This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json) Hash identifier: BR1QNCGi70TpQHeaWyx9RMgoOY+wAWi1wMfxJn2yDr4= Subject key identifier: 0D:86:7A:F9:BE:48:69:51:76:04:89:00:DF:C3:76:47:DB:87:2E:36 Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b Certificate serial: 019B3B34D5A273E2E1A82DD7126414A922E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft Manifest number: 14A0 Signing time: Sat 20 Dec 2025 10:01:16 +0000 Manifest this update: Sat 20 Dec 2025 10:01:16 +0000 Manifest next update: Sun 21 Dec 2025 10:01:16 +0000 Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=) 2: OgrR2CAd56z5U5HmKNv5p8BkWPc.roa (hash: Rq+kB9vanf4G1JIJ3U+Pnkbq1HZGp2RBfUcOAAvfTYg=) 3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: 8+rCP3UJoHKkBjXAF1ZHDkbubwA/Ey+lbmDxv3JUOmQ=) 4: VqTKdS0wUklb387Znd5hFzPRASE.roa (hash: rDOvuh2F3d3eA0aeY1ATjqwPgZrek24RyHk+1v/gN1M=) 5: hs7LWx99onWfa7NDQgswR8o6gaE.roa (hash: Ass+jNWe5lghZzBAkHny706eHe/Mnq+7tyKFB/O7uyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:d5:a2:73:e2:e1:a8:2d:d7:12:64:14:a9:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d7873416510a2fb2346ef342280155522713b Validity Not Before: Dec 20 10:01:16 2025 GMT Not After : Dec 21 10:01:16 2025 GMT Subject: CN=0d867af9be48695176048900dfc37647db872e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:35:65:85:8a:9e:44:f8:ba:4c:8a:44:10: 52:d4:2f:ae:b8:dd:28:aa:c2:ae:09:aa:05:5e:c6: 2f:bf:2e:0d:95:16:f5:76:19:a0:41:e6:79:3f:dc: 5b:99:d4:b7:f6:22:a7:ff:13:de:ed:7d:45:63:89: 91:f5:b4:e2:bf:87:ae:f0:cf:3a:35:79:6b:48:fa: ea:3b:a8:3f:31:e4:e2:24:41:4d:4c:5c:4b:02:ec: ad:03:f6:ec:d5:74:3c:e3:3a:90:8e:c7:64:aa:8a: 7d:9d:81:a3:97:7c:7f:57:d0:f3:31:82:d5:79:28: 27:1b:2e:1d:33:bc:c8:47:cc:4f:ce:19:88:e1:e5: 8e:0f:9f:76:fe:1a:ce:ec:29:00:d3:8d:d7:78:1b: e0:c3:86:26:d6:d6:45:85:31:93:f2:e8:b6:d2:ff: 59:c1:67:a3:da:64:6f:9b:91:a2:46:7d:0f:05:61: 85:bc:f1:8c:10:14:cd:ad:9d:94:f6:d6:f5:28:c3: fe:37:50:91:17:f1:09:43:df:0a:4b:c3:d7:58:5e: 92:df:fb:2f:6c:b0:24:56:9b:0f:88:1f:05:d6:c2: 21:e6:cd:f8:dc:95:63:bc:0f:e0:89:78:13:29:3f: 62:e2:85:ed:56:8d:a2:f7:7b:8b:7f:86:a6:d6:54: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:86:7A:F9:BE:48:69:51:76:04:89:00:DF:C3:76:47:DB:87:2E:36 X509v3 Authority Key Identifier: keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:77:2f:25:ba:af:a9:1e:05:c3:95:98:9d:1a:cb:ac:eb:f9: c6:cb:96:67:10:0e:66:4d:e8:79:42:25:96:dd:72:49:2a:40: c7:04:67:9b:cc:0d:19:20:12:fa:2a:15:24:93:b8:64:28:d2: 31:24:ce:e5:43:8c:02:cc:00:44:5e:50:9f:8b:fd:e4:f9:51: 35:44:6a:9e:4b:35:71:1c:c5:44:11:30:34:78:4d:95:9b:56: df:59:65:41:37:e6:40:80:4a:ff:ea:a1:ba:32:06:d5:95:48: 32:06:e1:a3:54:ac:71:91:41:65:6e:ce:be:d2:27:01:0e:38: df:8c:c1:8b:97:57:88:85:73:71:80:a3:bf:34:19:de:9f:21: 9b:ff:48:cd:d0:74:18:30:fa:8d:2b:43:11:bf:61:d9:06:d5: 7e:04:f2:2c:02:28:59:72:e9:4b:e8:18:d4:66:fd:2d:e8:57: 82:53:d0:0e:41:e1:bc:db:17:60:d1:92:43:0e:81:d9:d4:2a: de:a0:0f:78:05:43:2d:3d:4d:97:40:b6:72:bd:fe:0e:5a:e4: 84:aa:81:23:28:34:0e:76:e3:3c:a3:a3:64:f3:62:8d:3f:87: de:d5:63:88:80:5f:79:20:c5:4c:70:94:aa:94:ae:37:a3:16: 48:c0:59:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NNWic+LhqC3XEmQUqSLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy MjcxM2IwHhcNMjUxMjIwMTAwMTE2WhcNMjUxMjIxMTAwMTE2WjAzMTEwLwYDVQQD EygwZDg2N2FmOWJlNDg2OTUxNzYwNDg5MDBkZmMzNzY0N2RiODcyZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qs1ZYWKnkT4ukyKRBBS1C+uuN0o qsKuCaoFXsYvvy4NlRb1dhmgQeZ5P9xbmdS39iKn/xPe7X1FY4mR9bTiv4eu8M86 NXlrSPrqO6g/MeTiJEFNTFxLAuytA/bs1XQ84zqQjsdkqop9nYGjl3x/V9DzMYLV eSgnGy4dM7zIR8xPzhmI4eWOD592/hrO7CkA043XeBvgw4Ym1tZFhTGT8ui20v9Z wWej2mRvm5GiRn0PBWGFvPGMEBTNrZ2U9tb1KMP+N1CRF/EJQ98KS8PXWF6S3/sv bLAkVpsPiB8F1sIh5s343JVjvA/giXgTKT9i4oXtVo2i93uLf4am1lRwowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2Gevm+SGlRdgSJAN/Ddkfbhy42MB8GA1UdIwQY MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt ZTE4ZTdiMmFjNTM2LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2 LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgncvJbqv qR4Fw5WYnRrLrOv5xsuWZxAOZk3oeUIllt1ySSpAxwRnm8wNGSAS+ioVJJO4ZCjS MSTO5UOMAswARF5Qn4v95PlRNURqnks1cRzFRBEwNHhNlZtW31llQTfmQIBK/+qh ujIG1ZVIMgbho1SscZFBZW7OvtInAQ4434zBi5dXiIVzcYCjvzQZ3p8hm/9IzdB0 GDD6jStDEb9h2QbVfgTyLAIoWXLpS+gY1Gb9LehXglPQDkHhvNsXYNGSQw6B2dQq 3qAPeAVDLT1Nl0C2cr3+DlrkhKqBIyg0DnbjPKOjZPNijT+H3tVjiIBfeSDFTHCU qpSuN6MWSMBZlA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:32 2025 by rpki-client