This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft File: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json) Hash identifier: GhHQKnF3tNppRVbzbnm2+u+WaZSGqfJULBMH2+r4yeU= Subject key identifier: 02:03:F8:E9:60:CE:38:03:0D:42:39:89:47:B0:B5:7C:8F:AA:D1:A8 Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Certificate serial: 019B443763F605A2888FCC42936FB4039FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft Manifest number: 0F2B Signing time: Mon 22 Dec 2025 04:00:39 +0000 Manifest this update: Mon 22 Dec 2025 04:00:39 +0000 Manifest next update: Tue 23 Dec 2025 04:00:39 +0000 Files and hashes: 1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: 5dJjFqYX72r7wmxbiuJ0O8nIbMax3XxDbWzxN4fKnZA=) 2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:63:f6:05:a2:88:8f:cc:42:93:6f:b4:03:9f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Validity Not Before: Dec 22 04:00:39 2025 GMT Not After : Dec 23 04:00:39 2025 GMT Subject: CN=0203f8e960ce38030d42398947b0b57c8faad1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:be:fe:7e:48:ab:52:b5:b9:79:df:4d:66:e6: 6c:71:8a:ca:f7:e8:a9:5c:d8:05:a5:a0:14:a8:c5: a3:53:19:15:5f:10:21:c6:fa:27:fd:8c:ea:82:45: c9:bf:56:13:b7:96:05:77:a1:2d:bd:7c:ae:37:43: c7:f3:16:c8:a1:83:5e:b5:a4:75:0a:b5:a7:bb:69: 00:ca:bb:31:42:7d:a4:9b:6d:73:73:fd:34:c3:38: 6e:8b:3d:1c:a1:65:63:ef:6a:9b:c7:9d:84:29:d3: 77:9a:7a:aa:b8:79:73:6a:ec:ea:b3:5c:65:4d:c5: 6c:87:e7:d7:91:4d:f4:a5:fb:5e:53:0b:b9:c5:f2: 56:04:47:31:9a:b1:5d:93:ac:82:9c:c3:74:53:cd: b8:80:97:8d:03:87:09:1f:4a:09:16:aa:f0:c3:91: 82:5e:d4:4e:25:34:0c:93:dd:58:a7:cf:ec:43:df: 79:b3:e6:0e:59:1c:14:dd:6a:3b:78:04:db:f7:88: 93:5f:bd:e3:ba:b3:a5:d1:9f:5c:49:26:0f:dc:47: d1:df:d1:9f:53:2d:a0:6e:b3:04:fd:bd:13:a4:a7: a1:5b:80:37:d0:fe:8d:db:67:b8:10:f4:94:88:bb: 3d:00:8f:73:e5:6f:c4:14:e3:de:d5:14:ba:e0:67: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:F8:E9:60:CE:38:03:0D:42:39:89:47:B0:B5:7C:8F:AA:D1:A8 X509v3 Authority Key Identifier: keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7e:18:ca:19:1e:0c:26:d2:bd:da:71:55:0e:d1:87:34:4a: 95:0f:a4:89:a7:64:1e:50:07:6f:63:46:2e:b5:a0:bd:2d:71: 18:6e:05:e9:fd:b1:68:68:02:3d:d5:e7:bb:1c:5b:5a:62:eb: d9:c7:79:30:ab:ee:02:84:80:bc:9b:f0:11:d3:84:43:09:96: 99:e8:68:e4:a6:3d:a4:f4:e9:92:83:69:f1:d5:01:b3:58:6d: 05:c1:06:90:91:e6:b3:35:dd:60:a0:ae:f6:05:e9:94:09:d4: 46:d2:1d:fd:1a:f5:17:48:f3:a2:a0:27:b8:19:26:50:3c:a5: 3d:d7:de:39:f4:19:28:71:a3:bc:71:0d:20:ed:24:0c:55:09: 44:65:6e:e3:c5:3e:15:a4:36:79:f1:0b:97:87:3a:31:a5:08: 95:ad:f4:31:8c:5e:2f:ee:b2:bc:2d:18:ea:97:2a:ac:03:fd: 31:0e:af:54:ed:00:bc:d4:8f:82:d7:28:ae:f8:56:b6:d3:8b: ac:10:47:6a:cf:88:96:e5:fb:b1:fd:cb:c5:e8:e4:fe:0c:6e: 65:ac:6f:d5:2d:0a:2e:ac:28:7c:db:58:4b:2f:f6:03:2e:ca: e5:b4:3f:e2:59:4c:bb:98:4d:e1:06:e2:95:e5:73:9f:17:d6: b3:82:9b:b5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtEN2P2BaKIj8xCk2+0A5+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTAxNDY0YTY5NWIwZjZmNTJmNTExYmNjMTI0MGZhMjg0 ZDNkY2YwHhcNMjUxMjIyMDQwMDM5WhcNMjUxMjIzMDQwMDM5WjAzMTEwLwYDVQQD EygwMjAzZjhlOTYwY2UzODAzMGQ0MjM5ODk0N2IwYjU3YzhmYWFkMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+77+fkirUrW5ed9NZuZscYrK9+ip XNgFpaAUqMWjUxkVXxAhxvon/YzqgkXJv1YTt5YFd6EtvXyuN0PH8xbIoYNetaR1 CrWnu2kAyrsxQn2km21zc/00wzhuiz0coWVj72qbx52EKdN3mnqquHlzauzqs1xl TcVsh+fXkU30pfteUwu5xfJWBEcxmrFdk6yCnMN0U824gJeNA4cJH0oJFqrww5GC XtROJTQMk91Yp8/sQ995s+YOWRwU3Wo7eATb94iTX73jurOl0Z9cSSYP3EfR39Gf Uy2gbrME/b0TpKehW4A30P6N22e4EPSUiLs9AI9z5W/EFOPe1RS64GcVOwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAID+OlgzjgDDUI5iUewtXyPqtGoMB8GA1UdIwQY MBaAFPrgFGSmlbD29S9RG8wSQPooTT3PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11QVVaS2FWc1BiMUwxRWJ6QkpBLWloTlBjOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkw LTMyMzUyZjk2YTYyMS8xLzEtdUFVWkthVnNQYjFMMUViekJKQS1paE5QYzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzFjNjcwNC01MTBhLTQ4MDAtYTg5MC0zMjM1MmY5NmE2 MjEvMS8xLXVBVVpLYVZzUGIxTDFFYnpCSkEtaWhOUGM4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn4Y yhkeDCbSvdpxVQ7RhzRKlQ+kiadkHlAHb2NGLrWgvS1xGG4F6f2xaGgCPdXnuxxb WmLr2cd5MKvuAoSAvJvwEdOEQwmWmeho5KY9pPTpkoNp8dUBs1htBcEGkJHmszXd YKCu9gXplAnURtId/Rr1F0jzoqAnuBkmUDylPdfeOfQZKHGjvHENIO0kDFUJRGVu 48U+FaQ2efELl4c6MaUIla30MYxeL+6yvC0Y6pcqrAP9MQ6vVO0AvNSPgtcorvhW ttOLrBBHas+IluX7sf3Lxejk/gxuZaxv1S0KLqwofNtYSy/2Ay7K5bQ/4llMu5hN 4QbileVznxfWs4KbtQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:05:13 2025 by rpki-client