:03:74:fa:b0:43:12:19:40:da: eb:bd:45:be:f2:70:56:49:35:cd:24:6c:3a:a6:ce: 67:e4:47:13:fe:18:2c:cb:4b:83:fd:ce:9c:21:a8: 06:42:10:01:01:d3:26:66:f2:b5:9b:7a:1b:f1:e7: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6A:A9:16:AB:0A:48:20:C4:D3:B6:6E:E4:CF:B9:B7:0F:54:4F:66 X509v3 Authority Key Identifier: keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:83:9c:b5:15:e9:7e:2b:e3:3a:12:6e:c3:fe:17:d9:25:3a: 2d:cb:24:53:1b:88:72:77:de:f5:4e:be:6f:2a:42:cd:66:7c: f0:b6:c0:64:98:25:ed:e4:81:c7:75:8e:09:4a:14:e3:09:ec: 3f:7d:e7:6d:6f:27:e4:a0:38:8c:72:46:48:f4:e7:81:75:aa: 95:b1:ba:c4:22:3a:a0:96:b8:8f:eb:cd:1b:bb:e2:ca:8f:ba: 08:16:bd:a6:eb:8c:7b:f9:a0:fe:de:c9:7c:0e:b2:c8:49:67: 51:fb:e9:ab:7f:a0:16:df:b0:9e:6b:bf:2b:6a:9d:e0:ea:28: ed:bd:ac:1c:b4:3c:78:07:c5:9d:0a:e1:fa:c9:ff:44:90:04: 7f:07:eb:96:df:85:67:87:1a:7b:96:95:de:a4:07:f3:0e:e8: 05:ed:0d:e4:8d:60:dd:60:7c:7f:54:8a:93:ec:ed:35:64:87: 33:20:c7:f5:e3:f8:b4:b8:40:51:42:15:df:9e:5e:85:d5:1a: 98:2c:b4:3d:03:7e:2c:ca:23:c2:27:d7:72:f8:b9:31:8b:89: 6b:40:ae:c1:f9:da:1b:57:f0:1f:34:94:7f:81:5b:18:bd:5e: b3:80:ad:87:ba:a4:65:27:08:5c:c5:a9:86:57:96:78:48:cc: 93:55:7c:05 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtC7np1UaVxUG0e7ZJcqUD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTAwNTNiNjhhNDM5OGZkNTJmMDdhZmRkNmFkMzEwOWZk ZWQ0YjQwHhcNMjUxMjIxMjIwMTIzWhcNMjUxMjIyMjIwMTIzWjAzMTEwLwYDVQQD Eyg3MTZhYTkxNmFiMGE0ODIwYzRkM2I2NmVlNGNmYjliNzBmNTQ0ZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbttez9V8RvO9UDxltpJrvFzQoE4 AXJPgr7mGKO9G4LzvL840oq4BwnKSEn8PxOtmQGTOk+Bx5TIT0f4C91stF5eNRiE MoFWZq0RpXXxyOO5VQQP57QfGbx3C2K+A9tFBCIYPcI/LDq4I8r9IetqKiHiiKTc J9gTPHB5xEtONA7B9lwaNO8AiBG+bKulWIBwqj7d6qSgRSjIfFYZeGRLKOBMBrdN i5l6NBg9GjloHjFCbwIwdSkFs0T6yuWpP3dPJd7a0L6306MDdPqwQxIZQNrrvUW+ 8nBWSTXNJGw6ps5n5EcT/hgsy0uD/c6cIagGQhABAdMmZvK1m3ob8ef88QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHFqqRarCkggxNO2buTPubcPVE9mMB8GA1UdIwQY MBaAFPugBTtopDmP1S8Hr91q0xCf3tS0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02QUZPMmlrT1lfVkx3ZXYzV3JURUpfZTFMUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzMzMTc0LWVkZDYtNGI0Mi1iMDEx LTk4MDU4MTAwYTY0OC8xLzEtNkFGTzJpa09ZX1ZMd2V2M1dyVEVKX2UxTFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UxLzczMzE3NC1lZGQ2LTRiNDItYjAxMS05ODA1ODEwMGE2 NDgvMS8xLTZBRk8yaWtPWV9WTHdldjNXclRFSl9lMUxRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoOc tRXpfivjOhJuw/4X2SU6LcskUxuIcnfe9U6+bypCzWZ88LbAZJgl7eSBx3WOCUoU 4wnsP33nbW8n5KA4jHJGSPTngXWqlbG6xCI6oJa4j+vNG7viyo+6CBa9puuMe/mg /t7JfA6yyElnUfvpq3+gFt+wnmu/K2qd4Ooo7b2sHLQ8eAfFnQrh+sn/RJAEfwfr lt+FZ4cae5aV3qQH8w7oBe0N5I1g3WB8f1SKk+ztNWSHMyDH9eP4tLhAUUIV355e hdUamCy0PQN+LMojwifXcvi5MYuJa0CuwfnaG1fwHzSUf4FbGL1es4Cth7qkZScI XMWphleWeEjMk1V8BQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:37:56 2025 by rpki-client