This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft File: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json) Hash identifier: cD36MEMcScL6av/cxrMWcMDANMU1GyoCPKRS0JMCYfs= Subject key identifier: 38:D2:CD:0F:F8:A9:29:20:30:A1:56:7C:55:3D:4C:C8:79:CD:9D:E2 Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Certificate serial: 019B57873B49EEEE0C6D85F9AD77A4AD97A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft Manifest number: 0F35 Signing time: Thu 25 Dec 2025 22:00:38 +0000 Manifest this update: Thu 25 Dec 2025 22:00:38 +0000 Manifest next update: Fri 26 Dec 2025 22:00:38 +0000 Files and hashes: 1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: sFkII4HIl1dwSSgRhe7hi7RTo/CH0wRdkAiI2CCnH6A=) 2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:3b:49:ee:ee:0c:6d:85:f9:ad:77:a4:ad:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Validity Not Before: Dec 25 22:00:38 2025 GMT Not After : Dec 26 22:00:38 2025 GMT Subject: CN=38d2cd0ff8a9292030a1567c553d4cc879cd9de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:ff:72:1d:b0:77:92:b9:ff:23:e1:a5:68: f5:06:c2:f6:f5:2d:dc:5b:38:fe:ce:2f:7b:de:ae: 6f:69:12:48:5e:be:89:43:73:1d:99:86:0e:fa:2c: 4a:b3:a2:40:2e:da:b3:c0:b2:00:c2:34:48:2e:85: 0e:fb:ea:10:86:ad:a2:ee:c8:6c:1f:7b:33:1c:8a: c9:05:23:0c:f1:13:1a:f3:21:94:ce:7d:f5:2e:a8: 9a:a8:79:10:ae:f8:fb:75:57:b7:bf:fb:12:17:3b: d1:37:e3:03:a8:9f:7f:ff:9e:88:33:4a:b1:1f:db: f0:81:aa:fe:70:75:88:3c:ff:a7:0c:b3:64:4f:17: 17:95:c4:aa:10:f1:b7:bf:76:67:78:79:45:b2:49: 49:1f:09:e3:6b:36:fc:eb:86:ca:36:f6:67:63:91: 1e:02:ed:71:5f:4e:5b:bf:25:32:b3:60:cf:b4:a2: 46:c1:e5:21:11:09:2a:f7:f1:0d:a0:b7:29:f1:23: 54:5a:8f:4b:ea:e2:01:ee:d8:7e:0f:18:db:77:76: 2a:c7:e1:f0:86:95:de:bf:fa:c6:f6:94:a4:ab:36: 55:98:84:a7:7a:68:fa:19:11:c6:9c:af:4b:3c:e3: 4a:58:a6:71:1c:11:95:52:77:9d:84:70:c4:7a:07: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D2:CD:0F:F8:A9:29:20:30:A1:56:7C:55:3D:4C:C8:79:CD:9D:E2 X509v3 Authority Key Identifier: keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b0:01:d6:36:3c:a9:0e:a9:c1:e1:e5:49:ca:df:06:3f:e1: 7d:33:5c:2b:28:c1:31:b3:01:4d:5e:f2:7d:29:57:f7:fc:9f: a9:5b:01:c7:30:cc:04:e2:14:8f:06:f8:ee:cb:8e:19:89:8c: 50:62:56:65:64:09:2e:0b:5a:85:04:24:ad:f9:7a:8d:30:b9: 1d:d2:4b:43:7e:d1:b7:fa:d7:74:18:c6:1a:44:f1:98:52:33: c2:18:d1:df:a3:08:08:78:70:32:d2:09:b1:19:1e:46:4b:c5: e0:7b:ec:ed:7e:4d:9a:ec:af:23:03:8a:6b:a1:1c:1a:82:fe: 82:c0:80:c4:fa:11:6f:7e:39:d3:0c:08:6a:6c:2a:b3:d1:8e: 42:b2:67:82:f8:18:33:0a:78:38:7c:d7:c7:7d:da:20:c5:30: 5c:31:8c:db:8f:1d:e4:02:da:92:da:8a:1c:03:06:79:5a:50: 59:82:4b:f5:90:92:19:07:45:6b:d1:89:1f:5b:9d:41:b3:33: b2:6c:ff:3b:69:3e:13:d1:23:bc:fc:96:1c:cc:45:a6:e5:17: 8b:63:ee:c1:7e:8d:a6:09:90:46:d2:cd:44:50:a5:fb:2d:5e: fd:85:94:2c:07:f9:60:7a:2f:fa:aa:3f:52:d8:95:5d:a3:3c: 6d:5e:51:44 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtXhztJ7u4MbYX5rXekrZekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTAxNDY0YTY5NWIwZjZmNTJmNTExYmNjMTI0MGZhMjg0 ZDNkY2YwHhcNMjUxMjI1MjIwMDM4WhcNMjUxMjI2MjIwMDM4WjAzMTEwLwYDVQQD EygzOGQyY2QwZmY4YTkyOTIwMzBhMTU2N2M1NTNkNGNjODc5Y2Q5ZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAL/ch2wd5K5/yPhpWj1BsL29S3c Wzj+zi973q5vaRJIXr6JQ3MdmYYO+ixKs6JALtqzwLIAwjRILoUO++oQhq2i7shs H3szHIrJBSMM8RMa8yGUzn31LqiaqHkQrvj7dVe3v/sSFzvRN+MDqJ9//56IM0qx H9vwgar+cHWIPP+nDLNkTxcXlcSqEPG3v3ZneHlFsklJHwnjazb864bKNvZnY5Ee Au1xX05bvyUys2DPtKJGweUhEQkq9/ENoLcp8SNUWo9L6uIB7th+Dxjbd3Yqx+Hw hpXev/rG9pSkqzZVmISnemj6GRHGnK9LPONKWKZxHBGVUnedhHDEegfa2wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDjSzQ/4qSkgMKFWfFU9TMh5zZ3iMB8GA1UdIwQY MBaAFPrgFGSmlbD29S9RG8wSQPooTT3PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11QVVaS2FWc1BiMUwxRWJ6QkpBLWloTlBjOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkw LTMyMzUyZjk2YTYyMS8xLzEtdUFVWkthVnNQYjFMMUViekJKQS1paE5QYzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzFjNjcwNC01MTBhLTQ4MDAtYTg5MC0zMjM1MmY5NmE2 MjEvMS8xLXVBVVpLYVZzUGIxTDFFYnpCSkEtaWhOUGM4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrAB 1jY8qQ6pweHlScrfBj/hfTNcKyjBMbMBTV7yfSlX9/yfqVsBxzDMBOIUjwb47suO GYmMUGJWZWQJLgtahQQkrfl6jTC5HdJLQ37Rt/rXdBjGGkTxmFIzwhjR36MICHhw MtIJsRkeRkvF4Hvs7X5NmuyvIwOKa6EcGoL+gsCAxPoRb3450wwIamwqs9GOQrJn gvgYMwp4OHzXx33aIMUwXDGM248d5ALaktqKHAMGeVpQWYJL9ZCSGQdFa9GJH1ud QbMzsmz/O2k+E9EjvPyWHMxFpuUXi2PuwX6NpgmQRtLNRFCl+y1e/YWULAf5YHov +qo/UtiVXaM8bV5RRA== -----END CERTIFICATE-----Generated at Fri Dec 26 07:53:16 2025 by rpki-client