This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json) Hash identifier: 1a3s+sPD04xJLdrGkr/9rBw3hUWOG4p7lT5hDNwIAqg= Subject key identifier: 4D:41:25:42:2C:B9:26:D9:EC:E1:8C:8A:75:5B:43:C3:B8:0E:B0:90 Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19 Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19 Certificate serial: 019B2740F1B5ABDBB6C994C80BFFCAEF3C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft Manifest number: 082C Signing time: Tue 16 Dec 2025 13:02:06 +0000 Manifest this update: Tue 16 Dec 2025 13:02:06 +0000 Manifest next update: Wed 17 Dec 2025 13:02:06 +0000 Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: s+bCM2IqUNlN0QmjsPAjLZEBGwgutYB8v8QEYNfsf9I=) 2: Fkj26JF70VbKRFMhWrYdU9NtaxE.roa (hash: /6tYIOX0HTJdH0wQZ5VKDfqhCBzYhIWs9k6pWyv6yuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:f1:b5:ab:db:b6:c9:94:c8:0b:ff:ca:ef:3c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19 Validity Not Before: Dec 16 13:02:06 2025 GMT Not After : Dec 17 13:02:06 2025 GMT Subject: CN=4d4125422cb926d9ece18c8a755b43c3b80eb090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:7e:6e:59:0d:03:dc:b9:5c:a6:cc:bc:0d: 21:f5:49:b3:0b:9f:b4:d7:85:3d:37:f7:1e:9f:8f: 4b:c7:1e:43:48:93:c4:d5:ab:db:eb:5c:f2:3b:66: f6:29:e8:01:46:d3:7e:76:c0:2b:06:6b:2a:37:b0: ec:9d:f4:58:04:8b:db:ec:19:4c:f4:dd:46:8a:21: b1:99:df:9d:69:ba:f9:68:0f:10:8c:a9:c8:fb:bd: 6a:2a:cf:e8:97:04:11:25:50:2f:e9:16:87:51:0a: be:7b:ea:a2:1e:9a:51:8d:84:47:de:25:ef:5a:39: 84:19:63:d4:63:bd:90:e1:75:22:a8:46:60:6f:88: 21:e3:f9:c9:8e:5a:86:b4:ef:78:fe:b3:dd:f5:db: 60:95:98:d7:86:29:60:2b:de:9b:77:15:59:b9:e4: 40:de:c6:bc:7b:39:41:6a:0e:78:e3:2e:c7:82:11: 7b:b1:b1:b2:86:33:89:31:4b:2f:e5:04:53:39:d3: 90:39:e7:1c:f9:09:f4:3a:a4:47:3c:30:c1:4e:dd: 5e:c1:1b:78:d2:9b:98:84:be:0a:1b:4d:96:14:99: 50:20:35:7a:4a:c5:e2:6d:2c:b0:df:cf:c6:dd:b3: d2:d6:fd:08:7b:e2:60:c7:61:4a:00:eb:3f:6b:5c: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:25:42:2C:B9:26:D9:EC:E1:8C:8A:75:5B:43:C3:B8:0E:B0:90 X509v3 Authority Key Identifier: keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a1:30:7e:92:e5:32:66:67:8a:91:50:e7:7d:e0:c7:90:8e: d0:4e:fb:0a:f9:8e:7e:1a:99:9f:1a:b3:65:29:7b:5d:56:d5: a7:91:7f:ac:81:17:8c:29:73:60:81:29:fe:e6:82:9b:62:e3: f2:68:ce:a7:88:90:69:3b:cc:87:b8:a4:c7:d6:29:78:8c:4d: 79:75:a9:65:ef:c5:97:02:55:1b:49:32:b7:c1:6d:8b:80:50: 8d:cf:86:5c:1e:34:49:40:7b:68:02:ec:e6:32:52:e5:49:f7: 72:6b:29:9a:78:fc:e2:1c:38:2d:39:37:e0:ea:68:40:3c:b1: cb:86:a4:96:2d:c4:21:84:dd:9b:98:06:07:9f:1c:55:e0:05: 8c:9c:fe:f2:58:ee:41:3a:54:ca:0a:11:bc:21:45:c9:60:f8: ee:11:06:dd:c6:f2:ba:da:b6:3f:ad:0a:17:f6:a5:ec:22:37: 8e:a5:d5:89:b5:eb:e7:33:d4:1f:1a:2b:42:0e:17:c0:27:62: 10:5a:5d:c7:00:99:7f:20:ad:53:fd:85:5f:ec:37:af:ea:82: 65:55:8c:93:dd:b7:29:23:a8:a0:2c:ca:d0:c9:e0:39:93:aa: 03:f0:c2:ac:a6:65:bf:4d:75:c4:48:ac:38:a1:c9:bd:34:c3: 82:bb:46:e2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsnQPG1q9u2yZTIC//K7zw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTY5ZjBhMjllZjhkOGMyMmQ5ZDZlY2RlM2EzMDdkODk0 ZDVjMTkwHhcNMjUxMjE2MTMwMjA2WhcNMjUxMjE3MTMwMjA2WjAzMTEwLwYDVQQD Eyg0ZDQxMjU0MjJjYjkyNmQ5ZWNlMThjOGE3NTViNDNjM2I4MGViMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk9+blkNA9y5XKbMvA0h9UmzC5+0 14U9N/cen49Lxx5DSJPE1avb61zyO2b2KegBRtN+dsArBmsqN7DsnfRYBIvb7BlM 9N1GiiGxmd+dabr5aA8QjKnI+71qKs/olwQRJVAv6RaHUQq+e+qiHppRjYRH3iXv WjmEGWPUY72Q4XUiqEZgb4gh4/nJjlqGtO94/rPd9dtglZjXhilgK96bdxVZueRA 3sa8ezlBag544y7HghF7sbGyhjOJMUsv5QRTOdOQOecc+Qn0OqRHPDDBTt1ewRt4 0puYhL4KG02WFJlQIDV6SsXibSyw38/G3bPS1v0Ie+Jgx2FKAOs/a1yd2wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE1BJUIsuSbZ7OGMinVbQ8O4DrCQMB8GA1UdIwQY MBaAFPrmnwop742MItnW7N46MH2JTVwZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11YWZDaW52all3aTJkYnMzam93ZllsTlhCay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDEzNTlmLTM1NGUtNDU2OC04NDBj LWFmNTBhNWJlMjgwZS8xLzEtdWFmQ2ludmpZd2kyZGJzM2pvd2ZZbE5YQmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q0L2QxMzU5Zi0zNTRlLTQ1NjgtODQwYy1hZjUwYTViZTI4 MGUvMS8xLXVhZkNpbnZqWXdpMmRiczNqb3dmWWxOWEJrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqEw fpLlMmZnipFQ533gx5CO0E77CvmOfhqZnxqzZSl7XVbVp5F/rIEXjClzYIEp/uaC m2Lj8mjOp4iQaTvMh7ikx9YpeIxNeXWpZe/FlwJVG0kyt8Fti4BQjc+GXB40SUB7 aALs5jJS5Un3cmspmnj84hw4LTk34OpoQDyxy4akli3EIYTdm5gGB58cVeAFjJz+ 8ljuQTpUygoRvCFFyWD47hEG3cbyutq2P60KF/al7CI3jqXVibXr5zPUHxorQg4X wCdiEFpdxwCZfyCtU/2FX+w3r+qCZVWMk923KSOooCzK0MngOZOqA/DCrKZlv011 xEisOKHJvTTDgrtG4g== -----END CERTIFICATE-----Generated at Tue Dec 16 19:18:23 2025 by rpki-client