This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json) Hash identifier: OkSntfvvzB0LDk/aeGfJm4v+K7dTeJ9RvWCs/jR///A= Subject key identifier: 4C:7C:3A:C5:B8:D5:9F:DD:0F:B5:60:FB:1C:93:E0:24:9D:06:73:74 Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05 Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705 Certificate serial: 019AF276A2E8E972841E8313E63CD3B43F24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft Manifest number: 16E2 Signing time: Sat 06 Dec 2025 07:00:52 +0000 Manifest this update: Sat 06 Dec 2025 07:00:52 +0000 Manifest next update: Sun 07 Dec 2025 07:00:52 +0000 Files and hashes: 1: F8n_Svao3XVMTZ9Sm-3QBaNvm1s.roa (hash: jXQFrBti/A7a3NKEgrbBnXx/tbixG/ctP16QJsp1XeE=) 2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: YlFrTA40MGwPTbmpaYzyJaXmUpKqrIAjc5UA1vYUpcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a2:e8:e9:72:84:1e:83:13:e6:3c:d3:b4:3f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705 Validity Not Before: Dec 6 07:00:52 2025 GMT Not After : Dec 7 07:00:52 2025 GMT Subject: CN=4c7c3ac5b8d59fdd0fb560fb1c93e0249d067374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:45:19:5a:60:56:2f:1d:54:c3:f4:96:ab: 6a:4c:1a:5a:da:fa:e1:26:e9:4a:89:f2:6f:d5:20: da:91:e6:e3:e3:20:8e:9c:65:c6:e8:30:4d:0e:c7: e5:36:5f:37:42:cf:c0:d9:18:14:82:b1:cd:44:a9: 71:87:3d:73:8a:6b:7e:d2:ef:66:b1:94:54:89:8c: c1:bc:0d:8b:b3:a8:c6:45:b0:c6:b0:f5:87:15:8e: 43:f6:cf:44:b9:d5:9a:e6:cf:ce:ff:b5:61:72:02: 18:f1:61:a8:0d:bb:a5:2f:e3:35:8e:57:f8:73:c0: e8:1e:3f:7c:e8:49:8e:5d:a0:6e:15:f1:d3:a6:20: 73:8a:f8:0a:6e:13:63:37:6d:21:76:40:46:20:5b: 49:e0:e3:84:87:e4:35:ed:47:e6:26:b0:3c:d3:36: 33:52:b1:d0:58:82:1b:8b:16:8d:72:62:b5:b5:c4: 49:3f:55:68:7a:ad:87:e1:ab:ed:79:d3:1f:5d:da: 56:6d:33:f1:66:0f:5f:65:c2:9c:71:dd:a9:ca:cd: e1:c6:9f:3c:38:7c:b4:6c:8c:4c:3c:e9:fd:13:49: f4:66:ac:89:3c:5c:be:fa:7f:68:ac:33:c3:9b:5a: b4:10:93:02:7b:04:05:6b:00:38:c8:47:91:86:73: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7C:3A:C5:B8:D5:9F:DD:0F:B5:60:FB:1C:93:E0:24:9D:06:73:74 X509v3 Authority Key Identifier: keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:fd:b4:73:a9:da:ac:ad:89:de:46:0d:62:45:24:85:48: 5b:44:8d:0c:b0:7e:01:ae:a6:2a:8f:a5:81:b9:56:d4:e2:cc: 19:08:b2:8b:89:0c:0c:50:7e:bd:14:c1:43:99:fa:74:0a:b6: 95:bd:f1:f0:65:e9:fb:a7:b3:12:6e:4d:66:f4:3e:9f:c7:96: 2f:a8:0b:87:35:eb:05:87:b5:60:62:66:2a:f6:4b:01:a5:94: b3:ca:54:08:9c:4b:47:d4:ca:eb:99:38:6b:63:97:26:35:b3: 1d:9b:66:93:46:88:54:bb:05:5b:49:b8:b8:7d:05:39:0c:bf: ff:c0:8a:88:dd:d5:96:3b:5f:5e:14:ad:1d:09:b7:b6:30:79: 4e:5a:84:00:a6:32:b3:24:5f:68:c4:bb:3a:8f:bb:b1:62:93: af:85:93:f1:37:8e:01:6c:d2:a6:35:b5:2a:da:9c:c4:df:d4: f6:f0:ba:12:08:c1:db:23:97:8c:c9:62:51:05:61:45:a3:bb: 38:b0:00:56:58:e1:55:4b:e6:62:93:86:2a:5e:a6:d8:58:7e: bf:84:72:8b:01:aa:b1:4c:57:33:08:1d:9a:0c:30:98:16:9d: 9f:f5:cb:57:d2:e8:a8:d4:8f:21:b0:64:20:bc:95:35:03:00: 24:58:66:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqLo6XKEHoMT5jzTtD8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDY1OGZjYWIzNzAzMmRmZWE5NmVmMGFlNjhkYzlkZWZm NmQ3MDUwHhcNMjUxMjA2MDcwMDUyWhcNMjUxMjA3MDcwMDUyWjAzMTEwLwYDVQQD Eyg0YzdjM2FjNWI4ZDU5ZmRkMGZiNTYwZmIxYzkzZTAyNDlkMDY3Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubBFGVpgVi8dVMP0lqtqTBpa2vrh JulKifJv1SDakebj4yCOnGXG6DBNDsflNl83Qs/A2RgUgrHNRKlxhz1zimt+0u9m sZRUiYzBvA2Ls6jGRbDGsPWHFY5D9s9EudWa5s/O/7VhcgIY8WGoDbulL+M1jlf4 c8DoHj986EmOXaBuFfHTpiBzivgKbhNjN20hdkBGIFtJ4OOEh+Q17UfmJrA80zYz UrHQWIIbixaNcmK1tcRJP1Voeq2H4avtedMfXdpWbTPxZg9fZcKccd2pys3hxp88 OHy0bIxMPOn9E0n0ZqyJPFy++n9orDPDm1q0EJMCewQFawA4yEeRhnNyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEx8OsW41Z/dD7Vg+xyT4CSdBnN0MB8GA1UdIwQY MBaAFLFGWPyrNwMt/qlu8K5o3J3v9tcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYt YTdlYWQ4YWIxMjczLzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYtYTdlYWQ4YWIxMjcz LzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2P9tHOp 2qytid5GDWJFJIVIW0SNDLB+Aa6mKo+lgblW1OLMGQiyi4kMDFB+vRTBQ5n6dAq2 lb3x8GXp+6ezEm5NZvQ+n8eWL6gLhzXrBYe1YGJmKvZLAaWUs8pUCJxLR9TK65k4 a2OXJjWzHZtmk0aIVLsFW0m4uH0FOQy//8CKiN3VljtfXhStHQm3tjB5TlqEAKYy syRfaMS7Oo+7sWKTr4WT8TeOAWzSpjW1KtqcxN/U9vC6EgjB2yOXjMliUQVhRaO7 OLAAVljhVUvmYpOGKl6m2Fh+v4RyiwGqsUxXMwgdmgwwmBadn/XLV9LoqNSPIbBk ILyVNQMAJFhmig== -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:42 2025 by rpki-client