This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft File: UNorr8N6OYjdKUyROuUiDgONuWQ.mft (raw, json) Hash identifier: 4quLInrX1BK8M3d1KrT7xi+g3Adn43h85AXtIsWyvQU= Subject key identifier: 2C:5D:35:76:23:0C:19:B2:E4:F9:F7:D3:7A:2B:DF:AA:28:C7:2C:0D Authority key identifier: 50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64 Certificate issuer: /CN=50da2bafc37a3988dd294c913ae5220e038db964 Certificate serial: 019B56E28E580D3751582E7E27265994B31C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft Manifest number: 16E2 Signing time: Thu 25 Dec 2025 19:00:46 +0000 Manifest this update: Thu 25 Dec 2025 19:00:46 +0000 Manifest next update: Fri 26 Dec 2025 19:00:46 +0000 Files and hashes: 1: UNorr8N6OYjdKUyROuUiDgONuWQ.crl (hash: lp8cng5p9lAK6Shj86oaHFe8f4VYrd0BCPhqqi5FnLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e2:8e:58:0d:37:51:58:2e:7e:27:26:59:94:b3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50da2bafc37a3988dd294c913ae5220e038db964 Validity Not Before: Dec 25 19:00:46 2025 GMT Not After : Dec 26 19:00:46 2025 GMT Subject: CN=2c5d3576230c19b2e4f9f7d37a2bdfaa28c72c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:7e:c1:a1:a1:e3:10:20:0c:eb:01:63:ec: ee:3d:a7:00:0e:06:e1:ca:65:59:19:d5:2c:64:ab: 46:26:50:de:e2:7e:09:e3:ad:41:ae:8e:79:b4:ac: 32:3e:d9:e0:d9:05:68:17:56:73:86:58:6f:4f:5b: ed:bd:94:1d:24:be:49:a0:2e:7e:66:f8:ae:c1:72: e2:00:4d:e0:f0:97:5f:df:61:7d:c8:b8:f1:56:96: 6e:d3:4c:c4:af:1f:16:b2:51:63:e6:e8:fc:2c:40: 07:d6:39:7c:63:d3:08:b5:81:c6:d0:c6:4a:bb:70: dc:59:90:0f:24:bc:5f:d8:5f:88:b2:6f:bf:e2:a1: 29:c0:b4:d6:e4:c6:cc:66:f4:39:ee:fc:4e:69:76: d2:56:ad:e0:a3:4b:50:eb:b9:75:e3:9d:5d:e9:ab: bc:98:3b:48:92:ca:26:89:1b:51:b0:e9:dd:84:ac: ce:bd:08:9a:80:51:8e:1f:55:da:77:d5:1e:d1:63: 9e:e2:57:9f:48:35:71:52:4e:9e:e2:51:92:6b:f8: 9f:e6:74:c6:fb:22:3e:4c:16:1d:46:4b:b7:c3:d4: df:37:02:fb:d5:0a:82:e2:ed:15:82:f4:a1:b6:d3: f9:33:3c:ee:97:89:75:cc:39:f1:62:d5:a3:e7:46: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5D:35:76:23:0C:19:B2:E4:F9:F7:D3:7A:2B:DF:AA:28:C7:2C:0D X509v3 Authority Key Identifier: keyid:50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a4:c7:57:33:c4:b8:64:6c:ca:6d:6e:4c:26:25:da:df:51: 65:9b:c5:ed:24:87:ee:4b:41:48:16:fd:39:c0:8f:db:0f:b1: e3:86:59:ae:f1:49:45:77:cc:82:89:ac:03:23:3d:91:41:03: d7:09:34:1c:46:ed:1e:6f:46:3a:12:9a:02:b2:ea:6e:6c:e5: a0:f9:5c:fa:e4:de:89:76:8d:9f:fb:17:be:79:83:7f:eb:52: ca:bc:a5:2c:93:26:cb:c6:36:ba:83:93:76:c6:f8:06:a0:a2: 76:63:4d:a2:b1:2b:90:98:7e:b0:de:58:c6:dd:42:e3:b8:64: 70:c2:f6:33:3f:20:c9:d9:d8:68:79:d3:4c:6a:03:1c:0a:88: 03:05:b6:f1:45:e6:d8:3f:a2:a8:99:a6:b5:19:b0:0e:57:e3: 63:fd:9e:a1:b0:1e:2b:f5:95:2c:61:bb:8d:ec:b5:a8:3d:8f: 48:d4:89:e6:b7:44:b7:91:a1:18:4d:c9:94:8c:c7:11:7b:8b: 8e:f3:1f:6b:ac:85:6d:38:8c:1a:50:9e:1c:2d:45:51:93:cd: c9:eb:86:71:37:c8:0b:eb:75:81:8f:7d:8a:79:6c:07:0d:cb: 8e:27:da:da:55:73:b2:6e:62:09:1c:db:4e:68:b4:80:66:a6: e9:1e:0b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW4o5YDTdRWC5+JyZZlLMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZGEyYmFmYzM3YTM5ODhkZDI5NGM5MTNhZTUyMjBlMDM4 ZGI5NjQwHhcNMjUxMjI1MTkwMDQ2WhcNMjUxMjI2MTkwMDQ2WjAzMTEwLwYDVQQD EygyYzVkMzU3NjIzMGMxOWIyZTRmOWY3ZDM3YTJiZGZhYTI4YzcyYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAZ+waGh4xAgDOsBY+zuPacADgbh ymVZGdUsZKtGJlDe4n4J461Bro55tKwyPtng2QVoF1ZzhlhvT1vtvZQdJL5JoC5+ ZviuwXLiAE3g8Jdf32F9yLjxVpZu00zErx8WslFj5uj8LEAH1jl8Y9MItYHG0MZK u3DcWZAPJLxf2F+Ism+/4qEpwLTW5MbMZvQ57vxOaXbSVq3go0tQ67l1451d6au8 mDtIksomiRtRsOndhKzOvQiagFGOH1Xad9Ue0WOe4lefSDVxUk6e4lGSa/if5nTG +yI+TBYdRku3w9TfNwL71QqC4u0VgvShttP5Mzzul4l1zDnxYtWj50a24QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxdNXYjDBmy5Pn303or36ooxywNMB8GA1UdIwQY MBaAFFDaK6/DejmI3SlMkTrlIg4DjblkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5vcnI4TjZPWWpkS1V5Uk91VWlEZ09OdVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xNjQ1M2QtMjhkMC00NmRkLTg1Nzct YmRkNTc3NTFjNjczLzEvVU5vcnI4TjZPWWpkS1V5Uk91VWlEZ09OdVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xNjQ1M2QtMjhkMC00NmRkLTg1NzctYmRkNTc3NTFjNjcz LzEvVU5vcnI4TjZPWWpkS1V5Uk91VWlEZ09OdVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKTHVzPE uGRsym1uTCYl2t9RZZvF7SSH7ktBSBb9OcCP2w+x44ZZrvFJRXfMgomsAyM9kUED 1wk0HEbtHm9GOhKaArLqbmzloPlc+uTeiXaNn/sXvnmDf+tSyrylLJMmy8Y2uoOT dsb4BqCidmNNorErkJh+sN5Yxt1C47hkcML2Mz8gydnYaHnTTGoDHAqIAwW28UXm 2D+iqJmmtRmwDlfjY/2eobAeK/WVLGG7jey1qD2PSNSJ5rdEt5GhGE3JlIzHEXuL jvMfa6yFbTiMGlCeHC1FUZPNyeuGcTfIC+t1gY99inlsBw3Ljifa2lVzsm5iCRzb Tmi0gGam6R4L4A== -----END CERTIFICATE-----Generated at Thu Dec 25 22:27:06 2025 by rpki-client