This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json) Hash identifier: bmrGxPdmZKO/Mo1YedSauhckp4Y9wapBQe4HCCsyWXQ= Subject key identifier: 95:07:FA:07:98:94:31:A6:BB:E1:24:CF:CA:C7:91:06:D2:27:5D:5D Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Certificate serial: 019AF35293DBAB71254E110C3F7605B6AEFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 11:01:06 +0000 Manifest this update: Sat 06 Dec 2025 11:01:06 +0000 Manifest next update: Sun 07 Dec 2025 11:01:06 +0000 Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=) 2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: mIn56Q6u8bNVY07hP2YdGFUgMUp1h/a9yqEDX/RUGXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:93:db:ab:71:25:4e:11:0c:3f:76:05:b6:ae:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Validity Not Before: Dec 6 11:01:06 2025 GMT Not After : Dec 7 11:01:06 2025 GMT Subject: CN=9507fa07989431a6bbe124cfcac79106d2275d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:b4:1e:86:3c:c4:97:bc:32:e1:ac:39:2a: 43:2d:40:58:96:ca:34:1d:46:1c:f9:6f:0b:23:5f: b7:34:55:2e:84:20:22:42:33:9c:2b:cd:5a:d6:37: 93:28:a8:1b:94:9d:27:29:bf:38:b3:11:b1:11:7e: e5:db:52:75:67:40:4c:46:49:2f:a0:1a:ce:0d:40: 6a:69:36:96:df:9c:e1:9e:7c:66:ec:51:b8:45:c9: bf:10:e0:37:4d:d4:c2:f1:46:ed:7b:60:03:db:95: a2:43:ee:e0:8a:4e:d5:4e:d7:d3:95:23:28:a6:dc: 6b:ee:40:1c:76:ce:5a:62:20:74:23:83:a0:6c:42: 42:e8:26:d5:00:71:7e:f3:a3:da:18:e1:99:75:f6: 96:70:2a:95:3b:f7:4c:73:07:f4:85:7e:9e:c8:d2: 29:5e:52:a1:c0:5d:60:ae:2c:3e:a2:6c:f9:9d:f1: 64:47:f3:53:ee:49:fd:1f:ef:c7:ff:eb:82:43:71: bf:3d:b7:cd:a1:bd:94:c4:a0:93:81:aa:4f:c7:a7: e8:9c:02:ac:34:21:79:a8:30:76:0b:58:36:e9:cc: 25:aa:f1:63:79:ef:0b:c7:85:8e:32:2c:dd:ed:ec: 93:f0:33:51:db:d1:9d:d6:34:b1:df:b5:3f:3c:18: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:07:FA:07:98:94:31:A6:BB:E1:24:CF:CA:C7:91:06:D2:27:5D:5D X509v3 Authority Key Identifier: keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:ba:28:03:d4:0e:a7:67:30:fc:4d:26:33:f4:46:58:68: a7:ca:1c:e4:dc:a8:88:82:2f:17:81:6b:56:60:a1:9b:04:dd: b0:7e:68:ac:6c:4b:9f:be:72:ed:c1:90:36:7a:2f:17:7c:15: b3:f6:c8:63:2e:9a:a9:13:9c:2e:7f:6b:13:0b:ff:ab:5a:2e: 42:4f:44:14:92:eb:71:a6:25:f4:ac:c8:c2:85:28:e7:d9:51: 2f:e8:8e:ab:15:72:5c:90:04:d3:bf:d3:26:91:ce:4e:4a:d5: 2f:50:c1:32:e5:1c:e9:48:ec:64:21:1d:f0:fa:b0:5b:8b:b4: 8c:dc:8b:b3:4c:3b:37:2d:17:56:df:8e:b2:05:b9:a7:f8:fc: 42:37:f3:58:39:e8:5c:f9:bb:1a:46:30:fc:65:1f:eb:be:ed: d1:15:85:98:dc:5b:38:ef:bf:e5:f5:4c:c7:e5:4a:bc:11:2c: fc:17:8b:57:bf:ce:f9:7f:ab:95:c7:66:de:84:75:1a:8d:a0: 36:8b:68:67:95:28:a2:f9:40:69:4e:60:93:be:04:4c:fd:3d: 74:ee:7d:0b:36:1f:95:17:dc:bc:5d:90:ad:56:23:c0:c3:80: dc:7a:14:64:e7:ba:61:75:66:c6:9d:a6:cf:ee:02:a2:7a:40: ae:48:df:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpPbq3ElThEMP3YFtq7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2 NzRmZWIwHhcNMjUxMjA2MTEwMTA2WhcNMjUxMjA3MTEwMTA2WjAzMTEwLwYDVQQD Eyg5NTA3ZmEwNzk4OTQzMWE2YmJlMTI0Y2ZjYWM3OTEwNmQyMjc1ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEi0HoY8xJe8MuGsOSpDLUBYlso0 HUYc+W8LI1+3NFUuhCAiQjOcK81a1jeTKKgblJ0nKb84sxGxEX7l21J1Z0BMRkkv oBrODUBqaTaW35zhnnxm7FG4Rcm/EOA3TdTC8Ubte2AD25WiQ+7gik7VTtfTlSMo ptxr7kAcds5aYiB0I4OgbEJC6CbVAHF+86PaGOGZdfaWcCqVO/dMcwf0hX6eyNIp XlKhwF1griw+omz5nfFkR/NT7kn9H+/H/+uCQ3G/PbfNob2UxKCTgapPx6fonAKs NCF5qDB2C1g26cwlqvFjee8Lx4WOMizd7eyT8DNR29Gd1jSx37U/PBiWNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUH+geYlDGmu+Ekz8rHkQbSJ11dMB8GA1UdIwQY MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgW6KAPU DqdnMPxNJjP0Rlhop8oc5NyoiIIvF4FrVmChmwTdsH5orGxLn75y7cGQNnovF3wV s/bIYy6aqROcLn9rEwv/q1ouQk9EFJLrcaYl9KzIwoUo59lRL+iOqxVyXJAE07/T JpHOTkrVL1DBMuUc6UjsZCEd8PqwW4u0jNyLs0w7Ny0XVt+OsgW5p/j8QjfzWDno XPm7GkYw/GUf677t0RWFmNxbOO+/5fVMx+VKvBEs/BeLV7/O+X+rlcdm3oR1Go2g NotoZ5UoovlAaU5gk74ETP09dO59CzYflRfcvF2QrVYjwMOA3HoUZOe6YXVmxp2m z+4ConpArkjfKg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:18 2025 by rpki-client