This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json) Hash identifier: Xl9hycgETcCPBudYEuez8bvbOH7kKHD6DB20ylaKtpM= Subject key identifier: 09:22:26:9B:A5:CA:88:E5:40:89:69:99:6A:CB:6F:86:38:C4:1C:61 Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b Certificate serial: 019AF208F28C9E6C98B05F810854B6FC533D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft Manifest number: 0476 Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: uPxphFYt4eox85h5WKN6rISFH31JGlnTDvy9kOJDIvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f2:8c:9e:6c:98:b0:5f:81:08:54:b6:fc:53:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=0922269ba5ca88e5408969996acb6f8638c41c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:a5:94:2c:66:bb:90:1b:04:e0:48:e7:7b: 97:c8:df:38:5d:04:aa:8f:cc:58:5b:c8:9a:4b:a3: e8:4e:bc:13:0d:eb:94:ec:a8:46:50:cb:3f:1f:b3: 08:98:a9:e9:fa:17:5e:a7:6d:22:3f:61:69:3a:c4: 83:80:9b:b0:90:3d:af:47:5c:c4:58:75:55:2f:33: a9:1c:36:ec:95:45:8c:37:11:e5:7f:2e:b7:58:cd: 4c:16:24:81:be:7c:f3:c4:d8:46:39:9c:cb:4b:20: c8:e0:0b:10:27:ba:b7:92:22:d7:cb:c6:49:79:9f: a4:39:03:fb:c0:46:ad:eb:f5:99:75:07:49:c7:51: 0f:f6:42:55:5d:40:2c:15:d7:fa:4a:fb:2e:22:0f: c1:40:ba:66:c6:7d:e6:34:6b:37:1a:81:64:06:33: 01:7e:c4:91:86:41:4e:cc:0b:da:66:6e:f8:65:3b: 34:6f:56:49:13:19:e3:33:b0:4c:37:59:68:05:13: 26:83:21:7f:25:99:36:96:5e:cb:f0:78:9c:18:34: 5b:45:57:31:83:c7:98:39:cc:9c:f2:5b:2c:8b:7e: 1d:b2:73:25:50:73:aa:17:02:26:fc:46:3d:99:5e: 28:99:12:09:ae:cc:bd:dc:ab:7f:21:9c:aa:84:31: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:22:26:9B:A5:CA:88:E5:40:89:69:99:6A:CB:6F:86:38:C4:1C:61 X509v3 Authority Key Identifier: keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d7:13:13:d3:0f:a2:44:8e:52:f8:56:f5:38:7c:1b:6f:3a: c7:af:45:80:9f:58:9d:f5:8f:03:21:48:4a:9e:97:4c:5e:d9: 4f:be:41:0b:21:e8:68:c6:9b:c5:48:3f:40:48:3b:18:2d:83: 27:0d:52:21:01:31:fc:82:d4:dc:b7:ac:59:9a:01:03:3d:ac: 6f:40:72:e9:7f:aa:08:1a:02:ac:7b:88:39:c3:9d:f8:2c:bd: b9:99:61:0e:32:a4:40:84:3f:5b:6e:fd:ac:35:2f:3b:6f:d8: 24:6c:58:1b:89:4b:a1:a2:0d:24:e5:e3:f3:da:fc:48:e9:3d: c2:d9:61:3a:b5:77:8b:05:ce:58:a3:12:1f:62:fa:0f:46:0c: aa:52:ec:01:6e:6c:9c:89:b4:5f:21:43:51:ee:54:24:61:81: 4a:1c:6b:c4:8b:42:3f:1f:ef:85:ae:45:d2:dc:2f:9e:17:db: f0:e8:05:2e:57:db:02:b0:8c:6f:41:6a:70:24:82:06:6f:c4: 93:b4:86:db:bd:4b:7e:66:1e:e1:59:54:1d:9d:6b:ce:3f:46: 13:98:8a:b6:b1:ca:d4:4b:40:de:cb:4b:11:b8:31:25:33:e5: f0:a4:4f:88:c2:ae:fb:32:b1:a5:2b:86:30:ee:7d:ff:4d:11: 3a:72:43:06 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCPKMnmyYsF+BCFS2/FM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTExNWMzMDJiZTBiNGI4YmNjYTBiMzJhODI5M2EwNWM2 OWQ3MGIwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD EygwOTIyMjY5YmE1Y2E4OGU1NDA4OTY5OTk2YWNiNmY4NjM4YzQxYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocqllCxmu5AbBOBI53uXyN84XQSq j8xYW8iaS6PoTrwTDeuU7KhGUMs/H7MImKnp+hdep20iP2FpOsSDgJuwkD2vR1zE WHVVLzOpHDbslUWMNxHlfy63WM1MFiSBvnzzxNhGOZzLSyDI4AsQJ7q3kiLXy8ZJ eZ+kOQP7wEat6/WZdQdJx1EP9kJVXUAsFdf6SvsuIg/BQLpmxn3mNGs3GoFkBjMB fsSRhkFOzAvaZm74ZTs0b1ZJExnjM7BMN1loBRMmgyF/JZk2ll7L8HicGDRbRVcx g8eYOcyc8lssi34dsnMlUHOqFwIm/EY9mV4omRIJrsy93Kt/IZyqhDH2pwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAkiJpulyojlQIlpmWrLb4Y4xBxhMB8GA1UdIwQY MBaAFPrhFcMCvgtLi8ygsyqCk6BcadcLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11RVZ3d0stQzB1THpLQ3pLb0tUb0Z4cDF3cy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZGRlYjc5LTZhYjgtNDdlMS1hNWZl LWQwZjcwNGUwMzA5Zi8xLzEtdUVWd3dLLUMwdUx6S0N6S29LVG9GeHAxd3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2RkZWI3OS02YWI4LTQ3ZTEtYTVmZS1kMGY3MDRlMDMw OWYvMS8xLXVFVnd3Sy1DMHVMektDektvS1RvRnhwMXdzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNcT E9MPokSOUvhW9Th8G286x69FgJ9YnfWPAyFISp6XTF7ZT75BCyHoaMabxUg/QEg7 GC2DJw1SIQEx/ILU3LesWZoBAz2sb0By6X+qCBoCrHuIOcOd+Cy9uZlhDjKkQIQ/ W279rDUvO2/YJGxYG4lLoaINJOXj89r8SOk9wtlhOrV3iwXOWKMSH2L6D0YMqlLs AW5snIm0XyFDUe5UJGGBShxrxItCPx/vha5F0twvnhfb8OgFLlfbArCMb0FqcCSC Bm/Ek7SG271LfmYe4VlUHZ1rzj9GE5iKtrHK1EtA3stLEbgxJTPl8KRPiMKu+zKx pSuGMO59/00ROnJDBg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:29 2025 by rpki-client