This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json) Hash identifier: mi6rMP5mHHKFwQZfWh9/lBFvUyPeXjShb+ivdfr1NrE= Subject key identifier: C4:D0:EA:0A:70:C0:2A:69:2C:13:19:5B:94:2B:A1:DA:24:E5:67:A8 Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1 Certificate serial: 019B3CEC815380F3E0E8B161C2D675FE17B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft Manifest number: 0B8C Signing time: Sat 20 Dec 2025 18:01:31 +0000 Manifest this update: Sat 20 Dec 2025 18:01:31 +0000 Manifest next update: Sun 21 Dec 2025 18:01:31 +0000 Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: UvI8Gx31OUgthS/NQgMS3w4EsSP8Bhz8IS41fvhKfoY=) 2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:81:53:80:f3:e0:e8:b1:61:c2:d6:75:fe:17:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1 Validity Not Before: Dec 20 18:01:31 2025 GMT Not After : Dec 21 18:01:31 2025 GMT Subject: CN=c4d0ea0a70c02a692c13195b942ba1da24e567a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:ff:59:4c:e3:b6:08:1d:94:d3:3d:f1:2e: 02:21:ef:0f:c1:ce:6d:c5:24:11:2d:24:e7:f6:5d: 76:b2:a8:13:75:c3:3a:61:1f:97:1c:59:3a:35:a0: 3d:a5:8f:1f:26:72:bd:ce:a6:a2:05:ad:61:f8:7c: 8e:70:e2:29:3a:2c:cd:40:b8:eb:36:21:84:d8:f9: 5e:98:e6:3a:7c:0a:bd:ce:a0:a2:05:89:c8:50:87: 8b:30:59:f6:6c:32:18:d9:df:53:9b:c2:2f:a8:0e: 39:5e:b3:90:ff:4a:e3:34:39:27:2d:0a:8e:28:95: cd:22:a8:de:56:a6:d8:86:ac:fe:06:45:f4:61:80: 4b:a3:08:f0:18:80:d0:64:cf:dd:7d:a6:45:b7:ae: 6c:f2:65:86:66:72:08:f2:04:96:4a:15:29:60:2b: 3f:cc:1a:cc:28:8e:cf:46:24:d5:cc:1f:37:bf:f8: 1b:d2:45:71:aa:4f:00:fc:69:47:f2:18:f9:29:60: 91:0d:d6:bc:93:fd:3f:29:e6:98:29:d3:0b:9b:29: f9:be:47:a4:f1:19:4b:b8:d2:53:99:40:2d:2c:f1: 62:fb:24:c8:05:73:b6:4b:84:0d:03:72:6f:75:89: 45:21:98:6b:10:f0:dc:b0:1a:1d:06:91:85:23:78: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D0:EA:0A:70:C0:2A:69:2C:13:19:5B:94:2B:A1:DA:24:E5:67:A8 X509v3 Authority Key Identifier: keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4b:f6:13:70:bf:03:93:c7:35:a2:61:67:07:24:c2:8e:44: dd:17:3c:e7:12:7e:96:aa:bc:e4:7c:d0:08:13:6e:4f:a5:62: 4c:b8:f6:74:13:9d:01:9d:04:cd:b8:7d:36:56:f6:81:a9:bc: 74:6c:0a:59:54:f6:71:ca:e6:5a:17:e8:0c:02:f6:3f:7e:91: d4:96:29:07:a9:49:67:5f:37:ff:db:87:05:4e:9d:09:17:a4: 2f:18:1e:1a:40:3e:f3:a3:c7:cb:98:35:17:83:80:0c:3c:cf: 34:59:d5:61:8d:1e:e1:9a:2d:ce:8a:f6:c6:00:c3:80:60:d6: df:5f:2e:c4:08:79:ed:0c:ac:6b:00:09:d0:ec:a3:2e:88:df: 51:cc:61:0f:27:2a:ba:cf:91:ae:9a:ba:e4:76:78:2d:86:75: db:cf:23:8c:73:05:c2:db:99:57:39:84:84:50:85:47:63:b3: 32:56:94:43:0c:53:31:84:0e:2a:bf:bb:fe:f5:6d:fa:4c:9f: 70:6e:fa:d0:52:bd:c7:69:db:cc:05:3a:d0:89:6b:dc:7e:da: 23:7a:14:6f:5d:06:d9:45:ae:56:dc:72:1a:4c:9b:ef:7d:ca: f1:c2:35:bf:08:f3:a3:cd:29:fb:36:5b:da:ed:3f:0d:b5:7d: 87:7d:80:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87IFTgPPg6LFhwtZ1/he0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWJkNDU0M2RmMjlkYTY0ZTQyMzJlZjM3OTFmNTM0NTcz YzEyZjEwHhcNMjUxMjIwMTgwMTMxWhcNMjUxMjIxMTgwMTMxWjAzMTEwLwYDVQQD EyhjNGQwZWEwYTcwYzAyYTY5MmMxMzE5NWI5NDJiYTFkYTI0ZTU2N2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhn/WUzjtggdlNM98S4CIe8Pwc5t xSQRLSTn9l12sqgTdcM6YR+XHFk6NaA9pY8fJnK9zqaiBa1h+HyOcOIpOizNQLjr NiGE2PlemOY6fAq9zqCiBYnIUIeLMFn2bDIY2d9Tm8IvqA45XrOQ/0rjNDknLQqO KJXNIqjeVqbYhqz+BkX0YYBLowjwGIDQZM/dfaZFt65s8mWGZnII8gSWShUpYCs/ zBrMKI7PRiTVzB83v/gb0kVxqk8A/GlH8hj5KWCRDda8k/0/KeaYKdMLmyn5vkek 8RlLuNJTmUAtLPFi+yTIBXO2S4QNA3JvdYlFIZhrEPDcsBodBpGFI3gwTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTQ6gpwwCppLBMZW5Qrodok5WeoMB8GA1UdIwQY MBaAFErr1FQ98p2mTkIy7zeR9TRXPBLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYt ZDAwMzA2M2FlNWJiLzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYtZDAwMzA2M2FlNWJi LzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkv2E3C/ A5PHNaJhZwckwo5E3Rc85xJ+lqq85HzQCBNuT6ViTLj2dBOdAZ0Ezbh9Nlb2gam8 dGwKWVT2ccrmWhfoDAL2P36R1JYpB6lJZ183/9uHBU6dCRekLxgeGkA+86PHy5g1 F4OADDzPNFnVYY0e4Zotzor2xgDDgGDW318uxAh57QysawAJ0OyjLojfUcxhDycq us+Rrpq65HZ4LYZ1288jjHMFwtuZVzmEhFCFR2OzMlaUQwxTMYQOKr+7/vVt+kyf cG760FK9x2nbzAU60Ilr3H7aI3oUb10G2UWuVtxyGkyb733K8cI1vwjzo80p+zZb 2u0/DbV9h32AAw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:15:27 2025 by rpki-client