This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json) Hash identifier: bU5OYzFKkV561AIR8G7zuf+yX1ZA6w5FzMvctzj7zrI= Subject key identifier: 6E:75:B1:4F:25:59:88:2A:DF:45:45:56:6A:9A:1C:75:9D:3C:64:EE Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Certificate serial: 019AF12DDB675FEA4B4CBBBEFE05D7E6A65F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft Manifest number: 101C Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=) 2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: hl7gM4B0/U9zbLiyc4f0z7nCgOc79OpxNVpnI6F7kQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:db:67:5f:ea:4b:4c:bb:be:fe:05:d7:e6:a6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=6e75b14f2559882adf4545566a9a1c759d3c64ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:a1:c3:33:5f:0e:f0:9f:ed:1c:aa:83:51: e2:30:50:57:db:c5:08:03:eb:14:6f:f0:4c:b0:8e: eb:ee:14:4e:8c:7f:d1:c8:94:a3:01:61:36:b0:e5: 17:fd:f6:3c:1c:5f:b1:dd:07:28:07:a4:af:cd:70: 94:67:eb:5c:c3:24:ba:ee:65:db:ab:91:f1:c7:a1: 0e:d6:a2:ab:94:39:a9:43:96:eb:32:6f:d7:97:6f: d4:94:b7:0d:6a:6e:04:b9:ef:c1:25:b1:66:49:93: b6:83:cc:9f:9e:86:40:52:13:8d:48:0a:9f:a4:92: e9:d6:0d:a3:94:a4:1e:6b:ff:ce:e5:78:e0:11:11: cb:bd:b5:ef:c3:20:12:b0:d0:05:59:0f:b2:90:75: 36:38:f5:0f:b8:d6:2f:8c:a4:bf:26:eb:5f:5a:d0: 23:76:fd:30:a3:0d:f4:86:0c:c1:b7:cf:7c:ea:21: 07:a7:4c:0d:95:a9:81:c7:33:0b:79:27:d2:f7:6c: 00:72:ae:14:5f:a4:02:4b:e7:71:d6:e6:b9:5c:d1: 3b:11:bc:e6:3f:90:ea:16:b2:ae:78:a6:08:12:38: 68:6a:09:43:9e:33:2e:db:f3:a7:4e:64:39:21:5a: ec:07:54:0e:25:05:97:1a:c7:46:f3:6d:c3:fa:30: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:75:B1:4F:25:59:88:2A:DF:45:45:56:6A:9A:1C:75:9D:3C:64:EE X509v3 Authority Key Identifier: keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:d9:72:1e:bd:64:88:51:ed:df:49:f5:a4:9c:df:6a:68: cd:b8:4f:94:4f:e2:2d:c8:20:b9:93:f4:cf:6b:ac:b1:04:b8: 0f:e1:04:3d:43:16:5f:8d:6e:55:ec:46:54:6e:97:51:17:32: 6e:55:20:e7:a2:3e:01:82:3c:11:80:e2:9b:98:39:07:f2:4e: a4:df:e2:ff:03:7f:96:7a:02:64:7e:d9:8b:4c:3e:7b:a5:de: a1:3b:1d:81:05:9d:63:0b:13:ac:26:66:3a:4c:f3:56:40:06: 80:e1:dc:07:dd:61:f8:a3:60:31:71:b2:da:51:42:42:45:a5: 0e:0b:bc:f4:84:b2:76:1f:8d:6d:d4:0f:e9:a0:d8:44:e4:be: 67:cd:09:e9:35:3f:ab:55:5d:93:87:64:f3:89:d2:bd:f3:cb: 1f:48:69:76:c1:6f:53:14:3b:72:a6:4a:cb:49:e3:83:ba:b5: ff:f4:e3:d4:5e:9f:77:87:8c:a5:20:df:fc:81:55:da:54:2b: 90:da:0a:08:d8:4a:0e:c5:97:4f:3e:99:90:47:70:61:6a:7f: 54:17:0e:f5:3a:07:25:4b:d7:f0:21:06:89:5f:a6:0d:bf:45: 26:92:0a:0a:02:f7:bd:f2:fe:fc:f7:20:00:28:17:e8:1b:51: fc:6d:af:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdtnX+pLTLu+/gXX5qZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDNlY2I4ZjcxMWUwYjkyYjUwNWI4YTBmN2E1ZWUwNDIy OTEzOTUwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD Eyg2ZTc1YjE0ZjI1NTk4ODJhZGY0NTQ1NTY2YTlhMWM3NTlkM2M2NGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwehwzNfDvCf7Ryqg1HiMFBX28UI A+sUb/BMsI7r7hROjH/RyJSjAWE2sOUX/fY8HF+x3QcoB6SvzXCUZ+tcwyS67mXb q5Hxx6EO1qKrlDmpQ5brMm/Xl2/UlLcNam4Eue/BJbFmSZO2g8yfnoZAUhONSAqf pJLp1g2jlKQea//O5XjgERHLvbXvwyASsNAFWQ+ykHU2OPUPuNYvjKS/JutfWtAj dv0wow30hgzBt8986iEHp0wNlamBxzMLeSfS92wAcq4UX6QCS+dx1ua5XNE7Ebzm P5DqFrKueKYIEjhoaglDnjMu2/OnTmQ5IVrsB1QOJQWXGsdG823D+jBHQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG51sU8lWYgq30VFVmqaHHWdPGTuMB8GA1UdIwQY MBaAFLjT7Lj3EeC5K1Bbig96XuBCKROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMt YTE4NjFlNTM1NDRkLzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMtYTE4NjFlNTM1NDRk LzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4jZch69 ZIhR7d9J9aSc32pozbhPlE/iLcgguZP0z2ussQS4D+EEPUMWX41uVexGVG6XURcy blUg56I+AYI8EYDim5g5B/JOpN/i/wN/lnoCZH7Zi0w+e6XeoTsdgQWdYwsTrCZm OkzzVkAGgOHcB91h+KNgMXGy2lFCQkWlDgu89ISydh+NbdQP6aDYROS+Z80J6TU/ q1Vdk4dk84nSvfPLH0hpdsFvUxQ7cqZKy0njg7q1//Tj1F6fd4eMpSDf/IFV2lQr kNoKCNhKDsWXTz6ZkEdwYWp/VBcO9ToHJUvX8CEGiV+mDb9FJpIKCgL3vfL+/Pcg ACgX6BtR/G2vGA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:50 2025 by rpki-client