This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft File: sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json) Hash identifier: FcwjD+iJqDa9HeAKGC/inknUG1CKnyNdHVrYMKF9qfs= Subject key identifier: E5:1B:F0:46:AB:AE:4B:4D:E6:96:A5:06:4C:68:C9:48:29:9F:36:B1 Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82 Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682 Certificate serial: 019B3D908E12224CE95C95F4F5422B36C0D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 21:00:42 +0000 Manifest this update: Sat 20 Dec 2025 21:00:42 +0000 Manifest next update: Sun 21 Dec 2025 21:00:42 +0000 Files and hashes: 1: VTdOF6vt4DJ2gAE9-rspP9YAtwY.roa (hash: 1siesNie5rYzgdzSW4S1a0o9vqGP6HXUGewmb9Xhzlk=) 2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: HzA92a1RZYE+cnp0XOcGwUyuKRRnY2n+m4AuBIU04f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:8e:12:22:4c:e9:5c:95:f4:f5:42:2b:36:c0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682 Validity Not Before: Dec 20 21:00:42 2025 GMT Not After : Dec 21 21:00:42 2025 GMT Subject: CN=e51bf046abae4b4de696a5064c68c948299f36b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:9f:6c:ae:d7:b1:c3:3b:e3:8f:fe:a0:04: 21:fb:fd:fb:98:30:00:a3:08:67:ca:63:6c:4e:c0: c0:fe:cf:3e:71:19:b1:ce:62:bf:01:00:a6:2a:44: f6:73:6f:17:e7:6f:c3:6a:37:02:05:84:cf:b7:6f: 9a:37:4d:9a:65:be:ce:29:4b:1c:43:e2:9b:68:c2: 9c:8d:6a:81:6d:9f:f7:ac:b6:81:dc:21:1a:f0:f1: 8d:98:5f:56:a6:7f:fb:01:b7:cb:73:dd:c2:14:96: 14:d5:a5:ae:da:6a:da:61:bc:f4:22:6d:60:47:60: 6b:13:d3:d4:92:e5:35:1f:2d:82:e6:bd:98:f9:94: 30:66:9c:2f:dd:3c:d7:59:56:2e:08:33:9e:cf:ff: c8:85:90:27:3e:73:af:fe:4c:5e:d1:a3:7e:ed:a3: ba:1a:41:f4:ce:1a:b2:a6:31:06:43:97:6d:84:e0: 8d:27:94:68:e2:01:5a:5c:c9:6a:43:02:1d:d6:4e: 6b:ec:06:db:38:9d:99:73:a5:f8:17:5f:08:ca:df: b7:45:da:b3:e6:4b:94:dd:a0:48:69:30:02:54:dd: 65:f6:15:b9:f4:7a:b4:a1:d9:b2:f1:42:e4:ab:a7: 66:f3:ae:a5:23:64:29:e9:8c:1a:70:e3:a3:8f:70: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1B:F0:46:AB:AE:4B:4D:E6:96:A5:06:4C:68:C9:48:29:9F:36:B1 X509v3 Authority Key Identifier: keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:82:ec:88:2c:6b:b9:94:63:48:b7:7a:1d:a5:55:45:3f:d9: fb:85:23:1a:f0:7d:18:f1:cb:cf:a0:3f:88:e8:af:f7:00:43: 0a:d6:10:d1:4a:0c:e9:04:1f:6f:1b:d2:a8:df:18:9b:87:75: e8:58:e8:ed:1a:83:d5:55:2a:c4:8e:ec:de:85:7b:23:29:38: 09:73:d4:b9:d0:39:11:49:4c:5a:19:34:cf:3d:d9:86:a9:35: b2:45:fd:8b:69:f1:39:e1:50:8a:73:93:04:56:9c:56:9b:83: fe:74:f1:b0:be:c0:c1:31:ea:22:78:e3:ec:d5:00:f6:7d:11: a0:be:34:29:ec:3a:e5:c7:89:19:57:b3:5e:dc:f1:87:c7:d3: ca:f7:74:a6:92:8c:c2:93:ba:44:16:f9:fe:ab:8a:87:0b:fd: 63:3c:b6:df:98:a8:e1:51:b9:a6:33:95:4c:26:a7:63:8b:c1: 8c:2b:74:43:e7:a0:05:1e:e8:02:70:24:1b:f8:62:3d:72:cb: 5d:a0:2e:08:10:cb:bd:27:d0:97:2f:6b:7a:75:24:28:fa:a0: 10:f3:88:c5:12:fd:de:ce:8b:e6:1b:cf:26:40:8f:76:83:ff: 4a:a3:d8:bd:2a:e2:9f:24:a2:18:37:32:e8:c6:3d:7e:6d:84: 59:74:38:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kI4SIkzpXJX09UIrNsDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDg4MWZhM2U3NWEzODUxY2Y3MDQxOTEzNWFiZGQ1Mjlk MmY2ODIwHhcNMjUxMjIwMjEwMDQyWhcNMjUxMjIxMjEwMDQyWjAzMTEwLwYDVQQD EyhlNTFiZjA0NmFiYWU0YjRkZTY5NmE1MDY0YzY4Yzk0ODI5OWYzNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcmfbK7XscM744/+oAQh+/37mDAA owhnymNsTsDA/s8+cRmxzmK/AQCmKkT2c28X52/DajcCBYTPt2+aN02aZb7OKUsc Q+KbaMKcjWqBbZ/3rLaB3CEa8PGNmF9Wpn/7AbfLc93CFJYU1aWu2mraYbz0Im1g R2BrE9PUkuU1Hy2C5r2Y+ZQwZpwv3TzXWVYuCDOez//IhZAnPnOv/kxe0aN+7aO6 GkH0zhqypjEGQ5dthOCNJ5Ro4gFaXMlqQwId1k5r7AbbOJ2Zc6X4F18Iyt+3Rdqz 5kuU3aBIaTACVN1l9hW59Hq0odmy8ULkq6dm866lI2Qp6YwacOOjj3A5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUb8EarrktN5palBkxoyUgpnzaxMB8GA1UdIwQY MBaAFLFIgfo+daOFHPcEGRNavdUp0vaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUt MjBmMzMzYzI1M2FjLzEvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUtMjBmMzMzYzI1M2Fj LzEvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoLsiCxr uZRjSLd6HaVVRT/Z+4UjGvB9GPHLz6A/iOiv9wBDCtYQ0UoM6QQfbxvSqN8Ym4d1 6Fjo7RqD1VUqxI7s3oV7Iyk4CXPUudA5EUlMWhk0zz3Zhqk1skX9i2nxOeFQinOT BFacVpuD/nTxsL7AwTHqInjj7NUA9n0RoL40Kew65ceJGVezXtzxh8fTyvd0ppKM wpO6RBb5/quKhwv9Yzy235io4VG5pjOVTCanY4vBjCt0Q+egBR7oAnAkG/hiPXLL XaAuCBDLvSfQly9renUkKPqgEPOIxRL93s6L5hvPJkCPdoP/SqPYvSrinySiGDcy 6MY9fm2EWXQ4MA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:00 2025 by rpki-client