This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json) Hash identifier: DHrZ87VXM8x1icYQ4O1A4Yn6u4nPjK/ZZA4if+kxMP0= Subject key identifier: 4C:92:41:F7:E5:0F:A4:29:99:95:40:D6:2B:98:B7:31:63:BB:3F:EC Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0 Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0 Certificate serial: 019AF1648F4AED29CF18B760A653CACFB10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft Manifest number: 10FC Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: sNNb68T43Dwaw+Gr7eSFe4VI1aTVXphN9tSUQiBUtE4=) 2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8f:4a:ed:29:cf:18:b7:60:a6:53:ca:cf:b1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0 Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=4c9241f7e50fa429999540d62b98b73163bb3fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:38:69:53:fb:07:12:b8:6d:d4:4d:50:50:b2: bf:ab:75:b5:ed:85:95:8b:7f:55:41:63:f7:93:0b: e9:ed:4e:dc:20:5c:74:d6:e8:f3:4e:8f:96:aa:44: 60:11:1d:c7:64:91:b0:79:8b:f9:af:3f:07:a2:35: 04:27:ca:c2:d2:58:6c:4b:33:c4:81:50:56:41:9b: 4e:67:fe:d6:af:ec:71:45:65:1c:c6:45:bb:3b:c8: db:38:e6:cc:38:93:81:d0:0a:1c:5a:84:a8:ac:e8: 36:3b:9f:64:52:7a:24:b9:97:97:03:ac:62:3c:96: ba:70:82:9d:9f:e4:f0:2a:ea:88:89:18:ff:11:34: a1:ca:ee:82:b0:f2:b2:4f:53:fb:0c:51:f9:92:0a: 54:07:2a:f7:82:d6:7a:e8:14:1c:3b:4e:79:19:54: 82:2b:1d:61:b2:a7:ac:8b:61:f3:55:b0:c7:66:c4: d4:93:68:39:3d:64:e6:d6:e3:08:79:7c:3f:a4:ac: ac:0f:a1:ac:28:6b:56:79:3c:0e:9e:5d:a1:fc:ba: 8e:7b:37:93:e4:76:7d:bd:ba:1a:a6:c3:d0:15:14: d3:e3:f3:15:a3:26:f9:8f:cb:bf:24:c8:d4:5f:07: d3:33:89:68:5c:b8:5f:32:69:66:21:1c:8d:8e:3b: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:41:F7:E5:0F:A4:29:99:95:40:D6:2B:98:B7:31:63:BB:3F:EC X509v3 Authority Key Identifier: keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:1f:45:eb:a2:6c:e5:84:b7:72:ef:d1:a0:4c:4d:25:dd:5d: 2c:93:1f:c4:e5:09:b6:46:1a:1d:5a:8b:1e:dc:99:77:ef:12: f8:3d:65:70:e9:25:2e:47:49:b6:87:25:20:b1:fc:0b:24:5d: c0:49:bd:f3:69:98:72:29:cc:14:88:dc:df:c9:a9:11:db:7c: 53:a8:e1:b9:8f:d8:cf:36:2b:12:ea:2c:e3:07:bc:f8:fb:e6: b4:04:ec:c1:56:f2:d4:7d:c3:9f:23:9d:f4:91:2d:ca:8d:77: 6c:17:ed:c9:64:6b:46:09:03:7d:cc:69:06:6d:93:43:49:2c: 1f:70:73:26:78:a8:30:d3:e9:45:a8:47:10:55:db:65:03:82: e5:a4:96:dc:74:8b:a2:4f:67:3d:40:79:e2:ea:a1:8f:cb:75: 23:33:8e:3d:95:c1:ff:a4:e2:50:a0:58:ce:da:e4:0a:08:40: c4:a4:7c:d1:1b:7b:d8:02:11:5e:1a:b3:1b:5c:f0:a5:fa:7c: 5b:54:24:62:ba:58:b4:19:5f:d1:9f:60:69:8f:e4:1f:56:aa: ab:48:95:4d:c1:b1:00:31:a8:b0:89:7b:e2:46:f9:ea:b3:9d: d1:37:51:76:18:3c:06:b2:4c:83:8b:43:9b:31:61:c3:46:98: 6b:70:a2:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI9K7SnPGLdgplPKz7EKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzAyY2RlZTA0MzA5NGFjMmYzMzE3MDEyNWY5NGY3MDM0 ZGE4ZjAwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD Eyg0YzkyNDFmN2U1MGZhNDI5OTk5NTQwZDYyYjk4YjczMTYzYmIzZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ThpU/sHErht1E1QULK/q3W17YWV i39VQWP3kwvp7U7cIFx01ujzTo+WqkRgER3HZJGweYv5rz8HojUEJ8rC0lhsSzPE gVBWQZtOZ/7Wr+xxRWUcxkW7O8jbOObMOJOB0AocWoSorOg2O59kUnokuZeXA6xi PJa6cIKdn+TwKuqIiRj/ETShyu6CsPKyT1P7DFH5kgpUByr3gtZ66BQcO055GVSC Kx1hsqesi2HzVbDHZsTUk2g5PWTm1uMIeXw/pKysD6GsKGtWeTwOnl2h/LqOezeT 5HZ9vboapsPQFRTT4/MVoyb5j8u/JMjUXwfTM4loXLhfMmlmIRyNjjsmiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEySQfflD6QpmZVA1iuYtzFjuz/sMB8GA1UdIwQY MBaAFFJwLN7gQwlKwvMxcBJflPcDTajwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2Qt ZTI4MGI2NTAxNzA0LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2QtZTI4MGI2NTAxNzA0 LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuB9F66Js 5YS3cu/RoExNJd1dLJMfxOUJtkYaHVqLHtyZd+8S+D1lcOklLkdJtoclILH8CyRd wEm982mYcinMFIjc38mpEdt8U6jhuY/YzzYrEuos4we8+PvmtATswVby1H3DnyOd 9JEtyo13bBftyWRrRgkDfcxpBm2TQ0ksH3BzJnioMNPpRahHEFXbZQOC5aSW3HSL ok9nPUB54uqhj8t1IzOOPZXB/6TiUKBYztrkCghAxKR80Rt72AIRXhqzG1zwpfp8 W1QkYrpYtBlf0Z9gaY/kH1aqq0iVTcGxADGosIl74kb56rOd0TdRdhg8BrJMg4tD mzFhw0aYa3Cimw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:32 2025 by rpki-client