This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json) Hash identifier: pzTXgeMfUcTbtxdAwmg2DwcinQlWdC5dxX9LyWj3/nY= Subject key identifier: 98:B6:5D:73:BE:53:24:C3:80:AF:3C:E2:66:03:52:4F:EA:B9:0D:E1 Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Certificate serial: 019B0E2636AF97C68D168730CFCE51326435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft Manifest number: 1779 Signing time: Thu 11 Dec 2025 16:02:23 +0000 Manifest this update: Thu 11 Dec 2025 16:02:23 +0000 Manifest next update: Fri 12 Dec 2025 16:02:23 +0000 Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: +4dvhyxtAXb3VPW2idyzE9VBUuFAyM2FPAGs4W+QoYg=) 2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:36:af:97:c6:8d:16:87:30:cf:ce:51:32:64:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Validity Not Before: Dec 11 16:02:23 2025 GMT Not After : Dec 12 16:02:23 2025 GMT Subject: CN=98b65d73be5324c380af3ce26603524feab90de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:06:02:3f:73:7b:01:78:18:5c:14:40:94: db:24:8e:d9:86:c0:ca:5a:22:c0:82:34:21:8c:22: c3:c6:23:f8:15:f6:3b:ef:d0:f7:7f:d7:62:f2:34: 7c:28:85:78:1f:8c:0f:f5:46:a7:d0:e9:fb:eb:a2: 31:94:90:d9:62:bf:11:49:10:1e:48:75:1c:57:aa: fd:ee:6b:05:c9:b9:49:0f:65:e3:d3:8e:11:1e:ac: f9:7c:15:ba:4b:d5:c6:0c:63:86:2a:33:f9:fd:66: 57:d7:8b:aa:23:15:bd:79:d0:72:21:b3:b9:f6:3b: 38:90:bc:6b:c6:f1:10:ff:16:cb:80:34:18:10:2f: 49:18:11:8c:79:aa:eb:34:7e:28:bc:84:f1:8d:dd: 45:83:6b:21:67:56:2a:c4:f3:aa:e2:c4:61:10:b1: 99:c6:b1:47:b9:75:d0:d2:8f:74:7f:a0:82:67:73: 64:ec:68:ad:a3:54:9e:04:b7:f2:73:b8:9c:ff:7b: f6:e6:8b:fa:9f:25:7d:16:15:22:d7:64:f1:82:27: 2d:dc:fa:1e:dd:34:58:60:25:c3:b6:3b:c9:27:a3: 1c:46:01:ca:b6:8c:f1:32:a7:0c:6a:95:cc:b1:b5: a4:5b:83:c9:0c:4d:da:0b:cb:08:76:23:3a:70:9f: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B6:5D:73:BE:53:24:C3:80:AF:3C:E2:66:03:52:4F:EA:B9:0D:E1 X509v3 Authority Key Identifier: keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e7:f6:24:fc:13:72:bb:2b:71:ba:f5:c6:e1:5b:1d:bf:09: 4d:ed:4f:a1:f4:a2:ee:40:ad:b2:ad:b7:5e:e6:41:14:d8:58: 56:37:89:40:20:3f:10:64:81:66:06:98:84:b2:71:90:a9:e4: 5e:d5:87:b7:23:a1:34:ab:89:31:0b:41:7d:8a:5e:d2:f7:49: 57:25:bc:31:e5:b0:0e:fb:e3:be:69:97:de:1f:e1:b5:44:08: 46:d2:e8:96:d5:e8:93:43:9a:d5:c9:6b:9f:4e:43:5d:fa:dc: d5:23:be:f2:5d:ca:c2:db:30:d7:e6:23:b8:c2:32:9b:82:2f: 7e:21:81:37:c3:9d:60:af:50:d8:ea:64:5b:61:9a:8e:12:14: 56:b1:8c:c4:c3:a3:aa:f1:1f:0b:48:f4:0a:74:a0:72:a6:7f: 5e:9d:06:4c:65:db:12:e0:a0:20:23:b8:6c:15:3d:36:82:f5: 79:d0:a6:87:74:f1:b9:91:70:a2:82:11:8e:a0:f4:57:85:6c: 27:9d:4b:71:38:5d:7f:55:1f:b1:64:47:4c:9c:e5:ac:2b:02: e4:f4:9e:07:f7:98:9c:1c:8d:7d:a5:98:84:76:a3:1a:47:e8: fa:72:64:99:65:c0:1d:b4:4d:78:40:2a:56:1e:cc:21:ac:ba: 75:af:d5:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJjavl8aNFocwz85RMmQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl NmJlMmQwHhcNMjUxMjExMTYwMjIzWhcNMjUxMjEyMTYwMjIzWjAzMTEwLwYDVQQD Eyg5OGI2NWQ3M2JlNTMyNGMzODBhZjNjZTI2NjAzNTI0ZmVhYjkwZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMAGAj9zewF4GFwUQJTbJI7ZhsDK WiLAgjQhjCLDxiP4FfY779D3f9di8jR8KIV4H4wP9Uan0On766IxlJDZYr8RSRAe SHUcV6r97msFyblJD2Xj044RHqz5fBW6S9XGDGOGKjP5/WZX14uqIxW9edByIbO5 9js4kLxrxvEQ/xbLgDQYEC9JGBGMearrNH4ovITxjd1Fg2shZ1YqxPOq4sRhELGZ xrFHuXXQ0o90f6CCZ3Nk7Gito1SeBLfyc7ic/3v25ov6nyV9FhUi12Txgict3Poe 3TRYYCXDtjvJJ6McRgHKtozxMqcMapXMsbWkW4PJDE3aC8sIdiM6cJ9khQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi2XXO+UyTDgK884mYDUk/quQ3hMB8GA1UdIwQY MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5 LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOf2JPwT crsrcbr1xuFbHb8JTe1PofSi7kCtsq23XuZBFNhYVjeJQCA/EGSBZgaYhLJxkKnk XtWHtyOhNKuJMQtBfYpe0vdJVyW8MeWwDvvjvmmX3h/htUQIRtLoltXok0Oa1clr n05DXfrc1SO+8l3Kwtsw1+YjuMIym4IvfiGBN8OdYK9Q2OpkW2GajhIUVrGMxMOj qvEfC0j0CnSgcqZ/Xp0GTGXbEuCgICO4bBU9NoL1edCmh3TxuZFwooIRjqD0V4Vs J51LcThdf1UfsWRHTJzlrCsC5PSeB/eYnByNfaWYhHajGkfo+nJkmWXAHbRNeEAq Vh7MIay6da/VPQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:20:51 2025 by rpki-client