This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json) Hash identifier: PlAHo6sHOwt2DX2WuZmUEiYq4iHqZuCQJuhhBrsI/nI= Subject key identifier: 6E:20:2B:F2:3E:1A:A5:C8:A3:19:8B:2C:46:C9:4D:B5:73:86:1F:D7 Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19 Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19 Certificate serial: 019AF31B86216AC137FEF740DEE4974F7B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft Manifest number: 0811 Signing time: Sat 06 Dec 2025 10:00:58 +0000 Manifest this update: Sat 06 Dec 2025 10:00:58 +0000 Manifest next update: Sun 07 Dec 2025 10:00:58 +0000 Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: 494ijMf1WyS4oGgwuZyk0B03Eou7QggYOqxWIIafqlI=) 2: Fkj26JF70VbKRFMhWrYdU9NtaxE.roa (hash: /6tYIOX0HTJdH0wQZ5VKDfqhCBzYhIWs9k6pWyv6yuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:86:21:6a:c1:37:fe:f7:40:de:e4:97:4f:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19 Validity Not Before: Dec 6 10:00:58 2025 GMT Not After : Dec 7 10:00:58 2025 GMT Subject: CN=6e202bf23e1aa5c8a3198b2c46c94db573861fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:fe:14:22:74:a3:e9:ec:b7:ef:ea:99:47: d4:7b:62:10:cc:f6:3c:ee:d1:3a:63:e6:46:47:24: 78:2b:8a:c6:93:72:00:d2:3e:20:49:6d:a7:36:7b: 6a:7a:2f:18:d8:61:73:df:f4:34:03:d1:43:df:8f: 1f:ce:dc:09:9a:d5:cf:bb:70:1b:5d:aa:57:05:cc: b7:d0:6d:be:70:11:c2:d2:70:5a:cb:4a:66:8e:af: df:24:a9:4f:96:f0:ec:a4:c6:1c:b3:09:10:e6:ec: 1c:3c:96:94:96:4f:5e:b8:30:7b:e2:87:40:67:73: 5f:83:cb:56:49:49:b1:89:67:ee:6f:e8:f5:a9:3d: 76:69:62:63:4b:f2:57:36:80:12:10:e9:06:7c:c3: ab:5d:1d:5b:b4:84:4d:08:e3:2d:8a:c4:ac:29:6d: 9f:5f:d9:d6:18:ee:0c:e2:d3:bb:35:46:91:fe:d0: 43:b6:46:0b:65:87:50:75:8a:a5:17:50:54:ac:65: bc:af:57:ee:b4:75:2c:a4:32:66:6c:d0:64:34:8d: 54:c0:a4:a4:df:6c:cc:95:07:21:dc:38:b0:cc:9d: db:d3:60:a6:a8:ad:cb:03:31:90:31:01:57:ab:61: e1:ff:ef:a2:b4:d7:f7:52:84:ff:a8:0f:8d:c1:d5: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:20:2B:F2:3E:1A:A5:C8:A3:19:8B:2C:46:C9:4D:B5:73:86:1F:D7 X509v3 Authority Key Identifier: keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:13:ce:da:e1:9a:14:7d:56:5a:cf:c7:cd:2f:d7:e2:20:ce: c8:94:e6:a1:06:e4:66:2e:bb:92:9f:28:ca:b5:40:bd:77:4c: 19:93:92:6b:ee:92:56:e1:2a:e1:28:4d:f6:60:11:df:5b:3e: 2a:75:48:48:1a:f0:6a:8c:2e:d0:26:02:92:c9:bf:6b:f6:ea: 87:f7:38:4d:91:b5:8d:a2:e3:73:77:ee:79:40:51:1c:e6:1c: 36:fb:57:95:c6:e5:57:ad:c0:79:c1:5f:72:ab:d2:ae:f0:1b: bc:e6:62:18:7e:3a:7e:63:80:e0:49:be:16:03:68:a9:05:f4: 8b:c6:d8:ad:4b:04:5f:ea:c7:0e:0c:4b:f1:78:53:01:2f:81: cf:5d:d4:2f:d7:38:63:a3:51:37:9d:04:da:e3:88:3e:0c:65: 77:54:ec:a4:66:ac:c3:3b:fb:29:0d:37:d5:ef:2b:23:01:25: af:50:af:32:bd:44:ae:74:59:ce:70:07:c9:f9:96:b6:5c:4b: c5:96:df:ca:5c:2b:fd:b7:6b:d0:66:9d:1c:80:a7:e9:87:5e: 75:14:3e:5c:0f:18:98:7f:1d:a0:67:f3:3b:3d:61:ee:a6:1e: 36:8e:f2:a7:7c:5d:fc:71:eb:13:23:53:af:09:53:09:a3:00: 32:00:54:dc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzG4YhasE3/vdA3uSXT3sgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTY5ZjBhMjllZjhkOGMyMmQ5ZDZlY2RlM2EzMDdkODk0 ZDVjMTkwHhcNMjUxMjA2MTAwMDU4WhcNMjUxMjA3MTAwMDU4WjAzMTEwLwYDVQQD Eyg2ZTIwMmJmMjNlMWFhNWM4YTMxOThiMmM0NmM5NGRiNTczODYxZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR/+FCJ0o+nst+/qmUfUe2IQzPY8 7tE6Y+ZGRyR4K4rGk3IA0j4gSW2nNntqei8Y2GFz3/Q0A9FD348fztwJmtXPu3Ab XapXBcy30G2+cBHC0nBay0pmjq/fJKlPlvDspMYcswkQ5uwcPJaUlk9euDB74odA Z3Nfg8tWSUmxiWfub+j1qT12aWJjS/JXNoASEOkGfMOrXR1btIRNCOMtisSsKW2f X9nWGO4M4tO7NUaR/tBDtkYLZYdQdYqlF1BUrGW8r1futHUspDJmbNBkNI1UwKSk 32zMlQch3DiwzJ3b02CmqK3LAzGQMQFXq2Hh/++itNf3UoT/qA+NwdUbnwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG4gK/I+GqXIoxmLLEbJTbVzhh/XMB8GA1UdIwQY MBaAFPrmnwop742MItnW7N46MH2JTVwZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11YWZDaW52all3aTJkYnMzam93ZllsTlhCay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDEzNTlmLTM1NGUtNDU2OC04NDBj LWFmNTBhNWJlMjgwZS8xLzEtdWFmQ2ludmpZd2kyZGJzM2pvd2ZZbE5YQmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q0L2QxMzU5Zi0zNTRlLTQ1NjgtODQwYy1hZjUwYTViZTI4 MGUvMS8xLXVhZkNpbnZqWXdpMmRiczNqb3dmWWxOWEJrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBPO 2uGaFH1WWs/HzS/X4iDOyJTmoQbkZi67kp8oyrVAvXdMGZOSa+6SVuEq4ShN9mAR 31s+KnVISBrwaowu0CYCksm/a/bqh/c4TZG1jaLjc3fueUBRHOYcNvtXlcblV63A ecFfcqvSrvAbvOZiGH46fmOA4Em+FgNoqQX0i8bYrUsEX+rHDgxL8XhTAS+Bz13U L9c4Y6NRN50E2uOIPgxld1TspGaswzv7KQ031e8rIwElr1CvMr1ErnRZznAHyfmW tlxLxZbfylwr/bdr0GadHICn6YdedRQ+XA8YmH8doGfzOz1h7qYeNo7yp3xd/HHr EyNTrwlTCaMAMgBU3A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:43 2025 by rpki-client