This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json) Hash identifier: 5uK3DH5I1UODXfJM8LYb7DVg47CbWAwSPgNIcLw5kOI= Subject key identifier: 68:D8:85:8B:4C:AB:D9:47:9E:FB:87:B3:37:4D:C3:A6:A0:EA:0A:1F Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51 Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51 Certificate serial: 019B4249DF27B75C5DA9C88BAA016DBFBF8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft Manifest number: 11A6 Signing time: Sun 21 Dec 2025 19:01:36 +0000 Manifest this update: Sun 21 Dec 2025 19:01:36 +0000 Manifest next update: Mon 22 Dec 2025 19:01:36 +0000 Files and hashes: 1: cvFGyGJRsZnEcRCD9JCy58T9gVo.roa (hash: Yp1oBHirBIDihtEHMnqKxr3/5zdpx0QZszheovk5A64=) 2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: if1OybJyC4JVVVeLrdTm7p8pb8ffrpi0zfanGkeaowc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:df:27:b7:5c:5d:a9:c8:8b:aa:01:6d:bf:bf:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51 Validity Not Before: Dec 21 19:01:36 2025 GMT Not After : Dec 22 19:01:36 2025 GMT Subject: CN=68d8858b4cabd9479efb87b3374dc3a6a0ea0a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:9c:e6:53:17:54:bc:43:7a:b7:25:a7:f5: 3b:f0:bc:11:b7:66:72:e5:6b:aa:45:70:cd:f4:a7: 1a:36:be:f5:b5:0c:37:59:b5:17:dc:35:d3:44:83: 7f:91:93:cf:f7:1f:73:18:dc:20:0f:7f:75:28:4d: bc:df:10:36:14:c7:6c:0b:57:bb:f8:19:78:a1:26: cb:96:55:43:ad:64:a9:4c:ec:bf:75:d0:31:ad:d7: 74:08:be:f5:c9:17:d9:d9:36:e6:3c:7a:16:10:fc: bd:3a:19:5b:0b:93:da:dc:2c:2e:4c:8a:5d:36:e8: ec:c7:e2:ef:11:0c:23:35:b0:65:0c:35:b8:4a:4c: 89:3a:d3:ac:46:a3:cf:ef:71:a9:71:1e:b7:bd:34: 5a:67:87:99:a7:f5:f7:9d:0f:b8:b9:3a:ee:4f:f3: 12:f3:b7:ea:c8:47:73:be:c3:8c:81:01:37:ae:9a: c0:c0:f5:e3:68:e1:d9:1c:e8:0e:e6:2f:40:a7:2f: 9a:03:30:b9:2d:2d:38:ec:2d:ba:b9:9f:33:42:50: 9b:b7:aa:11:53:99:a3:65:68:bb:42:9a:06:be:2f: f3:12:81:ef:10:b8:8b:b7:57:cc:89:f8:e4:ba:0f: 7c:e9:d1:29:ff:34:0d:0e:e8:5f:82:59:c7:09:fd: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:85:8B:4C:AB:D9:47:9E:FB:87:B3:37:4D:C3:A6:A0:EA:0A:1F X509v3 Authority Key Identifier: keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b8:b5:8b:fe:72:94:42:2c:da:96:b2:65:30:c9:45:ff:40: af:ea:b4:1d:3b:ce:11:74:94:4c:ba:4a:ed:f3:91:53:ec:7c: f6:da:e3:de:46:37:f4:a1:4e:9c:fb:ee:f1:3c:21:37:b2:b6: 9a:f3:80:13:28:05:0b:15:11:84:29:6d:ca:19:f5:55:d9:85: 2d:81:2b:23:03:68:3a:92:66:d0:ac:60:6b:52:78:60:11:dd: d7:55:77:28:da:86:71:08:f6:18:00:43:61:3f:58:10:8c:c1: 6c:c3:28:7a:32:9a:91:1c:b3:67:5b:55:19:aa:4a:04:94:60: 69:e9:8a:24:22:ef:ee:76:d9:b1:fc:9c:64:e0:0c:aa:55:83: f8:d4:9b:e3:be:5f:43:8f:aa:a7:96:81:3e:2e:2b:a5:d0:57: dc:11:74:ff:a0:42:e9:6c:3d:f2:bd:0b:f5:2f:48:a5:c0:5d: 73:7b:07:96:12:9d:84:db:e3:50:39:ca:0a:be:e8:83:03:40: 3f:1a:bd:19:0c:e1:6a:8c:44:fb:16:17:27:64:37:ff:5c:4d: 48:4a:2a:d3:a8:69:b2:80:aa:87:ef:a9:a6:c5:48:28:27:a1: f3:41:a1:68:b0:de:d4:0e:77:72:95:ab:cc:b0:16:c8:8a:58: c9:72:ba:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSd8nt1xdqciLqgFtv7+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWMxYmE2ODU0YmJmNWJjM2VkNTU0ZmY3ZmVmM2JhNWZl NGNiNTEwHhcNMjUxMjIxMTkwMTM2WhcNMjUxMjIyMTkwMTM2WjAzMTEwLwYDVQQD Eyg2OGQ4ODU4YjRjYWJkOTQ3OWVmYjg3YjMzNzRkYzNhNmEwZWEwYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLOc5lMXVLxDerclp/U78LwRt2Zy 5WuqRXDN9KcaNr71tQw3WbUX3DXTRIN/kZPP9x9zGNwgD391KE283xA2FMdsC1e7 +Bl4oSbLllVDrWSpTOy/ddAxrdd0CL71yRfZ2TbmPHoWEPy9OhlbC5Pa3CwuTIpd Nujsx+LvEQwjNbBlDDW4SkyJOtOsRqPP73GpcR63vTRaZ4eZp/X3nQ+4uTruT/MS 87fqyEdzvsOMgQE3rprAwPXjaOHZHOgO5i9Apy+aAzC5LS047C26uZ8zQlCbt6oR U5mjZWi7QpoGvi/zEoHvELiLt1fMifjkug986dEp/zQNDuhfglnHCf0f0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjYhYtMq9lHnvuHszdNw6ag6gofMB8GA1UdIwQY MBaAFLLsG6aFS79bw+1VT/f+87pf5MtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUt MWQ4ZDkzM2Q2YzAwLzEvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUtMWQ4ZDkzM2Q2YzAw LzEvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLi1i/5y lEIs2payZTDJRf9Ar+q0HTvOEXSUTLpK7fORU+x89trj3kY39KFOnPvu8TwhN7K2 mvOAEygFCxURhCltyhn1VdmFLYErIwNoOpJm0Kxga1J4YBHd11V3KNqGcQj2GABD YT9YEIzBbMMoejKakRyzZ1tVGapKBJRgaemKJCLv7nbZsfycZOAMqlWD+NSb475f Q4+qp5aBPi4rpdBX3BF0/6BC6Ww98r0L9S9IpcBdc3sHlhKdhNvjUDnKCr7ogwNA Pxq9GQzhaoxE+xYXJ2Q3/1xNSEoq06hpsoCqh++ppsVIKCeh80GhaLDe1A53cpWr zLAWyIpYyXK6Xw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:13:20 2025 by rpki-client