This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json) Hash identifier: BVKgn92HumEYpy/wKvhNQ3O2pg3q8YkpkUVSArbfdcc= Subject key identifier: F5:45:1B:A8:C3:4D:64:47:EB:B9:F0:4B:D5:EC:75:FB:7B:01:4E:EE Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b Certificate serial: 019B39467A0568DA7E0F4AD7AA6662579D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft Manifest number: 149F Signing time: Sat 20 Dec 2025 01:01:18 +0000 Manifest this update: Sat 20 Dec 2025 01:01:18 +0000 Manifest next update: Sun 21 Dec 2025 01:01:18 +0000 Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=) 2: OgrR2CAd56z5U5HmKNv5p8BkWPc.roa (hash: Rq+kB9vanf4G1JIJ3U+Pnkbq1HZGp2RBfUcOAAvfTYg=) 3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: tM9YxUhFLij8hnMFlTSGZ2C2qqdfqBUINmfxgulRE7I=) 4: VqTKdS0wUklb387Znd5hFzPRASE.roa (hash: rDOvuh2F3d3eA0aeY1ATjqwPgZrek24RyHk+1v/gN1M=) 5: hs7LWx99onWfa7NDQgswR8o6gaE.roa (hash: Ass+jNWe5lghZzBAkHny706eHe/Mnq+7tyKFB/O7uyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:7a:05:68:da:7e:0f:4a:d7:aa:66:62:57:9d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d7873416510a2fb2346ef342280155522713b Validity Not Before: Dec 20 01:01:18 2025 GMT Not After : Dec 21 01:01:18 2025 GMT Subject: CN=f5451ba8c34d6447ebb9f04bd5ec75fb7b014eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:1b:3d:89:b4:cc:63:c0:a9:57:06:af:77: f8:c6:77:e4:f2:48:ac:31:dd:c2:42:ac:72:5f:00: 04:19:66:94:c7:f1:c6:1a:8f:53:44:1b:54:10:18: 28:b1:4d:31:9d:42:66:20:0d:3d:65:b3:01:21:55: 9d:9a:d9:bc:c6:de:bb:82:76:d2:10:69:21:09:4a: 27:cb:6b:0d:f8:08:92:f3:5c:4b:67:2b:b6:b3:bf: ec:33:ae:dc:24:94:bb:67:01:e3:6e:db:06:12:5a: a8:b1:b8:f3:61:51:13:6c:ec:a1:26:59:ef:f9:09: 75:68:7d:cc:1d:d6:e5:d1:56:b3:4c:cb:17:5c:fc: aa:47:09:df:7d:f3:19:cd:1d:e8:96:ea:6c:ec:9d: d8:1a:cf:c3:7d:73:31:c7:91:39:8d:29:31:83:6c: 5f:df:49:ba:fd:77:0d:dd:57:2a:48:94:6d:5a:bf: 03:65:50:c1:76:23:a9:16:e4:29:2c:9d:e1:94:51: 8a:89:57:5c:7b:ce:39:ce:9e:32:4b:f2:03:87:9c: 61:cd:5b:87:71:53:9a:66:08:00:8f:71:ca:c0:76: ba:fe:61:03:91:0b:fa:f9:cd:b6:39:1f:37:51:90: da:28:fd:bb:9e:ca:5f:3c:6d:ab:19:bf:52:4f:9f: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:45:1B:A8:C3:4D:64:47:EB:B9:F0:4B:D5:EC:75:FB:7B:01:4E:EE X509v3 Authority Key Identifier: keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:13:11:da:0e:ce:0b:43:6b:95:96:6d:2d:05:4f:1b:5d:01: 49:95:23:57:7d:86:d8:1f:b0:90:ea:f8:54:d9:4a:27:2d:5f: eb:35:64:6a:b3:3c:9e:d2:8f:67:c2:8d:8d:4e:c3:09:ec:af: 2d:e4:f2:32:d4:36:fe:d7:8b:56:2e:be:a2:fd:95:9d:c4:72: c9:55:65:45:57:cc:f0:68:fc:75:ac:07:55:22:81:72:1c:5e: e4:dc:1a:de:ba:59:94:c3:ba:de:82:dc:5c:09:91:a7:62:ea: f8:d1:7b:89:ae:5e:ca:98:52:d5:47:c9:b9:17:6f:d9:48:50: 58:0a:5d:5e:c2:75:fe:1a:90:06:ce:68:b6:2c:43:75:92:4c: d7:8d:fb:b9:a0:11:bf:9b:bc:aa:63:c8:f3:df:14:08:16:38: f0:25:97:6e:26:d1:6e:10:00:4d:eb:12:2b:2f:04:a4:ae:5f: b6:5f:5e:0d:3a:fc:73:ca:e2:42:0e:83:59:06:e0:e7:31:9d: 3f:8b:bd:74:89:5e:8c:31:6d:c8:d4:a1:80:a6:a8:3d:04:e9: 61:2b:83:1b:7e:f8:78:e1:5e:7f:a5:eb:df:bb:6a:70:5f:fa: 68:65:89:90:45:91:2e:df:4b:33:0d:cc:1b:e5:9d:be:a0:a5: 3a:bb:94:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RnoFaNp+D0rXqmZiV518MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy MjcxM2IwHhcNMjUxMjIwMDEwMTE4WhcNMjUxMjIxMDEwMTE4WjAzMTEwLwYDVQQD EyhmNTQ1MWJhOGMzNGQ2NDQ3ZWJiOWYwNGJkNWVjNzVmYjdiMDE0ZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrUbPYm0zGPAqVcGr3f4xnfk8kis Md3CQqxyXwAEGWaUx/HGGo9TRBtUEBgosU0xnUJmIA09ZbMBIVWdmtm8xt67gnbS EGkhCUony2sN+AiS81xLZyu2s7/sM67cJJS7ZwHjbtsGElqosbjzYVETbOyhJlnv +Ql1aH3MHdbl0VazTMsXXPyqRwnfffMZzR3olups7J3YGs/DfXMxx5E5jSkxg2xf 30m6/XcN3VcqSJRtWr8DZVDBdiOpFuQpLJ3hlFGKiVdce845zp4yS/IDh5xhzVuH cVOaZggAj3HKwHa6/mEDkQv6+c22OR83UZDaKP27nspfPG2rGb9ST59VPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVFG6jDTWRH67nwS9Xsdft7AU7uMB8GA1UdIwQY MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt ZTE4ZTdiMmFjNTM2LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2 LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhMR2g7O C0NrlZZtLQVPG10BSZUjV32G2B+wkOr4VNlKJy1f6zVkarM8ntKPZ8KNjU7DCeyv LeTyMtQ2/teLVi6+ov2VncRyyVVlRVfM8Gj8dawHVSKBchxe5Nwa3rpZlMO63oLc XAmRp2Lq+NF7ia5eyphS1UfJuRdv2UhQWApdXsJ1/hqQBs5otixDdZJM1437uaAR v5u8qmPI898UCBY48CWXbibRbhAATesSKy8EpK5ftl9eDTr8c8riQg6DWQbg5zGd P4u9dIlejDFtyNShgKaoPQTpYSuDG374eOFef6Xr37tqcF/6aGWJkEWRLt9LMw3M G+WdvqClOruUCg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:29:07 2025 by rpki-client