This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json) Hash identifier: VB9+Tc++kZ/GvHpZqtEekhg7bCTYM8kjh5dfP+4IzRo= Subject key identifier: A0:49:72:EA:93:3D:47:E9:9E:7F:94:53:82:78:03:C5:BD:66:85:FF Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2 Certificate serial: 019AF19BCD998978A13E0D76398C885D54C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:51 +0000 Manifest this update: Sat 06 Dec 2025 03:01:51 +0000 Manifest next update: Sun 07 Dec 2025 03:01:51 +0000 Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=) 2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: c09Ez2+ef7p1iHQjQShgMXMpc9FtNzoF3gXBEfyIVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:cd:99:89:78:a1:3e:0d:76:39:8c:88:5d:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2 Validity Not Before: Dec 6 03:01:51 2025 GMT Not After : Dec 7 03:01:51 2025 GMT Subject: CN=a04972ea933d47e99e7f9453827803c5bd6685ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1f:79:88:e5:85:02:f3:3e:11:31:87:29:d5: 95:14:17:33:a3:c0:a6:ff:8f:98:58:99:92:0a:b2: 24:d1:76:02:59:ff:7c:b9:43:3a:b1:f2:00:37:e4: 49:87:92:d5:e3:15:50:bd:fd:9b:05:78:3d:38:7e: c9:c4:a0:fa:3f:0f:9e:2c:ee:07:df:4e:8d:e6:ae: 82:fe:d2:ed:f4:5e:62:8a:2a:08:71:ef:fb:23:7c: f1:21:8e:66:63:73:f6:49:f8:2f:cb:0d:0b:d6:60: 3b:76:56:65:d4:81:11:49:70:83:f9:b3:f5:72:44: fe:6b:8b:d6:d1:bf:e4:c3:0b:33:59:67:fc:dc:bf: 7c:68:8f:9d:31:37:5c:32:49:a3:3b:7e:ff:b7:76: 76:7b:cf:92:3d:73:99:be:8e:ae:93:bf:d3:80:db: 9a:ca:25:44:30:8e:43:0f:4b:66:1d:3e:a6:c8:9a: 0f:bb:52:ce:c1:2e:2b:2a:7c:2c:14:d3:fe:60:1c: c5:08:f5:55:38:12:7b:a9:07:1a:e4:f6:3e:d2:9f: e5:1d:b3:60:50:b8:f1:15:ec:2f:c5:0d:71:11:92: 0d:cd:f1:0b:ca:81:75:e1:21:8a:35:a5:a4:f9:4f: 6f:9b:c8:e7:2a:57:e6:ff:ff:05:fc:87:a1:43:51: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:49:72:EA:93:3D:47:E9:9E:7F:94:53:82:78:03:C5:BD:66:85:FF X509v3 Authority Key Identifier: keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ab:5d:aa:45:37:41:a5:fa:a4:71:8d:29:a5:59:71:76:bd: a4:0c:0c:96:2e:14:a8:c8:5f:76:71:eb:b1:ea:ec:c7:78:e6: e5:d7:57:85:82:9a:8e:36:9f:16:71:b5:ef:31:57:61:4e:2d: ec:5c:74:38:0c:f6:42:b5:75:28:f9:df:3a:3b:3d:17:6a:e8: 6c:13:e9:ba:96:1c:ed:9f:38:ff:bc:91:69:10:cd:02:2e:bd: 2c:15:b0:15:6b:7e:84:1d:66:f4:77:f0:c3:55:fd:ed:24:21: 3d:15:be:80:94:ff:5d:5e:63:e5:1d:a5:f9:67:dc:ce:f7:32: b1:9c:9b:ed:80:97:06:17:2f:b5:67:bc:1a:0e:e6:ac:31:ea: b5:ad:8c:cf:34:12:a6:05:2b:39:ce:a4:a8:30:f8:62:29:36: 38:0c:e8:72:8e:fe:50:89:11:b5:fc:7f:99:04:8b:22:e0:77: c4:49:f3:fb:6f:f1:e2:21:ca:79:e0:b1:b4:eb:d9:df:c4:fb: 5d:da:d0:c3:a1:42:65:37:7c:4a:24:37:3a:e0:3a:1b:d3:0f: c0:31:f5:0f:0d:fb:48:78:05:10:5b:83:e8:80:f5:1d:93:28: 7c:a6:ce:b9:c2:4c:30:9b:ec:bf:71:a1:12:96:fd:a0:2f:f6: 86:3b:48:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm82ZiXihPg12OYyIXVTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNzY3MDZkM2UwODgxM2RiOGIyNzc2NjI4YWY4NDY1MThl MjZkZDIwHhcNMjUxMjA2MDMwMTUxWhcNMjUxMjA3MDMwMTUxWjAzMTEwLwYDVQQD EyhhMDQ5NzJlYTkzM2Q0N2U5OWU3Zjk0NTM4Mjc4MDNjNWJkNjY4NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B95iOWFAvM+ETGHKdWVFBczo8Cm /4+YWJmSCrIk0XYCWf98uUM6sfIAN+RJh5LV4xVQvf2bBXg9OH7JxKD6Pw+eLO4H 306N5q6C/tLt9F5iiioIce/7I3zxIY5mY3P2Sfgvyw0L1mA7dlZl1IERSXCD+bP1 ckT+a4vW0b/kwwszWWf83L98aI+dMTdcMkmjO37/t3Z2e8+SPXOZvo6uk7/TgNua yiVEMI5DD0tmHT6myJoPu1LOwS4rKnwsFNP+YBzFCPVVOBJ7qQca5PY+0p/lHbNg ULjxFewvxQ1xEZINzfELyoF14SGKNaWk+U9vm8jnKlfm//8F/IehQ1FKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBJcuqTPUfpnn+UU4J4A8W9ZoX/MB8GA1UdIwQY MBaAFLp2cG0+CIE9uLJ3ZiivhGUY4m3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgt NjY5ZWVkMmVjN2VhLzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgtNjY5ZWVkMmVjN2Vh LzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWatdqkU3 QaX6pHGNKaVZcXa9pAwMli4UqMhfdnHrsersx3jm5ddXhYKajjafFnG17zFXYU4t 7Fx0OAz2QrV1KPnfOjs9F2robBPpupYc7Z84/7yRaRDNAi69LBWwFWt+hB1m9Hfw w1X97SQhPRW+gJT/XV5j5R2l+WfczvcysZyb7YCXBhcvtWe8Gg7mrDHqta2MzzQS pgUrOc6kqDD4Yik2OAzoco7+UIkRtfx/mQSLIuB3xEnz+2/x4iHKeeCxtOvZ38T7 XdrQw6FCZTd8SiQ3OuA6G9MPwDH1Dw37SHgFEFuD6ID1HZMofKbOucJMMJvsv3Gh Epb9oC/2hjtIEw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:13 2025 by rpki-client