This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json) Hash identifier: Rr8wXA0ehJDkP1XY186NnemzVrFJ5QHrw9TNCAGFHSw= Subject key identifier: 89:71:B4:61:A1:F2:5A:A7:11:81:F9:16:05:F8:04:8D:84:F6:CA:0C Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b Certificate serial: 019B4CCCE06752EC88C3F3AE92E2863BB524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft Manifest number: 04A5 Signing time: Tue 23 Dec 2025 20:00:53 +0000 Manifest this update: Tue 23 Dec 2025 20:00:53 +0000 Manifest next update: Wed 24 Dec 2025 20:00:53 +0000 Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: wpL+jKTDNgdOhu56MWvekfUU3cbYU4LEdnl+i9Fy9b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:e0:67:52:ec:88:c3:f3:ae:92:e2:86:3b:b5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b Validity Not Before: Dec 23 20:00:53 2025 GMT Not After : Dec 24 20:00:53 2025 GMT Subject: CN=8971b461a1f25aa71181f91605f8048d84f6ca0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:46:33:be:bb:75:4f:c3:1e:c2:9b:7f:7c: d6:31:6e:0a:a1:27:e1:4a:3f:e9:2d:c8:fa:5d:5d: 46:e9:35:f5:4f:65:3e:00:61:9b:b9:a4:78:68:58: 4b:35:3c:00:0d:03:c5:b8:e0:9f:dc:4c:b2:24:79: 64:0d:2d:93:d3:d9:2e:a7:8a:3a:0b:e3:19:0e:9d: 7a:5e:f1:3b:d1:a5:58:b5:82:30:ea:57:94:e7:29: d9:09:06:ff:7f:28:e5:6c:52:d8:8f:99:59:cd:00: 82:ba:6b:c6:92:73:34:0d:bf:c9:f1:94:83:7c:d6: bb:c0:8b:b2:cb:38:c8:40:52:7d:b2:43:bf:7c:fd: c2:76:81:44:28:eb:59:02:74:40:58:03:39:a4:6b: 92:8c:31:95:b0:57:03:df:72:99:03:05:29:e4:16: 24:ca:27:0e:4f:f0:9f:6b:ae:e1:64:99:e4:2f:26: 71:41:09:ec:7e:5e:00:e3:02:a1:df:8b:ca:e8:3a: 9f:7f:42:38:92:6c:e3:21:b7:a0:41:d2:99:3d:9f: d4:d1:89:7e:d5:d1:80:22:46:fc:80:06:64:b3:98: 37:36:5a:15:ad:6e:d1:e0:ff:7e:64:d6:12:54:7c: 50:05:ea:52:c0:45:65:f5:20:2f:17:2c:56:33:98: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:71:B4:61:A1:F2:5A:A7:11:81:F9:16:05:F8:04:8D:84:F6:CA:0C X509v3 Authority Key Identifier: keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1a:1c:f3:2d:36:2e:bd:af:f1:58:c8:b4:f0:76:f3:6c:11: 49:01:ae:6e:fb:b1:14:7b:9f:e7:da:99:73:a4:4a:ab:74:4f: ca:e7:bd:3b:17:5b:ef:04:81:b3:ee:15:4a:20:6b:14:2f:6a: 6f:f4:01:c3:48:56:e5:22:4e:64:69:29:d6:3e:73:01:fa:02: 5a:5b:e9:8e:4d:75:d8:05:78:8f:39:49:ed:8f:19:9e:f0:29: f9:6c:57:cf:8f:60:f0:3e:96:b7:c6:63:38:d5:76:92:fa:ce: 27:21:68:48:dc:6f:c7:e6:6b:d0:10:d1:10:52:3d:13:7d:60: 1f:f0:63:5c:53:76:28:dd:03:57:09:06:a8:51:d7:79:ac:30: 9e:7c:8d:30:3a:ed:3e:a7:18:03:9a:a6:ec:b3:07:d6:58:3d: 74:7f:8b:e5:81:03:ac:93:4d:2f:96:16:b1:ee:f6:b3:ed:f5: fc:03:25:10:7d:18:02:5f:89:95:4e:94:ff:26:59:48:10:a6: f5:48:d2:d4:45:fd:e5:b8:5a:f8:0c:e3:e8:8c:4a:7f:dc:c1: 01:e7:92:6c:b4:c5:65:19:1e:46:02:51:38:26:39:96:ec:59: e9:20:e8:85:36:bf:86:f9:03:b1:b5:9d:89:87:4e:99:ac:d2: 73:eb:58:b4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtMzOBnUuyIw/OukuKGO7UkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTExNWMzMDJiZTBiNGI4YmNjYTBiMzJhODI5M2EwNWM2 OWQ3MGIwHhcNMjUxMjIzMjAwMDUzWhcNMjUxMjI0MjAwMDUzWjAzMTEwLwYDVQQD Eyg4OTcxYjQ2MWExZjI1YWE3MTE4MWY5MTYwNWY4MDQ4ZDg0ZjZjYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrFGM767dU/DHsKbf3zWMW4KoSfh Sj/pLcj6XV1G6TX1T2U+AGGbuaR4aFhLNTwADQPFuOCf3EyyJHlkDS2T09kup4o6 C+MZDp16XvE70aVYtYIw6leU5ynZCQb/fyjlbFLYj5lZzQCCumvGknM0Db/J8ZSD fNa7wIuyyzjIQFJ9skO/fP3CdoFEKOtZAnRAWAM5pGuSjDGVsFcD33KZAwUp5BYk yicOT/Cfa67hZJnkLyZxQQnsfl4A4wKh34vK6Dqff0I4kmzjIbegQdKZPZ/U0Yl+ 1dGAIkb8gAZks5g3NloVrW7R4P9+ZNYSVHxQBepSwEVl9SAvFyxWM5gT9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIlxtGGh8lqnEYH5FgX4BI2E9soMMB8GA1UdIwQY MBaAFPrhFcMCvgtLi8ygsyqCk6BcadcLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11RVZ3d0stQzB1THpLQ3pLb0tUb0Z4cDF3cy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZGRlYjc5LTZhYjgtNDdlMS1hNWZl LWQwZjcwNGUwMzA5Zi8xLzEtdUVWd3dLLUMwdUx6S0N6S29LVG9GeHAxd3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2RkZWI3OS02YWI4LTQ3ZTEtYTVmZS1kMGY3MDRlMDMw OWYvMS8xLXVFVnd3Sy1DMHVMektDektvS1RvRnhwMXdzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxoc 8y02Lr2v8VjItPB282wRSQGubvuxFHuf59qZc6RKq3RPyue9Oxdb7wSBs+4VSiBr FC9qb/QBw0hW5SJOZGkp1j5zAfoCWlvpjk112AV4jzlJ7Y8ZnvAp+WxXz49g8D6W t8ZjONV2kvrOJyFoSNxvx+Zr0BDREFI9E31gH/BjXFN2KN0DVwkGqFHXeawwnnyN MDrtPqcYA5qm7LMH1lg9dH+L5YEDrJNNL5YWse72s+31/AMlEH0YAl+JlU6U/yZZ SBCm9UjS1EX95bha+Azj6IxKf9zBAeeSbLTFZRkeRgJROCY5luxZ6SDohTa/hvkD sbWdiYdOmazSc+tYtA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:43 2025 by rpki-client