This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json) Hash identifier: LrAzvbj3SG+WTguDoYO5jg5W7/EhSWS3OJlV1tgSIHE= Subject key identifier: 3F:6C:05:7F:7D:B4:75:64:07:12:89:08:53:58:B9:D6:A4:2E:9A:FC Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5 Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5 Certificate serial: 019AF1641A8AAEDB81EEA915ADA2AEA9CFF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft Manifest number: 08D2 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: vMsGGwf36spMLrNZ42cPDdORiDa751v0rS8i3kxwBW8=) 2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1a:8a:ae:db:81:ee:a9:15:ad:a2:ae:a9:cf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5 Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=3f6c057f7db47564071289085358b9d6a42e9afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:74:be:5d:75:26:89:34:eb:51:ca:67:f7: b2:5d:f1:c2:65:54:c4:f5:1c:10:2f:77:6e:fe:09: 60:96:eb:39:92:d2:07:95:c6:83:2d:13:f6:94:4c: 26:9f:84:40:ca:87:19:4c:32:19:59:6f:9d:2a:4e: bb:25:fe:15:23:ac:f4:f6:16:ac:b1:bb:2f:b1:11: 6d:6e:c8:49:5c:cf:9b:cd:54:0d:81:19:e7:9d:b2: 1f:7b:ab:37:a0:08:4e:1e:8d:b3:2f:f1:9e:ba:5b: d5:7a:ca:ef:00:a8:52:5b:b6:de:80:88:cf:7b:b5: 18:71:f7:99:91:6f:0f:6b:31:4a:2c:a6:86:8c:cb: 4d:be:96:e6:7b:44:93:46:d0:b3:b8:9f:25:99:be: 4b:0a:bd:8c:c3:99:a1:47:bb:38:55:d2:c3:12:0d: a3:43:c2:cb:21:ee:b8:c4:04:de:b9:75:45:2f:b6: 9e:ff:f1:2e:5b:45:e9:51:dd:63:7a:cc:64:1a:6d: 53:76:2c:17:df:71:20:7d:ec:62:10:05:e5:71:99: 16:b7:56:10:69:90:1d:69:90:5c:db:63:bf:00:49: d5:f6:87:0a:0c:25:8c:b6:de:99:c6:20:4a:f9:b2: 31:d4:f9:f9:f5:71:dd:79:c6:21:ca:4a:23:56:23: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6C:05:7F:7D:B4:75:64:07:12:89:08:53:58:B9:D6:A4:2E:9A:FC X509v3 Authority Key Identifier: keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5a:33:ba:8b:6c:bb:85:b2:6d:9b:59:b9:25:2d:0e:4c:5c: ea:aa:8a:8d:8c:c4:c7:1e:9f:cc:02:4f:30:c2:d7:15:04:af: 11:47:5d:c6:21:f3:58:fb:61:15:d9:92:58:d0:76:ac:42:37: bc:61:54:f1:23:33:4b:43:16:4a:87:b0:54:87:ed:39:df:8b: 02:07:e2:c7:d7:b9:19:83:ce:b6:94:95:ea:a3:76:19:7b:c1: c3:47:f0:9d:95:d3:65:11:0c:a2:d4:09:44:ba:76:8c:5d:85: fd:5b:98:d1:ab:f9:c6:c7:1c:10:82:1f:f5:02:d1:38:52:a1: 28:1d:4f:4a:a7:09:ee:1c:17:7f:46:8e:ee:10:b6:33:25:62: 1d:f6:0d:96:2f:22:25:de:bc:8c:bd:16:75:c0:1f:f6:f2:6d: b1:9c:bd:9a:63:13:50:3a:af:37:84:cc:57:90:43:49:57:e1: 3f:29:18:ab:47:00:48:c8:d8:e4:d3:7b:94:26:dd:71:66:0d: 72:46:e3:37:23:fa:7b:40:53:67:be:89:63:47:e3:a4:b4:04: 09:5f:7d:24:00:2f:9f:c0:1f:e7:14:92:a8:00:12:61:d9:25: 21:77:4e:23:5f:5d:39:c9:62:87:c3:bf:f6:94:73:42:1f:ac: 99:a4:93:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZBqKrtuB7qkVraKuqc/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi ZTFhYjUwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD EygzZjZjMDU3ZjdkYjQ3NTY0MDcxMjg5MDg1MzU4YjlkNmE0MmU5YWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dl0vl11Jok061HKZ/eyXfHCZVTE 9RwQL3du/glglus5ktIHlcaDLRP2lEwmn4RAyocZTDIZWW+dKk67Jf4VI6z09has sbsvsRFtbshJXM+bzVQNgRnnnbIfe6s3oAhOHo2zL/GeulvVesrvAKhSW7begIjP e7UYcfeZkW8PazFKLKaGjMtNvpbme0STRtCzuJ8lmb5LCr2Mw5mhR7s4VdLDEg2j Q8LLIe64xATeuXVFL7ae//EuW0XpUd1jesxkGm1TdiwX33EgfexiEAXlcZkWt1YQ aZAdaZBc22O/AEnV9ocKDCWMtt6ZxiBK+bIx1Pn59XHdecYhykojViOnLQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD9sBX99tHVkBxKJCFNYudakLpr8MB8GA1UdIwQY MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4 LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3 ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeloz uotsu4WybZtZuSUtDkxc6qqKjYzExx6fzAJPMMLXFQSvEUddxiHzWPthFdmSWNB2 rEI3vGFU8SMzS0MWSoewVIftOd+LAgfix9e5GYPOtpSV6qN2GXvBw0fwnZXTZREM otQJRLp2jF2F/VuY0av5xsccEIIf9QLROFKhKB1PSqcJ7hwXf0aO7hC2MyViHfYN li8iJd68jL0WdcAf9vJtsZy9mmMTUDqvN4TMV5BDSVfhPykYq0cASMjY5NN7lCbd cWYNckbjNyP6e0BTZ76JY0fjpLQECV99JAAvn8Af5xSSqAASYdklIXdOI19dOcli h8O/9pRzQh+smaSTag== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:21 2025 by rpki-client