This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json) Hash identifier: yolwyCpPHyFhr03yw5SK8IH3czJOS6KvtbOQIF0rWj0= Subject key identifier: CF:42:7C:CA:64:3F:38:AE:80:77:DF:80:6B:CE:B5:2A:39:18:27:02 Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Certificate serial: 019B3720DC1EEB952CB9E43B0FAF0536ECD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 15:00:58 +0000 Manifest this update: Fri 19 Dec 2025 15:00:58 +0000 Manifest next update: Sat 20 Dec 2025 15:00:58 +0000 Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=) 2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=) 3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=) 4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=) 5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: FQycfa0Id4EdOh5JtwdaF9vVuwHBnJwR+RwaUfH/NP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:dc:1e:eb:95:2c:b9:e4:3b:0f:af:05:36:ec:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Validity Not Before: Dec 19 15:00:58 2025 GMT Not After : Dec 20 15:00:58 2025 GMT Subject: CN=cf427cca643f38ae8077df806bceb52a39182702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:10:ef:0c:18:12:70:61:dd:b6:e2:4f:6c: 06:01:be:c4:64:99:91:d5:d2:62:f5:76:2b:56:2c: f3:99:2a:59:1f:f7:fc:d0:d4:98:0f:4d:18:8f:08: 59:15:9d:8f:64:1b:86:87:ad:8e:b5:1f:18:f6:19: c6:a3:ce:8c:2f:7b:27:00:02:71:00:9d:a6:7c:5b: af:ac:97:c9:97:c0:b6:79:96:5b:b3:ab:39:88:44: 3f:1f:25:39:45:68:47:6e:e1:83:4e:c4:ae:c1:ef: 6a:5e:df:f9:ec:1f:f8:e3:ea:5a:aa:50:3c:10:c6: 01:1a:84:b9:52:28:b1:c5:2d:50:08:c6:20:02:72: 25:31:cc:a8:7f:8d:2c:9f:be:9d:34:62:22:2a:0e: 4c:1a:91:be:b1:4c:4f:43:8f:da:78:f4:b2:02:01: 78:48:d5:d7:2a:9a:98:59:f4:45:fd:b0:ec:e9:17: 63:3d:63:a8:4d:27:e4:3c:47:07:dd:4d:28:4c:af: ca:45:5a:ed:6f:78:84:a7:b5:1c:04:31:a9:c6:25: 1e:d7:d8:1e:76:49:53:30:25:b9:ec:96:68:0c:bc: e4:4a:1c:c7:f3:58:f6:94:65:fa:bc:b1:c6:ee:61: 65:ff:9e:6e:c8:b9:5e:f2:9f:cc:19:2e:89:fb:3f: 9e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:42:7C:CA:64:3F:38:AE:80:77:DF:80:6B:CE:B5:2A:39:18:27:02 X509v3 Authority Key Identifier: keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:9b:63:6b:cd:69:0f:a6:c0:bb:1f:64:a3:3f:fc:ef:10:cf: 2b:84:b3:0f:ed:3a:06:44:d6:df:ac:41:79:cf:17:65:a5:80: 43:cf:91:02:86:16:be:1a:06:12:57:d5:5c:97:c9:db:f1:fd: 74:1c:1c:42:6a:1c:38:fe:4e:a6:7f:2d:b1:8b:73:22:e5:df: 46:ae:cc:db:1b:67:88:ad:2d:24:d5:2a:1d:f1:5b:89:6a:36: 32:20:0c:ee:5d:74:52:41:d2:76:5e:9d:88:3b:2e:1e:69:9d: 6b:1f:f8:66:b6:94:78:6f:17:b4:a7:2d:94:b1:3b:fb:88:9f: 4f:5d:c4:74:4f:d8:5d:4f:87:8e:98:41:8f:fa:1b:1c:21:a5: 02:30:8c:27:fb:e7:aa:c8:c8:c7:87:7b:91:13:89:97:10:a4: 29:3d:1a:71:2c:bb:ac:db:ab:e0:ed:5d:df:4c:e9:7a:00:06: 4f:9e:a2:60:be:61:3a:0d:50:f7:55:87:b3:56:54:3d:d1:09: 76:b6:99:f5:62:03:e5:b0:2f:71:84:7e:9d:f4:17:17:84:58: 43:07:9a:52:d1:c0:63:ae:88:24:11:ee:09:18:ac:40:b8:75: 31:3c:fb:58:bf:dc:81:08:fe:fd:9d:9d:b3:a7:31:16:c8:14: a2:43:22:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3INwe65UsueQ7D68FNuzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh ZjgyOTAwHhcNMjUxMjE5MTUwMDU4WhcNMjUxMjIwMTUwMDU4WjAzMTEwLwYDVQQD EyhjZjQyN2NjYTY0M2YzOGFlODA3N2RmODA2YmNlYjUyYTM5MTgyNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyggQ7wwYEnBh3bbiT2wGAb7EZJmR 1dJi9XYrVizzmSpZH/f80NSYD00YjwhZFZ2PZBuGh62OtR8Y9hnGo86ML3snAAJx AJ2mfFuvrJfJl8C2eZZbs6s5iEQ/HyU5RWhHbuGDTsSuwe9qXt/57B/44+paqlA8 EMYBGoS5UiixxS1QCMYgAnIlMcyof40sn76dNGIiKg5MGpG+sUxPQ4/aePSyAgF4 SNXXKpqYWfRF/bDs6RdjPWOoTSfkPEcH3U0oTK/KRVrtb3iEp7UcBDGpxiUe19ge dklTMCW57JZoDLzkShzH81j2lGX6vLHG7mFl/55uyLle8p/MGS6J+z+eUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9CfMpkPziugHffgGvOtSo5GCcCMB8GA1UdIwQY MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt NDZiNDZmYzBlNDk2LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2 LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJtja81p D6bAux9koz/87xDPK4SzD+06BkTW36xBec8XZaWAQ8+RAoYWvhoGElfVXJfJ2/H9 dBwcQmocOP5Opn8tsYtzIuXfRq7M2xtniK0tJNUqHfFbiWo2MiAM7l10UkHSdl6d iDsuHmmdax/4ZraUeG8XtKctlLE7+4ifT13EdE/YXU+HjphBj/obHCGlAjCMJ/vn qsjIx4d7kROJlxCkKT0acSy7rNur4O1d30zpegAGT56iYL5hOg1Q91WHs1ZUPdEJ draZ9WID5bAvcYR+nfQXF4RYQweaUtHAY66IJBHuCRisQLh1MTz7WL/cgQj+/Z2d s6cxFsgUokMirw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:40:16 2025 by rpki-client