This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json) Hash identifier: BgdHWbPvK/MMDorqWeQM645YXAzyL1SUYndUOqGlRG8= Subject key identifier: 1B:40:1C:ED:7F:82:FB:3E:62:74:6B:6E:A0:3A:85:24:BB:8C:A6:08 Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4 Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4 Certificate serial: 019AF12DC704BA8573F50E1FFF4CC6F29FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft Manifest number: 09FB Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: TRZ-bXVpGuPzmHQA948WyQR5KOg.roa (hash: DS5TFuJAWuJAhwbXFziYJwVjw+lHGW5/W63yt+OmaIw=) 2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: qFLQVDzikCdw+Jy7gk7JwtLLvwhxSVsEVq2DA5Ov2MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c7:04:ba:85:73:f5:0e:1f:ff:4c:c6:f2:9f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4 Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=1b401ced7f82fb3e62746b6ea03a8524bb8ca608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:0b:36:55:48:35:7f:d3:ea:f0:2d:4b:a6: b8:98:84:c8:b4:cc:46:d4:44:b3:ec:a8:b7:bc:6a: aa:e4:9b:ec:2a:40:16:d1:91:65:16:5a:87:fa:38: aa:83:53:0d:09:38:50:5d:1f:4e:80:60:8b:20:a9: 00:a8:7f:34:2d:58:87:ab:38:08:b8:35:bb:a9:b4: 77:7e:10:b2:37:24:48:1a:eb:29:7d:20:c6:91:59: 5d:18:94:34:7d:12:12:87:d9:fd:2f:b3:c5:3a:e0: 2a:7e:cb:30:94:9e:99:bf:05:21:ab:be:f0:6f:85: 64:dd:28:4f:06:5c:53:ee:bd:90:c4:11:7a:08:1b: a4:05:aa:18:03:2c:c0:00:38:4d:78:11:ef:45:e6: 14:f0:8e:10:17:be:6b:b6:3f:2a:59:30:7b:21:7c: 25:bf:3a:e6:f0:24:43:ef:da:8b:7e:1a:63:ed:ff: 51:ea:05:15:9e:30:56:0b:7d:b0:75:91:0e:de:77: 0b:c9:02:64:cc:19:72:8e:39:4d:1a:69:cd:13:09: 9d:c4:df:1b:1c:8e:bc:77:45:9f:67:d7:e7:f7:87: fd:46:21:fd:cf:10:54:21:9f:f7:21:48:cf:f7:31: 4f:4b:a5:93:45:cf:9a:d5:54:25:53:58:3f:36:73: 06:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:40:1C:ED:7F:82:FB:3E:62:74:6B:6E:A0:3A:85:24:BB:8C:A6:08 X509v3 Authority Key Identifier: keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9e:e6:32:e5:f6:ba:48:2c:17:c2:a5:f4:c2:f3:0f:68:8d: d3:bc:72:7b:f6:fb:b5:c5:71:01:b8:98:61:8d:ec:e6:42:c1: 9e:7f:30:a5:57:47:f4:73:f5:30:ff:0d:6e:56:06:15:1d:9f: 46:bf:98:c8:d7:82:f2:e2:e4:21:9e:7d:27:b0:4a:2f:b3:7e: 0c:cf:ad:d7:6a:e2:a0:e1:42:6c:cf:7a:b3:97:44:55:47:47: 92:ef:6b:d6:a9:cf:2d:a5:36:98:01:7e:e7:9e:22:ee:10:ae: f3:6d:33:25:72:10:cc:aa:11:c7:dd:c3:f3:82:c1:74:d2:7b: 15:df:c3:13:95:aa:64:92:5a:3b:5e:48:f2:cf:54:6f:43:31: 85:fd:83:45:8d:6a:eb:1b:10:15:4a:8c:91:7d:04:95:2f:67: 66:84:8a:28:33:ae:fa:32:62:ee:cb:47:e1:5c:a8:a4:08:b8: 56:b7:29:34:f6:dd:0b:cd:89:55:00:e4:03:f9:52:c2:f3:37: 40:50:18:9b:85:bd:c3:ae:df:8b:dc:c4:b2:7c:d3:ad:ce:27: 02:eb:e7:b0:9a:a7:24:f5:55:54:67:99:1f:52:b5:df:33:a3: d2:78:17:44:bb:97:2b:95:1d:01:53:60:42:88:f9:13:ca:3a: 10:ce:19:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLccEuoVz9Q4f/0zG8p/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZGE3YzhhZTAxNTBlYjhjOTQ2ZDdiZjFlMDVjMDQyZGRm NmEzZDQwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD EygxYjQwMWNlZDdmODJmYjNlNjI3NDZiNmVhMDNhODUyNGJiOGNhNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMsLNlVINX/T6vAtS6a4mITItMxG 1ESz7Ki3vGqq5JvsKkAW0ZFlFlqH+jiqg1MNCThQXR9OgGCLIKkAqH80LViHqzgI uDW7qbR3fhCyNyRIGuspfSDGkVldGJQ0fRISh9n9L7PFOuAqfsswlJ6ZvwUhq77w b4Vk3ShPBlxT7r2QxBF6CBukBaoYAyzAADhNeBHvReYU8I4QF75rtj8qWTB7IXwl vzrm8CRD79qLfhpj7f9R6gUVnjBWC32wdZEO3ncLyQJkzBlyjjlNGmnNEwmdxN8b HI68d0WfZ9fn94f9RiH9zxBUIZ/3IUjP9zFPS6WTRc+a1VQlU1g/NnMGrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtAHO1/gvs+YnRrbqA6hSS7jKYIMB8GA1UdIwQY MBaAFFDafIrgFQ64yUbXvx4FwELd9qPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5Nzgt YjZmMWYwMzE3MjFlLzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5NzgtYjZmMWYwMzE3MjFl LzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZ7mMuX2 ukgsF8Kl9MLzD2iN07xye/b7tcVxAbiYYY3s5kLBnn8wpVdH9HP1MP8NblYGFR2f Rr+YyNeC8uLkIZ59J7BKL7N+DM+t12rioOFCbM96s5dEVUdHku9r1qnPLaU2mAF+ 554i7hCu820zJXIQzKoRx93D84LBdNJ7Fd/DE5WqZJJaO15I8s9Ub0Mxhf2DRY1q 6xsQFUqMkX0ElS9nZoSKKDOu+jJi7stH4VyopAi4VrcpNPbdC82JVQDkA/lSwvM3 QFAYm4W9w67fi9zEsnzTrc4nAuvnsJqnJPVVVGeZH1K13zOj0ngXRLuXK5UdAVNg Qoj5E8o6EM4Z+A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:42 2025 by rpki-client