This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json) Hash identifier: uPvLiFU+SpppoUq4B1UeJ4i0zVa0Sc5EjXHlcnvjwCc= Subject key identifier: 71:7D:46:6E:B7:29:99:B7:AC:C0:D6:70:DD:1B:E3:10:69:88:EF:D3 Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31 Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31 Certificate serial: 019AF1D1C5952592BAC1D93E5FCC68BDC387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft Manifest number: 16A2 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=) 2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=) 3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: Ug3oKMTPwv3CEFev5KsAU26oL4ItX/x6cyXAKhEXVUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c5:95:25:92:ba:c1:d9:3e:5f:cc:68:bd:c3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=717d466eb72999b7acc0d670dd1be3106988efd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:24:a7:6a:d4:b1:3e:cb:be:0d:8c:d8:37: 7b:bf:65:d2:9c:f4:5a:2f:04:70:0d:ab:e8:d0:ed: 59:c7:0c:2d:9d:11:77:39:2c:e4:74:94:0c:e8:b2: 0c:db:26:a5:c6:19:07:df:37:d6:fd:61:ac:67:8d: 1a:d2:6a:4b:7b:f4:5e:9e:29:1f:82:66:50:17:cf: fe:8a:9a:9a:b4:fb:25:7b:38:28:54:33:77:2e:94: d7:4d:46:76:c4:9b:35:54:fc:8a:55:64:ca:bf:17: 5a:25:f0:4c:96:e5:74:b3:72:63:0a:86:59:4b:f7: 73:5e:11:9c:a8:46:37:6e:2a:ad:0b:7a:70:55:4b: 4a:a1:19:7f:3c:5d:f4:63:a1:33:74:4a:d4:ee:4a: bb:f3:d0:89:c9:f7:f3:86:bb:07:5e:3e:d5:a1:4c: 68:27:63:bb:55:ad:60:54:e2:6b:e4:61:7b:c7:cd: 0b:0f:4e:c9:9b:9e:46:a7:5c:f2:6a:eb:b6:26:6e: 05:88:8b:cf:71:7d:00:ba:c7:68:2a:0c:c4:f0:11: 89:ee:e0:a8:95:d1:83:46:67:23:ff:07:08:a0:2b: bb:38:9e:a1:91:75:0b:94:89:e5:f1:1a:ef:11:69: 0a:93:29:68:eb:27:59:23:7c:cb:f8:76:e0:23:3d: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7D:46:6E:B7:29:99:B7:AC:C0:D6:70:DD:1B:E3:10:69:88:EF:D3 X509v3 Authority Key Identifier: keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3a:ee:d6:2c:4d:6d:ee:83:c0:7a:b6:bd:cb:6d:a4:a9:5e: df:41:7d:a2:b0:87:34:c8:f6:4d:c8:7e:df:16:fa:32:59:39: ff:c7:54:c7:04:d4:eb:a6:fd:fd:1e:7f:89:c2:5a:87:83:71: 67:5c:55:1b:8f:14:ff:8d:64:f3:65:5f:54:c4:95:20:f8:c4: 8b:6f:0b:96:a8:7c:55:0e:85:30:4f:3e:d9:c8:83:12:36:6a: 5c:20:cc:54:5b:d5:db:61:db:26:c1:3f:57:f0:58:9f:65:05: 7c:a8:52:cf:d5:7d:f3:12:64:aa:2d:57:f1:59:5f:6a:52:ce: 0f:36:86:9d:61:17:18:36:e4:04:a6:e8:55:9f:f0:f7:8e:d2: 8f:ce:4a:3f:0e:ff:c4:22:58:44:29:43:5f:ab:de:fe:15:ff: 1b:32:37:9e:bb:d7:9c:03:77:41:f9:66:4d:97:a7:ef:c1:b2: 1d:61:1d:d2:67:2f:bd:93:63:a9:fb:fd:da:f5:95:bc:3b:75: b5:84:66:1e:1d:38:17:88:d9:fe:08:80:46:71:bc:73:d0:4c: c8:84:e3:e6:ac:1a:08:16:90:cd:de:0b:56:71:61:20:e6:01: cb:14:97:97:5a:ac:a7:d8:01:96:7e:c2:bd:26:4d:f6:27:2a: 14:f6:2f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cWVJZK6wdk+X8xovcOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZDE4MTk2YjI5ZjYwZTg1ZDg3MTJkZTQwMzlhNTMxY2Zj MWFiMzEwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD Eyg3MTdkNDY2ZWI3Mjk5OWI3YWNjMGQ2NzBkZDFiZTMxMDY5ODhlZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Akp2rUsT7Lvg2M2Dd7v2XSnPRa LwRwDavo0O1ZxwwtnRF3OSzkdJQM6LIM2yalxhkH3zfW/WGsZ40a0mpLe/Renikf gmZQF8/+ipqatPslezgoVDN3LpTXTUZ2xJs1VPyKVWTKvxdaJfBMluV0s3JjCoZZ S/dzXhGcqEY3biqtC3pwVUtKoRl/PF30Y6EzdErU7kq789CJyffzhrsHXj7VoUxo J2O7Va1gVOJr5GF7x80LD07Jm55Gp1zyauu2Jm4FiIvPcX0AusdoKgzE8BGJ7uCo ldGDRmcj/wcIoCu7OJ6hkXULlInl8RrvEWkKkylo6ydZI3zL+HbgIz0UsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF9Rm63KZm3rMDWcN0b4xBpiO/TMB8GA1UdIwQY MBaAFFDRgZayn2DoXYcS3kA5pTHPwasxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2Et YjRhMTgxY2Q0MGY2LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2EtYjRhMTgxY2Q0MGY2 LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDru1ixN be6DwHq2vcttpKle30F9orCHNMj2Tch+3xb6Mlk5/8dUxwTU66b9/R5/icJah4Nx Z1xVG48U/41k82VfVMSVIPjEi28Llqh8VQ6FME8+2ciDEjZqXCDMVFvV22HbJsE/ V/BYn2UFfKhSz9V98xJkqi1X8VlfalLODzaGnWEXGDbkBKboVZ/w947Sj85KPw7/ xCJYRClDX6ve/hX/GzI3nrvXnAN3QflmTZen78GyHWEd0mcvvZNjqfv92vWVvDt1 tYRmHh04F4jZ/giARnG8c9BMyITj5qwaCBaQzd4LVnFhIOYByxSXl1qsp9gBln7C vSZN9icqFPYvTw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:41 2025 by rpki-client