This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json) Hash identifier: 4DKdMEaHkU8iRRYCL0V3ZUYrvkfk0eJOZcKFrvdNRp8= Subject key identifier: 1B:4D:23:21:A3:B8:2D:B3:17:5A:E7:01:3F:7E:84:AC:59:EC:42:9C Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62 Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62 Certificate serial: 019B405B86098BE1BB39CAA8EA6022C96666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:01:38 +0000 Manifest this update: Sun 21 Dec 2025 10:01:38 +0000 Manifest next update: Mon 22 Dec 2025 10:01:38 +0000 Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=) 2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: +nNzVPGcft1VcCBCfSec7C7zbhremWzo7kEAXrlJ/RM=) 3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:86:09:8b:e1:bb:39:ca:a8:ea:60:22:c9:66:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62 Validity Not Before: Dec 21 10:01:38 2025 GMT Not After : Dec 22 10:01:38 2025 GMT Subject: CN=1b4d2321a3b82db3175ae7013f7e84ac59ec429c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:80:18:00:1f:f5:f3:d0:23:de:b7:9f:7b:cf: 9a:f3:65:f3:9c:bf:06:45:b1:45:0e:d5:f4:85:5c: 23:c6:31:7e:fe:4e:36:86:aa:49:a3:be:f1:68:82: 5c:24:91:3a:50:35:c5:00:e9:b6:53:91:05:0c:e5: 99:66:d3:70:64:8f:14:e2:ea:63:4c:c1:e5:fc:71: 40:1f:e6:45:70:22:64:34:04:7d:8f:6f:82:00:ef: ef:6c:d1:e3:cf:4f:94:4b:79:aa:b6:cf:3c:98:b8: 84:b9:f1:a3:b6:4d:dd:ab:9d:3c:ec:4b:ce:8c:59: 3a:bf:e3:0a:34:ce:b6:0f:f4:50:e0:b9:b3:f1:b4: 30:e6:01:1d:4a:95:8d:50:ca:cc:40:88:e0:55:08: e8:d1:b6:b0:cc:2e:c7:17:fc:42:7b:f0:25:05:42: c7:41:58:83:4c:1f:bc:a7:4e:35:12:0f:aa:ff:87: 26:b8:e1:91:1a:97:3f:70:04:9c:a1:66:4b:ce:fa: ca:b4:7f:50:73:4d:98:fd:5b:5e:54:76:0a:b1:1c: d1:47:eb:68:dc:52:1d:79:4b:83:53:6e:3e:8a:51: cd:b0:1c:d1:b7:ab:52:12:df:04:55:8a:15:aa:c9: 48:18:1d:65:fd:51:c3:08:ae:93:5e:10:a5:ea:cf: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4D:23:21:A3:B8:2D:B3:17:5A:E7:01:3F:7E:84:AC:59:EC:42:9C X509v3 Authority Key Identifier: keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9d:fc:5b:49:61:a2:1c:7a:c3:db:93:f0:5d:09:ca:12:4d: c8:57:c0:ee:5a:1d:38:8f:95:29:95:b5:21:f9:21:19:11:52: a4:35:21:fe:b4:76:b0:d3:3a:05:8d:5e:e0:38:f6:63:f0:6a: 0d:07:9d:d7:02:21:a8:5a:a2:90:9d:f4:1c:61:22:e0:43:bb: 0c:3e:cf:3d:ec:84:28:74:bd:39:ab:ea:35:d3:1e:00:aa:73: 89:db:e3:80:d6:09:69:58:be:b8:c0:25:69:31:e5:11:28:31: eb:b6:b2:d9:f5:c7:8f:85:63:c2:ab:63:ce:a8:17:e6:f8:8a: 35:68:95:15:fb:75:24:38:c9:a8:e3:96:1a:21:14:89:26:e1: 5d:ba:7b:c4:06:40:1c:c5:50:42:63:05:8c:e0:ed:ef:f5:3a: 19:5c:4e:10:42:51:cb:e4:50:2d:3c:0b:63:6c:88:2a:e7:a0: d4:c7:0a:9f:4a:26:a9:b5:24:1c:e3:ce:ee:a9:f5:df:83:9b: 18:81:ab:cd:2c:28:f4:f2:f3:3f:47:47:1c:92:71:23:39:fd: cd:44:f0:1c:78:07:7a:dd:81:91:4a:62:a1:d3:00:4c:d2:92: 8d:cb:a1:fc:82:2e:24:83:3b:cd:66:0e:8b:78:1a:38:30:39: 4f:6c:9d:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW4YJi+G7Ocqo6mAiyWZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNGFhYTliMDg0ODY0ZjQ0YmFlMThiYTA3NmIyNjA2Nzc1 NGZiNjIwHhcNMjUxMjIxMTAwMTM4WhcNMjUxMjIyMTAwMTM4WjAzMTEwLwYDVQQD EygxYjRkMjMyMWEzYjgyZGIzMTc1YWU3MDEzZjdlODRhYzU5ZWM0MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoAYAB/189Aj3refe8+a82XznL8G RbFFDtX0hVwjxjF+/k42hqpJo77xaIJcJJE6UDXFAOm2U5EFDOWZZtNwZI8U4upj TMHl/HFAH+ZFcCJkNAR9j2+CAO/vbNHjz0+US3mqts88mLiEufGjtk3dq5087EvO jFk6v+MKNM62D/RQ4Lmz8bQw5gEdSpWNUMrMQIjgVQjo0bawzC7HF/xCe/AlBULH QViDTB+8p041Eg+q/4cmuOGRGpc/cAScoWZLzvrKtH9Qc02Y/VteVHYKsRzRR+to 3FIdeUuDU24+ilHNsBzRt6tSEt8EVYoVqslIGB1l/VHDCK6TXhCl6s/WfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtNIyGjuC2zF1rnAT9+hKxZ7EKcMB8GA1UdIwQY MBaAFLFKqpsISGT0S64YugdrJgZ3VPtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEt NThmYWEyN2U1NTQ5LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEtNThmYWEyN2U1NTQ5 LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO538W0lh ohx6w9uT8F0JyhJNyFfA7lodOI+VKZW1IfkhGRFSpDUh/rR2sNM6BY1e4Dj2Y/Bq DQed1wIhqFqikJ30HGEi4EO7DD7PPeyEKHS9OavqNdMeAKpzidvjgNYJaVi+uMAl aTHlESgx67ay2fXHj4VjwqtjzqgX5viKNWiVFft1JDjJqOOWGiEUiSbhXbp7xAZA HMVQQmMFjODt7/U6GVxOEEJRy+RQLTwLY2yIKueg1McKn0omqbUkHOPO7qn134Ob GIGrzSwo9PLzP0dHHJJxIzn9zUTwHHgHet2BkUpiodMATNKSjcuh/IIuJIM7zWYO i3gaODA5T2ydmg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:28:07 2025 by rpki-client