This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json) Hash identifier: DXNT/54p7UGExwOX0wfIy//pnSU4ArljGRFnTtbRy/0= Subject key identifier: FB:EE:57:EA:4C:73:02:D9:CA:F5:DB:B2:D9:09:1C:FF:78:C2:D4:E7 Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f Certificate serial: 019AF31C207026FF6CCF76F5382E642BC372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft Manifest number: 0CC6 Signing time: Sat 06 Dec 2025 10:01:38 +0000 Manifest this update: Sat 06 Dec 2025 10:01:38 +0000 Manifest next update: Sun 07 Dec 2025 10:01:38 +0000 Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: XRYx1EVPiXkEy22EUmedXLiA4kOO/nLCxGUYR+Lw8K0=) 2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:20:70:26:ff:6c:cf:76:f5:38:2e:64:2b:c3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f Validity Not Before: Dec 6 10:01:38 2025 GMT Not After : Dec 7 10:01:38 2025 GMT Subject: CN=fbee57ea4c7302d9caf5dbb2d9091cff78c2d4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:03:b8:eb:a1:e4:7a:33:d8:89:08:e6:2f: 40:67:d5:68:4f:cc:b2:cc:99:ac:df:c3:b1:1c:cd: 3f:17:89:ca:83:d4:2d:a2:7b:65:a6:2a:5f:8c:40: 13:45:3e:73:1b:99:1c:dd:ca:d9:e7:3a:3a:02:5f: 05:4d:2c:ea:b3:92:de:c5:08:a5:f7:45:4a:6f:d3: 0f:62:73:91:59:c2:94:58:c6:18:d9:d8:41:24:b5: c9:ab:5b:81:fe:d3:ea:ce:18:14:bb:3b:c2:ca:58: 60:21:c9:19:a1:4e:66:0f:3d:03:17:4d:17:41:ca: e5:66:e9:ff:43:d3:83:2e:6f:d2:e7:3c:82:0f:f0: be:84:e1:0f:2e:9d:cd:d4:71:07:f7:54:e9:0b:69: 3e:29:1c:a8:7c:c5:e3:73:46:c1:4d:67:ac:4d:05: 79:b7:64:e3:d7:08:44:4d:52:70:57:8b:33:dc:f4: 68:6f:d9:ff:7b:ea:61:99:cb:82:54:ee:d8:b9:f8: 09:3f:21:8d:2c:02:72:27:e9:a4:7b:f9:8e:09:61: dd:4c:16:9f:ff:72:3e:6a:76:87:26:11:51:b8:60: 02:ea:6a:1e:77:15:75:82:ac:d1:72:68:ad:b9:71: 2a:5e:3f:b4:72:ed:7c:b8:8a:ea:91:73:d7:19:a5: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:57:EA:4C:73:02:D9:CA:F5:DB:B2:D9:09:1C:FF:78:C2:D4:E7 X509v3 Authority Key Identifier: keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1e:95:d0:ab:fd:13:4b:1b:4c:4e:2b:0e:80:fd:29:69:18: e3:80:3a:b7:43:5c:6e:24:31:74:19:2c:1e:ee:38:67:3e:17: bf:7b:cf:28:83:d1:b5:85:e8:e2:73:14:99:51:94:c1:e5:4c: 6b:47:e4:f1:96:c1:d2:46:0d:a7:1d:2a:ab:c6:1d:24:c0:a1: 10:76:5d:13:8b:0c:b7:fa:31:e3:75:0b:78:48:56:58:bf:7e: c1:98:0c:4a:9c:f1:b3:9f:d8:e4:e1:8d:5c:47:ab:a6:58:68: b9:24:07:ad:f2:ae:90:df:05:75:bc:e6:35:f1:6c:d1:1c:fa: 98:a4:74:f4:7d:49:6c:02:5a:9e:56:2b:6c:37:ee:2d:ba:cd: 0d:61:0d:9d:ae:82:70:5c:87:05:03:77:95:cf:c0:15:d6:7a: 1b:e8:b7:21:51:d4:54:68:94:57:4e:cd:cb:b4:04:a7:c5:bd: 8e:74:2d:45:c3:09:85:46:c9:55:c3:93:e3:fb:65:35:f0:55: c5:ee:ae:35:fc:1e:19:c0:97:fe:16:c0:62:a4:08:c1:0c:9d: 5f:a7:f7:59:5d:88:7d:0b:4d:de:ef:5a:54:d5:5e:5e:d9:17: 39:22:6f:43:52:59:0f:c8:37:35:5f:ee:95:fd:93:a5:99:d6: 3d:fa:45:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCBwJv9sz3b1OC5kK8NyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzE0MzhlMjNjZTkyNWU2NmMyNTk5ODEyMjFiNWI2ODNh MmYwOGYwHhcNMjUxMjA2MTAwMTM4WhcNMjUxMjA3MTAwMTM4WjAzMTEwLwYDVQQD EyhmYmVlNTdlYTRjNzMwMmQ5Y2FmNWRiYjJkOTA5MWNmZjc4YzJkNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DUDuOuh5Hoz2IkI5i9AZ9VoT8yy zJms38OxHM0/F4nKg9QtontlpipfjEATRT5zG5kc3crZ5zo6Al8FTSzqs5LexQil 90VKb9MPYnORWcKUWMYY2dhBJLXJq1uB/tPqzhgUuzvCylhgIckZoU5mDz0DF00X QcrlZun/Q9ODLm/S5zyCD/C+hOEPLp3N1HEH91TpC2k+KRyofMXjc0bBTWesTQV5 t2Tj1whETVJwV4sz3PRob9n/e+phmcuCVO7YufgJPyGNLAJyJ+mke/mOCWHdTBaf /3I+anaHJhFRuGAC6moedxV1gqzRcmituXEqXj+0cu18uIrqkXPXGaWSmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvuV+pMcwLZyvXbstkJHP94wtTnMB8GA1UdIwQY MBaAFFJxQ44jzpJeZsJZmBIhtbaDovCPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMt OWFkMDM1NDc0MTE0LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMtOWFkMDM1NDc0MTE0 LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsB6V0Kv9 E0sbTE4rDoD9KWkY44A6t0NcbiQxdBksHu44Zz4Xv3vPKIPRtYXo4nMUmVGUweVM a0fk8ZbB0kYNpx0qq8YdJMChEHZdE4sMt/ox43ULeEhWWL9+wZgMSpzxs5/Y5OGN XEerplhouSQHrfKukN8FdbzmNfFs0Rz6mKR09H1JbAJanlYrbDfuLbrNDWENna6C cFyHBQN3lc/AFdZ6G+i3IVHUVGiUV07Ny7QEp8W9jnQtRcMJhUbJVcOT4/tlNfBV xe6uNfweGcCX/hbAYqQIwQydX6f3WV2IfQtN3u9aVNVeXtkXOSJvQ1JZD8g3NV/u lf2TpZnWPfpFZg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:37 2025 by rpki-client