This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json) Hash identifier: 0gdV/RY/C1gE6f6cDxu7CR7dZ5dLs+HA2wyLBrdQpiw= Subject key identifier: EB:22:33:B8:79:05:68:39:23:BA:AE:B4:81:42:C5:D3:41:4D:FA:E2 Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Certificate serial: 019B4C5EC8A78D64A9CB39EBED2085B7C789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 18:00:38 +0000 Manifest this update: Tue 23 Dec 2025 18:00:38 +0000 Manifest next update: Wed 24 Dec 2025 18:00:38 +0000 Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=) 2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=) 3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=) 4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=) 5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: vmrND+AkfYhQ53/GnreeUanPFf+6rmIQ4EHGs020bm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:c8:a7:8d:64:a9:cb:39:eb:ed:20:85:b7:c7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Validity Not Before: Dec 23 18:00:38 2025 GMT Not After : Dec 24 18:00:38 2025 GMT Subject: CN=eb2233b87905683923baaeb48142c5d3414dfae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:98:28:95:be:da:e6:e5:5b:4a:29:eb:7b: 8b:67:c9:24:ac:ea:d2:dc:b2:ca:c4:68:39:ad:f4: 2d:9f:e2:30:a5:e0:5d:ac:4a:7a:77:fc:31:d8:c1: 75:04:77:88:cf:d8:ed:e9:69:fa:11:a8:7f:05:cb: 4c:ee:22:cc:a6:ca:76:50:54:4a:11:08:e3:26:53: a1:57:29:ba:bb:39:86:c2:6b:97:03:b0:8a:7b:56: 84:92:2a:57:ae:4f:a3:bb:45:0e:7a:b9:3d:6b:c4: fb:f0:e1:ac:b7:d5:e9:30:d6:5d:b6:3b:ef:c6:23: 95:b1:b1:d8:c8:bb:c4:b7:9b:7a:f0:5c:d3:6f:1e: cf:fb:9e:21:36:af:79:76:22:87:44:1d:61:0c:af: af:ca:3c:3b:50:ea:61:1a:b3:43:f3:1e:61:58:37: 77:d7:aa:48:eb:bf:19:32:6b:ab:74:33:90:19:a2: 2f:4d:90:76:9c:78:09:f5:a8:a1:47:a5:4f:fb:75: c7:e8:9c:52:bd:a4:ab:56:5b:a4:b2:47:e3:9b:4d: 2f:98:b3:ed:54:b9:67:42:36:36:48:b9:3e:2c:2d: dd:53:c9:67:fa:e2:cb:b3:25:0b:5e:18:2f:4e:bf: d3:cd:d9:39:a2:98:fe:cc:db:7f:06:f9:f0:a3:06: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:22:33:B8:79:05:68:39:23:BA:AE:B4:81:42:C5:D3:41:4D:FA:E2 X509v3 Authority Key Identifier: keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c3:98:3b:c0:00:ff:a0:4a:db:ab:f0:52:94:b2:f7:93:66: 7e:7c:73:56:4b:dd:15:b5:ad:73:aa:4e:29:80:d5:ad:ac:a2: 76:fa:27:f5:de:8c:20:b5:49:78:ae:76:e1:f5:5d:59:bf:5e: cc:31:d9:9a:fa:ee:22:88:9d:a3:de:58:f2:69:b3:76:5c:15: 7c:77:ec:f4:05:f4:c9:95:af:55:63:97:6b:ff:80:cc:4c:f8: 46:77:f5:8e:9e:63:10:0f:ae:f3:fa:56:27:92:49:b6:b1:b9: c1:bf:6e:e6:8a:cc:0f:cf:37:10:37:c4:0a:f0:cf:bb:f1:0a: 4c:dc:57:55:86:26:92:e7:54:95:84:df:90:74:21:8c:5a:a5: 53:56:cf:92:f5:07:1e:d4:5d:48:e8:f0:02:1f:65:27:9e:1b: da:19:9f:05:4d:3b:38:1b:d9:ff:d5:2b:e0:92:d5:be:20:68: be:75:d0:43:4e:b7:56:f8:0d:62:74:aa:c9:63:1d:e9:58:8c: ee:28:16:b9:ae:47:80:68:e1:29:45:37:c7:d9:46:73:3f:50: 5d:36:36:7f:e5:85:5a:c7:13:89:a3:2f:6f:b7:52:47:c7:75: 1b:0c:b8:22:83:2e:6d:46:88:af:30:49:ef:69:bb:0a:10:18: ae:d6:d1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXsinjWSpyznr7SCFt8eJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh ZjgyOTAwHhcNMjUxMjIzMTgwMDM4WhcNMjUxMjI0MTgwMDM4WjAzMTEwLwYDVQQD EyhlYjIyMzNiODc5MDU2ODM5MjNiYWFlYjQ4MTQyYzVkMzQxNGRmYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+KYKJW+2ublW0op63uLZ8kkrOrS 3LLKxGg5rfQtn+IwpeBdrEp6d/wx2MF1BHeIz9jt6Wn6Eah/BctM7iLMpsp2UFRK EQjjJlOhVym6uzmGwmuXA7CKe1aEkipXrk+ju0UOerk9a8T78OGst9XpMNZdtjvv xiOVsbHYyLvEt5t68FzTbx7P+54hNq95diKHRB1hDK+vyjw7UOphGrND8x5hWDd3 16pI678ZMmurdDOQGaIvTZB2nHgJ9aihR6VP+3XH6JxSvaSrVlukskfjm00vmLPt VLlnQjY2SLk+LC3dU8ln+uLLsyULXhgvTr/Tzdk5opj+zNt/BvnwowZSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsiM7h5BWg5I7qutIFCxdNBTfriMB8GA1UdIwQY MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt NDZiNDZmYzBlNDk2LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2 LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8OYO8AA /6BK26vwUpSy95NmfnxzVkvdFbWtc6pOKYDVrayidvon9d6MILVJeK524fVdWb9e zDHZmvruIoido95Y8mmzdlwVfHfs9AX0yZWvVWOXa/+AzEz4Rnf1jp5jEA+u8/pW J5JJtrG5wb9u5orMD883EDfECvDPu/EKTNxXVYYmkudUlYTfkHQhjFqlU1bPkvUH HtRdSOjwAh9lJ54b2hmfBU07OBvZ/9Ur4JLVviBovnXQQ063VvgNYnSqyWMd6ViM 7igWua5HgGjhKUU3x9lGcz9QXTY2f+WFWscTiaMvb7dSR8d1Gwy4IoMubUaIrzBJ 72m7ChAYrtbRLA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:38:14 2025 by rpki-client