This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft File: sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json) Hash identifier: nRszjDF7ZrqgdwYdhB+L8qkvT/WqRe5zseYjLdGrqtc= Subject key identifier: DA:87:7F:7F:3C:9C:2F:07:81:56:88:F4:15:71:D1:80:8E:60:12:A4 Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82 Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682 Certificate serial: 019AF23F8B952DE6C0797BF310751E9D0760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: VTdOF6vt4DJ2gAE9-rspP9YAtwY.roa (hash: 1siesNie5rYzgdzSW4S1a0o9vqGP6HXUGewmb9Xhzlk=) 2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: 0N2WuOvM8Kl274wj64Jm1r39zQ1JmYqjZysDPH/ysY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8b:95:2d:e6:c0:79:7b:f3:10:75:1e:9d:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=da877f7f3c9c2f07815688f41571d1808e6012a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:ac:89:8a:57:e0:22:88:a5:1b:20:c1:33: 2f:6a:44:c4:e9:fc:d0:63:ee:b7:51:50:66:90:45: 3b:60:bc:c4:0d:59:f0:2d:bc:c3:79:30:aa:d6:d0: 40:2e:a0:03:a4:15:db:3e:51:e6:7b:b6:93:21:19: a7:25:0b:51:25:11:ab:fc:1a:a9:ad:13:8f:70:73: bc:15:b7:af:8f:47:63:06:29:d7:7f:4f:bd:f3:31: f3:52:88:3d:84:35:ec:d9:c7:c4:de:e1:1b:8a:b1: 34:39:2c:8c:da:f0:cc:80:a8:30:73:77:ec:ba:40: 67:26:23:b0:7d:a5:ef:86:3f:8a:81:be:e7:72:85: 49:97:13:06:ce:15:a7:c9:08:3c:c6:88:7d:af:a3: 36:eb:53:e3:c7:da:ac:06:02:84:6d:7d:d5:24:93: fa:18:c2:d4:d6:4f:25:e1:27:94:6c:6a:e2:d9:6d: 8c:fb:fc:a2:01:22:44:b1:e3:dd:02:1c:dc:c3:3a: 46:f9:28:2b:ab:b0:a5:f3:9e:23:3d:5e:97:be:85: 16:fc:d7:77:de:69:d4:fc:15:52:33:49:a1:28:f6: 40:98:89:f1:d6:8a:17:86:45:32:8d:07:d9:14:3f: f0:1f:ca:1b:36:53:db:db:73:e6:69:8c:d4:f0:09: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:87:7F:7F:3C:9C:2F:07:81:56:88:F4:15:71:D1:80:8E:60:12:A4 X509v3 Authority Key Identifier: keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3d:e1:38:43:fd:d6:cd:34:0d:96:1c:11:8a:1a:0b:22:f3: 1d:34:c3:97:b0:11:c9:6b:0b:02:84:2e:35:52:5d:34:8a:fc: 63:c4:74:43:9c:13:b6:3b:d0:2f:63:7a:3a:68:18:15:b9:32: 73:18:bd:29:af:c7:1c:45:0a:98:1d:2c:68:83:24:4d:3b:f2: 93:a1:b6:45:ad:4d:69:0c:d5:65:99:0d:2a:0c:e9:d3:d2:4f: dd:fa:1f:11:70:e6:f0:e2:28:48:d2:d4:a2:ad:6e:c7:5c:f4: 48:ca:08:9e:70:ac:50:64:a4:47:23:2a:3d:cf:d3:51:ad:4e: c4:92:7d:5e:d4:5f:42:fa:2f:d3:52:7f:ee:32:08:5b:3a:18: c7:0e:97:df:39:11:e7:9c:4e:ef:ec:02:ad:4d:10:5a:9a:a3: 1f:9a:43:98:32:f6:5d:f4:48:87:32:38:9d:15:4a:23:5a:01: 33:c0:0a:58:04:27:6a:b1:1a:13:f1:1b:b9:16:16:b6:40:21: e3:c7:31:51:36:f2:27:9d:a8:67:1e:07:e1:e5:c1:55:3d:08: 1f:58:79:13:9a:8c:24:bc:97:35:b7:c7:da:73:7e:fd:73:4c: 61:67:d2:d3:a6:a5:97:90:fe:06:f1:fe:e6:b1:eb:89:2b:ee: 99:f3:bf:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4uVLebAeXvzEHUenQdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDg4MWZhM2U3NWEzODUxY2Y3MDQxOTEzNWFiZGQ1Mjlk MmY2ODIwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD EyhkYTg3N2Y3ZjNjOWMyZjA3ODE1Njg4ZjQxNTcxZDE4MDhlNjAxMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwesiYpX4CKIpRsgwTMvakTE6fzQ Y+63UVBmkEU7YLzEDVnwLbzDeTCq1tBALqADpBXbPlHme7aTIRmnJQtRJRGr/Bqp rROPcHO8Fbevj0djBinXf0+98zHzUog9hDXs2cfE3uEbirE0OSyM2vDMgKgwc3fs ukBnJiOwfaXvhj+Kgb7ncoVJlxMGzhWnyQg8xoh9r6M261Pjx9qsBgKEbX3VJJP6 GMLU1k8l4SeUbGri2W2M+/yiASJEsePdAhzcwzpG+Sgrq7Cl854jPV6XvoUW/Nd3 3mnU/BVSM0mhKPZAmInx1ooXhkUyjQfZFD/wH8obNlPb23PmaYzU8AnvLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqHf388nC8HgVaI9BVx0YCOYBKkMB8GA1UdIwQY MBaAFLFIgfo+daOFHPcEGRNavdUp0vaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUt MjBmMzMzYzI1M2FjLzEvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUtMjBmMzMzYzI1M2Fj LzEvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnD3hOEP9 1s00DZYcEYoaCyLzHTTDl7ARyWsLAoQuNVJdNIr8Y8R0Q5wTtjvQL2N6OmgYFbky cxi9Ka/HHEUKmB0saIMkTTvyk6G2Ra1NaQzVZZkNKgzp09JP3fofEXDm8OIoSNLU oq1ux1z0SMoInnCsUGSkRyMqPc/TUa1OxJJ9XtRfQvov01J/7jIIWzoYxw6X3zkR 55xO7+wCrU0QWpqjH5pDmDL2XfRIhzI4nRVKI1oBM8AKWAQnarEaE/EbuRYWtkAh 48cxUTbyJ52oZx4H4eXBVT0IH1h5E5qMJLyXNbfH2nN+/XNMYWfS06all5D+BvH+ 5rHriSvumfO/dA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:22 2025 by rpki-client