This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json) Hash identifier: 8DQOFIWlAJLgwj8ZQQEPKjTDid9M5Ti4DfOaNxaWmMo= Subject key identifier: 48:5D:C5:67:4F:01:E6:C3:D3:AA:6B:2A:C0:C4:EA:0F:2B:FD:BB:56 Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Certificate serial: 019B37214A5C567ECCA718D4BB5D3F7A71E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft Manifest number: 0833 Signing time: Fri 19 Dec 2025 15:01:27 +0000 Manifest this update: Fri 19 Dec 2025 15:01:27 +0000 Manifest next update: Sat 20 Dec 2025 15:01:27 +0000 Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: vQ36nuvVZhyr7FyAY1/AsL9IzTEYQ6AW47sxL9ZcpEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:4a:5c:56:7e:cc:a7:18:d4:bb:5d:3f:7a:71:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Validity Not Before: Dec 19 15:01:27 2025 GMT Not After : Dec 20 15:01:27 2025 GMT Subject: CN=485dc5674f01e6c3d3aa6b2ac0c4ea0f2bfdbb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:70:a8:fa:e6:11:2d:32:82:48:a1:6d:d4: 9f:41:b5:20:2e:a9:66:8d:06:8c:77:25:11:d7:84: 9b:ab:08:fc:50:e9:bd:7f:c4:23:b2:d4:0e:12:00: 96:d2:ee:35:04:10:5c:da:6c:1c:1e:fc:62:9a:b9: 7e:f8:72:38:86:30:4f:a0:ec:2d:33:cd:e4:ae:a2: 90:6d:8c:6e:ee:b6:92:cf:25:81:77:45:82:73:49: 8c:44:0a:90:e2:e5:5d:47:68:aa:e5:ed:a0:98:0e: 54:01:17:68:b2:56:09:96:b3:00:72:5c:7c:52:78: 77:5f:b3:77:ee:51:56:02:59:e9:fe:6a:d4:18:f3: f1:8d:95:59:04:41:71:dd:f8:b3:d6:39:f7:e9:c1: 1d:e1:c5:24:4b:f2:58:31:1f:3c:27:47:64:df:e5: f5:5c:50:bc:2d:95:f7:f2:b4:ff:d7:5d:eb:0b:8b: a4:6c:db:25:fe:73:e4:b4:0d:b8:7f:3a:6e:78:ac: f4:7b:7c:09:d6:fd:7d:5b:51:c2:c0:5b:60:92:13: 89:34:e9:c1:e2:c3:30:61:b6:4f:f3:f2:0d:a9:45: 4f:d1:95:98:c5:1b:b5:6c:fd:c1:ac:82:a7:65:87: 5a:f9:4c:35:7f:62:9f:d9:d9:29:62:89:a8:50:36: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5D:C5:67:4F:01:E6:C3:D3:AA:6B:2A:C0:C4:EA:0F:2B:FD:BB:56 X509v3 Authority Key Identifier: keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:96:07:1f:4d:16:6c:38:51:0c:9e:9b:85:3d:d6:c6:94:e0: b1:b9:c4:54:1e:43:b5:e9:b5:67:00:c0:0a:00:53:c9:18:88: 6c:da:ed:5c:cf:6d:82:0c:07:be:c3:d3:cd:a0:0b:e6:96:6a: 3c:ad:41:3f:50:61:c8:44:f8:71:42:cb:4e:32:de:d2:cd:77: 88:f3:84:7d:78:05:35:75:fe:d4:cb:56:3d:78:09:79:24:87: 72:8e:7e:90:f9:85:3b:15:ff:18:9c:dd:08:8d:ca:ec:24:40: 01:22:8f:e1:e8:22:8a:32:9c:ca:0a:ae:45:4b:1b:a2:6c:fd: cc:31:0e:17:72:0d:04:54:44:94:b2:6e:07:b8:fc:f0:9e:40: 2e:1d:db:cb:6a:d4:e7:6e:ab:bf:05:26:df:c0:c2:04:bb:7d: 94:17:b0:a3:43:54:03:1c:8c:79:c1:d1:f5:d4:60:c8:47:a9: 45:10:cd:aa:dc:6a:d1:ed:c0:ad:6e:b0:ec:2f:11:c8:27:22: c2:66:e7:90:7f:72:ba:d6:a2:12:09:2a:08:5a:47:80:6c:e5: 9c:e7:f1:09:74:54:1d:67:63:a0:3b:7d:55:2a:7d:48:f6:4d: 7a:62:4d:27:f8:d5:1f:cb:91:93:54:e3:03:11:0f:82:c8:23: 2a:bc:bb:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IUpcVn7MpxjUu10/enHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzkyYzc3MTRlZDU3NDU2ZDczNTVlNGEwNGI5YmE4YmVk NTdlNDIwHhcNMjUxMjE5MTUwMTI3WhcNMjUxMjIwMTUwMTI3WjAzMTEwLwYDVQQD Eyg0ODVkYzU2NzRmMDFlNmMzZDNhYTZiMmFjMGM0ZWEwZjJiZmRiYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLZwqPrmES0ygkihbdSfQbUgLqlm jQaMdyUR14Sbqwj8UOm9f8QjstQOEgCW0u41BBBc2mwcHvximrl++HI4hjBPoOwt M83krqKQbYxu7raSzyWBd0WCc0mMRAqQ4uVdR2iq5e2gmA5UARdoslYJlrMAclx8 Unh3X7N37lFWAlnp/mrUGPPxjZVZBEFx3fiz1jn36cEd4cUkS/JYMR88J0dk3+X1 XFC8LZX38rT/113rC4ukbNsl/nPktA24fzpueKz0e3wJ1v19W1HCwFtgkhOJNOnB 4sMwYbZP8/INqUVP0ZWYxRu1bP3BrIKnZYda+Uw1f2Kf2dkpYomoUDZknQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhdxWdPAebD06prKsDE6g8r/btWMB8GA1UdIwQY MBaAFFJ5LHcU7VdFbXNV5KBLm6i+1X5CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0Yzct N2JkZTJmZDc2MzgyLzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0YzctN2JkZTJmZDc2Mzgy LzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZYHH00W bDhRDJ6bhT3WxpTgsbnEVB5Dtem1ZwDACgBTyRiIbNrtXM9tggwHvsPTzaAL5pZq PK1BP1BhyET4cULLTjLe0s13iPOEfXgFNXX+1MtWPXgJeSSHco5+kPmFOxX/GJzd CI3K7CRAASKP4egiijKcygquRUsbomz9zDEOF3INBFRElLJuB7j88J5ALh3by2rU 526rvwUm38DCBLt9lBewo0NUAxyMecHR9dRgyEepRRDNqtxq0e3ArW6w7C8RyCci wmbnkH9yutaiEgkqCFpHgGzlnOfxCXRUHWdjoDt9VSp9SPZNemJNJ/jVH8uRk1Tj AxEPgsgjKry7Rg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:10:08 2025 by rpki-client