This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json) Hash identifier: t1utmpsar6REkLo7h16BItUwOgyqL0huiP5ioegdEU4= Subject key identifier: 6E:59:8A:3D:C9:3A:24:A2:10:77:FB:72:B9:CE:D2:3F:E0:E1:54:06 Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Certificate serial: 019B32D746ACAFD171CC7E7833CC9A510CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft Manifest number: 178C Signing time: Thu 18 Dec 2025 19:02:07 +0000 Manifest this update: Thu 18 Dec 2025 19:02:07 +0000 Manifest next update: Fri 19 Dec 2025 19:02:07 +0000 Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: 7T0mrOY/75R9LagmIP9Aurhl7kOVmWsLYRG0aFAMyAY=) 2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:46:ac:af:d1:71:cc:7e:78:33:cc:9a:51:0c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Validity Not Before: Dec 18 19:02:07 2025 GMT Not After : Dec 19 19:02:07 2025 GMT Subject: CN=6e598a3dc93a24a21077fb72b9ced23fe0e15406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:4f:8b:c7:3a:d1:a1:5c:96:3e:7c:0e:bb: 18:41:34:eb:7d:25:91:1d:03:2c:ef:37:73:4d:ec: 7f:60:ad:41:4a:07:d9:b6:15:26:7d:80:24:ce:d1: 8c:4e:0c:cd:1f:26:42:39:43:5b:c7:ca:91:6a:59: 98:cd:60:86:e4:4c:61:91:9a:6a:63:34:c0:8b:ef: 42:6f:37:2d:3c:0b:03:e1:22:e8:8f:af:b0:7f:e0: 77:1e:6c:ac:18:ff:2c:0f:47:a9:fc:82:da:5b:5a: 25:f2:c7:b1:53:ee:dc:44:8b:44:ad:d2:1e:73:86: 75:a5:32:80:59:2d:f7:19:8e:4b:f7:53:3e:6c:ee: 27:9f:ab:7b:d6:fb:c2:45:d7:90:e6:5c:76:1b:21: 86:d1:a7:73:1b:91:a2:33:47:15:6e:2e:ec:a9:b5: 62:f0:ae:49:d8:7d:5b:e6:4d:6d:82:91:af:91:22: be:48:04:a2:66:0a:b9:19:c4:91:63:64:54:e6:29: 6b:1c:98:5d:92:a0:d1:66:cf:1d:dd:13:c0:79:06: e3:59:c3:f7:ad:bb:f0:01:0a:81:40:2e:c0:30:cd: ab:69:54:3a:7c:03:ef:e6:55:34:d5:85:6b:2a:28: b5:1a:e9:6e:65:78:e3:4a:ac:6e:c4:bc:b0:70:ac: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:59:8A:3D:C9:3A:24:A2:10:77:FB:72:B9:CE:D2:3F:E0:E1:54:06 X509v3 Authority Key Identifier: keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:61:ab:44:33:7b:b7:9d:75:7e:e6:92:6e:5d:76:4a:90:12: 82:1b:ad:cf:3f:a0:c3:a3:78:ad:dd:b5:29:c5:b2:f2:de:da: ab:14:c9:53:2b:57:7b:d7:13:26:6d:d9:e7:c2:55:76:41:62: 89:9c:15:a3:14:de:f0:c6:c6:ad:96:1d:87:66:b8:f7:fa:99: ef:05:8a:5d:83:f0:04:ad:62:d3:8d:85:0b:6c:8a:2c:b2:d3: ed:30:65:f5:2f:0b:10:b8:98:b2:8d:da:f3:c5:90:c0:db:58: aa:10:b6:f3:3e:34:9e:fe:61:29:fa:9a:b8:f7:6e:3d:47:ba: 0d:e3:04:03:58:da:f5:e2:a9:19:c2:fc:63:d7:ec:59:cf:c9: fb:c5:6d:c4:4f:79:d6:11:ce:03:f7:3a:42:f7:41:ef:1b:cb: 2b:be:87:6a:9a:d1:c7:b4:72:0c:31:aa:ab:d8:7f:eb:35:96: 63:ab:45:af:d1:87:b3:7d:cd:ff:44:83:9e:1e:f0:ba:57:b0: c7:53:b8:6b:03:c0:05:d9:df:e8:98:ca:0f:b3:46:c2:71:3e: a8:ef:07:a1:0f:4a:53:33:4e:79:30:48:4a:2e:e4:fe:14:ba: 96:0f:7c:8e:38:98:c7:2b:0b:2f:df:c9:66:bc:c8:ef:ce:ea: 4a:30:ea:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy10asr9FxzH54M8yaUQzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl NmJlMmQwHhcNMjUxMjE4MTkwMjA3WhcNMjUxMjE5MTkwMjA3WjAzMTEwLwYDVQQD Eyg2ZTU5OGEzZGM5M2EyNGEyMTA3N2ZiNzJiOWNlZDIzZmUwZTE1NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AJPi8c60aFclj58DrsYQTTrfSWR HQMs7zdzTex/YK1BSgfZthUmfYAkztGMTgzNHyZCOUNbx8qRalmYzWCG5ExhkZpq YzTAi+9CbzctPAsD4SLoj6+wf+B3HmysGP8sD0ep/ILaW1ol8sexU+7cRItErdIe c4Z1pTKAWS33GY5L91M+bO4nn6t71vvCRdeQ5lx2GyGG0adzG5GiM0cVbi7sqbVi 8K5J2H1b5k1tgpGvkSK+SASiZgq5GcSRY2RU5ilrHJhdkqDRZs8d3RPAeQbjWcP3 rbvwAQqBQC7AMM2raVQ6fAPv5lU01YVrKii1GuluZXjjSqxuxLywcKytowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5Zij3JOiSiEHf7crnO0j/g4VQGMB8GA1UdIwQY MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5 LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmGrRDN7 t511fuaSbl12SpASghutzz+gw6N4rd21KcWy8t7aqxTJUytXe9cTJm3Z58JVdkFi iZwVoxTe8MbGrZYdh2a49/qZ7wWKXYPwBK1i042FC2yKLLLT7TBl9S8LELiYso3a 88WQwNtYqhC28z40nv5hKfqauPduPUe6DeMEA1ja9eKpGcL8Y9fsWc/J+8VtxE95 1hHOA/c6QvdB7xvLK76HaprRx7RyDDGqq9h/6zWWY6tFr9GHs33N/0SDnh7wulew x1O4awPABdnf6JjKD7NGwnE+qO8HoQ9KUzNOeTBISi7k/hS6lg98jjiYxysLL9/J ZrzI787qSjDq/g== -----END CERTIFICATE-----Generated at Thu Dec 18 23:48:48 2025 by rpki-client