This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft File: su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json) Hash identifier: 4U9AqlbnaYbAQ87S16sQpBrhHfaoPpX5gcs+PTmFhE8= Subject key identifier: 4A:16:E6:03:65:FC:42:A2:63:79:DA:81:AE:2F:76:3E:64:F1:F0:F6 Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33 Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33 Certificate serial: 019B258826D2AE690AC6B7758778EB07543D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft Manifest number: 0AEE Signing time: Tue 16 Dec 2025 05:00:38 +0000 Manifest this update: Tue 16 Dec 2025 05:00:38 +0000 Manifest next update: Wed 17 Dec 2025 05:00:38 +0000 Files and hashes: 1: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (hash: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=) 2: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: bOibfIwf0xobKnAcdijtD1rWlQ0ovpHr1/+PYKgtDrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:26:d2:ae:69:0a:c6:b7:75:87:78:eb:07:54:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33 Validity Not Before: Dec 16 05:00:38 2025 GMT Not After : Dec 17 05:00:38 2025 GMT Subject: CN=4a16e60365fc42a26379da81ae2f763e64f1f0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:b5:99:aa:4f:cf:39:e8:c9:c3:fd:d8:7d: 83:50:7e:62:e1:40:92:47:7a:aa:b4:a1:27:47:81: 17:1f:f7:49:d0:b5:9f:04:2f:8f:0b:3c:8e:cf:56: 6c:72:e7:e5:4a:4a:7a:ec:42:91:d4:aa:a8:23:fc: db:79:f4:38:35:92:57:4b:d0:c1:ca:9b:09:a3:f6: ba:2e:6b:94:c6:71:3c:ed:00:3b:37:ae:b4:03:a5: 7c:57:d3:ac:59:d3:0c:e4:fd:3f:b3:38:30:32:33: b4:2b:8e:ff:fb:48:a7:59:90:d8:08:9a:09:ed:b8: 4f:cf:b6:86:c6:53:85:49:74:4f:29:3b:dc:2c:f2: 86:57:87:28:00:06:40:a4:60:1b:af:f1:9e:fe:14: 4f:a1:cf:b4:0c:8f:3c:e2:03:0b:05:2b:e9:08:6e: 02:58:c9:f5:3d:42:4a:17:ea:2e:e3:c2:60:fe:5f: ec:72:e6:0e:e6:a6:78:23:80:27:85:36:66:23:c8: ab:eb:84:0f:45:92:ee:a2:8b:f3:2d:37:36:61:da: 59:c0:f1:1a:75:86:fe:a5:68:2b:2a:da:a9:91:29: de:d9:b0:fd:be:4d:d4:55:66:9d:9a:ad:36:b9:a4: 2b:88:f3:a9:c2:82:60:b2:2f:fe:da:b8:f6:01:6b: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:16:E6:03:65:FC:42:A2:63:79:DA:81:AE:2F:76:3E:64:F1:F0:F6 X509v3 Authority Key Identifier: keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c7:11:d4:bd:40:96:af:dd:3c:f3:be:95:fb:8d:79:fe:6e: 7c:1b:fa:5a:7c:90:ea:60:56:a8:91:36:01:ba:96:9f:87:50: d0:08:a8:ee:ab:9f:b7:bc:32:ca:86:40:0c:52:8a:c3:6c:c1: 2b:c6:d2:b6:8b:82:a6:07:02:64:1d:b0:d6:48:89:e4:d1:08: 36:43:00:04:95:f7:8b:67:c1:08:c6:95:0f:bc:cc:bd:75:4f: 51:51:43:f4:94:62:26:cb:74:ba:d2:07:8f:2e:b7:ec:11:27: ba:4e:58:9d:33:44:73:b8:e1:5e:bc:e4:1e:f9:e9:88:48:38: c6:99:56:06:ce:85:ea:bb:81:02:4c:ef:9a:02:54:c0:f4:fb: 55:a0:42:24:6e:3f:93:9b:bc:29:b7:04:ef:40:8a:80:61:dc: 2d:0c:eb:45:dd:2c:a7:32:c3:7c:92:04:be:f6:16:85:f9:f1: a7:08:51:e0:ad:29:8c:e5:08:d1:27:e0:7f:e0:61:38:38:d4: 7d:67:18:80:f7:6c:97:05:3c:57:8b:11:62:0f:c1:19:f6:18: b8:f3:9e:58:6a:11:de:bb:43:27:fe:d7:e4:8a:ee:bd:76:56: f3:48:33:0a:00:60:38:b1:c8:b4:b7:3f:e6:22:5c:3b:42:27: b0:0f:5c:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliCbSrmkKxrd1h3jrB1Q9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWVmOWRiOTNkZTExYTAyNTNkNWFhOGM1M2VjY2FlMGY5 YzNkMzMwHhcNMjUxMjE2MDUwMDM4WhcNMjUxMjE3MDUwMDM4WjAzMTEwLwYDVQQD Eyg0YTE2ZTYwMzY1ZmM0MmEyNjM3OWRhODFhZTJmNzYzZTY0ZjFmMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFq1mapPzznoycP92H2DUH5i4UCS R3qqtKEnR4EXH/dJ0LWfBC+PCzyOz1ZscuflSkp67EKR1KqoI/zbefQ4NZJXS9DB ypsJo/a6LmuUxnE87QA7N660A6V8V9OsWdMM5P0/szgwMjO0K47/+0inWZDYCJoJ 7bhPz7aGxlOFSXRPKTvcLPKGV4coAAZApGAbr/Ge/hRPoc+0DI884gMLBSvpCG4C WMn1PUJKF+ou48Jg/l/scuYO5qZ4I4AnhTZmI8ir64QPRZLuoovzLTc2YdpZwPEa dYb+pWgrKtqpkSne2bD9vk3UVWadmq02uaQriPOpwoJgsi/+2rj2AWuukwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoW5gNl/EKiY3naga4vdj5k8fD2MB8GA1UdIwQY MBaAFLLu+duT3hGgJT1aqMU+zK4PnD0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3U3NTI1UGVFYUFsUFZxb3hUN01yZy1jUFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83M2U5MGQtMDU1My00ZmU2LTk2ZGUt ZGVlZjhkMTU0OTUwLzEvc3U3NTI1UGVFYUFsUFZxb3hUN01yZy1jUFRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83M2U5MGQtMDU1My00ZmU2LTk2ZGUtZGVlZjhkMTU0OTUw LzEvc3U3NTI1UGVFYUFsUFZxb3hUN01yZy1jUFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMcR1L1A lq/dPPO+lfuNef5ufBv6WnyQ6mBWqJE2AbqWn4dQ0Aio7quft7wyyoZADFKKw2zB K8bStouCpgcCZB2w1kiJ5NEINkMABJX3i2fBCMaVD7zMvXVPUVFD9JRiJst0utIH jy637BEnuk5YnTNEc7jhXrzkHvnpiEg4xplWBs6F6ruBAkzvmgJUwPT7VaBCJG4/ k5u8KbcE70CKgGHcLQzrRd0spzLDfJIEvvYWhfnxpwhR4K0pjOUI0Sfgf+BhODjU fWcYgPdslwU8V4sRYg/BGfYYuPOeWGoR3rtDJ/7X5IruvXZW80gzCgBgOLHItLc/ 5iJcO0InsA9clg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:27:12 2025 by rpki-client