This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft File: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json) Hash identifier: GlWkkTt3aGBiPEyZgQsOBQlz7HVwj1i2uQt9yOF5C7g= Subject key identifier: 99:C6:31:87:86:DD:5F:B0:9F:37:5C:74:68:88:16:AE:CB:CC:CC:DD Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Certificate serial: 019B17CC81E3BC13EAFF9BC6F66EAE0A0526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft Manifest number: 0F14 Signing time: Sat 13 Dec 2025 13:00:36 +0000 Manifest this update: Sat 13 Dec 2025 13:00:36 +0000 Manifest next update: Sun 14 Dec 2025 13:00:36 +0000 Files and hashes: 1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: OKQ1N1FD9+fUFA4SYTNC+7Zn390xzEJ5l2Iqs7TMdT4=) 2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cc:81:e3:bc:13:ea:ff:9b:c6:f6:6e:ae:0a:05:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Validity Not Before: Dec 13 13:00:36 2025 GMT Not After : Dec 14 13:00:36 2025 GMT Subject: CN=99c6318786dd5fb09f375c74688816aecbccccdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:1d:38:fa:1f:e3:7e:57:1e:40:6a:db:8e: da:a2:33:9c:78:8e:1e:4f:78:4b:ee:e4:5a:b4:31: d2:06:28:4e:3b:8d:56:21:31:42:a8:4b:ac:39:13: 5a:8d:8e:69:40:6d:12:8e:87:60:b7:33:8a:ff:c1: 60:d0:cc:3f:56:d9:ea:47:02:03:3f:24:77:83:ea: 2f:ba:4c:9a:de:25:a5:03:49:14:da:42:ec:d5:e4: fd:69:75:0e:4f:99:b7:13:bd:db:00:79:77:16:86: c5:14:07:d8:62:94:07:65:94:09:d4:c6:f1:1c:d8: 6f:b4:4c:cc:b3:fb:38:aa:72:59:6e:f6:c6:ed:71: 2f:4f:3a:b1:a5:4b:4d:8e:eb:40:a0:10:6f:06:f6: 3b:8c:73:22:1c:6f:26:c6:07:db:cc:0c:95:e3:66: 6e:49:8b:84:2f:e8:aa:26:58:6b:d3:56:4a:d8:4c: a5:0e:86:49:f0:68:69:fa:c3:75:d9:da:96:52:0c: 1f:85:e6:7e:f9:27:75:94:d0:b1:c9:ff:6b:20:c4: 4a:31:b0:83:b3:8b:3b:2e:18:2e:c6:f3:e6:19:d9: 9c:0e:79:cf:78:80:47:16:e6:c3:c4:49:7d:19:68: 25:03:4a:28:b5:19:1c:86:cb:e8:34:99:ec:ed:c1: 78:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:31:87:86:DD:5F:B0:9F:37:5C:74:68:88:16:AE:CB:CC:CC:DD X509v3 Authority Key Identifier: keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:12:12:0c:61:c3:2a:1d:5f:99:07:b0:2d:cb:bf:65:09:2c: de:65:3a:0a:39:1c:58:c1:b2:6d:6f:59:39:38:37:42:4e:5a: 05:50:48:f6:ea:ad:21:e3:4a:74:38:63:fd:44:58:f8:1b:c0: 99:ab:d5:d5:c7:04:3f:20:d0:40:42:b8:b4:e1:13:01:5d:c0: 05:6e:bb:07:d6:90:a9:5a:4b:14:8f:ad:d2:dc:3f:a3:99:28: 8e:bd:12:9b:e5:c2:97:67:e5:0a:24:3a:f3:18:aa:61:d5:82: b4:84:fb:ba:2d:22:cd:50:d7:17:e3:7f:0e:04:aa:ba:8f:a3: 66:a1:ed:3d:e1:1f:38:5f:9f:83:bb:7e:a7:41:30:65:18:1a: 68:85:19:62:27:f0:5e:55:c5:b1:24:fb:6c:31:85:62:3f:e3: 7b:b9:3a:2a:64:52:35:8e:a5:5a:b6:c8:2a:a2:79:08:c4:76: 35:e2:08:13:9c:07:30:b0:cf:f2:07:be:6b:b8:fe:8b:0b:2c: 77:91:0b:9c:f2:e8:07:c2:ca:e9:6f:7b:05:8e:56:15:4e:20: e3:73:0e:49:35:9f:d2:d3:53:bf:23:5f:8b:5a:03:07:37:9e: 02:b6:8e:10:7a:7c:af:e4:f7:01:1c:10:b9:df:82:c0:7b:b1: 21:36:10:87 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsXzIHjvBPq/5vG9m6uCgUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTAxNDY0YTY5NWIwZjZmNTJmNTExYmNjMTI0MGZhMjg0 ZDNkY2YwHhcNMjUxMjEzMTMwMDM2WhcNMjUxMjE0MTMwMDM2WjAzMTEwLwYDVQQD Eyg5OWM2MzE4Nzg2ZGQ1ZmIwOWYzNzVjNzQ2ODg4MTZhZWNiY2NjY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGcdOPof435XHkBq247aojOceI4e T3hL7uRatDHSBihOO41WITFCqEusORNajY5pQG0SjodgtzOK/8Fg0Mw/VtnqRwID PyR3g+ovukya3iWlA0kU2kLs1eT9aXUOT5m3E73bAHl3FobFFAfYYpQHZZQJ1Mbx HNhvtEzMs/s4qnJZbvbG7XEvTzqxpUtNjutAoBBvBvY7jHMiHG8mxgfbzAyV42Zu SYuEL+iqJlhr01ZK2EylDoZJ8Ghp+sN12dqWUgwfheZ++Sd1lNCxyf9rIMRKMbCD s4s7LhguxvPmGdmcDnnPeIBHFubDxEl9GWglA0ootRkchsvoNJns7cF4wQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJnGMYeG3V+wnzdcdGiIFq7LzMzdMB8GA1UdIwQY MBaAFPrgFGSmlbD29S9RG8wSQPooTT3PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11QVVaS2FWc1BiMUwxRWJ6QkpBLWloTlBjOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkw LTMyMzUyZjk2YTYyMS8xLzEtdUFVWkthVnNQYjFMMUViekJKQS1paE5QYzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzFjNjcwNC01MTBhLTQ4MDAtYTg5MC0zMjM1MmY5NmE2 MjEvMS8xLXVBVVpLYVZzUGIxTDFFYnpCSkEtaWhOUGM4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRIS DGHDKh1fmQewLcu/ZQks3mU6CjkcWMGybW9ZOTg3Qk5aBVBI9uqtIeNKdDhj/URY +BvAmavV1ccEPyDQQEK4tOETAV3ABW67B9aQqVpLFI+t0tw/o5kojr0Sm+XCl2fl CiQ68xiqYdWCtIT7ui0izVDXF+N/DgSquo+jZqHtPeEfOF+fg7t+p0EwZRgaaIUZ YifwXlXFsST7bDGFYj/je7k6KmRSNY6lWrbIKqJ5CMR2NeIIE5wHMLDP8ge+a7j+ iwssd5ELnPLoB8LK6W97BY5WFU4g43MOSTWf0tNTvyNfi1oDBzeeAraOEHp8r+T3 ARwQud+CwHuxITYQhw== -----END CERTIFICATE-----Generated at Sat Dec 13 18:47:19 2025 by rpki-client