This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft File: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json) Hash identifier: PB645UvS65oFPtRVqVk+x8sPefk0X/sieSCDbHNs0nk= Subject key identifier: D9:29:8D:F9:65:BF:4E:27:17:2D:6A:5B:BF:6A:69:07:AC:72:D4:41 Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Certificate serial: 019B405A9ADBB778A218D77789D59E150DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft Manifest number: 0F29 Signing time: Sun 21 Dec 2025 10:00:38 +0000 Manifest this update: Sun 21 Dec 2025 10:00:38 +0000 Manifest next update: Mon 22 Dec 2025 10:00:38 +0000 Files and hashes: 1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: 1e/K7ey2XkrtR2YUXWpYLsAASFb/pJIogNfRggP7OMM=) 2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:9a:db:b7:78:a2:18:d7:77:89:d5:9e:15:0d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Validity Not Before: Dec 21 10:00:38 2025 GMT Not After : Dec 22 10:00:38 2025 GMT Subject: CN=d9298df965bf4e27172d6a5bbf6a6907ac72d441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:6a:1f:9e:f2:49:dd:5e:c3:a0:4c:8f:40: a8:74:9e:14:05:79:10:fd:8e:9f:ea:9b:bd:a1:d9: ce:e8:24:65:b1:55:df:88:8e:f8:3a:ab:e6:3a:15: 64:48:c9:5e:31:ad:90:69:17:3f:0e:0f:a6:cd:36: b2:d3:83:98:2d:4e:0c:a5:b5:31:51:15:90:ef:88: 01:ab:93:9d:6e:0a:f2:ab:ac:1c:fa:43:9d:34:df: ca:f3:1c:49:6b:69:54:06:94:0a:96:70:d6:19:01: 03:44:ce:3a:06:a0:aa:e8:10:85:b8:71:cc:24:8c: 51:b4:97:cc:a2:61:9e:fd:32:a7:df:98:99:b1:d5: d5:9d:71:7f:86:c5:f2:52:6b:7f:2c:5f:42:00:29: cd:02:e7:4b:5e:b0:44:c3:74:77:e8:6c:49:10:9b: a0:a3:c6:26:56:8e:af:b0:14:d8:87:de:50:dd:9f: 11:f8:14:37:a8:e3:52:a0:d8:88:3d:5a:31:91:4a: 87:0e:36:de:8a:6a:91:99:44:3c:f7:20:91:c0:69: c5:18:6b:41:01:f0:f6:2c:de:63:d8:a0:30:98:e8: e0:1b:d2:f6:60:9e:27:25:e5:3d:ab:c9:f4:dd:2b: d6:e1:f7:70:2c:a1:68:d4:d8:8e:de:16:31:8a:d1: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:29:8D:F9:65:BF:4E:27:17:2D:6A:5B:BF:6A:69:07:AC:72:D4:41 X509v3 Authority Key Identifier: keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f1:6b:cb:da:1a:f8:6b:fa:d2:04:e3:df:93:44:fc:fe:3e: 52:56:b8:7c:0d:5a:0b:58:fc:e6:47:49:c9:58:2a:0e:56:3d: 57:b3:bf:d7:20:18:43:31:d0:5f:a1:d5:1b:0e:50:66:a3:0b: 3a:3b:4c:41:35:18:62:cc:7b:04:b2:3c:e3:bf:59:b5:5a:d0: f5:35:17:66:3b:cf:50:9e:e5:76:d2:80:32:e0:d4:d8:8f:1f: ec:bc:d5:ff:5a:93:2a:c9:0a:65:6d:91:de:0a:8f:90:c8:f4: c2:77:74:08:93:2f:eb:ab:63:bf:da:3a:eb:1c:61:65:ad:ec: d2:f1:c7:95:50:f8:03:4f:0f:63:a5:99:d3:c4:7f:26:41:b5: 9a:a4:4b:e9:a3:71:90:84:20:4d:7c:f1:c7:a3:72:bf:c5:08: 1c:7f:a3:ec:43:02:d3:9c:3f:b7:97:42:c8:60:8a:97:9f:80: c2:c7:d3:77:dd:0d:84:f6:1f:e1:c1:7d:d4:d9:95:e8:39:b2: 4e:ae:74:ba:19:05:9d:c7:b1:b3:ab:9e:2c:e4:81:3a:da:2d: e4:1e:5c:34:f9:b3:32:f7:50:42:90:91:ad:4b:fb:4b:16:c0: 5e:48:d8:59:af:1e:28:c7:41:fc:30:d7:cf:11:08:b2:8b:6b: 27:27:a2:b7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAWprbt3iiGNd3idWeFQ3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTAxNDY0YTY5NWIwZjZmNTJmNTExYmNjMTI0MGZhMjg0 ZDNkY2YwHhcNMjUxMjIxMTAwMDM4WhcNMjUxMjIyMTAwMDM4WjAzMTEwLwYDVQQD EyhkOTI5OGRmOTY1YmY0ZTI3MTcyZDZhNWJiZjZhNjkwN2FjNzJkNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBpqH57ySd1ew6BMj0CodJ4UBXkQ /Y6f6pu9odnO6CRlsVXfiI74OqvmOhVkSMleMa2QaRc/Dg+mzTay04OYLU4MpbUx URWQ74gBq5Odbgryq6wc+kOdNN/K8xxJa2lUBpQKlnDWGQEDRM46BqCq6BCFuHHM JIxRtJfMomGe/TKn35iZsdXVnXF/hsXyUmt/LF9CACnNAudLXrBEw3R36GxJEJug o8YmVo6vsBTYh95Q3Z8R+BQ3qONSoNiIPVoxkUqHDjbeimqRmUQ89yCRwGnFGGtB AfD2LN5j2KAwmOjgG9L2YJ4nJeU9q8n03SvW4fdwLKFo1NiO3hYxitHl7QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNkpjfllv04nFy1qW79qaQesctRBMB8GA1UdIwQY MBaAFPrgFGSmlbD29S9RG8wSQPooTT3PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11QVVaS2FWc1BiMUwxRWJ6QkpBLWloTlBjOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkw LTMyMzUyZjk2YTYyMS8xLzEtdUFVWkthVnNQYjFMMUViekJKQS1paE5QYzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzFjNjcwNC01MTBhLTQ4MDAtYTg5MC0zMjM1MmY5NmE2 MjEvMS8xLXVBVVpLYVZzUGIxTDFFYnpCSkEtaWhOUGM4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvFr y9oa+Gv60gTj35NE/P4+Ula4fA1aC1j85kdJyVgqDlY9V7O/1yAYQzHQX6HVGw5Q ZqMLOjtMQTUYYsx7BLI8479ZtVrQ9TUXZjvPUJ7ldtKAMuDU2I8f7LzV/1qTKskK ZW2R3gqPkMj0wnd0CJMv66tjv9o66xxhZa3s0vHHlVD4A08PY6WZ08R/JkG1mqRL 6aNxkIQgTXzxx6Nyv8UIHH+j7EMC05w/t5dCyGCKl5+AwsfTd90NhPYf4cF91NmV 6DmyTq50uhkFncexs6ueLOSBOtot5B5cNPmzMvdQQpCRrUv7SxbAXkjYWa8eKMdB /DDXzxEIsotrJyeitw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:40 2025 by rpki-client