This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json) Hash identifier: +Fg+0sZ05iY2Njf3QBDjzW6g9b60gteYCmCuEp2l6Ys= Subject key identifier: 76:F7:93:12:DC:B4:D0:EA:B6:06:F4:A8:DB:86:15:FA:AC:4B:79:E2 Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Certificate serial: 019B397D34B3F4BBAFB434F2043F44101709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 02:01:05 +0000 Manifest this update: Sat 20 Dec 2025 02:01:05 +0000 Manifest next update: Sun 21 Dec 2025 02:01:05 +0000 Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=) 2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=) 3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=) 4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=) 5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=) 6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=) 7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: R2jZAHgzKQkaIXKkqDubRJ3464eVlRnHPn6P1yKW5vM=) 8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=) 9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:34:b3:f4:bb:af:b4:34:f2:04:3f:44:10:17:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Validity Not Before: Dec 20 02:01:05 2025 GMT Not After : Dec 21 02:01:05 2025 GMT Subject: CN=76f79312dcb4d0eab606f4a8db8615faac4b79e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:24:d8:64:e8:c8:73:4d:eb:b5:29:ce:16: 68:f5:96:df:db:82:63:13:24:99:1d:bf:16:4c:f5: cc:4b:2e:d1:e5:44:12:01:90:5e:28:d5:cc:49:13: 02:68:75:1d:1b:83:6e:cf:af:a6:58:b2:be:44:a4: 9b:a4:ec:67:52:e8:c6:b1:6a:33:b5:0d:f5:2c:c0: b4:f7:4c:fb:eb:3e:e0:a8:8c:d5:e2:86:d2:1e:26: f5:e8:ec:7a:59:29:ca:5b:a6:99:bc:81:7a:4e:65: a5:1e:9f:dd:36:c3:ec:72:ab:2f:cb:d8:56:72:5b: d2:9a:43:e7:00:bd:b2:fb:c5:be:85:86:b6:bf:ec: 43:92:d9:eb:60:96:4a:ce:80:1f:ef:a5:fa:fa:f5: bb:4f:50:99:21:79:f6:15:5e:b1:7d:8f:ce:ad:16: 71:e0:2f:9c:cb:3c:31:2f:04:b6:f1:d7:79:95:0e: e7:71:75:30:df:50:ab:7a:c0:cb:ff:c9:60:35:2d: 59:7c:cf:cd:0f:ad:44:4d:45:26:b1:1f:07:42:56: b1:a9:72:28:78:66:6c:a5:bf:2b:99:f8:a3:9e:3a: 50:01:17:c2:f3:7e:2f:d8:02:11:cb:21:6b:03:80: b2:00:e9:98:c1:0b:cb:f4:c4:d8:24:64:9b:1f:3c: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F7:93:12:DC:B4:D0:EA:B6:06:F4:A8:DB:86:15:FA:AC:4B:79:E2 X509v3 Authority Key Identifier: keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:3f:9e:1d:20:39:88:4b:be:85:ae:35:c8:28:a9:12:13:d7: d2:a7:1d:fc:35:54:87:20:00:57:21:9d:37:96:f4:c4:51:88: 5e:bc:59:ef:31:3e:14:dc:f9:ee:12:62:6a:6d:73:7d:8d:0b: 23:b3:7e:e7:12:92:21:e6:62:df:ee:d0:07:68:c2:44:42:8f: f9:8f:4e:31:a9:e4:78:4e:cc:ab:4b:52:d0:0e:6b:8e:fb:5f: bc:a8:63:2e:1e:a1:ad:d3:33:41:93:78:f7:70:0d:b1:78:5e: 18:08:80:c2:d8:f8:08:75:0d:21:d4:68:1b:9a:b3:be:3e:03: 8d:f4:91:98:30:1f:11:1d:19:41:5f:8e:fc:cd:5d:f4:83:f4: f9:8c:16:df:82:29:0b:3c:2a:f1:34:8f:11:3b:46:fb:78:65: 64:d4:23:d7:dc:19:a6:5e:f6:f5:e4:aa:52:ca:58:34:07:37: 5f:47:1c:63:81:2a:eb:9f:51:ea:33:25:ae:3a:dc:6d:ef:39: e7:cd:6e:70:37:b9:e8:0f:9c:20:06:a0:6b:45:b6:8e:a7:e7: 61:cb:d3:4a:78:04:14:c0:97:02:8e:e7:41:23:49:7f:e4:fd: 2f:dc:2b:43:ff:29:33:c9:b4:3a:19:7b:fd:c0:f3:75:92:bb: 46:3e:be:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fTSz9LuvtDTyBD9EEBcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl MTBkNGUwHhcNMjUxMjIwMDIwMTA1WhcNMjUxMjIxMDIwMTA1WjAzMTEwLwYDVQQD Eyg3NmY3OTMxMmRjYjRkMGVhYjYwNmY0YThkYjg2MTVmYWFjNGI3OWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveYk2GToyHNN67UpzhZo9Zbf24Jj EySZHb8WTPXMSy7R5UQSAZBeKNXMSRMCaHUdG4Nuz6+mWLK+RKSbpOxnUujGsWoz tQ31LMC090z76z7gqIzV4obSHib16Ox6WSnKW6aZvIF6TmWlHp/dNsPscqsvy9hW clvSmkPnAL2y+8W+hYa2v+xDktnrYJZKzoAf76X6+vW7T1CZIXn2FV6xfY/OrRZx 4C+cyzwxLwS28dd5lQ7ncXUw31CresDL/8lgNS1ZfM/ND61ETUUmsR8HQlaxqXIo eGZspb8rmfijnjpQARfC834v2AIRyyFrA4CyAOmYwQvL9MTYJGSbHzzF8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb3kxLctNDqtgb0qNuGFfqsS3niMB8GA1UdIwQY MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt MjA1NGQ0ZTkwM2JjLzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtz+eHSA5 iEu+ha41yCipEhPX0qcd/DVUhyAAVyGdN5b0xFGIXrxZ7zE+FNz57hJiam1zfY0L I7N+5xKSIeZi3+7QB2jCREKP+Y9OMankeE7Mq0tS0A5rjvtfvKhjLh6hrdMzQZN4 93ANsXheGAiAwtj4CHUNIdRoG5qzvj4DjfSRmDAfER0ZQV+O/M1d9IP0+YwW34Ip Czwq8TSPETtG+3hlZNQj19wZpl729eSqUspYNAc3X0ccY4Eq659R6jMlrjrcbe85 581ucDe56A+cIAaga0W2jqfnYcvTSngEFMCXAo7nQSNJf+T9L9wrQ/8pM8m0Ohl7 /cDzdZK7Rj6+Og== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:04 2025 by rpki-client