This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft File: sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json) Hash identifier: f8hg6II+UnJ5INPsxqUEq/QDh3WM8mF9e95OXvIzhBM= Subject key identifier: 15:9D:8C:9D:FD:B9:E6:EA:42:BB:44:64:42:B5:35:C4:47:CF:DA:C5 Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89 Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89 Certificate serial: 019B3AC6BF6F96D3DBA8758BD9CD26D9CFB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 08:01:02 +0000 Manifest this update: Sat 20 Dec 2025 08:01:02 +0000 Manifest next update: Sun 21 Dec 2025 08:01:02 +0000 Files and hashes: 1: AtRByS0zJPDiOgR2GmP-us653x0.roa (hash: FxQtASMxynUngBeMPqWpgsQ0Eb/Ckc7wV64mAxHzC3U=) 2: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (hash: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=) 3: SBLZeIJXD3Iok5gT5e4Uj-A0C7k.roa (hash: rx/yJfhhixvb/560wKVAPp4PPBkdDEWYgcp5l237Szs=) 4: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=) 5: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: 5JVSvOpBuYlcgtEiOiyfEZWF5Miof7xjza1e39TDtEU=) 6: u0aUu0b_iEvlUDq3juqga9PBn0M.roa (hash: I2lvIAd5dytk2OpXdsqlzCje+prqBKxhEoVZ7EyyIW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:bf:6f:96:d3:db:a8:75:8b:d9:cd:26:d9:cf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89 Validity Not Before: Dec 20 08:01:02 2025 GMT Not After : Dec 21 08:01:02 2025 GMT Subject: CN=159d8c9dfdb9e6ea42bb446442b535c447cfdac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:47:cf:ff:77:e4:65:e9:df:81:e2:0c:f2: 91:94:46:90:85:99:b0:32:44:37:66:68:59:68:c9: 5e:15:f3:8c:30:5a:9a:42:26:92:e5:b4:f4:00:c0: de:27:b8:89:50:72:03:70:99:ad:a8:c7:74:f0:6c: 8e:3a:4e:a7:bd:ed:fd:6f:41:a6:5b:81:88:62:d9: 87:f8:c6:60:cc:39:55:e1:d6:2b:a1:a8:92:5b:78: d0:a5:ef:21:bc:a5:71:9c:9f:50:0f:d6:5b:78:82: 00:fe:3a:4e:a8:75:c4:07:7b:64:d4:ff:e4:f0:ad: 7b:29:1b:b6:2d:5a:26:28:11:16:07:c3:eb:ef:1c: ef:99:2e:35:69:f4:38:d8:80:2e:f0:0a:db:63:95: 21:12:94:3c:13:05:70:23:81:40:28:1a:e9:b0:61: 9e:1f:ca:d7:3f:d6:05:6a:8d:98:9c:35:03:b7:fa: 11:74:18:d1:cf:e4:3e:31:68:c0:ee:d6:f0:d5:9b: 0b:a8:3f:38:fb:91:e6:04:e5:44:1c:ba:d8:11:3f: fe:c0:21:79:2e:17:33:04:5a:22:ff:6e:a7:2d:a1: 57:ef:98:df:76:de:50:d0:79:98:55:8b:a5:79:27: 23:3b:b1:08:b6:75:8e:d2:e1:2b:c8:f9:ea:d8:e5: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9D:8C:9D:FD:B9:E6:EA:42:BB:44:64:42:B5:35:C4:47:CF:DA:C5 X509v3 Authority Key Identifier: keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7b:a8:2b:14:9e:51:42:bd:78:11:4b:c8:5b:cf:27:62:83: 4b:10:35:21:01:b7:4c:92:b1:63:bb:7d:45:f3:43:2b:df:2c: bf:f3:96:ad:35:76:75:08:37:a5:93:e7:41:9e:52:85:cd:8a: d7:46:8b:77:26:2e:9d:d4:8f:69:d9:61:99:7e:62:1c:c7:5a: 24:8f:87:e5:d3:d3:74:f0:14:27:42:5d:22:8c:68:ba:6b:73: 16:27:96:9d:cb:49:9b:0c:c1:35:9c:df:0f:f8:5e:73:21:0c: d4:0f:83:da:73:47:a3:4b:6f:70:36:fb:00:88:c5:7a:07:45: a0:86:91:28:7e:cc:8b:15:f1:bd:0b:c3:0c:18:15:09:01:61: 9d:22:79:86:8b:39:ed:5b:e6:fb:7e:93:8b:9a:fc:52:8a:8b: 09:3e:b7:e6:e5:23:3f:b4:a4:d1:ea:04:f9:ac:c4:0c:c9:23: e4:74:99:88:a5:4e:da:6c:c1:16:1c:a3:9d:f1:e4:d0:87:4e: 7a:75:51:f5:0e:6d:33:97:90:ac:af:fd:8b:f6:35:93:9e:a3: d7:48:39:e4:a2:8d:2d:44:ef:9f:78:5c:94:c6:92:85:12:c9: 70:a6:dc:6a:cc:9d:8e:14:d2:e7:66:7d:c2:03:e2:03:d6:4f: c3:49:7e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xr9vltPbqHWL2c0m2c+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx NTZmODkwHhcNMjUxMjIwMDgwMTAyWhcNMjUxMjIxMDgwMTAyWjAzMTEwLwYDVQQD EygxNTlkOGM5ZGZkYjllNmVhNDJiYjQ0NjQ0MmI1MzVjNDQ3Y2ZkYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9Hz/935GXp34HiDPKRlEaQhZmw MkQ3ZmhZaMleFfOMMFqaQiaS5bT0AMDeJ7iJUHIDcJmtqMd08GyOOk6nve39b0Gm W4GIYtmH+MZgzDlV4dYroaiSW3jQpe8hvKVxnJ9QD9ZbeIIA/jpOqHXEB3tk1P/k 8K17KRu2LVomKBEWB8Pr7xzvmS41afQ42IAu8ArbY5UhEpQ8EwVwI4FAKBrpsGGe H8rXP9YFao2YnDUDt/oRdBjRz+Q+MWjA7tbw1ZsLqD84+5HmBOVEHLrYET/+wCF5 LhczBFoi/26nLaFX75jfdt5Q0HmYVYuleScjO7EItnWO0uEryPnq2OXjqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWdjJ39uebqQrtEZEK1NcRHz9rFMB8GA1UdIwQY MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt Y2Y2YzMwNTIxMmViLzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXuoKxSe UUK9eBFLyFvPJ2KDSxA1IQG3TJKxY7t9RfNDK98sv/OWrTV2dQg3pZPnQZ5Shc2K 10aLdyYundSPadlhmX5iHMdaJI+H5dPTdPAUJ0JdIoxoumtzFieWnctJmwzBNZzf D/hecyEM1A+D2nNHo0tvcDb7AIjFegdFoIaRKH7MixXxvQvDDBgVCQFhnSJ5hos5 7Vvm+36Ti5r8UoqLCT635uUjP7Sk0eoE+azEDMkj5HSZiKVO2mzBFhyjnfHk0IdO enVR9Q5tM5eQrK/9i/Y1k56j10g55KKNLUTvn3hclMaShRLJcKbcasydjhTS52Z9 wgPiA9ZPw0l+kg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:26 2025 by rpki-client