This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json) Hash identifier: wBR3lePBWtQyMmu0twK840B9pN+Bls4zUqeF6xigtM0= Subject key identifier: 95:2B:24:BE:0E:D6:A6:09:FE:A9:2E:00:AB:63:FD:DC:9F:F1:3E:8E Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a Certificate serial: 019B3E6DAFE86C6F46278E9E5FFA8A01CD60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft Manifest number: 0736 Signing time: Sun 21 Dec 2025 01:02:14 +0000 Manifest this update: Sun 21 Dec 2025 01:02:14 +0000 Manifest next update: Mon 22 Dec 2025 01:02:14 +0000 Files and hashes: 1: R9FIW-YXitjJpX1Q3jcy6-oEIFI.roa (hash: UPbldeCj6tFYKOIutM8BR+cGGez6vIB0/3ZKKmpjUZo=) 2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: M9TRnnlLel5tAKsKfeJFhTLVqTFmT58jSzGdVn/mErM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:af:e8:6c:6f:46:27:8e:9e:5f:fa:8a:01:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a Validity Not Before: Dec 21 01:02:14 2025 GMT Not After : Dec 22 01:02:14 2025 GMT Subject: CN=952b24be0ed6a609fea92e00ab63fddc9ff13e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:62:2c:2b:0f:73:2d:5d:c9:bb:6f:50:65: e6:4e:23:6c:25:6d:ec:db:70:ca:c9:23:20:a8:b2: 5d:09:d7:d3:ac:19:c3:3b:11:8a:b6:e5:39:d9:df: 37:1a:df:9c:ec:28:27:f8:92:6a:3d:62:02:a9:69: 1e:78:9f:60:45:16:ca:5c:08:21:a8:10:87:83:78: 15:fc:1a:25:83:58:58:1c:0c:7d:6e:14:e7:24:f2: c5:c9:57:e8:df:bb:2b:4b:ae:ec:25:9a:8b:bf:04: c3:a6:17:96:36:f2:38:3a:d4:73:f9:56:bf:82:47: 4e:61:36:35:b6:b4:f6:5a:a9:d1:a0:95:af:af:ac: e0:7a:10:e5:b2:4d:43:da:1b:70:86:ce:b1:a5:7c: 96:4a:79:ab:b4:2b:07:26:6f:ce:a5:20:83:69:e3: 5b:03:05:5d:2c:8f:ea:24:ac:a2:8d:71:41:4e:80: d8:9a:e0:b3:5e:9b:46:ff:c2:14:ef:af:4e:69:cc: a8:95:d4:25:8f:29:02:0c:89:72:c0:a6:97:38:7a: 89:1b:00:28:4f:3d:99:8a:69:ec:95:17:3f:dd:27: 31:90:6d:fa:e8:5c:dc:b7:87:f9:3b:f8:f4:ce:4f: 33:72:f7:eb:c4:d5:9c:14:e3:b8:53:e5:a0:97:70: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2B:24:BE:0E:D6:A6:09:FE:A9:2E:00:AB:63:FD:DC:9F:F1:3E:8E X509v3 Authority Key Identifier: keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2e:1f:c1:8d:10:09:01:db:e3:41:11:e0:9d:bf:db:84:a1: 5f:40:2e:62:fb:36:b4:81:cf:0d:48:60:1c:08:99:ab:ea:f7: a5:93:28:23:57:95:bf:43:5e:4a:05:af:58:41:3c:fb:58:43: ff:17:5f:b5:a0:c3:41:55:8d:17:50:95:43:a0:f3:2f:87:ae: ae:70:93:a5:6b:21:4a:6d:67:35:a1:bb:32:a9:a4:92:2b:7f: 69:21:22:f0:ac:c9:1b:ae:05:e1:0a:a6:e1:56:a2:28:15:92: 86:f8:7e:cd:60:a3:cf:30:7c:f3:78:13:21:ac:38:26:89:dd: dc:92:98:01:0c:dc:25:23:a1:23:e8:c5:b9:c7:91:3f:ac:ff: 49:63:06:38:37:cd:45:8f:90:0d:fe:28:6d:99:34:be:5d:d4: d5:7c:0e:27:e2:40:dc:89:74:cc:e9:b1:bc:69:7b:19:ea:f7: 13:c8:8a:95:1f:cf:74:d3:cc:8f:6d:75:41:a6:13:1b:c7:d9: 06:c7:3d:15:6b:e7:1a:b7:4d:f3:14:7b:fa:a2:2e:a7:67:61: 0f:17:d6:69:d4:ad:04:c5:9a:3a:a4:cf:f0:36:f7:28:3a:bc: e3:8d:31:4c:f0:46:eb:d0:44:f8:53:92:6a:93:e7:a1:08:a3: 98:ac:a3:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ba/obG9GJ46eX/qKAc1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNDM0ZmQ4NTkyMjNhZTc2ZThkNzg2NDhhOTM3Mjk1ZThl Y2Q3OWEwHhcNMjUxMjIxMDEwMjE0WhcNMjUxMjIyMDEwMjE0WjAzMTEwLwYDVQQD Eyg5NTJiMjRiZTBlZDZhNjA5ZmVhOTJlMDBhYjYzZmRkYzlmZjEzZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WZiLCsPcy1dybtvUGXmTiNsJW3s 23DKySMgqLJdCdfTrBnDOxGKtuU52d83Gt+c7Cgn+JJqPWICqWkeeJ9gRRbKXAgh qBCHg3gV/Bolg1hYHAx9bhTnJPLFyVfo37srS67sJZqLvwTDpheWNvI4OtRz+Va/ gkdOYTY1trT2WqnRoJWvr6zgehDlsk1D2htwhs6xpXyWSnmrtCsHJm/OpSCDaeNb AwVdLI/qJKyijXFBToDYmuCzXptG/8IU769OacyoldQljykCDIlywKaXOHqJGwAo Tz2ZimnslRc/3ScxkG366Fzct4f5O/j0zk8zcvfrxNWcFOO4U+Wgl3BQZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUrJL4O1qYJ/qkuAKtj/dyf8T6OMB8GA1UdIwQY MBaAFM1DT9hZIjrnbo14ZIqTcpXo7NeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelVOUDJGa2lPdWR1alhoa2lwTnlsZWpzMTVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zZDE4ZGMtNzNjNi00YzZmLThjMjgt NWE1NzIzNGRkYjc2LzEvelVOUDJGa2lPdWR1alhoa2lwTnlsZWpzMTVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zZDE4ZGMtNzNjNi00YzZmLThjMjgtNWE1NzIzNGRkYjc2 LzEvelVOUDJGa2lPdWR1alhoa2lwTnlsZWpzMTVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC4fwY0Q CQHb40ER4J2/24ShX0AuYvs2tIHPDUhgHAiZq+r3pZMoI1eVv0NeSgWvWEE8+1hD /xdftaDDQVWNF1CVQ6DzL4eurnCTpWshSm1nNaG7Mqmkkit/aSEi8KzJG64F4Qqm 4VaiKBWShvh+zWCjzzB883gTIaw4Jond3JKYAQzcJSOhI+jFuceRP6z/SWMGODfN RY+QDf4obZk0vl3U1XwOJ+JA3Il0zOmxvGl7Ger3E8iKlR/PdNPMj211QaYTG8fZ Bsc9FWvnGrdN8xR7+qIup2dhDxfWadStBMWaOqTP8Db3KDq8440xTPBG69BE+FOS apPnoQijmKyjyA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:09 2025 by rpki-client