This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json) Hash identifier: +f/hf57NQyLFYhzwZJkqE+z2vshKoJjiBmdvZrqmpJI= Subject key identifier: FA:9A:FC:B1:91:5B:C9:F4:68:5F:AC:D7:57:EB:3C:3C:D6:D7:94:E7 Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85 Certificate serial: 019AF163E80FB4975E9A379EEE594D8550AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft Manifest number: 0E1A Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=) 2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: BgjfexCo5T9krpx7VPl3sFvsoa4L8F0cBHY2vVRIOGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e8:0f:b4:97:5e:9a:37:9e:ee:59:4d:85:50:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=fa9afcb1915bc9f4685facd757eb3c3cd6d794e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:d1:14:4e:a6:f7:3a:c1:29:fa:23:9e:8f: 8b:c5:ca:3a:25:00:2d:2d:00:9e:9d:2a:ff:9e:8b: 2c:17:a6:d3:ca:1c:c7:45:84:97:95:7b:5d:fa:ae: ff:67:5b:b1:fb:f9:99:8a:b2:c2:9d:d8:d1:73:6a: 0b:c4:b9:0e:8c:db:d3:89:36:f6:de:a0:4b:b5:b6: 2b:8a:18:d1:7a:a0:a4:7c:89:bd:06:6a:3c:bf:75: f7:53:3b:d4:4f:bf:94:93:dd:39:ee:7c:03:0a:42: 03:25:77:3e:f6:c8:cf:65:61:89:ff:aa:c9:40:14: 14:d8:66:75:2e:7c:99:bf:ed:f8:4f:b2:44:b7:46: 9e:6f:97:93:b6:1e:1e:be:da:f5:3c:53:45:97:1e: 57:1e:5a:7e:2c:91:d7:43:f7:77:38:ca:73:0b:97: a4:c0:28:70:5c:82:0b:b3:eb:07:2c:cb:bc:6c:c1: 8e:20:1e:da:6f:d7:6e:a6:a9:97:72:1e:7e:07:38: c2:ac:f1:c2:ab:3e:f1:4a:b1:70:fd:e7:1a:bc:71: 53:9b:7a:26:dd:96:e3:a8:af:71:99:fd:6f:45:91: 34:52:92:d3:bf:41:9f:fb:29:f6:7b:da:35:68:78: b5:23:a6:86:e7:7c:a3:ec:5e:f8:99:d8:62:f6:c2: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:FC:B1:91:5B:C9:F4:68:5F:AC:D7:57:EB:3C:3C:D6:D7:94:E7 X509v3 Authority Key Identifier: keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:16:05:2f:7a:ce:0c:11:b9:1d:f6:4d:b3:e1:6d:d7:de:89: 12:65:86:44:5a:7e:0d:e9:49:e9:09:82:87:42:f3:35:d1:58: 31:f6:2f:5b:33:c4:3e:e0:43:1a:d9:00:a2:e6:5a:1a:dc:f5: 63:71:6a:d5:c1:97:3c:f9:f9:1c:e8:82:41:b3:cc:46:15:b2: 83:0b:00:3d:4a:02:7c:f3:08:05:95:d2:98:e5:8c:83:fc:08: 02:d9:c5:ba:83:64:57:c4:4f:e1:66:df:d8:c7:25:20:97:61: f1:4f:6d:7b:5c:27:14:68:84:3b:21:ab:67:ce:73:8a:ea:ea: 90:38:fe:76:a6:6c:db:87:65:fb:79:51:a2:7d:b1:9e:c1:7f: 53:fb:84:83:37:43:df:7d:08:65:3a:89:4b:84:25:4e:18:d3: fe:f9:98:80:91:89:4c:33:24:10:8d:43:b0:18:b6:ae:85:95: 34:ff:07:c8:aa:97:a6:a5:25:42:92:9e:f9:bb:ad:36:ca:3f: 42:cc:b0:d6:6b:48:d8:76:fe:93:9e:31:b2:82:0b:b3:47:00: 0d:de:54:5e:bb:90:65:3c:5a:15:5d:b4:da:56:83:d9:42:a4: 32:ad:9f:72:e2:3c:9f:f7:22:ad:57:04:25:98:35:f4:e1:e4: a0:d4:12:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+gPtJdemjee7llNhVCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2Q0YWMxMzQ0ZWMzOGRjZTk5NzY4ZDc4YTExNGViZjdm MTdkODUwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EyhmYTlhZmNiMTkxNWJjOWY0Njg1ZmFjZDc1N2ViM2MzY2Q2ZDc5NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspHRFE6m9zrBKfojno+Lxco6JQAt LQCenSr/nossF6bTyhzHRYSXlXtd+q7/Z1ux+/mZirLCndjRc2oLxLkOjNvTiTb2 3qBLtbYrihjReqCkfIm9Bmo8v3X3UzvUT7+Uk9057nwDCkIDJXc+9sjPZWGJ/6rJ QBQU2GZ1LnyZv+34T7JEt0aeb5eTth4evtr1PFNFlx5XHlp+LJHXQ/d3OMpzC5ek wChwXIILs+sHLMu8bMGOIB7ab9dupqmXch5+BzjCrPHCqz7xSrFw/ecavHFTm3om 3ZbjqK9xmf1vRZE0UpLTv0Gf+yn2e9o1aHi1I6aG53yj7F74mdhi9sLUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqa/LGRW8n0aF+s11frPDzW15TnMB8GA1UdIwQY MBaAFLp9SsE0TsONzpl2jXihFOv38X2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUt YWY0MjYyM2VhNDMxLzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUtYWY0MjYyM2VhNDMx LzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhYFL3rO DBG5HfZNs+Ft196JEmWGRFp+DelJ6QmCh0LzNdFYMfYvWzPEPuBDGtkAouZaGtz1 Y3Fq1cGXPPn5HOiCQbPMRhWygwsAPUoCfPMIBZXSmOWMg/wIAtnFuoNkV8RP4Wbf 2MclIJdh8U9te1wnFGiEOyGrZ85ziurqkDj+dqZs24dl+3lRon2xnsF/U/uEgzdD 330IZTqJS4QlThjT/vmYgJGJTDMkEI1DsBi2roWVNP8HyKqXpqUlQpKe+butNso/ Qsyw1mtI2Hb+k54xsoILs0cADd5UXruQZTxaFV202laD2UKkMq2fcuI8n/cirVcE JZg19OHkoNQSrg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:40 2025 by rpki-client