This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json) Hash identifier: 2/3FphIN+qEM1vMJv6qFHA7T1GjWwaO86ggw0E2W+Gw= Subject key identifier: 05:55:59:24:57:85:7C:CA:9A:F9:DC:DF:53:4F:8A:19:23:2F:79:03 Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Certificate serial: 019AF12D302D719716E4F228D73C99EFBE06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: xdkyVHWZsO6v0SDSiNqyCH3fBEBhMeLBZkBbTx+ooPY=) 2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:30:2d:71:97:16:e4:f2:28:d7:3c:99:ef:be:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=0555592457857cca9af9dcdf534f8a19232f7903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:1a:14:9d:33:db:76:38:64:8f:17:76:39: 64:48:c3:f7:8e:34:55:c4:49:73:80:23:61:73:80: d0:5a:a4:64:2d:45:e9:bd:12:6f:ea:f1:61:21:c6: d8:84:f4:5d:9b:4b:c1:b1:03:f9:7a:d6:8f:b4:7c: 72:f5:af:10:a0:7a:fd:60:40:f8:b9:1a:65:f7:f9: cb:9d:95:c7:20:93:e2:24:01:49:ae:60:d8:b4:29: d0:52:25:ab:54:38:f1:0a:8b:29:2e:8b:bc:00:07: ee:34:8f:6d:17:42:bf:a2:b6:ec:83:9c:83:4e:e4: b8:a3:9a:c1:93:e4:db:d9:3c:45:9f:14:e6:c9:9b: c7:00:1e:bc:60:20:67:d1:1d:5b:e2:bb:13:3c:ac: 4c:24:94:79:f0:68:38:0a:25:0e:c4:79:ba:a7:1b: 44:1d:56:94:fe:e7:e5:e5:2a:25:6c:53:49:d0:7b: 44:20:cd:2f:93:c2:35:a7:0d:4c:78:58:c9:b1:df: 23:27:b1:a6:1d:e7:6f:a3:37:c5:10:91:50:8f:17: 52:5b:2e:e8:63:68:5e:56:72:af:c5:ff:4c:e1:e4: fd:d1:6b:80:3c:6a:78:28:33:bb:32:14:fe:e9:5d: d3:4f:34:44:0b:06:c1:80:1c:ea:e7:50:9b:05:e1: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:59:24:57:85:7C:CA:9A:F9:DC:DF:53:4F:8A:19:23:2F:79:03 X509v3 Authority Key Identifier: keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4a:54:bf:ad:17:38:c6:7f:75:23:24:94:1c:63:35:0e:6b: 4d:47:6d:f2:93:94:69:20:91:82:9b:de:e3:4a:32:79:51:68: 26:68:c0:41:bc:85:1f:11:da:88:d2:c8:b0:bb:7e:d7:9a:d1: 7f:b7:7d:fc:41:57:d0:34:7f:ac:9c:0d:de:98:aa:69:2f:17: 5d:6b:6b:b7:20:62:4f:2b:d3:51:a0:a8:ca:2d:49:a0:9e:44: 8d:16:ad:b1:bf:95:8f:84:09:24:ce:b7:f5:0d:4f:1a:23:6e: c6:71:8e:41:5e:f8:0c:8e:0b:50:fd:87:2d:81:6f:29:81:12: de:d9:a6:1e:47:f4:de:65:47:5e:f3:65:04:d1:ef:14:1f:13: 73:39:2e:5a:9e:21:d2:db:b0:4f:af:70:92:a8:3c:bd:4d:46: cb:a9:4f:05:b0:af:e8:16:cd:0a:3e:70:fd:60:f7:28:d0:36: 75:10:a3:78:11:6b:8a:ab:06:af:7c:1d:ee:6c:79:08:45:e1: a4:62:f3:80:ce:a7:f8:fc:c6:14:d1:37:a4:80:1f:a1:50:f0: 58:d3:41:8a:b8:8e:6c:38:b0:fa:c0:c9:ae:0e:c9:d5:5a:a5: ad:0d:85:5e:aa:27:72:5d:23:6a:e3:8f:dd:8e:01:f9:b2:db: bd:c4:ef:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTAtcZcW5PIo1zyZ774GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl NmJlMmQwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD EygwNTU1NTkyNDU3ODU3Y2NhOWFmOWRjZGY1MzRmOGExOTIzMmY3OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSAaFJ0z23Y4ZI8XdjlkSMP3jjRV xElzgCNhc4DQWqRkLUXpvRJv6vFhIcbYhPRdm0vBsQP5etaPtHxy9a8QoHr9YED4 uRpl9/nLnZXHIJPiJAFJrmDYtCnQUiWrVDjxCospLou8AAfuNI9tF0K/orbsg5yD TuS4o5rBk+Tb2TxFnxTmyZvHAB68YCBn0R1b4rsTPKxMJJR58Gg4CiUOxHm6pxtE HVaU/ufl5SolbFNJ0HtEIM0vk8I1pw1MeFjJsd8jJ7GmHedvozfFEJFQjxdSWy7o Y2heVnKvxf9M4eT90WuAPGp4KDO7MhT+6V3TTzRECwbBgBzq51CbBeECFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVVWSRXhXzKmvnc31NPihkjL3kDMB8GA1UdIwQY MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5 LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0pUv60X OMZ/dSMklBxjNQ5rTUdt8pOUaSCRgpve40oyeVFoJmjAQbyFHxHaiNLIsLt+15rR f7d9/EFX0DR/rJwN3piqaS8XXWtrtyBiTyvTUaCoyi1JoJ5EjRatsb+Vj4QJJM63 9Q1PGiNuxnGOQV74DI4LUP2HLYFvKYES3tmmHkf03mVHXvNlBNHvFB8TczkuWp4h 0tuwT69wkqg8vU1Gy6lPBbCv6BbNCj5w/WD3KNA2dRCjeBFriqsGr3wd7mx5CEXh pGLzgM6n+PzGFNE3pIAfoVDwWNNBiriObDiw+sDJrg7J1VqlrQ2FXqoncl0jauOP 3Y4B+bLbvcTv/w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:29 2025 by rpki-client