This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json) Hash identifier: MjUCWRynnt1njin53hqE6KfQOXHHlOBQgy31d3igtQQ= Subject key identifier: 18:59:47:F6:A8:5A:3F:91:38:7E:75:6C:04:D7:EB:61:A4:CA:93:42 Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd Certificate serial: 019B1A29335159473EB45805F93A1CA29B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft Manifest number: 1773 Signing time: Sun 14 Dec 2025 00:01:06 +0000 Manifest this update: Sun 14 Dec 2025 00:01:06 +0000 Manifest next update: Mon 15 Dec 2025 00:01:06 +0000 Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: CYMzW1OhVOuDfy0kAQK2QLbn3jVLzpmMFdedMIi8x4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:33:51:59:47:3e:b4:58:05:f9:3a:1c:a2:9b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd Validity Not Before: Dec 14 00:01:06 2025 GMT Not After : Dec 15 00:01:06 2025 GMT Subject: CN=185947f6a85a3f91387e756c04d7eb61a4ca9342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f1:8f:51:c3:82:a4:35:38:75:06:b0:e7:7e: 8e:6f:75:02:1a:9d:33:b0:8c:84:4e:0c:b1:12:d1: 49:9e:21:65:0f:73:13:44:a8:2c:52:94:14:c3:aa: 00:81:17:ac:4a:bc:49:6c:5d:1b:5b:ea:bf:82:d1: 87:ae:34:3a:25:23:84:c0:da:ae:17:e7:55:6a:1e: 95:0d:32:8b:60:3b:04:e1:ee:46:d8:99:57:3c:9e: b3:4e:85:37:94:15:42:10:95:db:fc:15:c9:84:0e: f4:b3:0f:fe:14:5b:ad:c7:3a:34:25:2d:ba:d0:ff: da:b5:46:87:a9:af:77:6d:ba:f5:3c:ac:29:43:b8: e8:b0:27:ed:bd:16:8b:c3:e5:bf:1b:02:7b:93:1f: 85:7e:56:b5:3d:05:16:db:f0:8a:63:b2:4d:25:b2: 48:2d:aa:4d:39:71:e7:37:24:07:5b:93:8c:37:ea: 9b:5e:cd:67:db:64:de:3f:43:4b:79:72:51:9d:5a: 95:a0:49:c4:92:c5:9c:3d:aa:0c:e1:71:c7:ae:27: ac:14:25:9e:d5:23:4f:b3:79:b5:ee:db:6c:c1:47: 81:19:c4:17:09:b4:da:52:8a:fc:40:9b:7c:25:22: 33:0d:35:cd:d6:6a:0c:37:ac:ed:52:69:6c:38:32: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:47:F6:A8:5A:3F:91:38:7E:75:6C:04:D7:EB:61:A4:CA:93:42 X509v3 Authority Key Identifier: keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b8:83:6f:a3:ad:a5:81:98:9c:00:9a:33:cd:26:f6:34:f6: dd:c1:01:33:1c:59:a6:b8:7a:75:93:dc:a9:a7:f3:39:c8:8b: b4:f6:79:a7:0a:ae:86:bc:c1:98:b7:20:7c:4c:37:68:64:97: 54:f4:c4:53:81:2c:aa:8d:4a:2e:43:ec:0c:7d:fc:de:a1:1d: bd:17:67:1c:ed:f8:9d:70:77:85:22:4a:7c:43:5a:24:59:3f: 1a:0e:55:82:f2:a1:18:f2:3a:4e:8c:53:87:08:fa:94:50:5c: 6d:d8:a2:59:1a:4b:16:88:d7:e7:3c:f1:48:1a:14:38:2d:27: 6c:8a:3f:2d:29:37:05:36:ef:8a:5c:13:1a:df:39:9f:52:a6: 56:79:d4:d4:2a:1b:f5:1d:9b:7d:29:5e:ae:20:80:dc:fc:06: 96:ce:5b:69:5a:34:af:77:dd:fb:31:e3:c8:f8:77:d0:e5:ef: e6:7d:07:00:62:52:3f:79:c3:2a:3f:fe:af:73:0b:de:80:3c: c3:a7:c8:d0:37:e1:c2:f3:2a:c8:8d:93:06:b9:c3:47:44:e6: 5c:d1:04:89:38:63:2a:f8:09:93:8e:91:5e:48:18:12:4e:3a: 6b:06:35:a7:f6:aa:58:04:1e:f5:2b:20:0a:24:17:3e:e1:2f: d8:2b:a1:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKTNRWUc+tFgF+TocoptZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NGI4MmQ3MTkxNDQwMDIwNTFkYTBmODhjNzY4ZGU0NDBh YzIwYmQwHhcNMjUxMjE0MDAwMTA2WhcNMjUxMjE1MDAwMTA2WjAzMTEwLwYDVQQD EygxODU5NDdmNmE4NWEzZjkxMzg3ZTc1NmMwNGQ3ZWI2MWE0Y2E5MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/GPUcOCpDU4dQaw536Ob3UCGp0z sIyETgyxEtFJniFlD3MTRKgsUpQUw6oAgResSrxJbF0bW+q/gtGHrjQ6JSOEwNqu F+dVah6VDTKLYDsE4e5G2JlXPJ6zToU3lBVCEJXb/BXJhA70sw/+FFutxzo0JS26 0P/atUaHqa93bbr1PKwpQ7josCftvRaLw+W/GwJ7kx+Ffla1PQUW2/CKY7JNJbJI LapNOXHnNyQHW5OMN+qbXs1n22TeP0NLeXJRnVqVoEnEksWcPaoM4XHHriesFCWe 1SNPs3m17ttswUeBGcQXCbTaUor8QJt8JSIzDTXN1moMN6ztUmlsODJQQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhZR/aoWj+ROH51bATX62GkypNCMB8GA1UdIwQY MBaAFNVLgtcZFEACBR2g+Ix2jeRArCC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yN2NjMTktNzg4Ny00MmZhLWE2MmMt NmU1ZjlkMzk4Mjc5LzEvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8yN2NjMTktNzg4Ny00MmZhLWE2MmMtNmU1ZjlkMzk4Mjc5 LzEvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEriDb6Ot pYGYnACaM80m9jT23cEBMxxZprh6dZPcqafzOciLtPZ5pwquhrzBmLcgfEw3aGSX VPTEU4Esqo1KLkPsDH383qEdvRdnHO34nXB3hSJKfENaJFk/Gg5VgvKhGPI6ToxT hwj6lFBcbdiiWRpLFojX5zzxSBoUOC0nbIo/LSk3BTbvilwTGt85n1KmVnnU1Cob 9R2bfSleriCA3PwGls5baVo0r3fd+zHjyPh30OXv5n0HAGJSP3nDKj/+r3ML3oA8 w6fI0DfhwvMqyI2TBrnDR0TmXNEEiThjKvgJk46RXkgYEk46awY1p/aqWAQe9Ssg CiQXPuEv2CuhGw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:38:24 2025 by rpki-client