This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json) Hash identifier: w+hyvZpXmh6S31IC/l777s/veSbRgDQDGg9oRk/T6FY= Subject key identifier: D0:B2:14:9A:04:C8:43:03:4A:3C:4B:13:5E:8D:9E:A5:0C:46:65:A5 Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Certificate serial: 019B736C507FFFB26F9940D17FF78E34A2E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft Manifest number: 107F Signing time: Wed 31 Dec 2025 08:00:36 +0000 Manifest this update: Wed 31 Dec 2025 08:00:36 +0000 Manifest next update: Thu 01 Jan 2026 08:00:36 +0000 Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: yw6UXl3T8QwWaFTdygKr+BGKAKvCPBsHQkUhmGx8Xqg=) 2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:50:7f:ff:b2:6f:99:40:d1:7f:f7:8e:34:a2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Validity Not Before: Dec 31 08:00:36 2025 GMT Not After : Jan 1 08:00:36 2026 GMT Subject: CN=d0b2149a04c843034a3c4b135e8d9ea50c4665a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:c6:a5:f4:32:1a:14:35:ef:61:53:f6:ac: 4d:82:37:d0:46:ca:e2:9b:da:5e:c2:23:50:0b:f8: 3c:2b:93:6a:ac:ce:82:93:31:86:d8:a5:ac:40:24: 70:0a:f7:83:fb:79:0c:d9:50:07:63:26:18:75:6c: 71:23:c7:74:40:9b:63:26:ab:ff:3c:9c:30:99:c2: 25:ce:7f:d2:1b:9e:1a:79:ab:d2:f0:1a:bf:88:30: 73:c2:5e:59:0f:1d:19:4f:a7:d3:44:1d:68:e9:d7: c0:70:de:d1:5a:7b:a6:62:99:ca:e5:eb:02:a8:fc: 8f:84:66:ec:ca:cf:be:2a:55:ba:4c:64:81:a9:82: 49:69:1c:57:ec:d0:8e:a8:3d:be:ad:4f:01:56:66: 49:76:da:93:2a:77:3a:de:6a:4b:81:1b:4a:be:65: 93:57:84:56:02:b3:ec:28:0a:31:73:f8:2c:64:a3: de:9c:95:fb:d1:23:2d:56:8c:a1:7e:49:09:34:ca: 31:4d:31:b6:87:7e:61:0b:5d:66:26:f7:81:b8:4e: d4:4e:dc:e6:04:e7:41:a2:a7:b8:c5:fd:30:7a:fd: 05:38:26:6e:2c:41:a0:5e:86:c0:69:8f:01:a7:50: 4f:1f:a9:6b:ac:54:9d:b3:fb:2b:45:8a:f7:6a:ab: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B2:14:9A:04:C8:43:03:4A:3C:4B:13:5E:8D:9E:A5:0C:46:65:A5 X509v3 Authority Key Identifier: keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e4:98:7f:40:07:54:36:6f:d9:35:7c:b3:fa:ad:8d:c4:2f: 65:ba:03:f3:87:42:e3:4b:74:b9:a2:80:7d:da:3d:62:a0:2c: 01:05:05:e5:a9:53:fb:92:c9:7e:0c:d6:61:2a:fd:20:54:b5: 31:35:6d:72:1d:93:eb:39:1f:c7:98:15:57:f8:d1:71:b6:20: 98:4a:b2:1c:4c:a1:1b:38:04:72:33:8e:da:b8:ae:5c:c0:c1: 9f:5e:25:ef:36:9d:0a:21:c5:4c:40:b3:45:4f:0a:95:8a:d3: 9c:c2:4c:5e:f4:db:45:51:f3:f8:3b:d6:e2:e9:59:b5:8e:f5: 9f:f2:b8:3d:0d:9f:24:e6:fa:6f:36:a6:6a:59:0d:a0:fb:d2: 72:d4:06:0b:f8:74:7d:92:8b:d6:ce:82:5b:79:1a:e0:81:f4: b4:bc:a6:e3:f8:68:d2:12:90:1c:cf:6f:a6:f4:21:a3:cc:bd: d2:90:f3:68:46:7d:5e:30:74:ef:f1:16:28:2b:0d:b3:75:21: d3:df:c9:1b:39:f3:eb:3d:c3:2a:44:6f:85:48:3e:db:8c:5f: ea:0a:7f:2d:43:e0:b4:2d:80:75:e0:74:52:76:68:00:5a:b5: 39:37:35:8d:78:52:fc:8d:d7:29:27:79:69:82:9d:6a:97:4d: 60:ca:aa:52 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtzbFB//7JvmUDRf/eONKLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0 OWRiZGQwHhcNMjUxMjMxMDgwMDM2WhcNMjYwMTAxMDgwMDM2WjAzMTEwLwYDVQQD EyhkMGIyMTQ5YTA0Yzg0MzAzNGEzYzRiMTM1ZThkOWVhNTBjNDY2NWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotPGpfQyGhQ172FT9qxNgjfQRsri m9pewiNQC/g8K5NqrM6CkzGG2KWsQCRwCveD+3kM2VAHYyYYdWxxI8d0QJtjJqv/ PJwwmcIlzn/SG54aeavS8Bq/iDBzwl5ZDx0ZT6fTRB1o6dfAcN7RWnumYpnK5esC qPyPhGbsys++KlW6TGSBqYJJaRxX7NCOqD2+rU8BVmZJdtqTKnc63mpLgRtKvmWT V4RWArPsKAoxc/gsZKPenJX70SMtVoyhfkkJNMoxTTG2h35hC11mJveBuE7UTtzm BOdBoqe4xf0wev0FOCZuLEGgXobAaY8Bp1BPH6lrrFSds/srRYr3aqvu1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNCyFJoEyEMDSjxLE16NnqUMRmWlMB8GA1UdIwQY MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOSY f0AHVDZv2TV8s/qtjcQvZboD84dC40t0uaKAfdo9YqAsAQUF5alT+5LJfgzWYSr9 IFS1MTVtch2T6zkfx5gVV/jRcbYgmEqyHEyhGzgEcjOO2riuXMDBn14l7zadCiHF TECzRU8KlYrTnMJMXvTbRVHz+DvW4ulZtY71n/K4PQ2fJOb6bzamalkNoPvSctQG C/h0fZKL1s6CW3ka4IH0tLym4/ho0hKQHM9vpvQho8y90pDzaEZ9XjB07/EWKCsN s3Uh09/JGznz6z3DKkRvhUg+24xf6gp/LUPgtC2AdeB0UnZoAFq1OTc1jXhS/I3X KSd5aYKdapdNYMqqUg== -----END CERTIFICATE-----Generated at Wed Dec 31 10:27:30 2025 by rpki-client