This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json) Hash identifier: mXrZmj8lJeYRsPRucHJBH8+IC0GwY13+ustOrb2tHVs= Subject key identifier: 1A:56:BE:EB:EE:8F:6B:45:F1:68:91:E1:15:CA:B2:E7:68:5C:B2:4C Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa Certificate serial: 019B3F11F0A53EF80853538E3EE95E926216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 04:01:38 +0000 Manifest this update: Sun 21 Dec 2025 04:01:38 +0000 Manifest next update: Mon 22 Dec 2025 04:01:38 +0000 Files and hashes: 1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=) 2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=) 3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=) 4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: tHlJCsdQZi/1C7iSjTVFPWK81NQkjMxam88JnJbwpx4=) 5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:f0:a5:3e:f8:08:53:53:8e:3e:e9:5e:92:62:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa Validity Not Before: Dec 21 04:01:38 2025 GMT Not After : Dec 22 04:01:38 2025 GMT Subject: CN=1a56beebee8f6b45f16891e115cab2e7685cb24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:56:1c:e2:ad:28:40:ad:0e:aa:63:94:d1: cd:ba:1c:bf:37:9e:8e:d2:24:4b:b9:07:d3:87:0c: 90:18:a4:2e:f9:d6:40:ae:ef:a8:51:ec:43:d9:93: 24:16:2b:01:bf:8b:48:78:2e:a4:36:ce:04:24:aa: 3d:a6:58:8b:ad:45:0e:da:cd:ba:b2:f4:03:31:75: e7:54:a7:73:da:ee:f0:2b:e2:41:7a:e2:bf:27:ad: 76:f4:51:95:23:e0:c4:9e:68:0d:55:c9:d9:a4:a2: 42:f3:a0:9e:38:47:fd:dc:f9:30:02:b3:87:74:65: 7b:aa:4a:05:9c:ce:c9:93:b0:07:ee:c1:c7:85:31: 9f:dc:45:44:d8:94:6e:36:9f:ea:4f:02:ff:40:4a: 71:f3:f5:d5:1f:4d:4b:38:af:dc:53:8a:29:f7:d9: 90:a5:b8:7b:70:3c:47:5e:ad:74:e0:45:67:bd:f4: 2f:33:d7:f2:79:c4:72:2a:c1:db:c0:b6:88:30:9a: 77:ce:6a:86:b4:77:c5:7c:9e:23:68:52:ab:58:96: 58:b9:01:24:59:c4:91:a3:aa:45:21:53:82:67:4e: da:0c:35:bd:ec:1d:dc:77:a7:49:34:01:57:45:56: a4:27:2c:e1:8f:f1:01:56:ef:96:32:98:7e:19:a5: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:56:BE:EB:EE:8F:6B:45:F1:68:91:E1:15:CA:B2:E7:68:5C:B2:4C X509v3 Authority Key Identifier: keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:41:c1:e5:a4:c6:e3:83:d1:f4:94:9d:8c:85:0f:ca:ea:db: 91:b7:42:0e:1c:de:a3:4f:06:9b:01:3f:96:d0:c0:c5:47:5c: 9d:89:7f:28:74:f3:c8:fb:23:da:cb:b8:e5:bf:0d:6b:35:bd: 47:d4:bd:ed:50:fb:98:56:57:a6:e2:67:f7:11:6e:5c:fc:1c: 05:3f:40:e8:ac:75:f4:f1:13:8b:62:2a:b5:23:e0:0f:88:bf: ec:9a:ad:4f:e1:5c:77:76:95:0a:80:68:b7:98:e8:d8:cb:ce: 71:36:58:69:57:e5:b9:ce:26:4c:27:b2:0e:03:75:c9:85:8d: 36:07:29:40:54:4d:c1:79:cb:f4:53:3e:09:0a:a4:68:77:c1: 6e:0b:e8:d2:2b:10:8a:63:3b:be:b4:86:86:49:b6:9f:82:2d: af:3e:fe:d7:c2:2c:10:81:10:38:3e:ed:0a:09:d5:a9:4c:65: f7:25:38:f4:75:9a:be:02:8e:1a:8d:90:d5:96:1b:32:51:3a: 59:fa:c3:5c:cc:15:72:33:a3:1b:67:01:b1:a1:e9:8b:42:3b: 42:2e:5e:6a:b2:8d:74:e1:87:c0:a7:4c:47:c2:49:41:3a:41: 48:e7:46:0b:f3:bf:12:30:e5:16:05:10:96:f9:fe:15:26:7f: 0a:dd:e5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EfClPvgIU1OOPulekmIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4 ZTU1YWEwHhcNMjUxMjIxMDQwMTM4WhcNMjUxMjIyMDQwMTM4WjAzMTEwLwYDVQQD EygxYTU2YmVlYmVlOGY2YjQ1ZjE2ODkxZTExNWNhYjJlNzY4NWNiMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMxWHOKtKECtDqpjlNHNuhy/N56O 0iRLuQfThwyQGKQu+dZAru+oUexD2ZMkFisBv4tIeC6kNs4EJKo9pliLrUUO2s26 svQDMXXnVKdz2u7wK+JBeuK/J6129FGVI+DEnmgNVcnZpKJC86CeOEf93PkwArOH dGV7qkoFnM7Jk7AH7sHHhTGf3EVE2JRuNp/qTwL/QEpx8/XVH01LOK/cU4op99mQ pbh7cDxHXq104EVnvfQvM9fyecRyKsHbwLaIMJp3zmqGtHfFfJ4jaFKrWJZYuQEk WcSRo6pFIVOCZ07aDDW97B3cd6dJNAFXRVakJyzhj/EBVu+WMph+GaWNXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpWvuvuj2tF8WiR4RXKsudoXLJMMB8GA1UdIwQY MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt MDBkMWU3YTE3MGEyLzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREHB5aTG 44PR9JSdjIUPyurbkbdCDhzeo08GmwE/ltDAxUdcnYl/KHTzyPsj2su45b8NazW9 R9S97VD7mFZXpuJn9xFuXPwcBT9A6Kx19PETi2IqtSPgD4i/7JqtT+Fcd3aVCoBo t5jo2MvOcTZYaVfluc4mTCeyDgN1yYWNNgcpQFRNwXnL9FM+CQqkaHfBbgvo0isQ imM7vrSGhkm2n4Itrz7+18IsEIEQOD7tCgnVqUxl9yU49HWavgKOGo2Q1ZYbMlE6 WfrDXMwVcjOjG2cBsaHpi0I7Qi5earKNdOGHwKdMR8JJQTpBSOdGC/O/EjDlFgUQ lvn+FSZ/Ct3luA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:34 2025 by rpki-client