This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json) Hash identifier: /mqu6govqgz2CEDomrOtcMmqJGFEomJQx46C3APxWRs= Subject key identifier: 23:6A:97:81:2A:A0:14:79:56:0B:F7:BD:23:54:BF:34:34:75:D5:8C Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Certificate serial: 019BB0CC06FE97A32D00240754C50119F12D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft Manifest number: 0872 Signing time: Mon 12 Jan 2026 06:01:59 +0000 Manifest this update: Mon 12 Jan 2026 06:01:59 +0000 Manifest next update: Tue 13 Jan 2026 06:01:59 +0000 Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: Y9yfkc7aNBvlGOpGkEo6kHiMlM9W/yqhMcStNrXR+wA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cc:06:fe:97:a3:2d:00:24:07:54:c5:01:19:f1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Validity Not Before: Jan 12 06:01:59 2026 GMT Not After : Jan 13 06:01:59 2026 GMT Subject: CN=236a97812aa01479560bf7bd2354bf343475d58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:51:2e:28:2f:01:64:9e:60:6e:d5:85:93: a0:a2:1c:e8:ee:f7:6a:70:49:b0:61:32:50:34:95: 36:e6:a5:90:b7:73:54:2a:31:cc:05:dc:21:78:a5: 29:79:a6:f9:d3:e5:f6:cc:ec:eb:ab:82:96:a9:10: f8:58:ab:e8:13:21:c0:1b:04:97:ff:5e:e8:2a:18: d5:cc:b3:5c:d9:71:9b:c4:57:39:9d:c8:16:a5:24: 54:e6:ab:f4:2b:22:7b:ab:89:40:4f:71:0f:4b:67: 52:ab:3c:42:40:19:7c:37:3c:1b:6e:96:b3:91:72: fd:eb:a8:ae:f4:6f:7a:10:a4:82:1f:1d:1b:37:d4: 9b:e6:a8:bf:43:5e:f9:eb:33:5a:2d:56:cd:55:d8: 5c:2b:82:b6:ab:19:53:c3:67:98:1e:f3:b4:88:8f: c7:bb:09:c6:f2:1a:08:60:54:24:a9:a2:09:cf:9a: 25:d7:3e:b9:c0:10:df:9c:9d:8a:77:62:ec:ba:e6: b1:79:a5:a2:f9:df:3a:50:85:73:d5:a1:80:9d:16: c0:ce:0a:ca:0f:4b:a0:02:89:45:b7:cb:1f:e8:30: f7:91:0f:16:b0:bf:d3:c5:b6:31:8f:35:23:af:da: fc:49:1f:68:2e:c0:1b:f0:fc:2c:e0:19:70:13:35: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6A:97:81:2A:A0:14:79:56:0B:F7:BD:23:54:BF:34:34:75:D5:8C X509v3 Authority Key Identifier: keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:77:e2:fc:d1:64:0a:03:f0:c1:c1:6e:65:09:91:92:e7:2f: a5:e9:98:83:57:40:e4:ae:95:24:21:06:4d:91:11:94:79:19: bd:cf:f7:cb:c9:e5:83:29:23:2f:7b:47:eb:ad:e5:e9:8f:09: 90:5b:bc:97:b5:71:da:13:6f:e5:c8:c4:c5:aa:da:a6:fe:c3: be:ef:77:bc:7a:b5:7e:f0:36:a6:aa:39:8b:e8:29:1e:d4:a9: d7:3c:89:10:a4:fe:0e:2c:01:44:90:04:a9:3b:a4:d7:54:98: 09:a0:80:31:ec:e6:b5:f6:ec:0e:54:21:48:fc:57:8b:d6:4f: f2:d1:a9:65:3b:05:7e:69:7d:fa:d2:cc:5e:87:f8:b4:6f:81: 11:a4:4f:93:91:b0:3a:c0:1d:e5:e7:9c:39:11:45:aa:47:bd: 27:34:65:c2:8c:55:ef:8f:20:90:e4:69:e0:24:d3:5a:1a:a5: 7f:83:62:4e:ec:4f:e7:8e:73:e4:35:8d:87:56:c9:db:7b:fe: f9:d1:b6:c7:73:0a:f0:ee:2d:ab:12:31:0f:8a:9a:f4:4d:cd: 39:be:8f:71:ee:8f:57:c4:c3:eb:87:9f:0b:6f:a1:63:d9:35: b5:95:15:11:30:c3:0d:9a:f9:04:13:56:38:55:10:85:97:70: 70:4a:ce:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwzAb+l6MtACQHVMUBGfEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzkyYzc3MTRlZDU3NDU2ZDczNTVlNGEwNGI5YmE4YmVk NTdlNDIwHhcNMjYwMTEyMDYwMTU5WhcNMjYwMTEzMDYwMTU5WjAzMTEwLwYDVQQD EygyMzZhOTc4MTJhYTAxNDc5NTYwYmY3YmQyMzU0YmYzNDM0NzVkNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEBRLigvAWSeYG7VhZOgohzo7vdq cEmwYTJQNJU25qWQt3NUKjHMBdwheKUpeab50+X2zOzrq4KWqRD4WKvoEyHAGwSX /17oKhjVzLNc2XGbxFc5ncgWpSRU5qv0KyJ7q4lAT3EPS2dSqzxCQBl8Nzwbbpaz kXL966iu9G96EKSCHx0bN9Sb5qi/Q1756zNaLVbNVdhcK4K2qxlTw2eYHvO0iI/H uwnG8hoIYFQkqaIJz5ol1z65wBDfnJ2Kd2LsuuaxeaWi+d86UIVz1aGAnRbAzgrK D0ugAolFt8sf6DD3kQ8WsL/TxbYxjzUjr9r8SR9oLsAb8Pws4BlwEzViGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNql4EqoBR5Vgv3vSNUvzQ0ddWMMB8GA1UdIwQY MBaAFFJ5LHcU7VdFbXNV5KBLm6i+1X5CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0Yzct N2JkZTJmZDc2MzgyLzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0YzctN2JkZTJmZDc2Mzgy LzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXfi/NFk CgPwwcFuZQmRkucvpemYg1dA5K6VJCEGTZERlHkZvc/3y8nlgykjL3tH663l6Y8J kFu8l7Vx2hNv5cjExarapv7Dvu93vHq1fvA2pqo5i+gpHtSp1zyJEKT+DiwBRJAE qTuk11SYCaCAMezmtfbsDlQhSPxXi9ZP8tGpZTsFfml9+tLMXof4tG+BEaRPk5Gw OsAd5eecORFFqke9JzRlwoxV748gkORp4CTTWhqlf4NiTuxP545z5DWNh1bJ23v+ +dG2x3MK8O4tqxIxD4qa9E3NOb6Pce6PV8TD64efC2+hY9k1tZUVETDDDZr5BBNW OFUQhZdwcErOFQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:31:17 2026 by rpki-client