This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json) Hash identifier: 3/SvnT0ESPdqWUBmw7vaqSQJ1LEgQz+kAgIRH1VnpIY= Subject key identifier: 98:96:40:DC:8C:C4:29:07:18:5A:C2:60:9D:30:17:F5:17:90:2C:35 Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Certificate serial: 019B3DC7E9676AB68926B3F6B96409D50A03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft Manifest number: 0A3E Signing time: Sat 20 Dec 2025 22:01:10 +0000 Manifest this update: Sat 20 Dec 2025 22:01:10 +0000 Manifest next update: Sun 21 Dec 2025 22:01:10 +0000 Files and hashes: 1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=) 2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: /enRXDs6wD5h7oP2z+SL5hl3vnpgeWgK9dXwpwvjzSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e9:67:6a:b6:89:26:b3:f6:b9:64:09:d5:0a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Validity Not Before: Dec 20 22:01:10 2025 GMT Not After : Dec 21 22:01:10 2025 GMT Subject: CN=989640dc8cc42907185ac2609d3017f517902c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:f7:b2:80:4c:7c:6e:90:0b:6f:fc:23:ce: bb:96:6d:9f:75:02:11:9a:09:6b:73:f6:a1:e3:93: b3:e8:82:c4:5b:ce:ee:1d:26:1d:52:18:3f:30:da: b9:dd:56:12:bb:67:2c:7f:b4:f8:83:4c:11:2e:6b: 5e:91:ed:62:74:ab:e8:5f:40:36:22:b9:c0:95:6c: f1:e7:8a:f6:65:b5:2a:af:6d:b9:4d:25:2d:6e:d5: d6:06:88:8f:6c:e0:e5:15:6e:cd:b8:ea:01:d3:3f: f5:aa:6e:fb:ed:12:7f:33:80:7b:55:84:a1:ab:bb: 18:00:df:46:17:43:37:80:76:4f:8e:23:21:90:98: 51:96:c8:0e:79:8d:c9:c4:d3:4a:c6:7d:a7:75:44: c4:af:6c:17:cc:e2:58:04:4b:bc:da:44:42:da:10: 15:36:6d:44:4c:8d:34:65:b3:4e:b3:88:68:8e:b3: f8:3f:dd:88:2e:f4:f4:92:b0:60:df:5d:f1:91:b5: 47:9b:8e:41:3e:0f:19:49:f9:09:19:1c:8d:5f:11: 5a:8e:24:2e:f0:23:5a:da:48:2b:9b:29:d5:9d:87: 85:2b:7f:a4:79:3f:6b:57:25:af:64:84:9f:69:0c: f4:28:24:50:01:11:b9:21:82:2f:88:c5:34:a4:d8: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:96:40:DC:8C:C4:29:07:18:5A:C2:60:9D:30:17:F5:17:90:2C:35 X509v3 Authority Key Identifier: keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1a:ba:72:d5:1f:f7:d8:fd:eb:fa:b1:dd:40:84:82:d0:19: 4f:a3:1c:08:6c:6f:f6:6d:b9:7a:2a:41:65:68:54:99:e2:0b: cb:9d:3f:1d:de:18:b0:10:d2:2a:64:db:9d:d2:6c:94:c9:e6: 1a:b2:80:a7:fa:34:79:a3:0d:fd:4e:03:07:31:11:86:31:39: 01:8c:bf:a8:05:bb:18:40:c5:ad:59:cc:1e:0a:1f:e2:2f:5c: 8d:ff:1f:de:fb:58:35:a6:9e:c3:2b:cd:ed:ca:9d:a1:63:58: 5a:5b:5c:ea:e1:6c:a5:ad:4c:80:33:14:9f:2b:f7:bb:d2:47: 67:8e:21:64:4c:14:57:95:98:9c:cc:9c:e2:38:5d:33:49:ac: 90:1d:e9:3b:6d:8f:2c:d3:a8:10:7a:3b:d2:ec:62:e3:63:53: 75:32:97:41:74:07:65:4c:3a:5d:b7:26:2d:f7:e3:6d:9c:c1: 69:f9:98:65:97:cd:29:76:b8:d9:31:de:f2:bf:8e:f8:e9:08: fc:53:67:98:5a:e0:9d:79:cc:7f:a9:75:0b:9e:51:2f:07:c0: 0d:66:05:70:04:0f:b1:0c:16:1b:95:9f:f8:5e:84:99:fa:2c: a2:d4:03:4a:43:72:a8:33:2c:93:bc:a5:bc:49:9c:38:fd:03: b2:e7:72:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+lnaraJJrP2uWQJ1QoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZGFmYTdlYTU1MzE3ODEzM2U3ZTg0ZmVlYjhhYzNhOWRi Y2Y5Y2EwHhcNMjUxMjIwMjIwMTEwWhcNMjUxMjIxMjIwMTEwWjAzMTEwLwYDVQQD Eyg5ODk2NDBkYzhjYzQyOTA3MTg1YWMyNjA5ZDMwMTdmNTE3OTAyYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmX3soBMfG6QC2/8I867lm2fdQIR mglrc/ah45Oz6ILEW87uHSYdUhg/MNq53VYSu2csf7T4g0wRLmteke1idKvoX0A2 IrnAlWzx54r2ZbUqr225TSUtbtXWBoiPbODlFW7NuOoB0z/1qm777RJ/M4B7VYSh q7sYAN9GF0M3gHZPjiMhkJhRlsgOeY3JxNNKxn2ndUTEr2wXzOJYBEu82kRC2hAV Nm1ETI00ZbNOs4hojrP4P92ILvT0krBg313xkbVHm45BPg8ZSfkJGRyNXxFajiQu 8CNa2kgrmynVnYeFK3+keT9rVyWvZISfaQz0KCRQARG5IYIviMU0pNgJTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiWQNyMxCkHGFrCYJ0wF/UXkCw1MB8GA1UdIwQY MBaAFLja+n6lUxeBM+foT+64rDqdvPnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUt NmI4OWZhNDY3NTdjLzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUtNmI4OWZhNDY3NTdj LzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBq6ctUf 99j96/qx3UCEgtAZT6McCGxv9m25eipBZWhUmeILy50/Hd4YsBDSKmTbndJslMnm GrKAp/o0eaMN/U4DBzERhjE5AYy/qAW7GEDFrVnMHgof4i9cjf8f3vtYNaaewyvN 7cqdoWNYWltc6uFspa1MgDMUnyv3u9JHZ44hZEwUV5WYnMyc4jhdM0mskB3pO22P LNOoEHo70uxi42NTdTKXQXQHZUw6XbcmLffjbZzBafmYZZfNKXa42THe8r+O+OkI /FNnmFrgnXnMf6l1C55RLwfADWYFcAQPsQwWG5Wf+F6EmfosotQDSkNyqDMsk7yl vEmcOP0Dsudy0A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:15 2025 by rpki-client