This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json) Hash identifier: BPlcr9nX9hiOwEjax/zD4mY5FGuQTcZ/r/Nric6hXIU= Subject key identifier: FB:B5:9C:38:0C:F9:6C:13:D0:4F:F1:39:2C:41:88:C0:7C:42:82:B9 Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Certificate serial: 019AF577C8A461263C99FAEB11F3DBBAE7C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft Manifest number: 0811 Signing time: Sat 06 Dec 2025 21:00:59 +0000 Manifest this update: Sat 06 Dec 2025 21:00:59 +0000 Manifest next update: Sun 07 Dec 2025 21:00:59 +0000 Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: XKEE/T1oyCI7FWd6ENUxZAeRoPM61rjbHpegHBlO2Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:c8:a4:61:26:3c:99:fa:eb:11:f3:db:ba:e7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Validity Not Before: Dec 6 21:00:59 2025 GMT Not After : Dec 7 21:00:59 2025 GMT Subject: CN=fbb59c380cf96c13d04ff1392c4188c07c4282b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:5f:1d:e6:95:d5:a7:d0:ac:70:97:98:c8: d1:3d:94:d3:4c:e4:ba:c4:41:4d:44:88:89:da:00: 77:09:34:af:d7:3e:99:7f:b9:ec:73:76:87:ef:2e: ec:2d:3e:2d:60:49:d2:b3:fb:d6:48:a0:f7:87:0d: 95:59:3e:24:f2:38:3a:71:aa:e3:4f:d0:bd:69:31: 85:da:fb:e7:97:6a:99:ef:76:ad:0e:b4:2f:d0:ea: 52:98:3e:ea:3d:73:15:50:36:c8:f8:45:80:88:e5: 4e:24:c4:9d:49:02:a6:de:f2:33:6c:c3:a1:c6:f8: 82:92:bc:9e:ad:b8:97:33:8b:0b:d1:f0:08:4f:03: 49:7a:0f:dc:34:83:30:8d:a4:0b:e8:f4:fe:05:37: d2:79:d0:5a:1e:97:d5:a1:2e:ca:8a:c4:cb:f1:aa: 7e:bb:71:27:09:c4:44:6f:66:20:41:c2:fe:3f:0f: c8:78:80:37:28:b0:a7:2f:e6:2f:a4:0e:b5:18:31: b4:ae:e9:de:34:0c:c6:eb:73:c5:a4:e7:03:3a:98: 29:d3:59:19:bb:d0:91:3a:4d:9c:ec:05:0f:8c:e1: 87:02:a4:82:a9:34:ee:6c:ff:bf:6f:1b:1a:a6:e5: 77:42:b7:ab:63:98:bd:d9:09:51:ca:ac:80:d5:7d: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:9C:38:0C:F9:6C:13:D0:4F:F1:39:2C:41:88:C0:7C:42:82:B9 X509v3 Authority Key Identifier: keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:93:5d:7b:bf:47:7a:ae:f4:ec:de:74:53:29:67:ce:bf:7c: e3:cb:51:51:36:9c:ce:78:38:5d:ad:5d:3c:01:19:92:10:c8: f4:a5:57:af:ea:2a:a4:c5:73:31:5e:7b:d6:11:e9:f0:32:2f: e5:3a:b1:42:83:78:74:30:c8:62:05:cc:76:31:58:02:51:4c: c5:9a:f0:48:07:97:dd:13:78:c5:c4:a3:d8:8a:f1:e9:35:47: 69:2c:4a:ed:c3:8a:4f:14:2f:8b:d7:05:33:d4:54:17:35:0e: aa:f3:73:22:d3:ba:0e:96:53:91:a5:55:05:c7:15:fd:f9:1c: f3:c0:7a:09:da:b7:08:ad:e0:25:dc:af:0d:7d:e7:61:65:39: 30:c1:0a:29:04:f5:69:f4:de:13:56:8e:a7:45:ca:a6:28:47: 4d:1d:2d:bb:dc:2c:5d:2e:e7:8b:cb:66:5c:59:9f:2c:17:31: 82:c3:cc:8c:f1:a3:3d:62:fc:bd:39:c9:99:75:2e:aa:a5:5e: 65:51:bb:38:73:28:bf:ba:6e:68:1d:ba:64:61:d3:3d:72:ad: d6:9d:11:49:53:ef:b9:a2:9c:5b:e7:1c:62:84:98:bd:e8:d2: d5:57:c8:8e:0f:ae:58:1a:f2:5b:19:0d:d8:83:d5:77:e0:ed: 4c:b7:7c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8ikYSY8mfrrEfPbuufEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzkyYzc3MTRlZDU3NDU2ZDczNTVlNGEwNGI5YmE4YmVk NTdlNDIwHhcNMjUxMjA2MjEwMDU5WhcNMjUxMjA3MjEwMDU5WjAzMTEwLwYDVQQD EyhmYmI1OWMzODBjZjk2YzEzZDA0ZmYxMzkyYzQxODhjMDdjNDI4MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf5fHeaV1afQrHCXmMjRPZTTTOS6 xEFNRIiJ2gB3CTSv1z6Zf7nsc3aH7y7sLT4tYEnSs/vWSKD3hw2VWT4k8jg6carj T9C9aTGF2vvnl2qZ73atDrQv0OpSmD7qPXMVUDbI+EWAiOVOJMSdSQKm3vIzbMOh xviCkryerbiXM4sL0fAITwNJeg/cNIMwjaQL6PT+BTfSedBaHpfVoS7KisTL8ap+ u3EnCcREb2YgQcL+Pw/IeIA3KLCnL+YvpA61GDG0runeNAzG63PFpOcDOpgp01kZ u9CROk2c7AUPjOGHAqSCqTTubP+/bxsapuV3QrerY5i92QlRyqyA1X1+9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu1nDgM+WwT0E/xOSxBiMB8QoK5MB8GA1UdIwQY MBaAFFJ5LHcU7VdFbXNV5KBLm6i+1X5CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0Yzct N2JkZTJmZDc2MzgyLzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0YzctN2JkZTJmZDc2Mzgy LzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZNde79H eq707N50Uylnzr9848tRUTaczng4Xa1dPAEZkhDI9KVXr+oqpMVzMV571hHp8DIv 5TqxQoN4dDDIYgXMdjFYAlFMxZrwSAeX3RN4xcSj2Irx6TVHaSxK7cOKTxQvi9cF M9RUFzUOqvNzItO6DpZTkaVVBccV/fkc88B6Cdq3CK3gJdyvDX3nYWU5MMEKKQT1 afTeE1aOp0XKpihHTR0tu9wsXS7ni8tmXFmfLBcxgsPMjPGjPWL8vTnJmXUuqqVe ZVG7OHMov7puaB26ZGHTPXKt1p0RSVPvuaKcW+ccYoSYvejS1VfIjg+uWBryWxkN 2IPVd+DtTLd8VA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:37 2025 by rpki-client