This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json) Hash identifier: efwjLL146H3hqbnoDQGS/HgvEDc2IKERo8e2PrwvAoI= Subject key identifier: C6:8C:72:F8:D9:07:B7:8E:E2:8D:D4:F2:0F:5B:76:E2:24:3A:06:03 Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0 Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0 Certificate serial: 019B3BA2788FC99E429AA8822089F8A73FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 12:01:01 +0000 Manifest this update: Sat 20 Dec 2025 12:01:01 +0000 Manifest next update: Sun 21 Dec 2025 12:01:01 +0000 Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=) 2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: cwc8/TwX+D0Eu5oexrQQPF4AvwpkCLD0i1ib/PQPWdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:78:8f:c9:9e:42:9a:a8:82:20:89:f8:a7:3f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0 Validity Not Before: Dec 20 12:01:01 2025 GMT Not After : Dec 21 12:01:01 2025 GMT Subject: CN=c68c72f8d907b78ee28dd4f20f5b76e2243a0603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:67:d6:16:0b:b4:a0:76:6b:e4:1f:f1:80:f3: f1:b7:09:44:86:16:9f:ab:21:fd:11:44:3f:bc:54: f2:6f:ce:a0:55:41:a5:0a:b3:c1:87:21:7b:ed:fe: 09:d3:3c:2c:25:49:b7:5d:16:0a:26:57:c3:16:ef: 4f:8c:95:36:06:9d:5d:0b:6b:73:49:cf:ac:8e:9b: 71:74:3c:97:fd:9b:db:6f:63:46:cd:0b:18:c1:bb: aa:7b:c7:f1:c8:a0:ff:51:12:06:fa:6f:a4:c5:12: ad:1f:56:ac:d2:f6:31:a4:6b:50:fa:cf:e0:24:77: 08:8f:2c:c5:bb:97:52:1f:75:92:aa:d9:6d:02:6e: 2f:c1:e7:8f:40:5a:95:f9:44:30:81:ff:fd:92:e4: 3e:04:e2:97:2b:78:5b:f0:8a:fd:e8:61:3e:dd:5c: 02:32:3a:58:8d:5d:60:18:4a:c0:cd:7c:e0:c3:c5: 8c:fa:e3:a3:ac:a0:fe:09:6d:50:43:5a:da:1d:07: 31:16:3a:d5:8f:f1:c8:a5:4c:db:40:52:b2:4a:79: 7a:88:f2:3e:14:40:f1:fd:40:bc:fc:86:9b:bd:a2: c9:30:9e:d7:8f:3e:47:be:40:a6:ee:a7:e9:54:04: 86:56:57:bb:49:29:e4:24:27:1b:1e:2a:bd:ef:8e: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8C:72:F8:D9:07:B7:8E:E2:8D:D4:F2:0F:5B:76:E2:24:3A:06:03 X509v3 Authority Key Identifier: keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8d:91:33:2c:33:dd:be:a4:02:0d:d1:f0:82:c9:af:12:47: 81:aa:40:d2:d6:4f:a8:b3:2c:4d:52:44:76:ee:7c:ed:c3:15: c3:33:8a:b6:9b:4a:d9:1a:a7:d8:19:e1:76:bc:a2:43:2b:a3: 86:12:25:7f:5b:9a:61:d5:09:4e:f1:f2:ff:03:85:35:56:f8: ad:84:2f:3d:b2:63:9f:c0:0c:90:d7:56:0d:8a:5f:f2:fb:80: ea:13:f9:84:4f:10:82:de:58:c6:2f:97:ef:91:c8:ee:46:e4: de:a4:39:31:aa:5c:4b:16:0d:74:42:93:42:78:64:e8:c4:42: bc:13:82:6e:3e:a7:21:fc:84:67:f0:eb:1e:c7:0e:2b:c6:2b: b4:ff:d2:94:15:6a:dd:c1:d9:41:44:cf:e0:0b:3f:46:c1:e2: b7:da:62:57:bb:4f:52:f3:7f:04:ba:a4:ac:52:50:13:ea:11: f4:0b:47:62:83:28:49:49:4c:02:65:fa:7b:9b:2b:67:53:05: c4:21:86:b4:2a:6c:e0:19:e5:a8:49:d3:4d:8a:f6:39:c9:72: a1:69:7e:76:9e:c3:28:b8:37:f9:3d:70:30:e3:bc:c0:ad:d0: ad:fa:2b:4d:17:f8:76:2a:88:26:c8:bb:8d:1e:a7:bd:eb:bd: c7:ef:c8:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oniPyZ5CmqiCIIn4pz+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzA3ODZmMTdjNDFiZDAxNjI2ZjcyZGIyMzlmMjA4YjUx ODliYjAwHhcNMjUxMjIwMTIwMTAxWhcNMjUxMjIxMTIwMTAxWjAzMTEwLwYDVQQD EyhjNjhjNzJmOGQ5MDdiNzhlZTI4ZGQ0ZjIwZjViNzZlMjI0M2EwNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62fWFgu0oHZr5B/xgPPxtwlEhhaf qyH9EUQ/vFTyb86gVUGlCrPBhyF77f4J0zwsJUm3XRYKJlfDFu9PjJU2Bp1dC2tz Sc+sjptxdDyX/Zvbb2NGzQsYwbuqe8fxyKD/URIG+m+kxRKtH1as0vYxpGtQ+s/g JHcIjyzFu5dSH3WSqtltAm4vweePQFqV+UQwgf/9kuQ+BOKXK3hb8Ir96GE+3VwC MjpYjV1gGErAzXzgw8WM+uOjrKD+CW1QQ1raHQcxFjrVj/HIpUzbQFKySnl6iPI+ FEDx/UC8/IabvaLJMJ7Xjz5HvkCm7qfpVASGVle7SSnkJCcbHiq97465CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaMcvjZB7eO4o3U8g9bduIkOgYDMB8GA1UdIwQY MBaAFFJweG8XxBvQFib3LbI58gi1GJuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZDQzY2ItODQxYy00MGYyLTlkOWYt NzVmNDdmMDdjNGUzLzEvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZDQzY2ItODQxYy00MGYyLTlkOWYtNzVmNDdmMDdjNGUz LzEvVW5CNGJ4ZkVHOUFXSnZjdHNqbnlDTFVZbTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARI2RMywz 3b6kAg3R8ILJrxJHgapA0tZPqLMsTVJEdu587cMVwzOKtptK2Rqn2BnhdryiQyuj hhIlf1uaYdUJTvHy/wOFNVb4rYQvPbJjn8AMkNdWDYpf8vuA6hP5hE8Qgt5Yxi+X 75HI7kbk3qQ5MapcSxYNdEKTQnhk6MRCvBOCbj6nIfyEZ/DrHscOK8YrtP/SlBVq 3cHZQUTP4As/RsHit9piV7tPUvN/BLqkrFJQE+oR9AtHYoMoSUlMAmX6e5srZ1MF xCGGtCps4BnlqEnTTYr2OclyoWl+dp7DKLg3+T1wMOO8wK3QrforTRf4diqIJsi7 jR6nveu9x+/IJg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:38 2025 by rpki-client