This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json) Hash identifier: 46bT8dQF8oatedZA12/Ye05k6kvL3bEuBLtPIQdjETI= Subject key identifier: E9:3E:5D:FA:CB:67:AE:DD:94:1A:1E:6A:49:A8:4D:D6:5B:7D:B9:22 Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85 Certificate serial: 019B0E5C41A4A12F2380E10DCE4BF2CD264D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft Manifest number: 0E29 Signing time: Thu 11 Dec 2025 17:01:25 +0000 Manifest this update: Thu 11 Dec 2025 17:01:25 +0000 Manifest next update: Fri 12 Dec 2025 17:01:25 +0000 Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=) 2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: AgKyyHbOEIW9l4hxWI9tvgj6GP+SeabQwGJyoc6Y6sY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:41:a4:a1:2f:23:80:e1:0d:ce:4b:f2:cd:26:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85 Validity Not Before: Dec 11 17:01:25 2025 GMT Not After : Dec 12 17:01:25 2025 GMT Subject: CN=e93e5dfacb67aedd941a1e6a49a84dd65b7db922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f1:44:43:57:71:a0:83:7d:83:99:6a:bf:31: 79:5d:b2:b1:24:20:47:37:d7:af:27:31:b0:49:d0: 1b:26:1a:ab:10:46:49:70:a0:e6:e1:ac:4b:2f:ba: c9:5a:c0:c4:77:6e:86:96:a3:31:d5:08:e9:e2:1f: c9:0a:76:7d:af:34:79:6b:43:5c:0b:6e:e0:6a:5c: 52:e2:e1:00:66:e2:15:92:e7:43:45:a5:7d:49:fa: 7b:a7:71:c8:c7:23:07:6b:a2:b9:75:12:c8:e3:c5: 5b:37:aa:ef:cc:ec:fa:c5:67:b1:7e:ab:f9:f8:eb: 51:62:b1:67:f4:f0:31:da:e4:bd:c3:ee:f4:d3:99: e9:1a:c5:d0:a4:4f:d6:2d:b1:6f:8b:35:2f:a7:29: 55:f6:1b:c4:2a:02:ea:59:9e:d5:1d:20:02:49:f9: d8:5d:59:8c:7e:24:38:d2:19:be:fc:c5:f2:31:a7: fb:4b:84:03:1e:f4:a7:c0:5d:8f:4d:39:0d:bb:b5: 9f:4c:fe:35:51:72:2a:2a:d2:2c:f5:e1:f8:50:0f: 6d:7f:bf:16:33:bb:2a:d2:27:75:da:62:d3:15:fe: 68:0e:a4:57:b6:93:4a:39:7d:0a:dc:0f:ca:6d:93: 23:84:5d:5f:b4:04:89:04:c1:56:a3:1d:cb:ec:20: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3E:5D:FA:CB:67:AE:DD:94:1A:1E:6A:49:A8:4D:D6:5B:7D:B9:22 X509v3 Authority Key Identifier: keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:65:cf:ab:48:d0:e9:07:03:03:5c:96:b6:9a:27:25:6b:95: 28:e4:e9:19:ff:33:c8:55:e7:5a:f2:28:9f:b8:80:46:4f:04: 3c:69:80:0b:0e:99:11:a9:2c:6f:b5:54:61:cc:7f:e6:20:81: 17:ca:60:9b:c9:f7:79:bd:ab:7e:62:de:84:8c:00:8c:fc:0a: 53:ef:78:4f:9b:f1:f6:89:b0:ce:f6:fd:84:a9:b4:65:6e:1d: 7e:cc:f5:53:f6:7e:59:a7:55:3e:8c:b0:ce:ef:b0:3e:8a:22: 89:ca:00:9f:cc:09:d2:0a:07:d3:67:33:ed:97:26:eb:9e:bd: 22:b9:c8:ff:57:fd:02:8d:26:9e:68:7e:f4:d6:81:2e:bb:aa: 1d:c2:76:11:23:ef:a2:80:13:09:6c:e5:19:df:62:01:e2:05: 32:8b:67:c4:ba:28:d3:4b:ec:ca:4e:a4:d9:8f:84:3d:be:18: 55:58:b7:ee:4a:9a:75:3f:25:97:ca:f4:ab:5a:e4:09:13:10: 0d:44:ff:fd:0f:67:78:ae:a8:af:ff:03:05:c9:1d:f4:99:7e: 29:5a:2c:b8:58:d2:3f:72:c4:78:29:b4:a4:85:0b:1f:d9:a7: 53:bb:53:22:44:30:d8:82:17:67:10:f9:d9:aa:f5:0a:e2:72: c4:4e:a2:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXEGkoS8jgOENzkvyzSZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2Q0YWMxMzQ0ZWMzOGRjZTk5NzY4ZDc4YTExNGViZjdm MTdkODUwHhcNMjUxMjExMTcwMTI1WhcNMjUxMjEyMTcwMTI1WjAzMTEwLwYDVQQD EyhlOTNlNWRmYWNiNjdhZWRkOTQxYTFlNmE0OWE4NGRkNjViN2RiOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PFEQ1dxoIN9g5lqvzF5XbKxJCBH N9evJzGwSdAbJhqrEEZJcKDm4axLL7rJWsDEd26GlqMx1Qjp4h/JCnZ9rzR5a0Nc C27galxS4uEAZuIVkudDRaV9Sfp7p3HIxyMHa6K5dRLI48VbN6rvzOz6xWexfqv5 +OtRYrFn9PAx2uS9w+7005npGsXQpE/WLbFvizUvpylV9hvEKgLqWZ7VHSACSfnY XVmMfiQ40hm+/MXyMaf7S4QDHvSnwF2PTTkNu7WfTP41UXIqKtIs9eH4UA9tf78W M7sq0id12mLTFf5oDqRXtpNKOX0K3A/KbZMjhF1ftASJBMFWox3L7CBqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk+XfrLZ67dlBoeakmoTdZbfbkiMB8GA1UdIwQY MBaAFLp9SsE0TsONzpl2jXihFOv38X2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUt YWY0MjYyM2VhNDMxLzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUtYWY0MjYyM2VhNDMx LzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWXPq0jQ 6QcDA1yWtponJWuVKOTpGf8zyFXnWvIon7iARk8EPGmACw6ZEaksb7VUYcx/5iCB F8pgm8n3eb2rfmLehIwAjPwKU+94T5vx9omwzvb9hKm0ZW4dfsz1U/Z+WadVPoyw zu+wPooiicoAn8wJ0goH02cz7Zcm6569IrnI/1f9Ao0mnmh+9NaBLruqHcJ2ESPv ooATCWzlGd9iAeIFMotnxLoo00vsyk6k2Y+EPb4YVVi37kqadT8ll8r0q1rkCRMQ DUT//Q9neK6or/8DBckd9Jl+KVosuFjSP3LEeCm0pIULH9mnU7tTIkQw2IIXZxD5 2ar1CuJyxE6iIA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:17:32 2025 by rpki-client