This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json) Hash identifier: F7+k6+GBN+Hj7ncR49ruP0IvQ+5y6vjCp9t/QOxk+7Y= Subject key identifier: 85:A5:2C:5E:D1:A5:FF:CA:C0:9F:12:2E:38:77:8D:74:B2:F7:4E:82 Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4 Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4 Certificate serial: 019B32D727EEC39C07EE616281A1C7A2FA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft Manifest number: 0A1D Signing time: Thu 18 Dec 2025 19:01:59 +0000 Manifest this update: Thu 18 Dec 2025 19:01:59 +0000 Manifest next update: Fri 19 Dec 2025 19:01:59 +0000 Files and hashes: 1: TRZ-bXVpGuPzmHQA948WyQR5KOg.roa (hash: DS5TFuJAWuJAhwbXFziYJwVjw+lHGW5/W63yt+OmaIw=) 2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: RXVpzKZDzWt2s2IB4icvyMnd7YWPCvvCI4JuRGQ/Ik0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:27:ee:c3:9c:07:ee:61:62:81:a1:c7:a2:fa:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4 Validity Not Before: Dec 18 19:01:59 2025 GMT Not After : Dec 19 19:01:59 2025 GMT Subject: CN=85a52c5ed1a5ffcac09f122e38778d74b2f74e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:0d:91:c1:46:21:4d:d9:93:55:36:2d:0b: f0:ab:62:94:20:ac:8d:91:df:54:03:18:5c:58:2f: 75:52:85:27:eb:6d:aa:f3:e2:a9:b9:d6:6d:07:b6: de:ae:06:5f:94:9c:62:45:52:2e:f5:65:a1:a7:56: b4:a8:6a:2f:f8:ad:ac:dc:45:13:e6:07:b6:18:27: 86:51:a9:44:a4:3c:4d:0b:73:ee:ca:8e:d8:05:fa: 8b:4e:a4:da:b5:d7:6a:f4:f5:56:8c:0f:80:db:27: 2b:f4:c4:60:73:d9:48:8f:b3:7b:d5:66:a5:5e:bf: 96:15:86:cb:d7:7e:eb:c0:e7:e2:45:7a:59:01:2c: ca:66:34:ed:ee:e8:bc:43:98:6a:23:f6:b0:5b:a2: eb:38:6d:30:a0:24:de:13:b2:74:97:fb:27:db:d6: 56:04:33:40:71:9c:ce:fd:e5:fd:d9:af:53:09:b6: 04:e9:d6:8a:1e:8e:52:f8:54:b5:de:1a:62:0b:66: 81:d2:16:93:2a:59:28:58:7d:be:e1:d5:c8:01:13: 43:d8:79:a2:67:28:38:d9:54:6f:43:fb:2c:1a:c6: ba:ec:a6:d4:ee:53:20:5e:3d:84:84:87:44:e8:ab: b1:71:c5:8c:c7:91:91:b9:ab:c0:77:12:51:35:f5: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A5:2C:5E:D1:A5:FF:CA:C0:9F:12:2E:38:77:8D:74:B2:F7:4E:82 X509v3 Authority Key Identifier: keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:14:04:b4:56:5c:4d:dc:ce:f1:41:3c:00:38:14:ed:81:47: 26:12:62:e0:62:5c:65:4f:bb:16:97:32:d2:c4:f4:72:2b:7c: 9e:08:52:8b:c8:a2:4c:42:ab:01:e0:43:04:a5:fc:59:fd:d6: 3e:4e:28:a0:89:18:10:89:e6:7a:51:6b:7f:4b:ea:1d:c3:3e: 01:02:85:88:68:d5:8f:e8:8f:58:d1:05:be:4e:43:b6:b7:f5: 35:07:01:66:d1:44:44:1d:a6:22:cd:2a:54:c2:0d:1b:6a:3c: 49:0b:13:a7:27:74:e1:e7:3f:a8:93:b3:d4:16:a5:24:f4:64: 93:ef:62:db:ab:2c:5c:db:0b:b2:ec:b8:01:be:e6:84:4a:0a: f5:21:1e:1c:8b:60:36:ae:b5:9e:45:d4:22:9d:72:08:11:1b: cf:bf:66:4b:1e:6d:22:c5:21:9b:0c:bf:8b:7e:11:02:3a:a0: 8c:dd:05:45:b0:e6:90:25:0a:c5:85:5c:7a:56:e7:0d:49:d2: a4:d7:b9:f3:4c:0e:24:aa:a1:c4:9a:ef:4f:d3:a1:02:1c:27: 8c:2f:5c:b8:64:b3:47:58:7a:c8:71:af:c2:bc:d3:a8:f8:76: d2:94:f3:91:a1:ef:37:1c:06:85:13:07:59:b9:e1:5b:76:b5: 0c:e2:1b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1yfuw5wH7mFigaHHovoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZGE3YzhhZTAxNTBlYjhjOTQ2ZDdiZjFlMDVjMDQyZGRm NmEzZDQwHhcNMjUxMjE4MTkwMTU5WhcNMjUxMjE5MTkwMTU5WjAzMTEwLwYDVQQD Eyg4NWE1MmM1ZWQxYTVmZmNhYzA5ZjEyMmUzODc3OGQ3NGIyZjc0ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ogNkcFGIU3Zk1U2LQvwq2KUIKyN kd9UAxhcWC91UoUn622q8+KpudZtB7bergZflJxiRVIu9WWhp1a0qGov+K2s3EUT 5ge2GCeGUalEpDxNC3Puyo7YBfqLTqTatddq9PVWjA+A2ycr9MRgc9lIj7N71Wal Xr+WFYbL137rwOfiRXpZASzKZjTt7ui8Q5hqI/awW6LrOG0woCTeE7J0l/sn29ZW BDNAcZzO/eX92a9TCbYE6daKHo5S+FS13hpiC2aB0haTKlkoWH2+4dXIARND2Hmi Zyg42VRvQ/ssGsa67KbU7lMgXj2EhIdE6KuxccWMx5GRuavAdxJRNfUQ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWlLF7Rpf/KwJ8SLjh3jXSy906CMB8GA1UdIwQY MBaAFFDafIrgFQ64yUbXvx4FwELd9qPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5Nzgt YjZmMWYwMzE3MjFlLzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5NzgtYjZmMWYwMzE3MjFl LzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxQEtFZc TdzO8UE8ADgU7YFHJhJi4GJcZU+7Fpcy0sT0cit8nghSi8iiTEKrAeBDBKX8Wf3W Pk4ooIkYEInmelFrf0vqHcM+AQKFiGjVj+iPWNEFvk5Dtrf1NQcBZtFERB2mIs0q VMING2o8SQsTpyd04ec/qJOz1BalJPRkk+9i26ssXNsLsuy4Ab7mhEoK9SEeHItg Nq61nkXUIp1yCBEbz79mSx5tIsUhmwy/i34RAjqgjN0FRbDmkCUKxYVcelbnDUnS pNe580wOJKqhxJrvT9OhAhwnjC9cuGSzR1h6yHGvwrzTqPh20pTzkaHvNxwGhRMH WbnhW3a1DOIb5g== -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:27 2025 by rpki-client