This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json) Hash identifier: L6qEgY66kNw3Vu9jEPD8QbYrP+BMi5M5YqKEygSEHho= Subject key identifier: 64:50:77:4D:A5:7E:50:13:2C:9A:76:AE:3E:71:51:63:82:23:3B:56 Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Certificate serial: 019B691FAD2949D23878F4A38481BDC03345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft Manifest number: 1732 Signing time: Mon 29 Dec 2025 08:00:42 +0000 Manifest this update: Mon 29 Dec 2025 08:00:42 +0000 Manifest next update: Tue 30 Dec 2025 08:00:42 +0000 Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=) 2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: 5/JNXTHMDFi1a7l82zPuUrlpNvh5Tr26JpDAVPrRMd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:1f:ad:29:49:d2:38:78:f4:a3:84:81:bd:c0:33:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Validity Not Before: Dec 29 08:00:42 2025 GMT Not After : Dec 30 08:00:42 2025 GMT Subject: CN=6450774da57e50132c9a76ae3e71516382233b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:58:f6:af:9c:34:15:4d:57:b9:d8:c1:7b: 08:43:d7:70:ae:ee:d4:9c:d5:73:9a:49:d4:d8:6f: 47:dd:86:7a:9d:a3:d5:81:4f:e9:09:9c:aa:49:83: b7:00:84:d7:12:e5:39:45:35:14:39:7f:a1:65:6b: 78:b0:94:97:82:3d:63:26:73:f9:16:d3:a1:8a:c5: 3d:5b:3c:0e:de:9b:7c:90:4f:c7:e1:7e:22:36:d8: 8e:f5:f3:0f:2a:df:71:db:a2:ee:6d:94:98:dd:8e: 0e:9b:7b:e0:a7:69:a1:fc:1e:83:34:ac:bb:8e:d8: ff:a4:68:b7:91:7e:8c:54:b5:8d:4a:87:38:e5:ec: 80:8e:9c:5c:87:02:21:f8:4e:11:c7:36:3d:af:88: 77:86:98:00:f1:a9:b7:3d:1e:52:81:ac:24:18:c2: 45:35:96:d7:1e:fe:c4:b1:9c:de:e0:24:7b:dd:a9: 41:28:c9:bb:60:1a:4f:4b:c5:a8:bf:a7:5b:49:37: eb:02:e1:f6:f3:a4:cc:e8:ea:29:45:8d:74:e2:5b: 19:ac:fe:4e:eb:f1:37:5e:c2:10:ab:fb:c9:8f:87: 2e:7b:59:11:92:80:cd:ac:6e:a8:81:96:89:15:4f: 8e:ee:39:46:8a:3a:2d:64:04:90:aa:27:a2:46:5d: c1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:50:77:4D:A5:7E:50:13:2C:9A:76:AE:3E:71:51:63:82:23:3B:56 X509v3 Authority Key Identifier: keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e3:6f:e3:32:8a:d3:df:90:7b:08:82:d6:07:72:ea:ea:49: ad:88:00:bf:c4:46:7d:00:90:7e:e3:0b:f9:da:0a:c7:f8:04: 1d:20:01:db:20:b8:84:b8:f4:39:37:57:b9:5d:f9:37:4b:57: 65:95:cb:a9:2d:36:bc:1a:07:af:a5:fe:32:37:59:1b:a1:19: 81:15:73:f5:9c:09:3e:48:ae:7f:c3:53:90:df:27:1e:38:82: bc:21:f1:7b:84:85:24:ee:ef:60:32:81:33:31:69:53:9b:af: 67:6f:20:03:28:1a:6d:06:d6:5f:09:97:9d:ed:9c:7e:a3:77: 10:00:cf:9e:21:c0:91:ef:aa:23:9d:61:d4:c6:9d:8b:fd:ab: 8e:c8:13:80:2a:a9:1a:a5:4c:97:77:18:8a:03:c5:e0:b8:e2: 4b:a0:4a:e1:d0:58:f8:06:7e:12:69:76:d2:99:f2:2f:11:e4: b9:6f:e9:eb:b6:cc:63:d0:3e:bc:62:1b:9b:36:a6:54:02:08: 13:8d:05:e9:60:f0:50:a4:e5:8a:75:88:46:72:33:f4:03:a0: 0b:9a:6f:d7:c3:6b:02:90:1c:df:cb:48:3c:cc:ca:6b:22:28: 3f:9a:66:f3:f9:81:48:42:0d:85:5a:9e:31:ed:72:41:13:7a: 4c:06:03:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpH60pSdI4ePSjhIG9wDNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2 NzRmZWIwHhcNMjUxMjI5MDgwMDQyWhcNMjUxMjMwMDgwMDQyWjAzMTEwLwYDVQQD Eyg2NDUwNzc0ZGE1N2U1MDEzMmM5YTc2YWUzZTcxNTE2MzgyMjMzYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur1Y9q+cNBVNV7nYwXsIQ9dwru7U nNVzmknU2G9H3YZ6naPVgU/pCZyqSYO3AITXEuU5RTUUOX+hZWt4sJSXgj1jJnP5 FtOhisU9WzwO3pt8kE/H4X4iNtiO9fMPKt9x26LubZSY3Y4Om3vgp2mh/B6DNKy7 jtj/pGi3kX6MVLWNSoc45eyAjpxchwIh+E4RxzY9r4h3hpgA8am3PR5SgawkGMJF NZbXHv7EsZze4CR73alBKMm7YBpPS8Wov6dbSTfrAuH286TM6OopRY104lsZrP5O 6/E3XsIQq/vJj4cue1kRkoDNrG6ogZaJFU+O7jlGijotZASQqieiRl3BywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRQd02lflATLJp2rj5xUWOCIztWMB8GA1UdIwQY MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHONv4zKK 09+QewiC1gdy6upJrYgAv8RGfQCQfuML+doKx/gEHSAB2yC4hLj0OTdXuV35N0tX ZZXLqS02vBoHr6X+MjdZG6EZgRVz9ZwJPkiuf8NTkN8nHjiCvCHxe4SFJO7vYDKB MzFpU5uvZ28gAygabQbWXwmXne2cfqN3EADPniHAke+qI51h1Madi/2rjsgTgCqp GqVMl3cYigPF4LjiS6BK4dBY+AZ+Eml20pnyLxHkuW/p67bMY9A+vGIbmzamVAII E40F6WDwUKTlinWIRnIz9AOgC5pv18NrApAc38tIPMzKayIoP5pm8/mBSEINhVqe Me1yQRN6TAYD5Q== -----END CERTIFICATE-----Generated at Mon Dec 29 17:42:34 2025 by rpki-client