This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json) Hash identifier: F8Q+QSFhGO6z32UvP2zyXH+IVzxS0R2pf90D5E0uQKU= Subject key identifier: 13:68:C4:D6:62:08:96:29:86:FC:C4:CD:80:80:43:EE:29:D0:53:87 Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62 Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62 Certificate serial: 019B51BCA0176CA89411CB8C9BD9D53C9A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 19:01:14 +0000 Manifest this update: Wed 24 Dec 2025 19:01:14 +0000 Manifest next update: Thu 25 Dec 2025 19:01:14 +0000 Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=) 2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: XSn7fHj5XwaEmVuOZ0njGjYACf3riQcVy5lAVp6lssk=) 3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:a0:17:6c:a8:94:11:cb:8c:9b:d9:d5:3c:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62 Validity Not Before: Dec 24 19:01:14 2025 GMT Not After : Dec 25 19:01:14 2025 GMT Subject: CN=1368c4d66208962986fcc4cd808043ee29d05387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:8c:09:a8:b0:b5:22:19:28:76:92:33:30: 17:13:69:c9:c0:dc:11:b7:4e:f8:79:bb:0d:af:93: aa:96:4f:3d:01:5f:21:a6:61:fa:64:72:12:03:34: 7d:8d:30:bd:50:81:07:fc:46:6b:76:34:2f:5c:db: 0a:bd:e9:03:1d:4c:63:3d:ba:75:9d:16:17:26:60: ff:eb:8c:fc:17:7b:d9:5c:2d:57:67:4a:56:0e:4f: 05:de:21:e2:be:e4:e0:98:ed:e5:f3:9f:bb:cc:78: 3f:f6:a7:e0:e8:2b:83:41:e7:2c:df:74:8b:81:88: 4b:c5:a3:e7:70:4e:6e:fa:bb:11:77:ad:34:36:bd: 3c:ff:f6:8c:fb:eb:f1:1a:3a:f4:0b:d0:05:0c:6a: 43:dd:c7:86:8d:25:5c:2f:2d:97:d5:62:10:b3:3b: 00:16:13:a4:d6:1a:58:b6:32:e3:16:71:b3:e8:b4: c7:8d:d4:b7:5d:4b:b6:49:c3:ad:92:1d:77:61:b0: 1d:a9:58:57:d7:d4:a9:44:4b:af:a6:4e:92:14:3c: 81:cb:cc:5f:ec:1f:99:3d:9c:12:dd:af:6d:27:17: 47:40:47:12:46:a9:14:f1:cf:65:27:ef:2a:ce:cd: 54:64:94:63:cd:59:cb:a6:9e:84:9a:03:19:2f:72: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:68:C4:D6:62:08:96:29:86:FC:C4:CD:80:80:43:EE:29:D0:53:87 X509v3 Authority Key Identifier: keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:e9:bb:0c:5c:14:4a:7d:35:27:7b:b7:0a:b7:e5:db:32: f2:cd:a3:9c:bd:19:d3:6c:83:91:8a:d5:73:28:4f:2a:ff:d8: ee:7c:81:02:fd:e9:e4:2e:4c:dd:89:21:86:40:4b:87:34:ea: ea:1d:e2:2a:b6:9a:81:44:7f:b1:c3:99:33:81:80:4f:36:46: a3:9c:28:9f:25:08:8f:9f:d6:a3:c4:b0:08:6d:76:f3:9f:0b: 4a:a5:61:0a:1b:be:ef:71:bf:d3:e8:f1:a8:10:1e:2e:93:c8: 2b:b9:28:07:55:da:b6:3d:33:dd:ca:e8:1a:7a:9d:58:cd:18: 07:53:44:96:09:60:32:c8:87:6a:ae:44:58:7c:e8:cf:ae:58: 01:b2:58:ad:bc:af:34:f7:0f:0e:07:61:dc:f2:3e:ef:3c:7d: 9c:31:8c:04:fb:5d:33:60:4d:0b:12:b3:26:18:c2:d4:0c:34: 90:bc:98:0f:f0:a0:43:80:9d:4f:e3:3b:88:63:c7:29:2b:11: 3d:13:bf:fe:4c:ee:b2:97:6a:cb:df:7f:4f:a5:4a:57:77:9d: 78:82:0b:38:d5:4d:f7:53:04:19:c9:f2:cc:8e:78:e6:2b:bd: e2:45:1e:87:ce:f8:6d:90:61:ca:47:3a:03:9e:cb:67:9d:4a: 9d:7c:96:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvKAXbKiUEcuMm9nVPJpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNGFhYTliMDg0ODY0ZjQ0YmFlMThiYTA3NmIyNjA2Nzc1 NGZiNjIwHhcNMjUxMjI0MTkwMTE0WhcNMjUxMjI1MTkwMTE0WjAzMTEwLwYDVQQD EygxMzY4YzRkNjYyMDg5NjI5ODZmY2M0Y2Q4MDgwNDNlZTI5ZDA1Mzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y6MCaiwtSIZKHaSMzAXE2nJwNwR t074ebsNr5Oqlk89AV8hpmH6ZHISAzR9jTC9UIEH/EZrdjQvXNsKvekDHUxjPbp1 nRYXJmD/64z8F3vZXC1XZ0pWDk8F3iHivuTgmO3l85+7zHg/9qfg6CuDQecs33SL gYhLxaPncE5u+rsRd600Nr08//aM++vxGjr0C9AFDGpD3ceGjSVcLy2X1WIQszsA FhOk1hpYtjLjFnGz6LTHjdS3XUu2ScOtkh13YbAdqVhX19SpREuvpk6SFDyBy8xf 7B+ZPZwS3a9tJxdHQEcSRqkU8c9lJ+8qzs1UZJRjzVnLpp6EmgMZL3L5SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNoxNZiCJYphvzEzYCAQ+4p0FOHMB8GA1UdIwQY MBaAFLFKqpsISGT0S64YugdrJgZ3VPtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEt NThmYWEyN2U1NTQ5LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEtNThmYWEyN2U1NTQ5 LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFfpuwxc FEp9NSd7twq35dsy8s2jnL0Z02yDkYrVcyhPKv/Y7nyBAv3p5C5M3YkhhkBLhzTq 6h3iKraagUR/scOZM4GATzZGo5wonyUIj5/Wo8SwCG12858LSqVhChu+73G/0+jx qBAeLpPIK7koB1Xatj0z3croGnqdWM0YB1NElglgMsiHaq5EWHzoz65YAbJYrbyv NPcPDgdh3PI+7zx9nDGMBPtdM2BNCxKzJhjC1Aw0kLyYD/CgQ4CdT+M7iGPHKSsR PRO//kzuspdqy99/T6VKV3edeIILONVN91MEGcnyzI545iu94kUeh874bZBhykc6 A57LZ51KnXyWmw== -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:54 2025 by rpki-client