This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft File: cUnH5wIxqJKP1dBDV6zrbMD0pps.mft (raw, json) Hash identifier: 580JDa2TXuP2KCgwYdf3i6LVm5JCwZv8kJudBjZBOQs= Subject key identifier: A4:4F:8B:47:7A:F3:9D:42:ED:3A:35:7E:95:18:97:42:86:03:E2:B2 Authority key identifier: 71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B Certificate issuer: /CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b Certificate serial: 019B593EDF2308B082A4835A4CD71876F7D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft Manifest number: 17 Signing time: Fri 26 Dec 2025 06:00:51 +0000 Manifest this update: Fri 26 Dec 2025 06:00:51 +0000 Manifest next update: Sat 27 Dec 2025 06:00:51 +0000 Files and hashes: 1: cUnH5wIxqJKP1dBDV6zrbMD0pps.crl (hash: vt3gf1mlhp5zHujC1EZc32s1AHiDTwiZL3ekSw4yPTA=) 2: x6KDSme9lw7Iu3AdtV7RMHoohyo.roa (hash: x8yF9hM40PgiB156NR78jocFOxbNtdv47CvO82Qo55k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:df:23:08:b0:82:a4:83:5a:4c:d7:18:76:f7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b Validity Not Before: Dec 26 06:00:51 2025 GMT Not After : Dec 27 06:00:51 2025 GMT Subject: CN=a44f8b477af39d42ed3a357e951897428603e2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:9f:bb:94:b9:19:d9:25:e0:f9:77:1d:4a: ff:59:02:79:f1:e3:df:25:20:07:b2:91:4d:c1:0a: 11:e8:d7:20:8d:2d:d1:9f:1a:f1:4c:6d:5b:10:a7: f4:b6:3a:46:77:74:45:ba:6a:a5:8c:c5:73:d3:f2: ff:37:01:a0:ff:6f:ec:0f:c7:c5:49:38:11:85:de: bd:36:47:a4:38:e1:72:37:61:c4:62:c3:6d:b5:6c: 1c:fa:96:02:d8:5e:93:68:ed:d3:50:0f:18:3a:c0: ad:d5:48:51:79:bf:1f:5b:57:b4:b1:fe:00:7d:86: 14:29:30:64:4a:ac:67:5e:6e:47:d8:6b:73:4d:5a: cd:0a:83:4f:89:d0:f7:af:9a:09:91:b2:55:b4:7a: 61:cc:31:ba:28:ef:e7:13:72:1f:01:7c:c9:35:37: e6:2c:6b:9f:ff:9b:98:63:68:f5:0a:ac:ce:6a:21: d4:35:cc:ea:61:e5:82:e0:e3:a6:bb:4e:9c:0b:c1: 3d:86:f7:47:22:79:7b:36:87:99:8c:55:54:93:ee: 39:bf:3d:c9:8e:fd:20:b9:40:8d:2f:d0:cb:2c:30: 98:ff:a9:de:a3:2d:96:85:79:44:e5:3f:c3:a1:fc: 29:b4:bc:e8:03:2b:1e:b6:56:e9:e4:d6:3a:94:f9: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4F:8B:47:7A:F3:9D:42:ED:3A:35:7E:95:18:97:42:86:03:E2:B2 X509v3 Authority Key Identifier: keyid:71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6c:a3:5f:07:bc:b0:00:f9:ef:10:8c:a1:3c:60:05:61:1d: b3:a3:52:a6:b1:3b:03:c3:69:d8:e4:e9:07:04:f6:85:0f:38: d8:d0:e7:14:bd:c7:37:d9:cc:bb:32:05:2c:76:47:32:9d:aa: 7b:9d:a1:fe:fd:ef:ef:a4:63:0e:38:60:7b:70:56:1a:cb:40: ab:67:f8:e1:81:93:ee:a7:16:41:8a:2d:ac:75:f4:8a:a7:ff: f5:f1:3f:68:63:5a:31:1b:5c:14:7a:8b:f2:2f:75:9c:ce:49: 7d:0f:c4:b9:27:2b:8e:48:62:f3:31:3a:5e:2d:9e:11:b9:b1: 8d:c3:ff:fb:cc:58:3a:10:11:58:fd:60:06:7f:36:0f:fd:9c: 33:c7:1c:13:27:d3:64:df:32:80:59:3c:63:76:50:7d:c9:be: cf:ea:9d:ab:64:ba:7b:09:10:6f:bd:3e:54:1a:69:de:dd:4d: 96:48:ca:8e:5a:96:f4:47:62:2f:3d:39:36:55:45:89:b9:56: a6:60:e0:e5:4e:72:20:5a:ad:9c:11:fa:db:0d:93:7f:96:08: e5:36:ea:86:46:b1:01:90:98:6b:54:e5:dd:c5:6e:58:2c:79: 88:96:07:66:35:e5:7d:f6:f1:69:e2:4b:6e:be:9a:f7:ab:0d: 3f:6f:89:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPt8jCLCCpINaTNcYdvfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNDljN2U3MDIzMWE4OTI4ZmQ1ZDA0MzU3YWNlYjZjYzBm NGE2OWIwHhcNMjUxMjI2MDYwMDUxWhcNMjUxMjI3MDYwMDUxWjAzMTEwLwYDVQQD EyhhNDRmOGI0NzdhZjM5ZDQyZWQzYTM1N2U5NTE4OTc0Mjg2MDNlMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYafu5S5Gdkl4Pl3HUr/WQJ58ePf JSAHspFNwQoR6NcgjS3RnxrxTG1bEKf0tjpGd3RFumqljMVz0/L/NwGg/2/sD8fF STgRhd69NkekOOFyN2HEYsNttWwc+pYC2F6TaO3TUA8YOsCt1UhReb8fW1e0sf4A fYYUKTBkSqxnXm5H2GtzTVrNCoNPidD3r5oJkbJVtHphzDG6KO/nE3IfAXzJNTfm LGuf/5uYY2j1CqzOaiHUNczqYeWC4OOmu06cC8E9hvdHInl7NoeZjFVUk+45vz3J jv0guUCNL9DLLDCY/6neoy2WhXlE5T/DofwptLzoAysetlbp5NY6lPl3lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRPi0d6851C7To1fpUYl0KGA+KyMB8GA1UdIwQY MBaAFHFJx+cCMaiSj9XQQ1es62zA9KabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1VuSDV3SXhxSktQMWRCRFY2enJiTUQwcHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mYmU4ODMtMDNhZi00MTcyLTkwODEt OGM5OTRkNzQxOTU2LzEvY1VuSDV3SXhxSktQMWRCRFY2enJiTUQwcHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mYmU4ODMtMDNhZi00MTcyLTkwODEtOGM5OTRkNzQxOTU2 LzEvY1VuSDV3SXhxSktQMWRCRFY2enJiTUQwcHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmyjXwe8 sAD57xCMoTxgBWEds6NSprE7A8Np2OTpBwT2hQ842NDnFL3HN9nMuzIFLHZHMp2q e52h/v3v76RjDjhge3BWGstAq2f44YGT7qcWQYotrHX0iqf/9fE/aGNaMRtcFHqL 8i91nM5JfQ/EuScrjkhi8zE6Xi2eEbmxjcP/+8xYOhARWP1gBn82D/2cM8ccEyfT ZN8ygFk8Y3ZQfcm+z+qdq2S6ewkQb70+VBpp3t1NlkjKjlqW9EdiLz05NlVFiblW pmDg5U5yIFqtnBH62w2Tf5YI5TbqhkaxAZCYa1Tl3cVuWCx5iJYHZjXlffbxaeJL br6a96sNP2+Jhg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:35 2025 by rpki-client