This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json) Hash identifier: paENxxbYizSNbVjbejJMHBZthWOnTRQbTrnn+gi8vvY= Subject key identifier: B0:1A:74:84:C3:AE:2A:41:22:DB:EA:9C:9D:83:93:6B:56:54:19:3C Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b Certificate serial: 019AF1D20057E24AD27C63DC2E8911DC02D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft Manifest number: 147A Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=) 2: OgrR2CAd56z5U5HmKNv5p8BkWPc.roa (hash: Rq+kB9vanf4G1JIJ3U+Pnkbq1HZGp2RBfUcOAAvfTYg=) 3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: 3KIJwRCRNI8Otc7mCy6vNX8fyCvjmTUOwJds8AlCwq4=) 4: VqTKdS0wUklb387Znd5hFzPRASE.roa (hash: rDOvuh2F3d3eA0aeY1ATjqwPgZrek24RyHk+1v/gN1M=) 5: hs7LWx99onWfa7NDQgswR8o6gaE.roa (hash: Ass+jNWe5lghZzBAkHny706eHe/Mnq+7tyKFB/O7uyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:00:57:e2:4a:d2:7c:63:dc:2e:89:11:dc:02:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d7873416510a2fb2346ef342280155522713b Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=b01a7484c3ae2a4122dbea9c9d83936b5654193c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:bd:46:d0:61:95:4a:8c:5b:ad:bf:85:ca: 69:75:c8:16:29:14:70:e0:08:1f:00:ff:61:ed:d4: 7d:3d:95:a2:a7:bf:8e:c1:bb:86:df:ce:86:06:b9: d7:50:55:f1:31:9d:87:ba:26:a0:cf:73:61:0d:28: 4e:a2:de:94:3b:94:fb:dd:20:34:83:a6:db:a2:f3: 93:75:78:92:19:f1:b8:5b:7e:ce:ac:50:1c:30:69: 54:fd:ab:20:4b:e0:cf:8a:fb:aa:50:ae:67:de:00: 32:f2:13:f0:0d:ec:5d:ed:56:12:f5:80:7a:53:40: e0:e2:40:f7:21:e1:79:a1:6c:c2:19:f1:5d:fa:af: 8a:a8:f3:12:a6:d0:b4:64:28:b3:e1:c5:8f:bb:8e: 57:b6:2c:f2:77:79:1a:49:61:ea:2a:01:ad:26:fb: be:3a:8b:fd:74:f0:66:1b:af:a7:82:20:6f:e6:44: 7e:49:55:cd:95:e0:c3:b5:a3:d8:ff:4e:fb:c6:03: 49:70:4c:23:42:4f:07:e3:8d:4c:5c:81:16:3c:c7: d4:9f:2c:e2:45:1a:96:74:e0:55:cb:32:f3:f6:83: 29:7e:00:b7:c7:0a:0e:e0:e9:33:89:69:bd:d8:05: b7:e4:1e:1c:2a:07:a9:13:78:2a:34:e6:3c:14:4d: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:74:84:C3:AE:2A:41:22:DB:EA:9C:9D:83:93:6B:56:54:19:3C X509v3 Authority Key Identifier: keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a3:ef:97:89:fa:27:de:d6:66:a1:2c:fa:d5:58:27:b5:c4: e7:7e:24:78:e2:bc:a3:b3:ee:a3:28:84:2b:e1:5d:90:82:44: e5:95:34:29:b0:b7:fa:2f:aa:03:5f:14:7a:2c:48:8c:09:a7: 45:64:fb:d0:50:1c:1f:6b:7d:b7:d0:cb:fd:79:e5:f6:c4:9d: e7:ac:e8:3c:60:7f:4b:f1:2a:31:66:4c:0b:5e:13:cc:c2:16: 31:a6:c4:ff:b9:e0:54:6a:90:b0:68:b2:22:8c:37:9a:67:af: a8:69:13:06:02:23:49:41:be:50:c6:0c:7f:d6:fb:05:28:04: b9:e1:94:b9:9f:28:7d:d7:a9:bb:f0:6f:da:9c:48:67:2c:be: 7c:00:c6:bb:81:6a:a4:1d:16:93:8b:93:20:cc:d9:68:84:8a: 7d:66:4c:47:94:1e:6a:d1:0c:88:e3:ba:0e:c0:7b:0e:20:80: af:96:3d:ec:f6:17:91:a1:6a:f3:8c:1f:48:92:65:41:6b:0f: 34:14:58:f0:fa:7a:06:53:76:91:21:11:f7:82:a7:a6:8d:1a: 0c:e3:83:24:04:a2:6f:42:22:d2:79:f6:9e:7b:db:a2:4e:f6: 1f:4b:6a:6e:82:f3:03:38:3e:a4:df:c9:44:a8:c7:cb:c2:82: 44:7f:cd:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gBX4krSfGPcLokR3ALYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy MjcxM2IwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EyhiMDFhNzQ4NGMzYWUyYTQxMjJkYmVhOWM5ZDgzOTM2YjU2NTQxOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iS9RtBhlUqMW62/hcppdcgWKRRw 4AgfAP9h7dR9PZWip7+OwbuG386GBrnXUFXxMZ2Huiagz3NhDShOot6UO5T73SA0 g6bbovOTdXiSGfG4W37OrFAcMGlU/asgS+DPivuqUK5n3gAy8hPwDexd7VYS9YB6 U0Dg4kD3IeF5oWzCGfFd+q+KqPMSptC0ZCiz4cWPu45Xtizyd3kaSWHqKgGtJvu+ Oov9dPBmG6+ngiBv5kR+SVXNleDDtaPY/077xgNJcEwjQk8H441MXIEWPMfUnyzi RRqWdOBVyzLz9oMpfgC3xwoO4OkziWm92AW35B4cKgepE3gqNOY8FE0Q4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAadITDripBItvqnJ2Dk2tWVBk8MB8GA1UdIwQY MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt ZTE4ZTdiMmFjNTM2LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2 LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaPvl4n6 J97WZqEs+tVYJ7XE534keOK8o7PuoyiEK+FdkIJE5ZU0KbC3+i+qA18UeixIjAmn RWT70FAcH2t9t9DL/Xnl9sSd56zoPGB/S/EqMWZMC14TzMIWMabE/7ngVGqQsGiy Iow3mmevqGkTBgIjSUG+UMYMf9b7BSgEueGUuZ8ofdepu/Bv2pxIZyy+fADGu4Fq pB0Wk4uTIMzZaISKfWZMR5QeatEMiOO6DsB7DiCAr5Y97PYXkaFq84wfSJJlQWsP NBRY8Pp6BlN2kSER94Knpo0aDOODJASib0Ii0nn2nnvbok72H0tqboLzAzg+pN/J RKjHy8KCRH/NqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:01 2025 by rpki-client