This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json) Hash identifier: KK5N5BRynm4JbViPONVC5JG8L61DRnc+VQf03TADiBg= Subject key identifier: 5C:EC:62:66:E6:C1:E4:E7:1F:67:86:6C:09:02:09:5E:69:8B:66:B5 Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Certificate serial: 019B24E3EA76500AC052F7F1DBCF75283C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft Manifest number: 22 Signing time: Tue 16 Dec 2025 02:01:14 +0000 Manifest this update: Tue 16 Dec 2025 02:01:14 +0000 Manifest next update: Wed 17 Dec 2025 02:01:14 +0000 Files and hashes: 1: R1nYkhgd6_jf8Pad1Xet3T1Tp0A.asa (hash: trc6yr/v/EBFjhhDrpsvLCydYdOKVkQopbnggaBE5ZE=) 2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: UgWDUTJQFTAlzYTkeIySSqoZjkv8hgSyftfyIXrICM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:ea:76:50:0a:c0:52:f7:f1:db:cf:75:28:3c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Validity Not Before: Dec 16 02:01:14 2025 GMT Not After : Dec 17 02:01:14 2025 GMT Subject: CN=5cec6266e6c1e4e71f67866c0902095e698b66b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:6f:ef:87:1e:4b:0d:b6:7c:5c:c6:c4:a6: 31:0d:84:56:3d:34:d0:69:0c:bd:48:78:8f:8d:61: 4b:7c:d2:87:7a:d8:e7:16:e3:90:4e:e0:96:e4:ff: fe:c2:8b:c0:f0:f3:fc:ac:15:8f:e0:ca:54:37:56: 2c:cd:d6:ac:22:19:70:b8:4a:4e:0d:2c:6f:27:eb: 01:18:4f:53:e1:c0:fa:b4:b6:89:46:75:c4:ff:e3: c7:84:1e:71:75:a0:ed:f1:89:c7:fd:58:bd:d5:54: 13:20:eb:d3:b9:00:13:aa:fa:f5:89:ef:0d:3e:19: fa:a3:33:14:e0:2a:10:cf:64:90:8f:01:79:4c:49: 92:b1:a5:6b:f1:ee:e0:48:48:04:2a:c5:4c:c3:c5: d0:ae:5b:67:82:39:56:8a:38:39:d4:01:ac:8a:1c: ea:83:55:10:be:d6:5d:31:b9:08:d6:a5:1f:db:90: 71:f1:ef:02:8f:88:b5:7e:ab:0b:7d:29:51:54:0c: 6e:d2:36:68:9f:b4:ee:ff:13:5f:93:61:86:e1:e2: 2a:bb:22:b1:12:00:aa:3d:c3:c2:69:1c:55:f7:02: cc:5f:5b:4d:40:6c:6d:bd:18:ca:4b:b4:a2:ca:f4: b1:80:c1:e9:2a:98:d2:cc:69:4f:81:be:6d:31:7d: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:62:66:E6:C1:E4:E7:1F:67:86:6C:09:02:09:5E:69:8B:66:B5 X509v3 Authority Key Identifier: keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d3:15:3a:a5:73:e2:25:53:56:7a:9f:38:f1:b4:1c:8d:38: 0b:38:24:88:0c:90:ba:51:06:91:80:8e:03:6e:c0:fc:85:29: 39:42:a3:37:8e:70:13:ed:2c:f3:93:b5:dd:5b:65:d1:7a:56: a5:6a:50:34:b0:53:f8:bb:26:72:19:7c:9d:88:fb:ab:19:e6: f5:56:88:2d:d9:11:90:c8:3d:00:2f:55:9c:44:fe:60:70:57: 50:db:3e:3d:e2:6a:8d:f9:d3:9e:7b:49:3b:94:98:68:3e:45: 5a:37:e1:6d:7e:17:13:cc:75:de:79:c9:17:0b:7c:ee:69:95: b8:8d:fd:21:cb:de:6c:6b:97:b2:1f:fe:eb:f7:38:73:f9:c0: 70:f9:81:9e:ae:5e:07:7c:31:7a:36:21:0a:fb:f8:c6:ec:27: 63:fd:c1:ec:fd:b0:40:88:e6:5c:4f:c2:32:0c:da:eb:a3:cc: ec:41:41:72:63:de:8e:e0:b0:50:13:db:c5:b9:a1:e3:b9:67: 36:0d:ce:2c:21:11:05:9b:75:a5:6f:e6:f4:7b:f2:2a:b6:71: 73:0e:a8:d6:f1:6c:c8:38:73:04:a6:de:11:e6:46:52:38:57: 80:56:1b:58:28:83:50:6d:bb:b7:b3:e7:24:33:7d:e4:99:28: 9a:f8:51:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4+p2UArAUvfx2891KDwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjUzMmUyOWYyMmZhMjMxZGM2ZmM4ZTUzMGVmYjFjNzYx MTllMGEwHhcNMjUxMjE2MDIwMTE0WhcNMjUxMjE3MDIwMTE0WjAzMTEwLwYDVQQD Eyg1Y2VjNjI2NmU2YzFlNGU3MWY2Nzg2NmMwOTAyMDk1ZTY5OGI2NmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xv74ceSw22fFzGxKYxDYRWPTTQ aQy9SHiPjWFLfNKHetjnFuOQTuCW5P/+wovA8PP8rBWP4MpUN1YszdasIhlwuEpO DSxvJ+sBGE9T4cD6tLaJRnXE/+PHhB5xdaDt8YnH/Vi91VQTIOvTuQATqvr1ie8N Phn6ozMU4CoQz2SQjwF5TEmSsaVr8e7gSEgEKsVMw8XQrltngjlWijg51AGsihzq g1UQvtZdMbkI1qUf25Bx8e8Cj4i1fqsLfSlRVAxu0jZon7Tu/xNfk2GG4eIquyKx EgCqPcPCaRxV9wLMX1tNQGxtvRjKS7SiyvSxgMHpKpjSzGlPgb5tMX1fJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzsYmbmweTnH2eGbAkCCV5pi2a1MB8GA1UdIwQY MBaAFLElMuKfIvojHcb8jlMO+xx2EZ4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2Qt OTMzZWZiZDc3ZjViLzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2QtOTMzZWZiZDc3ZjVi LzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNMVOqVz 4iVTVnqfOPG0HI04CzgkiAyQulEGkYCOA27A/IUpOUKjN45wE+0s85O13Vtl0XpW pWpQNLBT+Lsmchl8nYj7qxnm9VaILdkRkMg9AC9VnET+YHBXUNs+PeJqjfnTnntJ O5SYaD5FWjfhbX4XE8x13nnJFwt87mmVuI39IcvebGuXsh/+6/c4c/nAcPmBnq5e B3wxejYhCvv4xuwnY/3B7P2wQIjmXE/CMgza66PM7EFBcmPejuCwUBPbxbmh47ln Ng3OLCERBZt1pW/m9HvyKrZxcw6o1vFsyDhzBKbeEeZGUjhXgFYbWCiDUG27t7Pn JDN95JkomvhRWg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:42:22 2025 by rpki-client