This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json) Hash identifier: JNiVL9Zmfzfz7A5to3synTbSE92xHKEhAWQwDzoNJas= Subject key identifier: 2F:51:4A:26:D2:01:2A:95:36:F2:02:1D:6C:28:9C:1C:E9:AF:91:F3 Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec Certificate serial: 019B3C7E272DF6A958844C5E84EA1A0BA5EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 16:00:58 +0000 Manifest this update: Sat 20 Dec 2025 16:00:58 +0000 Manifest next update: Sun 21 Dec 2025 16:00:58 +0000 Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: XSrOtPGnexQhA1wY9dwMhDjMF+5/6/6/EKLKjiTNrBw=) 2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=) 3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:27:2d:f6:a9:58:84:4c:5e:84:ea:1a:0b:a5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec Validity Not Before: Dec 20 16:00:58 2025 GMT Not After : Dec 21 16:00:58 2025 GMT Subject: CN=2f514a26d2012a9536f2021d6c289c1ce9af91f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:5d:30:eb:37:4b:c5:a6:b0:00:00:55:c3: 87:78:8d:84:75:6c:a9:04:b0:06:f3:52:40:a3:5b: 3a:56:27:f4:56:f3:45:f8:14:3e:0f:ef:a9:7c:1b: b4:d9:9a:4c:96:c9:b9:92:03:aa:74:d1:f3:1c:05: b2:24:18:a0:0d:0c:d8:64:53:02:09:09:54:42:33: 4e:ca:e9:8d:3c:eb:73:d0:f3:10:3e:8c:7f:b3:41: df:89:90:72:2d:ab:53:e3:ad:74:d3:27:e6:62:92: 42:73:18:80:8b:d4:f4:c7:9f:ad:bc:3a:55:28:2c: 9f:00:d6:93:d6:c5:e5:3d:00:77:e4:d6:ec:10:4a: ed:95:d0:02:d0:de:36:c1:64:90:46:ec:8b:d9:1c: 05:5b:ae:5e:34:fb:9d:88:94:87:8a:cd:bd:24:fc: 22:a7:7e:a1:de:80:64:86:09:33:58:0f:bf:15:40: 06:8e:94:e6:b3:f9:e1:ea:73:79:bc:09:84:e8:37: 5a:fa:e3:bb:f0:01:d2:ea:da:5b:c5:2c:83:1c:c7: d3:e3:bd:de:b2:bf:b9:c7:fa:9b:81:a1:10:4e:49: 4d:26:68:b9:ec:05:fd:7c:66:5b:86:f5:30:5d:8c: ed:72:89:8e:0e:1e:33:0a:4e:dd:ac:17:ea:17:e3: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:51:4A:26:D2:01:2A:95:36:F2:02:1D:6C:28:9C:1C:E9:AF:91:F3 X509v3 Authority Key Identifier: keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:df:50:6f:53:7e:60:cf:85:ab:d5:de:0c:e2:33:aa:f5:76: 36:78:75:e9:3a:75:25:b2:c9:45:4c:e7:f5:c5:10:09:57:af: 55:2e:4b:29:29:5f:36:49:9c:8f:18:47:47:e4:80:43:c1:f9: 2b:63:09:a4:44:56:4c:da:da:d3:17:62:d2:ba:03:c5:ba:e7: 36:c9:2c:0a:71:fc:21:ea:f7:f8:b1:9e:b2:2c:31:ae:70:df: bc:a7:17:69:3f:b0:02:91:30:22:07:92:fd:53:8b:ce:b3:bd: 42:52:f6:f4:55:63:48:41:a3:dc:45:e5:8a:35:a2:55:88:47: 92:aa:45:b1:bd:5d:7f:7a:86:8f:7a:1c:e0:47:7c:7b:3d:5c: 8b:82:11:07:3d:61:fd:ca:cf:4f:d8:74:81:08:06:20:45:cc: e3:1a:e3:81:42:8a:30:ee:a2:b4:21:a6:d1:06:88:69:2c:1a: e3:e9:9d:8f:9c:22:ec:66:f0:11:b0:23:8d:1e:bf:f8:aa:03: dc:1a:f0:46:8e:fb:1a:45:d8:58:2c:f2:9b:4b:59:28:f2:50: 8a:db:e6:ee:44:09:52:75:b0:cf:42:53:06:76:fd:df:3d:2f: fc:09:f7:d5:03:fa:07:e9:44:d7:81:08:c3:f5:26:85:69:b7: 47:7e:5a:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fict9qlYhExehOoaC6XuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl NjNmZWMwHhcNMjUxMjIwMTYwMDU4WhcNMjUxMjIxMTYwMDU4WjAzMTEwLwYDVQQD EygyZjUxNGEyNmQyMDEyYTk1MzZmMjAyMWQ2YzI4OWMxY2U5YWY5MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFhdMOs3S8WmsAAAVcOHeI2EdWyp BLAG81JAo1s6Vif0VvNF+BQ+D++pfBu02ZpMlsm5kgOqdNHzHAWyJBigDQzYZFMC CQlUQjNOyumNPOtz0PMQPox/s0HfiZByLatT46100yfmYpJCcxiAi9T0x5+tvDpV KCyfANaT1sXlPQB35NbsEErtldAC0N42wWSQRuyL2RwFW65eNPudiJSHis29JPwi p36h3oBkhgkzWA+/FUAGjpTms/nh6nN5vAmE6Dda+uO78AHS6tpbxSyDHMfT473e sr+5x/qbgaEQTklNJmi57AX9fGZbhvUwXYztcomODh4zCk7drBfqF+PYZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9RSibSASqVNvICHWwonBzpr5HzMB8GA1UdIwQY MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt YmEwMzIzMjM3NDRjLzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsd9Qb1N+ YM+Fq9XeDOIzqvV2Nnh16Tp1JbLJRUzn9cUQCVevVS5LKSlfNkmcjxhHR+SAQ8H5 K2MJpERWTNra0xdi0roDxbrnNsksCnH8Ier3+LGesiwxrnDfvKcXaT+wApEwIgeS /VOLzrO9QlL29FVjSEGj3EXlijWiVYhHkqpFsb1df3qGj3oc4Ed8ez1ci4IRBz1h /crPT9h0gQgGIEXM4xrjgUKKMO6itCGm0QaIaSwa4+mdj5wi7GbwEbAjjR6/+KoD 3BrwRo77GkXYWCzym0tZKPJQitvm7kQJUnWwz0JTBnb93z0v/An31QP6B+lE14EI w/UmhWm3R35aAw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:57:00 2025 by rpki-client