This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json) Hash identifier: NYRDYqZjPMM7o5QNQtdVf9vOZkLypB8hwdWTt5ofDdc= Subject key identifier: BA:99:AE:5C:30:6D:8A:9D:33:CC:AB:4E:5D:C0:23:9C:79:9C:1F:8E Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f Certificate serial: 019B3E6C910E5593EBDEE2D974FF2BA5D5D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft Manifest number: 0CED Signing time: Sun 21 Dec 2025 01:01:00 +0000 Manifest this update: Sun 21 Dec 2025 01:01:00 +0000 Manifest next update: Mon 22 Dec 2025 01:01:00 +0000 Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: ZnHHB0+iJ6berFdrWpQ8CljRZse3NYOvHnHYczvWXCg=) 2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:91:0e:55:93:eb:de:e2:d9:74:ff:2b:a5:d5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f Validity Not Before: Dec 21 01:01:00 2025 GMT Not After : Dec 22 01:01:00 2025 GMT Subject: CN=ba99ae5c306d8a9d33ccab4e5dc0239c799c1f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0a:92:96:33:15:e1:c5:84:92:65:7f:8e:53: 16:9f:74:75:01:61:03:9b:a3:45:7e:8a:71:8a:fe: fc:5e:0e:78:ed:9c:49:4e:2a:ba:37:27:2a:6f:63: 7b:8f:8f:e8:28:ec:0e:f3:df:19:f3:f5:b4:70:53: 57:d5:bd:1e:ef:07:14:b7:d9:d2:6e:b9:df:81:51: 62:87:b2:9f:8a:bb:d8:8a:4d:ce:fa:a7:a8:3b:cf: 21:6e:bf:e5:ad:12:59:fa:70:30:e5:07:aa:9c:56: 6a:ae:6e:fa:e8:6e:f9:89:b1:17:b0:a6:b5:05:78: 1c:75:e3:e3:39:67:4d:f4:23:ad:9f:8a:19:df:45: cf:1c:8c:8b:ce:7b:35:1e:7b:5e:60:83:14:9f:27: bf:87:03:ef:ed:b0:6f:2a:03:43:65:0f:71:9c:7f: d7:4b:d1:9b:77:fe:83:a0:76:3a:0a:69:0d:4f:ad: d6:f0:f9:af:f9:78:29:b9:c0:31:5a:b2:a7:18:e3: 7f:c8:e6:11:64:02:b5:7d:84:77:98:1d:cd:51:50: 49:e4:75:52:a5:af:79:36:5a:44:2a:4f:1f:9c:53: a5:f7:dd:ae:14:88:39:bc:58:5c:55:fe:b3:8d:1b: 3d:32:01:fa:35:21:65:70:2e:63:1b:97:64:e9:f5: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:99:AE:5C:30:6D:8A:9D:33:CC:AB:4E:5D:C0:23:9C:79:9C:1F:8E X509v3 Authority Key Identifier: keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:d0:3c:6b:15:a7:87:e4:2f:9f:14:2a:54:0a:12:16:24:b3: 66:f9:92:34:9e:13:4c:08:80:73:2d:a3:a3:ba:35:a0:e6:99: d3:00:c7:80:2a:53:8d:70:71:92:2d:98:8f:1a:9c:24:9e:39: 33:38:92:a6:51:32:45:7d:4e:39:ea:48:1d:d3:4f:f2:44:9e: 08:36:e3:a7:83:e1:ff:b3:5c:a1:06:50:d8:a0:4e:53:40:1d: 19:38:6f:76:67:95:71:3f:13:b0:b7:11:6e:9c:8a:53:77:a4: 16:b9:2b:87:e5:1d:4e:7e:fc:b2:be:ca:18:5a:b1:67:6f:e5: 74:b7:a7:5e:f7:40:9e:4f:b5:06:ef:8b:7f:c6:7f:4b:41:e5: 57:b8:bd:56:c8:9e:17:47:c8:a0:c3:72:1e:a2:c2:e5:71:ef: 9a:65:24:19:13:a1:eb:05:84:eb:07:2f:4a:03:44:ae:30:9a: 3c:80:26:cb:f1:51:ae:a3:c5:27:70:d9:dd:f0:40:55:48:ed: b1:f0:51:b3:2a:aa:ee:c3:f5:9f:a8:e9:ee:38:c0:d9:70:ec: ee:02:8f:5d:f4:f6:93:39:90:f4:65:3d:68:bf:29:5d:62:2a: b6:8c:47:57:41:e0:e6:d5:d4:f4:02:f6:b7:9f:23:be:2c:3e: c0:1c:82:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJEOVZPr3uLZdP8rpdXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzE0MzhlMjNjZTkyNWU2NmMyNTk5ODEyMjFiNWI2ODNh MmYwOGYwHhcNMjUxMjIxMDEwMTAwWhcNMjUxMjIyMDEwMTAwWjAzMTEwLwYDVQQD EyhiYTk5YWU1YzMwNmQ4YTlkMzNjY2FiNGU1ZGMwMjM5Yzc5OWMxZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wqSljMV4cWEkmV/jlMWn3R1AWED m6NFfopxiv78Xg547ZxJTiq6Nycqb2N7j4/oKOwO898Z8/W0cFNX1b0e7wcUt9nS brnfgVFih7KfirvYik3O+qeoO88hbr/lrRJZ+nAw5QeqnFZqrm766G75ibEXsKa1 BXgcdePjOWdN9COtn4oZ30XPHIyLzns1HnteYIMUnye/hwPv7bBvKgNDZQ9xnH/X S9Gbd/6DoHY6CmkNT63W8Pmv+XgpucAxWrKnGON/yOYRZAK1fYR3mB3NUVBJ5HVS pa95NlpEKk8fnFOl992uFIg5vFhcVf6zjRs9MgH6NSFlcC5jG5dk6fXzEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqZrlwwbYqdM8yrTl3AI5x5nB+OMB8GA1UdIwQY MBaAFFJxQ44jzpJeZsJZmBIhtbaDovCPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMt OWFkMDM1NDc0MTE0LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMtOWFkMDM1NDc0MTE0 LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydA8axWn h+QvnxQqVAoSFiSzZvmSNJ4TTAiAcy2jo7o1oOaZ0wDHgCpTjXBxki2YjxqcJJ45 MziSplEyRX1OOepIHdNP8kSeCDbjp4Ph/7NcoQZQ2KBOU0AdGThvdmeVcT8TsLcR bpyKU3ekFrkrh+UdTn78sr7KGFqxZ2/ldLenXvdAnk+1Bu+Lf8Z/S0HlV7i9Vsie F0fIoMNyHqLC5XHvmmUkGROh6wWE6wcvSgNErjCaPIAmy/FRrqPFJ3DZ3fBAVUjt sfBRsyqq7sP1n6jp7jjA2XDs7gKPXfT2kzmQ9GU9aL8pXWIqtoxHV0Hg5tXU9AL2 t58jviw+wByCHw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:20:45 2025 by rpki-client