This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json) Hash identifier: MmAqujau8nA1l+FZ2lw/EfxO0av0l8N0JYrMt4kdvwM= Subject key identifier: 26:43:44:C4:45:12:1B:E0:CB:EC:7D:E5:79:BF:06:15:AD:08:8B:77 Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Certificate serial: 019AF19B5053E922148ABB75E2BAD00116E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=) 2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=) 3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=) 4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=) 5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: 8IFU6bPp7/NcTyxkYcljp1ns8mRCsvtce/cJoDe8Pdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:50:53:e9:22:14:8a:bb:75:e2:ba:d0:01:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=264344c445121be0cbec7de579bf0615ad088b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:09:8c:ff:d2:23:3f:15:10:91:f4:a3:69: b6:65:63:1a:69:98:f9:50:23:90:83:03:30:cd:5a: c6:65:5d:18:d2:8e:5d:bb:d1:eb:4d:34:2f:f9:ad: 99:da:ab:94:4b:83:9d:2c:7b:88:1e:ed:0e:b7:ef: 18:60:46:98:ca:a8:95:94:d5:8d:80:cb:32:86:b2: 78:8d:63:bc:ae:42:1c:3b:78:62:6d:90:d3:7b:5e: d2:5c:c0:0c:88:7f:45:8d:f3:95:6d:8d:f3:f4:fa: a1:60:6a:99:9e:b4:04:aa:8c:ac:c4:31:c1:aa:97: 99:00:6a:b2:15:45:42:23:3d:19:9f:42:12:c9:4b: ea:a4:fb:13:ab:ca:ed:22:2e:ed:c6:0a:90:d8:c6: 3d:74:a2:bb:76:08:bd:1e:90:87:1b:c3:a9:51:3d: b9:b1:c6:3c:92:35:cb:87:26:f1:38:09:27:fa:be: 50:81:73:e0:f0:6e:41:25:89:74:34:8f:2a:a7:be: 65:e2:2b:6a:16:3c:36:ed:fa:8e:73:7f:66:63:c8: 22:d6:05:7d:db:4b:ac:8e:13:04:ab:30:9b:3e:41: 23:13:54:c5:22:0c:7d:78:09:c3:6c:4c:4c:52:ea: 55:26:f7:0b:42:f4:9e:a1:dd:04:d7:9c:79:c4:f8: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:43:44:C4:45:12:1B:E0:CB:EC:7D:E5:79:BF:06:15:AD:08:8B:77 X509v3 Authority Key Identifier: keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0d:68:d8:10:ed:52:4a:8f:7b:a5:91:81:6e:7b:66:b6:e4: d6:92:75:e2:82:d8:71:66:62:4a:1f:15:ca:19:ea:16:a3:9e: 1a:e3:6d:4b:01:84:30:26:1c:8c:56:9c:4e:08:1e:7f:70:a4: bf:78:c2:6e:c0:75:47:f5:16:ff:b4:88:8a:f2:51:47:1f:31: fc:37:55:52:9c:dd:04:12:a5:28:7b:e3:33:fb:bf:93:20:b4: 1b:df:7d:db:6c:e2:87:c4:9d:36:31:8a:6b:76:c7:42:82:e9: f2:76:5e:d1:83:47:67:c9:d8:1d:f3:a6:5b:63:20:df:48:c5: 17:2c:bd:3c:62:41:48:f8:e5:4f:15:df:1b:42:b5:29:fb:4a: 02:43:fd:e5:db:05:df:8e:c3:cd:be:8b:3d:2d:e1:cf:73:05: 3f:33:41:be:09:3e:1a:5b:5b:10:34:0a:21:5e:43:77:76:95: 89:3d:8f:47:0e:3a:67:24:d6:b2:bb:2f:e0:a9:78:96:98:fe: 29:0d:3e:cd:11:c8:73:b8:9d:d8:fb:c7:2e:9b:32:42:62:f5: cf:5f:ec:ce:d8:ae:71:d4:20:7b:c0:b1:42:fd:7e:15:b6:93: 85:28:78:53:8b:88:b8:51:a8:14:0e:d9:31:d0:ec:d2:a1:bb: 63:bf:77:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1BT6SIUirt14rrQARbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh ZjgyOTAwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EygyNjQzNDRjNDQ1MTIxYmUwY2JlYzdkZTU3OWJmMDYxNWFkMDg4Yjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq34JjP/SIz8VEJH0o2m2ZWMaaZj5 UCOQgwMwzVrGZV0Y0o5du9HrTTQv+a2Z2quUS4OdLHuIHu0Ot+8YYEaYyqiVlNWN gMsyhrJ4jWO8rkIcO3hibZDTe17SXMAMiH9FjfOVbY3z9PqhYGqZnrQEqoysxDHB qpeZAGqyFUVCIz0Zn0ISyUvqpPsTq8rtIi7txgqQ2MY9dKK7dgi9HpCHG8OpUT25 scY8kjXLhybxOAkn+r5QgXPg8G5BJYl0NI8qp75l4itqFjw27fqOc39mY8gi1gV9 20usjhMEqzCbPkEjE1TFIgx9eAnDbExMUupVJvcLQvSeod0E15x5xPjPHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZDRMRFEhvgy+x95Xm/BhWtCIt3MB8GA1UdIwQY MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt NDZiNDZmYzBlNDk2LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2 LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcw1o2BDt UkqPe6WRgW57Zrbk1pJ14oLYcWZiSh8VyhnqFqOeGuNtSwGEMCYcjFacTggef3Ck v3jCbsB1R/UW/7SIivJRRx8x/DdVUpzdBBKlKHvjM/u/kyC0G99922zih8SdNjGK a3bHQoLp8nZe0YNHZ8nYHfOmW2Mg30jFFyy9PGJBSPjlTxXfG0K1KftKAkP95dsF 347Dzb6LPS3hz3MFPzNBvgk+GltbEDQKIV5Dd3aViT2PRw46ZyTWsrsv4Kl4lpj+ KQ0+zRHIc7id2PvHLpsyQmL1z1/sztiucdQge8CxQv1+FbaThSh4U4uIuFGoFA7Z MdDs0qG7Y793Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:19 2025 by rpki-client