This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json) Hash identifier: 3yp/QIT0zD3zWLzIYtEqMIdzYoL1+FfmJgY0NUrIRss= Subject key identifier: 20:EC:C3:AD:4F:04:BF:8C:47:58:26:05:BB:52:71:04:C2:E7:6E:53 Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Certificate serial: 019B30E8E340C2615DDAD4412B10023D9105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft Manifest number: 103D Signing time: Thu 18 Dec 2025 10:02:07 +0000 Manifest this update: Thu 18 Dec 2025 10:02:07 +0000 Manifest next update: Fri 19 Dec 2025 10:02:07 +0000 Files and hashes: 1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=) 2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: n8SSMABop0hKOdqPoPX+Vicfz3+WQN97h9kdYZTvvYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:e3:40:c2:61:5d:da:d4:41:2b:10:02:3d:91:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Validity Not Before: Dec 18 10:02:07 2025 GMT Not After : Dec 19 10:02:07 2025 GMT Subject: CN=20ecc3ad4f04bf8c47582605bb527104c2e76e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:09:65:53:f6:3b:bc:b0:f7:32:e5:85:5d: 4c:d6:31:04:b4:26:f5:0a:98:58:10:97:64:81:31: 75:cc:14:37:d7:e7:dd:b4:52:de:a6:aa:b5:9f:a6: 0e:36:73:f2:2a:e4:20:99:6f:2a:dd:12:eb:3e:e5: 85:03:59:cb:c3:50:c5:64:b8:ba:03:ce:2f:68:cf: 8d:0a:52:c5:63:62:2d:00:d3:00:ae:41:55:2b:76: a2:e1:cc:f1:ce:12:cf:2a:9f:1a:9d:51:08:4b:4a: f1:76:35:e5:22:26:11:c7:27:8c:39:9b:1b:c3:0f: 06:18:94:d3:7a:78:e9:e9:5a:d0:09:1c:98:64:0c: bd:60:44:bd:05:de:e8:12:05:cc:7e:6d:85:15:ce: 25:c0:46:45:32:f1:fb:3c:4b:f3:31:06:21:d4:cd: 08:a5:60:f7:f8:e3:06:26:f2:f3:d7:1b:ca:67:5c: ed:3c:70:aa:d0:2d:42:84:05:20:ab:01:77:ec:db: b0:c9:45:62:28:88:c8:cf:de:65:0e:2e:2b:59:2e: eb:71:d3:7c:c8:cd:1b:e0:76:f5:0e:15:ac:72:46: 0d:19:0f:67:8e:59:f5:14:da:c5:9d:fc:a8:42:83: 1e:c0:25:de:3b:0d:de:71:40:eb:36:3e:d3:f3:51: 2c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EC:C3:AD:4F:04:BF:8C:47:58:26:05:BB:52:71:04:C2:E7:6E:53 X509v3 Authority Key Identifier: keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:3d:e9:94:a4:2e:5f:4e:8e:70:62:80:94:34:cc:d1:b8: 7f:dd:91:5c:e4:b9:7c:93:d7:4a:2f:7f:d9:1f:01:c7:8f:4c: 5d:2c:2c:9a:b3:6b:69:36:58:93:ed:5f:e0:70:6b:94:76:22: 11:e6:4c:e7:80:5b:12:5b:9d:b9:4a:a5:54:64:ca:36:06:65: 42:ee:9c:23:73:2a:c7:67:f2:03:aa:2b:9c:20:93:fa:11:ef: d0:47:f4:94:58:07:c2:00:0e:a9:20:e1:a2:c7:0b:46:ea:aa: 0e:00:16:f1:89:45:7a:f3:e7:3c:4f:97:71:94:25:54:b8:5f: 9f:91:5b:53:cf:13:b3:5f:2a:01:a3:47:a6:54:24:d3:27:6a: 8d:a9:14:a0:e8:d8:8d:dc:67:1a:cf:a6:ce:6d:27:5d:37:60: f6:14:be:44:71:40:74:3e:65:01:fa:49:35:48:09:ee:f4:65: 00:a9:26:d0:e0:2d:77:91:40:d2:08:ea:7a:cc:f4:77:18:18: f6:73:4f:8a:65:58:78:73:34:f1:65:fe:ee:ac:38:da:03:db: a0:a9:0c:7b:8d:66:d9:86:4d:12:40:58:59:eb:3f:c8:8b:10: f8:1a:97:01:d5:20:cf:90:7e:fe:31:d5:9b:b5:68:b1:07:a0: f6:c8:87:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ONAwmFd2tRBKxACPZEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDNlY2I4ZjcxMWUwYjkyYjUwNWI4YTBmN2E1ZWUwNDIy OTEzOTUwHhcNMjUxMjE4MTAwMjA3WhcNMjUxMjE5MTAwMjA3WjAzMTEwLwYDVQQD EygyMGVjYzNhZDRmMDRiZjhjNDc1ODI2MDViYjUyNzEwNGMyZTc2ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6MJZVP2O7yw9zLlhV1M1jEEtCb1 CphYEJdkgTF1zBQ31+fdtFLepqq1n6YONnPyKuQgmW8q3RLrPuWFA1nLw1DFZLi6 A84vaM+NClLFY2ItANMArkFVK3ai4czxzhLPKp8anVEIS0rxdjXlIiYRxyeMOZsb ww8GGJTTenjp6VrQCRyYZAy9YES9Bd7oEgXMfm2FFc4lwEZFMvH7PEvzMQYh1M0I pWD3+OMGJvLz1xvKZ1ztPHCq0C1ChAUgqwF37NuwyUViKIjIz95lDi4rWS7rcdN8 yM0b4Hb1DhWsckYNGQ9njln1FNrFnfyoQoMewCXeOw3ecUDrNj7T81EsrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDsw61PBL+MR1gmBbtScQTC525TMB8GA1UdIwQY MBaAFLjT7Lj3EeC5K1Bbig96XuBCKROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMt YTE4NjFlNTM1NDRkLzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMtYTE4NjFlNTM1NDRk LzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgI496ZSk Ll9OjnBigJQ0zNG4f92RXOS5fJPXSi9/2R8Bx49MXSwsmrNraTZYk+1f4HBrlHYi EeZM54BbEluduUqlVGTKNgZlQu6cI3Mqx2fyA6ornCCT+hHv0Ef0lFgHwgAOqSDh oscLRuqqDgAW8YlFevPnPE+XcZQlVLhfn5FbU88Ts18qAaNHplQk0ydqjakUoOjY jdxnGs+mzm0nXTdg9hS+RHFAdD5lAfpJNUgJ7vRlAKkm0OAtd5FA0gjqesz0dxgY 9nNPimVYeHM08WX+7qw42gPboKkMe41m2YZNEkBYWes/yIsQ+BqXAdUgz5B+/jHV m7VosQeg9siHqg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:37 2025 by rpki-client