This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json) Hash identifier: CIU3ZcH1b6ztq1sEeOFVPzCTn0nfNNlBOQqeDYiKj7c= Subject key identifier: B6:C1:E6:EA:4B:BF:92:3E:C5:74:04:53:ED:06:AC:04:B5:5A:B0:01 Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19 Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19 Certificate serial: 019B2B1E4DC49C5792F57B0AB189DD0FE6A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft Manifest number: 082E Signing time: Wed 17 Dec 2025 07:02:44 +0000 Manifest this update: Wed 17 Dec 2025 07:02:44 +0000 Manifest next update: Thu 18 Dec 2025 07:02:44 +0000 Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: FR7FuhlAJA7yLBAKb91gwbrGCMBWXXoR+OtHPHjJ3oE=) 2: Fkj26JF70VbKRFMhWrYdU9NtaxE.roa (hash: /6tYIOX0HTJdH0wQZ5VKDfqhCBzYhIWs9k6pWyv6yuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:4d:c4:9c:57:92:f5:7b:0a:b1:89:dd:0f:e6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19 Validity Not Before: Dec 17 07:02:44 2025 GMT Not After : Dec 18 07:02:44 2025 GMT Subject: CN=b6c1e6ea4bbf923ec5740453ed06ac04b55ab001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:c3:f3:f3:80:20:80:b3:39:e6:c4:53:7f: 20:3a:8c:bd:70:9d:b7:a5:5a:b0:5a:4d:88:fe:97: e7:72:75:e9:8c:84:cb:a5:87:2a:91:10:0d:fe:b3: 14:d8:00:d4:05:8b:16:45:46:cb:83:b7:6d:b3:cc: 71:c9:01:b8:af:b1:dc:03:ce:e3:bb:89:27:4a:39: 16:7e:94:36:03:ee:ee:23:8f:5f:a2:5a:e5:70:f1: dd:4a:7c:59:8c:92:ca:2a:b1:4e:34:2a:ed:77:e9: 1e:7c:63:98:22:50:c3:17:e6:3f:5e:eb:1a:c4:5d: 2b:aa:8d:51:e8:d3:d6:59:78:e5:d9:3b:b0:0e:ca: a8:16:70:b7:61:ea:e7:dd:44:78:0b:1c:a4:78:2e: 22:47:ca:07:31:bd:c2:eb:f9:1a:d1:65:26:9d:e2: 3c:a2:b8:cb:93:8a:ea:b3:64:44:bf:72:5b:2b:29: 19:de:48:53:89:dd:28:07:0f:70:65:d4:8c:77:47: 64:2e:67:90:fa:e0:96:2f:78:13:c1:3f:bc:5a:30: 5f:39:f4:84:a2:80:8b:9f:69:89:a4:eb:c2:a2:e0: 10:d3:76:a9:01:fd:7d:ae:16:e6:8e:8d:f3:9c:44: d5:94:eb:d4:3d:98:c4:61:74:c5:e9:33:0d:d9:24: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C1:E6:EA:4B:BF:92:3E:C5:74:04:53:ED:06:AC:04:B5:5A:B0:01 X509v3 Authority Key Identifier: keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:54:7e:f7:3d:1a:24:2d:89:a2:8e:75:64:d6:a3:21:7d:16: ed:5d:8a:22:f4:ec:f9:53:68:66:88:69:a1:52:1f:13:51:b4: 4c:54:33:39:e6:af:73:40:2e:dc:34:f3:a2:ec:fb:25:d1:54: c7:79:15:a2:16:b0:a8:92:de:1a:b8:1e:3e:de:cd:4c:70:9c: 74:df:de:ea:07:e9:c2:39:34:aa:b3:88:83:1e:2c:dd:f1:0b: ae:e2:cf:b0:17:2b:ed:bd:e0:94:33:61:58:bf:35:33:2b:5d: 50:a6:9b:c5:b0:15:cd:a5:f3:d9:09:5d:f5:3f:84:f4:71:30: bc:14:a4:0e:b2:5e:a6:b6:c2:c2:0c:fd:c1:6a:79:10:47:c7: 0c:28:af:dd:af:49:94:b4:d6:3f:56:dd:17:4a:8e:f9:8a:cd: cc:ac:26:d3:2c:b5:c0:d2:c7:17:43:8d:5a:00:a5:47:49:67: ef:d6:6c:21:76:1b:f6:13:e1:b9:7d:38:3f:77:32:66:f8:8f: 81:2e:63:5b:9b:49:97:fb:c1:32:39:ed:b2:27:dc:e2:f9:22: 9b:90:29:33:1e:ff:0f:7a:3a:b1:b8:60:0c:53:29:09:23:61: 2e:34:f1:e7:fb:3e:3b:b8:76:7b:9d:a0:6e:bb:54:8e:00:ec: 07:70:76:bf -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsrHk3EnFeS9XsKsYndD+ahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTY5ZjBhMjllZjhkOGMyMmQ5ZDZlY2RlM2EzMDdkODk0 ZDVjMTkwHhcNMjUxMjE3MDcwMjQ0WhcNMjUxMjE4MDcwMjQ0WjAzMTEwLwYDVQQD EyhiNmMxZTZlYTRiYmY5MjNlYzU3NDA0NTNlZDA2YWMwNGI1NWFiMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUnD8/OAIICzOebEU38gOoy9cJ23 pVqwWk2I/pfncnXpjITLpYcqkRAN/rMU2ADUBYsWRUbLg7dts8xxyQG4r7HcA87j u4knSjkWfpQ2A+7uI49folrlcPHdSnxZjJLKKrFONCrtd+kefGOYIlDDF+Y/Xusa xF0rqo1R6NPWWXjl2TuwDsqoFnC3Yern3UR4CxykeC4iR8oHMb3C6/ka0WUmneI8 orjLk4rqs2REv3JbKykZ3khTid0oBw9wZdSMd0dkLmeQ+uCWL3gTwT+8WjBfOfSE ooCLn2mJpOvCouAQ03apAf19rhbmjo3znETVlOvUPZjEYXTF6TMN2SQvxQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLbB5upLv5I+xXQEU+0GrAS1WrABMB8GA1UdIwQY MBaAFPrmnwop742MItnW7N46MH2JTVwZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11YWZDaW52all3aTJkYnMzam93ZllsTlhCay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDEzNTlmLTM1NGUtNDU2OC04NDBj LWFmNTBhNWJlMjgwZS8xLzEtdWFmQ2ludmpZd2kyZGJzM2pvd2ZZbE5YQmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q0L2QxMzU5Zi0zNTRlLTQ1NjgtODQwYy1hZjUwYTViZTI4 MGUvMS8xLXVhZkNpbnZqWXdpMmRiczNqb3dmWWxOWEJrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlR+ 9z0aJC2Joo51ZNajIX0W7V2KIvTs+VNoZohpoVIfE1G0TFQzOeavc0Au3DTzouz7 JdFUx3kVohawqJLeGrgePt7NTHCcdN/e6gfpwjk0qrOIgx4s3fELruLPsBcr7b3g lDNhWL81MytdUKabxbAVzaXz2Qld9T+E9HEwvBSkDrJeprbCwgz9wWp5EEfHDCiv 3a9JlLTWP1bdF0qO+YrNzKwm0yy1wNLHF0ONWgClR0ln79ZsIXYb9hPhuX04P3cy ZviPgS5jW5tJl/vBMjntsifc4vkim5ApMx7/D3o6sbhgDFMpCSNhLjTx5/s+O7h2 e52gbrtUjgDsB3B2vw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:27:44 2025 by rpki-client