This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json) Hash identifier: Vyqe/cTS1GmolVbP9enudan100HyrPWqh2V8MWrvYms= Subject key identifier: 4D:60:E2:52:4A:42:65:51:84:5E:EE:C1:C4:28:14:96:81:2F:F7:1F Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17 Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17 Certificate serial: 019B3BD9B8B0B49821B3076B7D8B2F20E825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 13:01:22 +0000 Manifest this update: Sat 20 Dec 2025 13:01:22 +0000 Manifest next update: Sun 21 Dec 2025 13:01:22 +0000 Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: rLutHrlxKMffBoMomBfFnv277TrzGMyX8Wm/Wb+NwdM=) 2: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (hash: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=) 3: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (hash: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=) 4: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (hash: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=) 5: z1ERBgPc796EUpstpTm_KKosGxs.roa (hash: 1uUH+Aes6TW/J4OIjEYgjpDXA6d37PjKx+xzTglktTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:b8:b0:b4:98:21:b3:07:6b:7d:8b:2f:20:e8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17 Validity Not Before: Dec 20 13:01:22 2025 GMT Not After : Dec 21 13:01:22 2025 GMT Subject: CN=4d60e2524a426551845eeec1c4281496812ff71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:7d:b1:db:c6:0e:50:b0:7b:24:ba:8b:54: 9d:6b:f1:8e:0f:d2:b3:e5:1a:47:0a:de:9e:fe:e0: 2f:00:0b:56:f6:4d:5e:9b:be:a1:99:3d:bf:26:56: 5e:67:d3:79:dd:61:44:f3:9f:08:a6:24:72:30:3b: 4b:cc:f2:6b:6c:51:7c:21:f7:b8:a5:8f:a2:50:71: a1:d3:d4:3a:1a:9b:4b:19:00:0f:39:b9:d1:56:35: b9:94:44:0d:c8:b9:96:db:4f:65:3f:48:5b:33:01: 35:32:f4:61:3a:e6:3e:95:c7:a7:d8:65:35:5c:1b: 84:ca:a0:e9:66:3b:e4:6d:cf:67:ec:96:d8:15:b2: 09:25:bd:56:9b:4f:de:d8:b3:67:05:a9:ce:35:2c: fb:28:99:45:be:03:67:31:75:81:47:25:c4:a1:ff: b9:fc:89:e5:61:b4:18:95:bd:ac:55:67:7f:30:0c: 09:c5:e3:6f:60:19:64:1d:2c:f2:86:4b:5e:57:b2: 0f:ed:f4:fb:21:6d:2e:64:5b:d1:4b:3c:87:b2:0d: 78:56:55:0c:9d:b1:bb:02:f7:fb:29:4d:8a:52:d7: 1f:4b:b5:d6:55:b7:80:90:32:e1:28:83:90:53:78: 5b:d5:e1:50:22:2b:ad:4c:76:45:2a:c8:ea:cc:fa: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:60:E2:52:4A:42:65:51:84:5E:EE:C1:C4:28:14:96:81:2F:F7:1F X509v3 Authority Key Identifier: keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b8:97:eb:85:b6:87:b1:75:6f:05:d1:f3:cf:29:2c:09:dc: 5c:9d:9d:90:1c:50:19:f4:18:c7:e2:36:b7:8e:20:13:5c:b5: 31:67:cb:1c:15:26:84:ed:f5:07:8c:18:4e:bb:8b:73:a9:89: 03:01:63:4e:95:f6:03:85:0b:20:44:74:3a:10:bb:db:7f:d1: c9:4d:9a:f4:70:a5:38:fb:3d:18:28:fc:6d:5e:5e:38:f7:31: 04:07:ca:ad:d7:b9:8d:04:01:34:ed:f2:60:8b:f8:8e:ea:55: e7:2d:56:91:4d:8a:fa:7e:cd:04:2e:ad:f6:11:2e:18:58:65: c4:85:69:5d:67:d6:8f:ef:e2:6f:ce:3a:bc:d8:90:eb:b2:87: 39:01:f4:c5:46:cb:a7:b2:08:0d:71:0f:ae:f2:de:c2:07:e6: 55:13:15:2e:38:05:13:0d:2f:23:b0:2d:cb:cc:f3:de:8a:2b: 66:c7:4b:88:8d:90:bd:f5:d3:bc:f5:fe:67:85:4d:ed:3b:17: b9:a6:9b:ad:fd:67:c6:af:13:59:2e:47:01:ab:2f:55:50:b5: 9e:77:51:fa:9a:40:93:95:2d:91:4f:78:0a:03:f8:ea:00:74: a6:93:9d:71:69:a1:e7:12:bd:2a:0b:52:00:a6:ae:00:16:0a: a8:fa:a5:46 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs72biwtJghswdrfYsvIOglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy Y2RlMTcwHhcNMjUxMjIwMTMwMTIyWhcNMjUxMjIxMTMwMTIyWjAzMTEwLwYDVQQD Eyg0ZDYwZTI1MjRhNDI2NTUxODQ1ZWVlYzFjNDI4MTQ5NjgxMmZmNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPF9sdvGDlCweyS6i1Sda/GOD9Kz 5RpHCt6e/uAvAAtW9k1em76hmT2/JlZeZ9N53WFE858IpiRyMDtLzPJrbFF8Ife4 pY+iUHGh09Q6GptLGQAPObnRVjW5lEQNyLmW209lP0hbMwE1MvRhOuY+lcen2GU1 XBuEyqDpZjvkbc9n7JbYFbIJJb1Wm0/e2LNnBanONSz7KJlFvgNnMXWBRyXEof+5 /InlYbQYlb2sVWd/MAwJxeNvYBlkHSzyhkteV7IP7fT7IW0uZFvRSzyHsg14VlUM nbG7Avf7KU2KUtcfS7XWVbeAkDLhKIOQU3hb1eFQIiutTHZFKsjqzPoK8wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE1g4lJKQmVRhF7uwcQoFJaBL/cfMB8GA1UdIwQY MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz LTRhZmQ4MjU0YWU0My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UzLzI5M2QzNi05ZGEyLTQ0MDUtOGRlMy00YWZkODI1NGFl NDMvMS8xLXVGclNUMHFFb2w4cjBkWHV4aWdMdXdzM2hjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlriX 64W2h7F1bwXR888pLAncXJ2dkBxQGfQYx+I2t44gE1y1MWfLHBUmhO31B4wYTruL c6mJAwFjTpX2A4ULIER0OhC723/RyU2a9HClOPs9GCj8bV5eOPcxBAfKrde5jQQB NO3yYIv4jupV5y1WkU2K+n7NBC6t9hEuGFhlxIVpXWfWj+/ib846vNiQ67KHOQH0 xUbLp7IIDXEPrvLewgfmVRMVLjgFEw0vI7Aty8zz3oorZsdLiI2QvfXTvPX+Z4VN 7TsXuaabrf1nxq8TWS5HAasvVVC1nndR+ppAk5UtkU94CgP46gB0ppOdcWmh5xK9 KgtSAKauABYKqPqlRg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:56:39 2025 by rpki-client