This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft File: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json) Hash identifier: 7rMkGG41mE9kxFk1Y5yUkXor5lI8x7kn4MnTpIeICS8= Subject key identifier: AB:D5:85:15:4C:9A:80:3A:B3:3B:A8:DF:15:82:57:0D:2E:08:C3:CF Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Certificate serial: 019AF5098DE0B77A9DCEE6B70C2C601FA50D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft Manifest number: 0F02 Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: 5/yE2e1I8e0cFR6TZvLJE/fV7rbbLOVQKTWjVrbE0JE=) 2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8d:e0:b7:7a:9d:ce:e6:b7:0c:2c:60:1f:a5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=abd585154c9a803ab33ba8df1582570d2e08c3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:4f:81:b6:09:5f:6b:0a:b0:f4:e8:33:d3: a9:75:64:9c:1d:c4:a1:0b:c0:d9:b7:a2:bd:62:e3: f7:93:49:0e:a3:a3:2a:ad:5c:da:41:30:99:bd:24: fa:a6:08:12:e3:a1:7f:7c:b3:df:9d:c4:02:b0:5a: f2:84:4d:f0:33:c8:0e:f4:97:44:e3:ac:2d:e0:31: 04:48:20:a9:db:e3:2c:04:7d:75:6e:26:38:cf:a4: f4:2f:40:65:ba:f2:6d:b3:41:5a:f1:28:d1:53:32: 2a:a0:1e:3b:e8:f5:bb:ef:6c:b4:05:ec:f2:3b:25: 9d:3f:34:a4:e9:71:34:d7:fb:4b:e2:e1:34:12:db: 03:55:2d:cc:10:95:78:7e:80:99:c4:45:f6:c5:a6: e9:cb:40:fd:75:19:65:cb:d3:62:8a:2a:42:0b:d1: 41:a6:f1:2d:c6:1e:1f:1a:b0:79:67:43:a3:bd:87: 07:ab:c1:9e:f3:ff:38:a6:40:93:9e:d4:94:d2:1a: 4a:15:b8:c2:5d:88:f6:ea:c9:e6:b7:01:35:45:1a: 98:7d:af:55:d6:09:9c:99:85:4f:c7:e8:3e:1f:3a: b1:c9:f5:c3:f4:5f:4e:4c:2e:91:fe:4e:3a:f6:86: 12:3e:4e:5d:7e:62:c6:f5:a7:12:cf:86:ce:3e:bd: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:85:15:4C:9A:80:3A:B3:3B:A8:DF:15:82:57:0D:2E:08:C3:CF X509v3 Authority Key Identifier: keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:03:9d:b3:3c:f0:54:80:be:25:ce:30:52:8d:3c:b0:4f:36: 78:33:4c:35:21:6b:4c:54:fc:ea:95:78:ca:39:9e:c1:70:27: 0a:0d:72:ff:89:90:6b:ff:d4:ac:66:de:2c:93:e8:b9:79:0c: 91:17:df:67:39:51:0e:ba:a6:31:14:0c:6e:36:5f:bd:90:03: d8:d8:30:80:48:f8:8a:79:6c:fb:f0:a7:84:2f:81:b4:e0:57: 0c:9f:58:6f:03:4e:62:cd:f9:c6:1a:80:8c:fd:40:86:9e:c5: f0:5c:5b:4c:c4:0a:ef:3c:c6:04:21:91:28:50:e7:8a:17:c3: 0e:64:7b:b0:33:22:0a:57:65:ee:d6:59:79:aa:73:67:bb:33: b7:9a:80:5b:0a:d1:f7:4b:dd:92:37:ae:b9:37:ce:78:7d:bb: 34:d8:4a:b9:85:82:c6:0a:d8:df:ae:fa:fd:ae:d2:70:e0:e7: 6a:67:90:ff:f8:cc:cd:f9:53:d7:8a:0d:6f:e7:f8:30:84:9d: 23:ca:05:2e:98:6c:9f:30:6c:4c:23:33:5c:1a:6b:66:cd:7f: b9:cb:b4:23:88:02:a3:a8:54:42:bb:d2:e2:97:bf:99:99:1c: b8:f4:4e:46:c4:42:09:54:82:08:85:d5:9a:9e:0f:79:eb:bc: 29:32:67:1b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1CY3gt3qdzua3DCxgH6UNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTAxNDY0YTY5NWIwZjZmNTJmNTExYmNjMTI0MGZhMjg0 ZDNkY2YwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD EyhhYmQ1ODUxNTRjOWE4MDNhYjMzYmE4ZGYxNTgyNTcwZDJlMDhjM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwABPgbYJX2sKsPToM9OpdWScHcSh C8DZt6K9YuP3k0kOo6MqrVzaQTCZvST6pggS46F/fLPfncQCsFryhE3wM8gO9JdE 46wt4DEESCCp2+MsBH11biY4z6T0L0BluvJts0Fa8SjRUzIqoB476PW772y0Bezy OyWdPzSk6XE01/tL4uE0EtsDVS3MEJV4foCZxEX2xabpy0D9dRlly9NiiipCC9FB pvEtxh4fGrB5Z0OjvYcHq8Ge8/84pkCTntSU0hpKFbjCXYj26snmtwE1RRqYfa9V 1gmcmYVPx+g+HzqxyfXD9F9OTC6R/k469oYSPk5dfmLG9acSz4bOPr0DWwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKvVhRVMmoA6szuo3xWCVw0uCMPPMB8GA1UdIwQY MBaAFPrgFGSmlbD29S9RG8wSQPooTT3PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11QVVaS2FWc1BiMUwxRWJ6QkpBLWloTlBjOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMWM2NzA0LTUxMGEtNDgwMC1hODkw LTMyMzUyZjk2YTYyMS8xLzEtdUFVWkthVnNQYjFMMUViekJKQS1paE5QYzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzFjNjcwNC01MTBhLTQ4MDAtYTg5MC0zMjM1MmY5NmE2 MjEvMS8xLXVBVVpLYVZzUGIxTDFFYnpCSkEtaWhOUGM4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQOd szzwVIC+Jc4wUo08sE82eDNMNSFrTFT86pV4yjmewXAnCg1y/4mQa//UrGbeLJPo uXkMkRffZzlRDrqmMRQMbjZfvZAD2NgwgEj4inls+/CnhC+BtOBXDJ9YbwNOYs35 xhqAjP1Ahp7F8FxbTMQK7zzGBCGRKFDnihfDDmR7sDMiCldl7tZZeapzZ7szt5qA WwrR90vdkjeuuTfOeH27NNhKuYWCxgrY3676/a7ScODnameQ//jMzflT14oNb+f4 MISdI8oFLphsnzBsTCMzXBprZs1/ucu0I4gCo6hUQrvS4pe/mZkcuPRORsRCCVSC CIXVmp4Peeu8KTJnGw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:18 2025 by rpki-client