This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json) Hash identifier: MqrdMvWsqo8L7L5tLGdaOdN+SBUXE2zzbQq3QeHMMCg= Subject key identifier: 64:38:6A:EA:85:6B:2C:1D:77:3F:21:81:B8:3F:62:9E:35:78:58:0A Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65 Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965 Certificate serial: 019B46263731A993D25FA9F7C468A34E4975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft Manifest number: 1140 Signing time: Mon 22 Dec 2025 13:01:08 +0000 Manifest this update: Mon 22 Dec 2025 13:01:08 +0000 Manifest next update: Tue 23 Dec 2025 13:01:08 +0000 Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: PgyYZRlF6Us6ZuTbX8547xgpu34NfUAojiGUovBQCFc=) 2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=) 3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:37:31:a9:93:d2:5f:a9:f7:c4:68:a3:4e:49:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965 Validity Not Before: Dec 22 13:01:08 2025 GMT Not After : Dec 23 13:01:08 2025 GMT Subject: CN=64386aea856b2c1d773f2181b83f629e3578580a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ae:96:c5:24:85:7c:c7:ed:ff:31:ac:7c:5e: c6:7f:1e:bc:04:0a:b8:76:d2:35:0d:2d:96:bf:05: 84:be:ea:61:68:3b:33:9f:99:0a:e2:7d:eb:e6:a4: 8a:59:f0:3d:07:1c:43:82:66:e4:c9:92:15:54:e5: 65:17:c6:04:6b:b6:32:ac:a3:62:ac:31:69:35:aa: d7:3c:67:d4:c3:fc:e0:6e:04:c9:54:37:f8:37:16: 1d:c5:94:00:95:0c:46:cd:96:65:07:85:da:e3:de: 95:2a:97:40:b4:0c:03:a3:31:e4:39:74:df:dd:db: 87:7f:8d:9d:6d:b0:12:b3:59:af:be:bd:db:ef:3d: 30:fc:df:bd:7a:62:fe:79:64:0f:fd:e4:a9:b1:e5: 3e:db:8f:ee:f9:5e:e8:17:7a:f4:66:32:bf:6f:c6: 2a:63:b4:7f:b6:b9:3f:d0:9e:7a:e9:8b:51:6e:7a: 1b:c2:ad:ce:39:d2:b9:91:d3:95:fe:6f:d7:fd:29: 98:54:3d:ff:a4:ed:05:77:e3:4f:0b:64:c6:78:bf: d8:83:37:d5:58:06:e6:d5:8f:ce:62:1e:2a:bd:9e: cd:d7:38:9f:a1:9d:23:9d:34:d2:02:e6:db:86:66: ce:4d:ae:44:cb:65:b5:cf:11:51:74:d3:2d:02:e7: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:6A:EA:85:6B:2C:1D:77:3F:21:81:B8:3F:62:9E:35:78:58:0A X509v3 Authority Key Identifier: keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:70:b4:a5:f9:55:ff:cc:18:0d:37:e6:59:80:f8:4e:bc: d8:f4:f3:72:97:7c:24:0c:b7:8d:b9:f5:36:a1:fb:22:25:74: f8:ea:34:8c:88:22:65:43:ef:61:37:ea:a2:95:12:87:65:fa: b2:e8:df:80:16:e1:3b:71:c1:74:d1:d5:f8:49:6e:41:48:4a: 5d:9d:cf:24:9d:64:45:62:28:37:79:13:ba:d6:01:d4:59:7c: 7c:bd:37:70:56:d9:48:a9:eb:9a:42:fa:9b:51:7d:a4:f0:8e: be:93:e6:cc:b7:82:c6:fd:8a:6a:3c:ec:b1:55:b8:c5:23:93: ef:9d:78:f7:61:ef:95:be:23:f6:78:c2:96:e9:c8:01:16:43: 0d:42:08:f8:63:f1:ae:75:e0:bf:73:e1:49:91:5d:9e:c3:ca: b9:80:25:01:ff:1c:23:bb:4d:d4:6b:70:36:1a:2c:b6:15:f6: a3:23:d8:1a:95:5f:52:9f:dc:c0:59:f7:49:9f:f2:f2:b9:61: 6d:ee:5d:e4:00:9a:b8:b0:b2:ec:d7:3e:c2:32:84:2b:0f:75: 07:e2:ab:96:d2:a7:c2:78:79:00:ce:4e:54:ee:05:f2:f6:9e: b3:5a:b0:0c:df:ca:a4:b9:5c:95:4b:40:57:1e:1c:8a:e1:25: c6:fd:b4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJjcxqZPSX6n3xGijTkl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NDBjZjc3OGRkOTgxNzY1N2NkOGQ0ZmVlZGQ0MjNkNDZk MWE5NjUwHhcNMjUxMjIyMTMwMTA4WhcNMjUxMjIzMTMwMTA4WjAzMTEwLwYDVQQD Eyg2NDM4NmFlYTg1NmIyYzFkNzczZjIxODFiODNmNjI5ZTM1Nzg1ODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA566WxSSFfMft/zGsfF7Gfx68BAq4 dtI1DS2WvwWEvuphaDszn5kK4n3r5qSKWfA9BxxDgmbkyZIVVOVlF8YEa7YyrKNi rDFpNarXPGfUw/zgbgTJVDf4NxYdxZQAlQxGzZZlB4Xa496VKpdAtAwDozHkOXTf 3duHf42dbbASs1mvvr3b7z0w/N+9emL+eWQP/eSpseU+24/u+V7oF3r0ZjK/b8Yq Y7R/trk/0J566YtRbnobwq3OOdK5kdOV/m/X/SmYVD3/pO0Fd+NPC2TGeL/YgzfV WAbm1Y/OYh4qvZ7N1zifoZ0jnTTSAubbhmbOTa5Ey2W1zxFRdNMtAuf/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ4auqFaywddz8hgbg/Yp41eFgKMB8GA1UdIwQY MBaAFElAz3eN2YF2V82NT+7dQj1G0allMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAt MDAzOTRiNjEwYTM0LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAtMDAzOTRiNjEwYTM0 LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgdwtKX5 Vf/MGA035lmA+E682PTzcpd8JAy3jbn1NqH7IiV0+Oo0jIgiZUPvYTfqopUSh2X6 sujfgBbhO3HBdNHV+EluQUhKXZ3PJJ1kRWIoN3kTutYB1Fl8fL03cFbZSKnrmkL6 m1F9pPCOvpPmzLeCxv2KajzssVW4xSOT751492Hvlb4j9njClunIARZDDUII+GPx rnXgv3PhSZFdnsPKuYAlAf8cI7tN1GtwNhosthX2oyPYGpVfUp/cwFn3SZ/y8rlh be5d5ACauLCy7Nc+wjKEKw91B+KrltKnwnh5AM5OVO4F8vaes1qwDN/KpLlclUtA Vx4ciuElxv205w== -----END CERTIFICATE-----Generated at Mon Dec 22 16:12:21 2025 by rpki-client