This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json) Hash identifier: XeN0w3+8MAKVjX0B6EQoz/IOCydwjwGuEpuI8cax8X4= Subject key identifier: 22:27:6D:BE:1A:AF:C2:50:8D:24:83:17:57:D5:32:9E:70:C1:1E:B5 Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Certificate serial: 019B3C7EE502E8CF3FD862D480805BF02AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 16:01:47 +0000 Manifest this update: Sat 20 Dec 2025 16:01:47 +0000 Manifest next update: Sun 21 Dec 2025 16:01:47 +0000 Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: vahI4igv3PwtPU5hKVdaTT+3QcrDGM/KmxKnEKsU/is=) 2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e5:02:e8:cf:3f:d8:62:d4:80:80:5b:f0:2a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Validity Not Before: Dec 20 16:01:47 2025 GMT Not After : Dec 21 16:01:47 2025 GMT Subject: CN=22276dbe1aafc2508d24831757d5329e70c11eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:d2:77:13:37:bd:b0:f1:ae:51:35:5f:93: 70:b5:79:4f:bd:a5:a6:65:57:2c:56:1e:89:10:54: 90:ca:fd:a3:f9:44:84:28:72:ce:42:88:1c:b1:f3: 24:f2:9b:33:01:97:20:7d:84:fe:ba:4a:be:8f:e8: e3:7b:29:d5:9f:b0:48:89:c3:06:2d:63:3f:e1:66: ff:2c:21:95:f9:39:c8:52:1e:d8:fd:87:09:74:06: 8f:24:7e:c3:e2:f6:90:5e:2e:86:80:af:29:32:92: e3:ea:73:d3:e0:94:1d:cb:69:e7:c2:a6:d1:95:36: 57:38:6f:22:65:08:52:d2:bf:32:76:78:33:7a:d2: f0:35:b8:27:6b:43:f1:f6:2c:bb:20:78:be:cc:8c: 5a:0e:1d:76:4b:2e:42:a6:00:65:21:e9:5e:b6:4a: 1a:bd:7a:59:8f:c1:d4:08:27:25:b6:26:fb:c0:77: 88:93:ec:a0:19:cc:d5:c5:5c:ab:38:33:ac:a4:a4: 90:bb:e6:db:a5:44:33:64:3d:fb:9b:9a:61:5b:ff: 0f:32:43:ac:f0:43:1e:98:ac:64:3f:50:89:d7:46: a3:94:51:ba:13:8c:00:8f:d8:89:18:09:d7:ab:5c: 61:b9:ed:5f:47:6c:b7:34:4d:38:71:a0:62:d8:fd: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:27:6D:BE:1A:AF:C2:50:8D:24:83:17:57:D5:32:9E:70:C1:1E:B5 X509v3 Authority Key Identifier: keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bf:e8:86:a7:5f:b2:44:6b:c9:78:40:06:93:b1:36:3d:bf: 0e:67:4e:73:71:c8:5e:d1:d8:e2:46:6c:80:9d:cd:28:97:bc: 3d:b4:14:4f:9a:75:1d:48:d6:08:a4:bf:b4:42:98:6a:27:44: bc:42:a8:46:43:c7:a8:bb:e8:be:0d:ad:06:ab:c6:6f:17:f0: a9:d7:6b:e3:bc:6f:1c:67:9a:2a:08:87:67:1b:7a:b6:f2:6d: 8b:8b:c2:1f:23:91:ef:a5:7c:92:ed:0e:72:de:4c:73:88:81: e2:c0:23:d6:d9:03:aa:24:ec:d2:91:6c:23:4a:70:7b:f0:4a: cf:8b:51:b0:7e:d7:06:a4:68:b9:7b:90:d7:45:34:2d:17:f3: 4e:ba:63:29:c1:6a:7d:a2:3f:c5:fc:45:92:bb:c5:cd:e6:71: 8e:58:e7:db:ca:e5:71:4a:8e:8b:33:d9:99:2e:92:bf:55:bf: 4f:8d:ec:82:8f:2f:c8:4e:3c:71:10:fd:59:6e:05:2a:74:50: de:ad:5f:36:d9:7c:13:73:79:9d:34:a2:ef:6f:f8:f7:8f:46: 3f:27:37:d1:50:9f:5a:c4:f7:c5:b7:df:08:4a:3b:6b:d8:15: e0:67:4e:aa:61:63:8e:3c:31:dd:88:f0:7a:0b:75:4d:58:03: 8a:6a:ed:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuUC6M8/2GLUgIBb8CqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl NmJlMmQwHhcNMjUxMjIwMTYwMTQ3WhcNMjUxMjIxMTYwMTQ3WjAzMTEwLwYDVQQD EygyMjI3NmRiZTFhYWZjMjUwOGQyNDgzMTc1N2Q1MzI5ZTcwYzExZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydHSdxM3vbDxrlE1X5NwtXlPvaWm ZVcsVh6JEFSQyv2j+USEKHLOQogcsfMk8pszAZcgfYT+ukq+j+jjeynVn7BIicMG LWM/4Wb/LCGV+TnIUh7Y/YcJdAaPJH7D4vaQXi6GgK8pMpLj6nPT4JQdy2nnwqbR lTZXOG8iZQhS0r8ydngzetLwNbgna0Px9iy7IHi+zIxaDh12Sy5CpgBlIeletkoa vXpZj8HUCCcltib7wHeIk+ygGczVxVyrODOspKSQu+bbpUQzZD37m5phW/8PMkOs 8EMemKxkP1CJ10ajlFG6E4wAj9iJGAnXq1xhue1fR2y3NE04caBi2P1OVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCInbb4ar8JQjSSDF1fVMp5wwR61MB8GA1UdIwQY MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5 LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr/ohqdf skRryXhABpOxNj2/DmdOc3HIXtHY4kZsgJ3NKJe8PbQUT5p1HUjWCKS/tEKYaidE vEKoRkPHqLvovg2tBqvGbxfwqddr47xvHGeaKgiHZxt6tvJti4vCHyOR76V8ku0O ct5Mc4iB4sAj1tkDqiTs0pFsI0pwe/BKz4tRsH7XBqRouXuQ10U0LRfzTrpjKcFq faI/xfxFkrvFzeZxjljn28rlcUqOizPZmS6Sv1W/T43sgo8vyE48cRD9WW4FKnRQ 3q1fNtl8E3N5nTSi72/4949GPyc30VCfWsT3xbffCEo7a9gV4GdOqmFjjjwx3Yjw egt1TVgDimrtlA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:09:42 2025 by rpki-client