This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json) Hash identifier: 2aO/dnaTWVCqpeyKI9S9YPXqG33OunnbCpDgpoEWGJk= Subject key identifier: BF:E8:83:A7:91:60:86:AF:67:20:7A:3F:20:43:FD:3D:C6:27:8F:A4 Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Certificate serial: 019B4A03BC7D9A2AF6CD949ADF2DB4222E06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft Manifest number: 104A Signing time: Tue 23 Dec 2025 07:01:57 +0000 Manifest this update: Tue 23 Dec 2025 07:01:57 +0000 Manifest next update: Wed 24 Dec 2025 07:01:57 +0000 Files and hashes: 1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=) 2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: slIpQI0TWtz4nDD0GRE/1ymB4CjSi8I5MZ6/2skU0r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:bc:7d:9a:2a:f6:cd:94:9a:df:2d:b4:22:2e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395 Validity Not Before: Dec 23 07:01:57 2025 GMT Not After : Dec 24 07:01:57 2025 GMT Subject: CN=bfe883a7916086af67207a3f2043fd3dc6278fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:05:70:98:63:e0:93:14:ee:b1:69:1b:a8: 17:d5:98:3f:4d:fd:a6:55:ae:3c:7e:da:cd:45:27: 72:20:80:af:06:83:c5:68:e4:08:0b:be:a6:3e:d5: 81:07:d2:da:89:65:a2:8a:42:7d:2d:cc:60:41:e6: 26:8a:6d:2d:da:ce:d1:de:0f:32:e2:d5:d7:9d:5a: 7f:a9:4f:e9:aa:c6:72:45:92:42:93:35:ca:6c:88: 3d:86:81:f2:df:4a:58:30:6d:a3:fe:03:60:17:22: f9:d9:a5:f6:43:8c:ca:a5:c0:3f:61:65:c0:8a:b0: 68:0e:db:0b:37:a0:a8:b9:0e:e8:4e:97:65:c1:5d: b4:c3:45:55:8d:1a:91:dd:34:c4:55:c4:a0:22:e1: 7b:cf:c0:fa:58:17:c5:bb:77:58:c6:57:ef:32:0a: 10:39:d0:d3:c7:57:e0:e8:0c:54:b2:73:c8:20:91: 9c:a2:87:1e:4f:6b:50:e1:b5:45:c3:a8:94:79:80: a6:4d:b6:48:55:98:17:b7:85:52:eb:f0:43:57:ed: dd:4d:c0:58:cf:d5:76:77:62:e8:a1:b8:c2:ac:9c: 75:d1:d7:8f:31:da:50:b6:16:19:e4:5e:80:36:4d: e6:a8:fb:dd:12:b2:77:03:d9:b8:35:0b:2f:b4:7e: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:83:A7:91:60:86:AF:67:20:7A:3F:20:43:FD:3D:C6:27:8F:A4 X509v3 Authority Key Identifier: keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7c:65:c3:ec:5d:26:d1:c9:be:c0:df:30:2d:c3:77:af:ea: 7e:0a:0e:ee:96:73:21:b3:e8:a6:8c:2d:2f:35:30:fc:ad:05: fc:9c:2f:8e:87:fd:cb:e5:11:41:a6:63:32:25:de:9b:2f:8f: a8:43:62:06:9d:36:2d:cf:40:7c:b5:b4:5e:06:7c:0d:f9:75: 53:15:0c:65:28:c3:e2:02:c0:26:a2:1d:8c:f5:d5:8c:99:4b: 97:d8:f4:cd:ce:42:01:17:4c:1d:64:a3:7d:4a:8f:3f:9a:c8: b1:87:4c:d5:7e:2c:85:4b:aa:56:cd:1e:9e:bc:a5:bb:68:b5: 29:74:93:f9:26:a3:9b:c1:40:e3:dc:61:4a:2c:c4:7d:57:f2: b6:6d:4d:5e:d1:9a:9b:60:bf:8c:ed:69:fa:2f:bd:19:d9:d0: de:ee:87:6b:d6:44:f2:10:d9:a5:62:b8:ad:55:af:f7:73:3f: dc:7d:1f:d0:23:a7:94:d0:57:f3:29:f0:74:87:f4:5c:86:92: 6b:0c:ba:bd:5f:9b:b6:be:ad:2a:07:48:b7:86:3f:89:02:05: 20:4d:65:5f:b0:3b:b2:2a:82:93:f2:8b:f7:54:66:e6:23:1f: 3f:23:94:37:23:28:34:fc:7a:b5:44:41:71:bf:00:f4:3a:3d: 53:6d:58:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA7x9mir2zZSa3y20Ii4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDNlY2I4ZjcxMWUwYjkyYjUwNWI4YTBmN2E1ZWUwNDIy OTEzOTUwHhcNMjUxMjIzMDcwMTU3WhcNMjUxMjI0MDcwMTU3WjAzMTEwLwYDVQQD EyhiZmU4ODNhNzkxNjA4NmFmNjcyMDdhM2YyMDQzZmQzZGM2Mjc4ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikoFcJhj4JMU7rFpG6gX1Zg/Tf2m Va48ftrNRSdyIICvBoPFaOQIC76mPtWBB9LaiWWiikJ9LcxgQeYmim0t2s7R3g8y 4tXXnVp/qU/pqsZyRZJCkzXKbIg9hoHy30pYMG2j/gNgFyL52aX2Q4zKpcA/YWXA irBoDtsLN6CouQ7oTpdlwV20w0VVjRqR3TTEVcSgIuF7z8D6WBfFu3dYxlfvMgoQ OdDTx1fg6AxUsnPIIJGcooceT2tQ4bVFw6iUeYCmTbZIVZgXt4VS6/BDV+3dTcBY z9V2d2LoobjCrJx10dePMdpQthYZ5F6ANk3mqPvdErJ3A9m4NQsvtH6pFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/og6eRYIavZyB6PyBD/T3GJ4+kMB8GA1UdIwQY MBaAFLjT7Lj3EeC5K1Bbig96XuBCKROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMt YTE4NjFlNTM1NDRkLzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zNjhhOGQtZWZmMi00OWMyLWE5NjMtYTE4NjFlNTM1NDRk LzEvdU5Qc3VQY1I0TGtyVUZ1S0QzcGU0RUlwRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHxlw+xd JtHJvsDfMC3Dd6/qfgoO7pZzIbPopowtLzUw/K0F/Jwvjof9y+URQaZjMiXemy+P qENiBp02Lc9AfLW0XgZ8Dfl1UxUMZSjD4gLAJqIdjPXVjJlLl9j0zc5CARdMHWSj fUqPP5rIsYdM1X4shUuqVs0enrylu2i1KXST+Sajm8FA49xhSizEfVfytm1NXtGa m2C/jO1p+i+9GdnQ3u6Ha9ZE8hDZpWK4rVWv93M/3H0f0COnlNBX8ynwdIf0XIaS awy6vV+btr6tKgdIt4Y/iQIFIE1lX7A7siqCk/KL91Rm5iMfPyOUNyMoNPx6tURB cb8A9Do9U21YcA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:19:02 2025 by rpki-client