This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json) Hash identifier: /5I1JeuQpVLizCEvd88P/L3Sf6aovglSoCwUvNG5/yk= Subject key identifier: 2F:C8:82:BA:36:39:3C:BA:28:90:16:8A:00:7B:B1:0F:38:A9:D3:DB Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26 Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026 Certificate serial: 019B39B404244681FDCB0B5C007B1B16DDD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft Manifest number: 0BF3 Signing time: Sat 20 Dec 2025 03:00:57 +0000 Manifest this update: Sat 20 Dec 2025 03:00:57 +0000 Manifest next update: Sun 21 Dec 2025 03:00:57 +0000 Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: bFK47B701+vNBThkmHy468jc2TZ9gOhmzUTGudPswHU=) 2: VwHu0AZouyhVLQY99VO0Hkcb7pw.roa (hash: cQhVJXl3GQeuBM9kWPoYpEUpa83WUtjFGDqVTGex39s=) 3: g5Vn880XXpeU5DJfsGcy-Urcv2M.roa (hash: OCJJ4xo5f+mpBB7aa28MDI5Ug57SbY/lCFK1ZpNzZKw=) 4: tqTqorxuukrl9uDDia_5nmx2f7s.roa (hash: Jv1dDJLLdh6QR2z0ABpF4hZs9+OaRufEEerM9P1Rxzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:04:24:46:81:fd:cb:0b:5c:00:7b:1b:16:dd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026 Validity Not Before: Dec 20 03:00:57 2025 GMT Not After : Dec 21 03:00:57 2025 GMT Subject: CN=2fc882ba36393cba2890168a007bb10f38a9d3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:9b:6d:6a:fd:f7:c8:4b:73:d8:ca:44:e8: d8:95:74:b2:b7:a7:0e:cd:82:20:67:91:56:f3:54: 92:d5:3f:33:ef:f6:ca:49:64:35:b9:3a:73:3c:3b: f2:9a:e2:9e:07:21:14:8b:99:3d:c5:5f:15:9f:9d: a5:1d:d8:75:48:cb:ba:4b:41:c0:0f:3a:00:96:0a: 98:7e:6d:de:be:6d:40:e0:8b:6c:26:1d:95:12:27: 50:e5:e5:c5:27:d8:e5:1c:2b:08:f5:28:9a:37:d5: ac:52:a0:da:20:15:e0:b5:5c:cb:49:6e:f5:6f:22: 99:ab:f4:5e:d9:5a:cc:81:67:06:fa:4c:69:78:00: aa:da:85:63:13:dc:f0:bf:8e:8a:cc:8e:b8:f0:df: 41:64:97:01:9b:52:8c:01:f0:52:15:ff:6e:2f:a7: f6:29:3d:e7:79:11:e0:0c:32:42:8c:16:08:2d:94: a3:43:d5:88:0a:29:67:11:5e:cb:d3:02:67:82:d5: 58:69:95:d0:60:6a:91:7b:cb:39:ae:2d:01:91:7b: 77:09:98:c8:9a:57:ee:ff:5e:38:e2:d0:f0:17:be: 08:5d:07:ef:92:50:b5:53:e1:04:ff:45:8e:f9:94: 53:6f:77:aa:19:9b:00:d1:95:5e:76:f6:89:a0:52: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C8:82:BA:36:39:3C:BA:28:90:16:8A:00:7B:B1:0F:38:A9:D3:DB X509v3 Authority Key Identifier: keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:03:7f:db:63:be:24:c2:a9:83:60:93:9b:df:e6:60:1c:14: 08:64:b6:4f:71:32:b5:c1:af:0c:a0:b0:7a:72:7a:bb:8c:a4: c1:04:79:37:b6:61:e5:ed:5d:bf:b6:fd:29:36:f0:f0:65:33: 60:0d:75:1a:df:0c:48:bb:db:20:0a:18:c8:aa:3d:fe:82:37: cf:fb:e0:1c:4e:db:40:79:1b:84:6a:00:b1:27:a0:87:ba:b4: d4:6d:1a:5d:d9:82:f2:50:01:8e:ad:fa:3e:eb:80:9c:0d:ef: 93:3e:55:b2:f1:9f:10:0a:cc:ac:aa:be:7c:2a:95:38:e8:d5: 6c:e5:49:14:68:db:6d:0d:5c:a2:92:f5:85:14:83:4e:9d:59: 3f:62:23:da:5f:5b:64:d0:ca:73:b4:9e:e0:42:ad:23:b1:77: 96:f5:eb:09:c8:4b:c9:1a:f2:ce:54:c1:cf:2c:a8:93:fa:06: e2:f9:a5:51:6f:3d:b2:f0:40:fa:ee:17:10:fe:da:30:8e:5e: 74:55:59:06:1a:1a:52:e7:2e:38:ec:a3:15:41:a0:a3:2b:28: 6f:1c:97:da:35:84:2f:93:95:3b:45:95:be:c7:d5:2e:f4:8b: 0e:75:02:dc:2c:ca:50:ad:34:a6:05:a7:a7:94:2b:06:10:c0: 24:4c:1b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tAQkRoH9ywtcAHsbFt3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZGE1ODhmNWU5YTFjMmFmNTZiZTA4ZjdlNmEyYzk5ODFh YjYwMjYwHhcNMjUxMjIwMDMwMDU3WhcNMjUxMjIxMDMwMDU3WjAzMTEwLwYDVQQD EygyZmM4ODJiYTM2MzkzY2JhMjg5MDE2OGEwMDdiYjEwZjM4YTlkM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkSbbWr998hLc9jKROjYlXSyt6cO zYIgZ5FW81SS1T8z7/bKSWQ1uTpzPDvymuKeByEUi5k9xV8Vn52lHdh1SMu6S0HA DzoAlgqYfm3evm1A4ItsJh2VEidQ5eXFJ9jlHCsI9SiaN9WsUqDaIBXgtVzLSW71 byKZq/Re2VrMgWcG+kxpeACq2oVjE9zwv46KzI648N9BZJcBm1KMAfBSFf9uL6f2 KT3neRHgDDJCjBYILZSjQ9WICilnEV7L0wJngtVYaZXQYGqRe8s5ri0BkXt3CZjI mlfu/1444tDwF74IXQfvklC1U+EE/0WO+ZRTb3eqGZsA0ZVedvaJoFIdKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/Igro2OTy6KJAWigB7sQ84qdPbMB8GA1UdIwQY MBaAFFDaWI9emhwq9Wvgj35qLJmBq2AmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmIt NDNjMWM2MWQwMmViLzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmItNDNjMWM2MWQwMmVi LzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwN/22O+ JMKpg2CTm9/mYBwUCGS2T3EytcGvDKCwenJ6u4ykwQR5N7Zh5e1dv7b9KTbw8GUz YA11Gt8MSLvbIAoYyKo9/oI3z/vgHE7bQHkbhGoAsSegh7q01G0aXdmC8lABjq36 PuuAnA3vkz5VsvGfEArMrKq+fCqVOOjVbOVJFGjbbQ1copL1hRSDTp1ZP2Ij2l9b ZNDKc7Se4EKtI7F3lvXrCchLyRryzlTBzyyok/oG4vmlUW89svBA+u4XEP7aMI5e dFVZBhoaUucuOOyjFUGgoysobxyX2jWEL5OVO0WVvsfVLvSLDnUC3CzKUK00pgWn p5QrBhDAJEwbgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:19:18 2025 by rpki-client