This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json) Hash identifier: aublf4zVEyeN2B1y81Sud8vtm1wzxa7sL88282LKO70= Subject key identifier: 73:57:6B:FB:AA:C0:BF:D5:F8:BB:E8:84:5F:D1:AD:2D:CA:89:D2:83 Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20 Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20 Certificate serial: 019B37FC91F6810E07BA12FCA16D33496A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft Manifest number: 1593 Signing time: Fri 19 Dec 2025 19:00:57 +0000 Manifest this update: Fri 19 Dec 2025 19:00:57 +0000 Manifest next update: Sat 20 Dec 2025 19:00:57 +0000 Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: sCf7IzdCw9e4Wfd+CdE7yNUVu3zxyhTbpx8uqF06OFw=) 2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:91:f6:81:0e:07:ba:12:fc:a1:6d:33:49:6a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20 Validity Not Before: Dec 19 19:00:57 2025 GMT Not After : Dec 20 19:00:57 2025 GMT Subject: CN=73576bfbaac0bfd5f8bbe8845fd1ad2dca89d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b0:b7:a5:5d:70:9d:2d:e0:2c:21:66:06:97: cc:77:6a:96:85:29:ca:7b:f0:38:8e:8b:cd:60:b2: 56:9a:8f:bd:ae:1d:a3:5d:b1:0f:d3:aa:48:3a:f7: 86:11:8a:47:cd:fd:03:9b:6f:70:fc:c6:72:0a:f2: be:bb:1e:9c:7f:bc:96:43:e6:f2:b0:c3:de:db:9b: a0:27:71:4d:48:22:e6:12:4c:a9:9f:8c:3d:4f:ac: 78:e1:32:1b:25:10:63:b2:1d:a1:61:c1:55:69:57: a4:26:77:db:65:b7:c8:57:ae:53:0d:5d:fa:8c:6c: f3:61:08:b3:68:c2:ff:4a:21:fe:de:58:83:d7:86: 49:27:63:b5:c6:37:0b:c5:4a:ac:d3:83:4c:4e:4a: 1a:91:f3:b8:db:f3:bf:8c:6a:b5:d1:19:b7:e0:3a: 89:99:91:3e:7b:af:50:65:1f:27:5f:4e:72:59:33: 1e:8a:bf:5c:fb:f2:b4:91:51:8d:56:8c:34:29:09: d2:b1:66:0f:c2:d5:2e:d7:da:3f:29:a6:9d:f6:c1: c9:cb:08:89:11:32:ce:f8:92:9b:37:1d:4a:18:65: 87:e1:66:15:71:52:ca:3e:c3:f9:9e:5b:6e:ba:86: 5c:d9:6d:b9:c1:91:4f:14:97:be:13:7b:c2:25:e8: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:57:6B:FB:AA:C0:BF:D5:F8:BB:E8:84:5F:D1:AD:2D:CA:89:D2:83 X509v3 Authority Key Identifier: keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dd:7e:dc:c4:2a:d9:9a:02:db:2c:c7:b6:75:71:91:cc:a5: 8b:56:ef:b8:9c:c3:da:41:9d:84:5b:24:30:54:1b:92:ba:97: f6:c8:c9:42:4c:7e:35:dd:92:f9:ce:d3:93:94:cc:8e:0f:a5: dc:12:c8:1d:ed:32:f6:74:5f:1a:cc:55:34:8d:c7:29:a2:be: ad:23:54:f1:c8:df:35:05:21:e8:e2:d1:2f:c1:a0:f3:8f:ca: 3d:ba:12:06:8d:88:5e:37:a1:24:eb:d3:ce:c5:66:ff:c3:96: 54:5c:2e:1a:bb:d7:78:7f:cd:ee:62:a4:60:19:c6:90:7e:23: 00:35:77:08:b7:17:04:4c:5f:05:30:1a:97:5f:08:ce:26:79: 36:53:ce:c6:1f:a5:a8:d1:a5:ff:e7:59:19:22:a7:80:db:04: 9b:b0:23:76:b9:3f:77:8f:60:ed:fe:7a:3c:f7:ff:79:b0:cd: ff:16:1a:9b:a6:60:8e:67:f3:3f:84:fa:ee:0f:1e:6f:92:93: df:cc:38:d7:b0:76:dd:ee:93:08:a1:29:df:9b:62:e0:61:73: fd:81:db:0b:42:3c:96:64:41:e7:9e:54:7f:8b:be:bf:c4:da: a8:79:47:18:5e:59:06:bd:c0:0d:54:20:12:55:0f:9f:bc:a7: 46:dd:29:06 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs3/JH2gQ4HuhL8oW0zSWpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm NmNiMjAwHhcNMjUxMjE5MTkwMDU3WhcNMjUxMjIwMTkwMDU3WjAzMTEwLwYDVQQD Eyg3MzU3NmJmYmFhYzBiZmQ1ZjhiYmU4ODQ1ZmQxYWQyZGNhODlkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LC3pV1wnS3gLCFmBpfMd2qWhSnK e/A4jovNYLJWmo+9rh2jXbEP06pIOveGEYpHzf0Dm29w/MZyCvK+ux6cf7yWQ+by sMPe25ugJ3FNSCLmEkypn4w9T6x44TIbJRBjsh2hYcFVaVekJnfbZbfIV65TDV36 jGzzYQizaML/SiH+3liD14ZJJ2O1xjcLxUqs04NMTkoakfO42/O/jGq10Rm34DqJ mZE+e69QZR8nX05yWTMeir9c+/K0kVGNVow0KQnSsWYPwtUu19o/Kaad9sHJywiJ ETLO+JKbNx1KGGWH4WYVcVLKPsP5nltuuoZc2W25wZFPFJe+E3vCJejs9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHNXa/uqwL/V+LvohF/RrS3KidKDMB8GA1UdIwQY MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2 M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjN1+ 3MQq2ZoC2yzHtnVxkcyli1bvuJzD2kGdhFskMFQbkrqX9sjJQkx+Nd2S+c7Tk5TM jg+l3BLIHe0y9nRfGsxVNI3HKaK+rSNU8cjfNQUh6OLRL8Gg84/KPboSBo2IXjeh JOvTzsVm/8OWVFwuGrvXeH/N7mKkYBnGkH4jADV3CLcXBExfBTAal18IziZ5NlPO xh+lqNGl/+dZGSKngNsEm7Ajdrk/d49g7f56PPf/ebDN/xYam6ZgjmfzP4T67g8e b5KT38w417B23e6TCKEp35ti4GFz/YHbC0I8lmRB555Uf4u+v8TaqHlHGF5ZBr3A DVQgElUPn7ynRt0pBg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:32:21 2025 by rpki-client