This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json) Hash identifier: CVFcirvjZNvQOkRSwEWr1HMzsq0/EcIUyLe/Chj9UGY= Subject key identifier: 4F:49:45:7F:AA:10:42:1D:BB:31:F3:A3:0E:AD:91:C1:2A:F2:11:D2 Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec Certificate serial: 019AF12D26DFFE2EA35F1B972E59A918CF87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: alB9AwxPsiFVFckW89dEoP/4xbzO/Ytap58l1MLjgss=) 2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=) 3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:26:df:fe:2e:a3:5f:1b:97:2e:59:a9:18:cf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=4f49457faa10421dbb31f3a30ead91c12af211d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:35:4a:99:10:a0:6b:fe:2b:d2:4f:15:53: 87:2b:4f:90:18:23:23:a9:b8:bf:6a:09:e5:0e:11: 7c:77:1f:62:ec:d2:f0:5c:8c:94:31:ed:cd:06:1f: 0e:1f:2f:10:cf:c8:ba:87:18:98:c2:0a:f1:c2:7b: 98:67:e3:25:a4:d4:ef:fa:c8:63:d4:97:d6:b1:5d: a0:f1:96:fb:11:34:7b:1d:ce:b0:f3:d9:69:dc:2d: 3f:0b:46:b4:1c:ed:c0:95:5a:b9:b1:87:dc:4e:fd: 1d:ae:e6:4d:e1:f1:6a:02:0a:d5:b9:27:6b:b7:a1: 07:64:8a:9b:a1:36:84:f4:81:6a:99:3b:c3:02:20: b2:3c:80:fb:fa:64:29:32:4b:2d:ed:f3:dd:db:bd: d2:ce:fb:27:8e:58:9d:d7:2e:a0:80:67:48:e6:c6: db:d6:58:6e:df:4a:73:18:11:91:cd:88:3a:15:0e: 2b:42:07:e5:1e:5d:5e:e9:66:98:49:27:19:2e:20: 89:c8:c3:e5:cd:45:28:b9:c8:b2:3f:6c:22:10:e1: fc:4b:60:b4:d4:81:93:e7:04:ef:84:db:59:dc:20: 3d:26:54:37:31:18:21:2b:ba:30:08:20:48:d4:80: c7:74:72:73:45:5a:77:d2:0f:45:c9:54:9f:f1:27: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:49:45:7F:AA:10:42:1D:BB:31:F3:A3:0E:AD:91:C1:2A:F2:11:D2 X509v3 Authority Key Identifier: keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:41:ff:3d:08:e9:5e:ef:c0:4b:f2:cd:29:a4:33:ae:50:dd: 1c:ae:4f:5a:7c:a9:78:63:0f:7c:e2:d9:68:57:e5:ad:66:41: 2d:91:70:52:83:14:e7:7c:d0:b7:ce:f7:ef:c1:14:6a:80:7b: 98:54:10:48:0d:d0:80:75:0e:91:f5:b3:6f:13:65:34:4a:78: d9:46:31:ef:55:6e:05:17:5e:a8:47:e2:db:25:6e:30:07:5c: c5:e9:b4:f0:e9:45:22:aa:f5:3e:3d:67:f5:fe:a1:0b:79:b7: 87:95:52:68:12:4a:e8:b2:9a:73:2f:a7:99:fd:aa:48:a2:6e: 08:60:64:82:eb:b6:43:39:80:45:71:5f:35:7b:60:5e:37:5e: b1:44:c3:41:bd:0e:4c:7c:31:7f:74:5f:e1:23:69:c5:cc:97: 44:14:0b:69:d2:eb:e2:f4:88:b8:ee:6d:f9:70:7a:fe:91:89: 5c:58:5e:c1:97:30:f6:53:1e:d0:10:21:b7:15:c2:f9:36:e5: 30:e8:10:c5:59:bc:aa:84:1c:be:00:1d:e5:57:08:f3:df:7d: e3:02:fe:d6:f0:67:32:49:44:5c:81:5b:1d:5d:c3:2e:a2:b5: 2b:a7:b0:41:09:2c:47:5c:f3:d5:9c:bd:20:71:35:f8:bf:d0: 0a:f1:89:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSbf/i6jXxuXLlmpGM+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl NjNmZWMwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD Eyg0ZjQ5NDU3ZmFhMTA0MjFkYmIzMWYzYTMwZWFkOTFjMTJhZjIxMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIY1SpkQoGv+K9JPFVOHK0+QGCMj qbi/agnlDhF8dx9i7NLwXIyUMe3NBh8OHy8Qz8i6hxiYwgrxwnuYZ+MlpNTv+shj 1JfWsV2g8Zb7ETR7Hc6w89lp3C0/C0a0HO3AlVq5sYfcTv0druZN4fFqAgrVuSdr t6EHZIqboTaE9IFqmTvDAiCyPID7+mQpMkst7fPd273Szvsnjlid1y6ggGdI5sbb 1lhu30pzGBGRzYg6FQ4rQgflHl1e6WaYSScZLiCJyMPlzUUouciyP2wiEOH8S2C0 1IGT5wTvhNtZ3CA9JlQ3MRghK7owCCBI1IDHdHJzRVp30g9FyVSf8SeXIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9JRX+qEEIduzHzow6tkcEq8hHSMB8GA1UdIwQY MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt YmEwMzIzMjM3NDRjLzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkH/PQjp Xu/AS/LNKaQzrlDdHK5PWnypeGMPfOLZaFflrWZBLZFwUoMU53zQt87378EUaoB7 mFQQSA3QgHUOkfWzbxNlNEp42UYx71VuBRdeqEfi2yVuMAdcxem08OlFIqr1Pj1n 9f6hC3m3h5VSaBJK6LKacy+nmf2qSKJuCGBkguu2QzmARXFfNXtgXjdesUTDQb0O THwxf3Rf4SNpxcyXRBQLadLr4vSIuO5t+XB6/pGJXFhewZcw9lMe0BAhtxXC+Tbl MOgQxVm8qoQcvgAd5VcI89994wL+1vBnMklEXIFbHV3DLqK1K6ewQQksR1zz1Zy9 IHE1+L/QCvGJTA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:57 2025 by rpki-client