This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft (raw, json) Hash identifier: Le1FQJfAZN6qLZIb3Unfwf01g6cntyjKjPRymAJOodw= Subject key identifier: 16:55:FA:20:F8:B3:7E:68:39:58:E8:55:F5:00:8B:B5:D3:E5:A0:5E Authority key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38 Certificate issuer: /CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38 Certificate serial: 019AF2401BF96D2456B8554C3EF9C1B3C2C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft Manifest number: 0124 Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl (hash: UQaFmZsYjK7xQiyhJGqkME95nk1+rB1ncySZ5daRmnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1b:f9:6d:24:56:b8:55:4c:3e:f9:c1:b3:c2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38 Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=1655fa20f8b37e683958e855f5008bb5d3e5a05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:f5:51:fc:0f:61:a2:22:ed:e8:47:bd:4f: 62:e0:cb:10:de:3b:71:90:d5:c7:e3:57:61:f8:b9: c7:fa:6b:ab:29:93:69:eb:d1:a9:49:a5:40:ef:f9: a1:10:aa:e0:ca:33:87:47:72:f3:8f:16:a3:78:11: 24:4a:e8:73:e6:a6:c8:a9:8d:f0:7c:f7:fb:f2:31: 27:6f:4f:82:b9:f3:58:1d:8d:0c:94:c9:b4:c7:9e: 69:69:fa:f3:f0:1e:47:8e:fa:f7:bd:21:45:f2:9c: cd:71:9c:ce:cf:ee:6d:45:54:7f:04:ab:89:f3:e2: c9:fa:15:73:21:50:9f:19:4a:8c:c0:6f:e8:a5:0e: 49:33:36:cb:fe:b0:2b:2f:02:d3:bd:fa:0c:91:a9: 29:4a:26:09:4b:ff:70:3c:99:19:b9:b0:38:38:f4: e9:52:e3:37:6b:5f:c9:a0:78:17:eb:d7:e1:e2:7c: 0a:61:9e:2b:a9:70:9c:34:25:a0:31:68:a9:e5:ab: 1d:02:25:6f:85:7b:d9:ee:96:04:96:f9:5d:0d:6c: f5:20:f1:dc:da:ea:74:04:3a:75:bd:4c:69:6c:b2: 93:72:3b:a7:e7:b7:9f:b9:98:a7:f1:0c:14:1e:bd: 60:93:76:55:9f:1f:4e:39:d2:61:75:2a:ad:a3:e4: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:55:FA:20:F8:B3:7E:68:39:58:E8:55:F5:00:8B:B5:D3:E5:A0:5E X509v3 Authority Key Identifier: keyid:FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:01:b3:53:d1:ba:c6:30:1a:ce:9d:16:b0:5f:56:94:52: f7:9d:8d:62:48:80:35:79:66:aa:58:84:1e:4a:c5:49:d2:f9: 56:c0:24:3d:7f:0c:a2:6c:c7:eb:e7:4c:5a:b5:fa:33:11:33: 82:f7:d7:6b:3e:91:ba:93:71:04:54:16:0e:ec:d9:9a:49:5e: 1d:7e:b1:73:8b:d6:b9:dc:b1:bc:30:a2:8f:54:92:f2:aa:89: 30:27:0e:3f:8b:a3:fa:35:30:c7:ca:9c:a3:fd:50:c0:f9:c9: 8e:0d:fc:42:42:61:45:37:2c:ad:a1:33:ec:80:55:70:13:04: 9f:a3:d9:11:3d:74:60:7d:2b:12:ed:13:71:62:e4:7b:8d:a5: 72:1e:3e:53:1a:c0:cd:b6:1f:8d:2b:97:9c:69:e5:32:ea:a2: 3b:75:d5:50:f5:91:d2:a5:74:db:95:8e:0d:32:6f:52:f9:aa: bc:8e:b5:5a:32:9f:95:21:60:6e:b4:2e:26:99:ba:58:8f:ea: 6c:83:05:5e:6b:40:77:eb:15:0b:6b:12:88:9f:09:cd:ec:12: 3f:97:58:9b:d5:b7:0a:94:c0:fc:9f:f3:db:c6:a3:57:75:02: fb:88:b8:a2:41:fd:eb:14:2b:19:37:fe:1d:c1:1a:ca:c6:e1: c1:08:c9:b4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryQBv5bSRWuFVMPvnBs8LCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZWJmMTA3ZjA1ZmJhOWQ0ZTRjYTYxYWVhMGMxNzcyNTE5 ZjVlMzgwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EygxNjU1ZmEyMGY4YjM3ZTY4Mzk1OGU4NTVmNTAwOGJiNWQzZTVhMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdP1UfwPYaIi7ehHvU9i4MsQ3jtx kNXH41dh+LnH+murKZNp69GpSaVA7/mhEKrgyjOHR3LzjxajeBEkSuhz5qbIqY3w fPf78jEnb0+CufNYHY0MlMm0x55pafrz8B5Hjvr3vSFF8pzNcZzOz+5tRVR/BKuJ 8+LJ+hVzIVCfGUqMwG/opQ5JMzbL/rArLwLTvfoMkakpSiYJS/9wPJkZubA4OPTp UuM3a1/JoHgX69fh4nwKYZ4rqXCcNCWgMWip5asdAiVvhXvZ7pYElvldDWz1IPHc 2up0BDp1vUxpbLKTcjun57efuZin8QwUHr1gk3ZVnx9OOdJhdSqto+TO0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBZV+iD4s35oOVjoVfUAi7XT5aBeMB8GA1UdIwQY MBaAFPrr8QfwX7qdTkymGuoMF3JRn144MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11dnhCX0JmdXAxT1RLWWE2Z3dYY2xHZlhqZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMDY5NjI4LTk3ZGEtNDBmZS05YTA4 LTY4ZWY4ODJiYzk3My8xLzEtdXZ4Ql9CZnVwMU9US1lhNmd3WGNsR2ZYamcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJiLzA2OTYyOC05N2RhLTQwZmUtOWEwOC02OGVmODgyYmM5 NzMvMS8xLXV2eEJfQmZ1cDFPVEtZYTZnd1hjbEdmWGpnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcisB s1PRusYwGs6dFrBfVpRS952NYkiANXlmqliEHkrFSdL5VsAkPX8MomzH6+dMWrX6 MxEzgvfXaz6RupNxBFQWDuzZmkleHX6xc4vWudyxvDCij1SS8qqJMCcOP4uj+jUw x8qco/1QwPnJjg38QkJhRTcsraEz7IBVcBMEn6PZET10YH0rEu0TcWLke42lch4+ UxrAzbYfjSuXnGnlMuqiO3XVUPWR0qV025WODTJvUvmqvI61WjKflSFgbrQuJpm6 WI/qbIMFXmtAd+sVC2sSiJ8JzewSP5dYm9W3CpTA/J/z28ajV3UC+4i4okH96xQr GTf+HcEaysbhwQjJtA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:27 2025 by rpki-client