This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json) Hash identifier: 1QSo7vLK/Ic9jcWY24JsU/TzBaShqxnyrq6ayYSxszM= Subject key identifier: AE:82:31:9A:07:7D:AA:D4:93:D5:67:E7:96:4A:5F:E6:09:7D:37:2F Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0 Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0 Certificate serial: 019AF23FC4E0FF9B83C49B43977198FA7E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=) 2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: LePEO6J1+BaaRnRGdGMaHvhvOMKgykZuORPpddPfvj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c4:e0:ff:9b:83:c4:9b:43:97:71:98:fa:7e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=ae82319a077daad493d567e7964a5fe6097d372f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:12:dd:77:6e:bd:4a:58:42:bb:3e:ed:ae: d6:0b:3a:f7:4d:d6:00:14:8c:7b:7b:99:59:ad:fe: 56:b9:3c:a4:2e:52:25:3a:c1:d7:10:58:1d:60:0a: fe:66:44:f0:92:87:50:20:ac:8e:cd:f2:03:a7:bd: 75:98:57:e1:6b:70:15:65:da:35:37:83:e8:3a:8d: dc:f4:d5:f5:02:8c:e7:1c:33:3f:bb:c0:de:98:63: a0:99:19:19:53:5b:fc:4b:fe:e9:e6:2c:0b:14:01: a7:2d:72:01:c1:51:ea:44:d8:da:ea:89:77:b9:3a: 18:8f:dd:e0:58:16:e2:c5:e7:a0:b5:39:9c:13:8d: 31:4b:0f:47:e4:05:a3:81:3b:8f:a3:32:56:50:d6: 3e:29:c6:cb:d4:f8:c3:bb:25:61:cc:fb:c2:6f:f1: b6:e9:b7:05:50:83:5f:8a:1d:1f:59:d0:01:d1:4a: bf:79:90:29:22:91:2a:e2:ef:43:7c:48:3d:4d:84: 3f:8d:19:0c:eb:c6:ca:ea:70:1c:4e:1d:07:e2:2d: e0:b6:97:d6:e5:48:b3:18:7f:05:54:2c:dc:85:a0: e3:1b:55:e3:96:d9:0e:e5:7f:21:8b:f9:8a:9a:40: 33:54:28:54:d9:26:9e:25:b4:08:8e:73:8b:ff:8a: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:82:31:9A:07:7D:AA:D4:93:D5:67:E7:96:4A:5F:E6:09:7D:37:2F X509v3 Authority Key Identifier: keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7a:e7:33:5b:a2:ee:f1:6c:48:ba:f4:a9:f3:2e:73:7e:dc: f6:d5:24:6c:82:d2:1e:a9:09:d0:50:d2:ae:64:ae:20:3c:35: 26:ec:71:63:2f:3d:da:9f:a5:06:22:28:e1:68:fd:47:ae:dd: 2b:2d:3a:7f:ab:08:07:7f:90:c0:ac:25:37:4b:fa:6c:c6:a4: f2:3d:9e:a4:cc:82:25:94:c0:b3:35:fd:d1:c8:2e:4e:ae:72: e8:a6:bf:bd:b8:b6:9a:e3:00:81:6d:f1:5e:7d:fa:3e:7a:56: da:8f:e0:3f:ac:7d:99:ca:6d:7f:3c:29:92:ee:44:55:d0:7c: 02:eb:ef:74:b9:0f:a3:31:8f:85:53:bb:10:b9:b6:90:ba:eb: 3b:c0:85:9e:40:23:cf:2a:d9:97:5e:61:87:30:b6:a4:a6:83: 00:fc:cd:79:9c:5b:a6:44:42:72:a5:e0:e8:70:81:d9:c4:6a: 99:fe:9a:ed:5d:d9:04:6f:1a:80:d1:39:b7:3a:ef:2e:62:9e: aa:be:f7:47:0a:6f:86:e4:02:47:bb:5a:5d:12:5a:82:f6:00: 1a:2f:c6:98:69:3c:c0:e5:74:0e:2b:85:a2:48:94:ea:15:78: 61:63:a1:a6:20:df:f6:2a:93:26:e6:c5:2b:f4:20:ef:bc:ba: cb:af:16:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8Tg/5uDxJtDl3GY+n4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzA3ODZmMTdjNDFiZDAxNjI2ZjcyZGIyMzlmMjA4YjUx ODliYjAwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhhZTgyMzE5YTA3N2RhYWQ0OTNkNTY3ZTc5NjRhNWZlNjA5N2QzNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGYS3XduvUpYQrs+7a7WCzr3TdYA FIx7e5lZrf5WuTykLlIlOsHXEFgdYAr+ZkTwkodQIKyOzfIDp711mFfha3AVZdo1 N4PoOo3c9NX1AoznHDM/u8DemGOgmRkZU1v8S/7p5iwLFAGnLXIBwVHqRNja6ol3 uToYj93gWBbixeegtTmcE40xSw9H5AWjgTuPozJWUNY+KcbL1PjDuyVhzPvCb/G2 6bcFUINfih0fWdAB0Uq/eZApIpEq4u9DfEg9TYQ/jRkM68bK6nAcTh0H4i3gtpfW 5UizGH8FVCzchaDjG1XjltkO5X8hi/mKmkAzVChU2SaeJbQIjnOL/4rY+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6CMZoHfarUk9Vn55ZKX+YJfTcvMB8GA1UdIwQY MBaAFFJweG8XxBvQFib3LbI58gi1GJuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZDQzY2ItODQxYy00MGYyLTlkOWYt NzVmNDdmMDdjNGUzLzEvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZDQzY2ItODQxYy00MGYyLTlkOWYtNzVmNDdmMDdjNGUz LzEvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnrnM1ui 7vFsSLr0qfMuc37c9tUkbILSHqkJ0FDSrmSuIDw1JuxxYy892p+lBiIo4Wj9R67d Ky06f6sIB3+QwKwlN0v6bMak8j2epMyCJZTAszX90cguTq5y6Ka/vbi2muMAgW3x Xn36PnpW2o/gP6x9mcptfzwpku5EVdB8AuvvdLkPozGPhVO7ELm2kLrrO8CFnkAj zyrZl15hhzC2pKaDAPzNeZxbpkRCcqXg6HCB2cRqmf6a7V3ZBG8agNE5tzrvLmKe qr73RwpvhuQCR7taXRJagvYAGi/GmGk8wOV0DiuFokiU6hV4YWOhpiDf9iqTJubF K/Qg77y6y68Wyw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:44 2025 by rpki-client