This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft (raw, json) Hash identifier: sbMWNZVCUo+dH03FVvEc3M+q+i4mnDG+ybI03SE+A/M= Subject key identifier: 81:D4:D7:10:2B:2B:C0:4B:66:0F:87:73:53:96:E5:76:C5:A6:D2:52 Authority key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38 Certificate issuer: /CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38 Certificate serial: 019B5A88D2E62B04164A80597A45D0CF5565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft Manifest number: 015A Signing time: Fri 26 Dec 2025 12:01:14 +0000 Manifest this update: Fri 26 Dec 2025 12:01:14 +0000 Manifest next update: Sat 27 Dec 2025 12:01:14 +0000 Files and hashes: 1: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl (hash: nYfvo/3Yb+/B33zQxfTQmrLfxk6ADTJIcrxESbb+ybQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d2:e6:2b:04:16:4a:80:59:7a:45:d0:cf:55:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38 Validity Not Before: Dec 26 12:01:14 2025 GMT Not After : Dec 27 12:01:14 2025 GMT Subject: CN=81d4d7102b2bc04b660f87735396e576c5a6d252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ed:ad:ce:45:3d:52:3d:85:db:0a:5d:c9:17: 1c:fc:af:6d:9f:90:d1:35:f2:db:4d:60:c3:60:d0: 54:ff:de:46:b8:71:52:54:26:e1:6f:5c:b1:af:36: e6:5c:f2:26:b7:81:c8:01:d2:47:8c:f2:43:38:cd: df:f6:d8:86:88:24:95:20:c8:07:15:76:97:d8:fb: 68:99:5a:50:14:d5:7b:3c:70:dc:b9:af:85:b7:26: 22:9b:d1:14:a8:15:a8:23:cd:28:fa:49:04:fe:80: 67:1e:a7:bb:6f:10:3c:99:1e:92:fd:3d:95:46:1b: e0:1b:3c:7d:3b:ad:43:25:4b:37:78:43:7c:e6:37: 9e:87:69:b2:6a:aa:d8:a1:81:0c:11:ee:8f:47:8d: 9a:b2:5c:0f:35:07:b3:48:3d:a2:58:11:75:2d:b4: 01:cd:f9:fb:21:13:af:02:d1:d6:ba:2f:55:35:35: e2:17:49:96:8d:f5:ad:06:a9:31:67:f9:07:a8:35: 2b:48:93:6d:2e:10:97:66:15:87:a7:37:e0:a3:d9: fc:0f:7c:e6:92:7c:ce:82:43:8b:42:1a:0c:a7:e9: a6:12:da:5b:83:1d:6f:79:4a:c0:5c:2e:b5:12:0a: e2:7e:08:aa:e7:2e:df:0d:71:a2:74:6e:44:b1:a6: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D4:D7:10:2B:2B:C0:4B:66:0F:87:73:53:96:E5:76:C5:A6:D2:52 X509v3 Authority Key Identifier: keyid:FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2d:2c:d8:01:88:b2:24:a3:49:a9:2d:00:80:9b:88:f8:4c: 67:83:21:fa:a3:0d:e7:ae:c6:47:a6:a3:d8:3c:c1:52:5b:50: 38:28:1b:16:14:e8:c8:de:5e:23:68:c3:5a:df:ab:80:05:21: 74:76:d7:1e:78:51:db:83:e8:bd:f1:df:28:0f:61:33:b9:76: f9:04:49:32:b2:87:4c:95:1b:c9:3d:dc:6b:2b:38:66:e2:b3: 94:d6:8e:1e:a5:22:33:a7:36:e8:ab:c5:a4:73:79:e1:ba:48: 5e:14:36:56:90:5c:ca:aa:8a:70:ad:ea:bd:07:9f:84:39:32: 19:38:b3:a5:f3:a9:4d:6c:1f:76:33:1f:c0:ca:55:dc:31:f3: b9:eb:ba:fa:79:c4:5f:3c:03:e8:96:9c:a2:10:42:6c:2e:fc: 06:3b:37:a2:05:97:c2:d3:61:cb:34:61:75:df:3f:cb:0d:3c: 8b:2f:3e:c8:85:4f:3a:39:d9:e9:55:37:8b:06:fa:5f:5e:b5: 2a:38:8e:38:b0:41:aa:4b:7f:e6:de:e6:5e:63:b2:e5:96:60: 99:28:fb:b6:b2:24:5f:0e:33:0b:c2:37:a1:1f:46:f3:ff:a3: 70:d4:98:40:0d:70:27:a9:6c:cf:68:1d:e5:a3:78:ea:f3:d8: 17:db:a0:83 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaiNLmKwQWSoBZekXQz1VlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZWJmMTA3ZjA1ZmJhOWQ0ZTRjYTYxYWVhMGMxNzcyNTE5 ZjVlMzgwHhcNMjUxMjI2MTIwMTE0WhcNMjUxMjI3MTIwMTE0WjAzMTEwLwYDVQQD Eyg4MWQ0ZDcxMDJiMmJjMDRiNjYwZjg3NzM1Mzk2ZTU3NmM1YTZkMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e2tzkU9Uj2F2wpdyRcc/K9tn5DR NfLbTWDDYNBU/95GuHFSVCbhb1yxrzbmXPImt4HIAdJHjPJDOM3f9tiGiCSVIMgH FXaX2PtomVpQFNV7PHDcua+FtyYim9EUqBWoI80o+kkE/oBnHqe7bxA8mR6S/T2V RhvgGzx9O61DJUs3eEN85jeeh2myaqrYoYEMEe6PR42aslwPNQezSD2iWBF1LbQB zfn7IROvAtHWui9VNTXiF0mWjfWtBqkxZ/kHqDUrSJNtLhCXZhWHpzfgo9n8D3zm knzOgkOLQhoMp+mmEtpbgx1veUrAXC61Egrifgiq5y7fDXGidG5EsaYOUwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIHU1xArK8BLZg+Hc1OW5XbFptJSMB8GA1UdIwQY MBaAFPrr8QfwX7qdTkymGuoMF3JRn144MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11dnhCX0JmdXAxT1RLWWE2Z3dYY2xHZlhqZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMDY5NjI4LTk3ZGEtNDBmZS05YTA4 LTY4ZWY4ODJiYzk3My8xLzEtdXZ4Ql9CZnVwMU9US1lhNmd3WGNsR2ZYamcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJiLzA2OTYyOC05N2RhLTQwZmUtOWEwOC02OGVmODgyYmM5 NzMvMS8xLXV2eEJfQmZ1cDFPVEtZYTZnd1hjbEdmWGpnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi0s 2AGIsiSjSaktAICbiPhMZ4Mh+qMN567GR6aj2DzBUltQOCgbFhToyN5eI2jDWt+r gAUhdHbXHnhR24PovfHfKA9hM7l2+QRJMrKHTJUbyT3cays4ZuKzlNaOHqUiM6c2 6KvFpHN54bpIXhQ2VpBcyqqKcK3qvQefhDkyGTizpfOpTWwfdjMfwMpV3DHzueu6 +nnEXzwD6JacohBCbC78Bjs3ogWXwtNhyzRhdd8/yw08iy8+yIVPOjnZ6VU3iwb6 X161KjiOOLBBqkt/5t7mXmOy5ZZgmSj7trIkXw4zC8I3oR9G8/+jcNSYQA1wJ6ls z2gd5aN46vPYF9uggw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:36 2025 by rpki-client