This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json) Hash identifier: yYKz2DXwKYMo4q4O0FQregjDF9gqB54gPxi0DNDkCc0= Subject key identifier: 6B:7C:A0:38:BF:F5:B3:9C:29:59:29:93:C0:21:7F:EB:8C:AE:15:0E Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Certificate serial: 019AF352B72C15BF235DF9D74F95E46EF68A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:01:15 +0000 Manifest this update: Sat 06 Dec 2025 11:01:15 +0000 Manifest next update: Sun 07 Dec 2025 11:01:15 +0000 Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: +QhOjZ+7nVaMnkvCx1/ySatKYdzlq3dzh2s6AO4M4+0=) 2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b7:2c:15:bf:23:5d:f9:d7:4f:95:e4:6e:f6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92 Validity Not Before: Dec 6 11:01:15 2025 GMT Not After : Dec 7 11:01:15 2025 GMT Subject: CN=6b7ca038bff5b39c29592993c0217feb8cae150e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:e1:df:ea:64:96:7b:a6:f8:ff:0c:dd:e1: 0c:2d:86:15:05:c7:fe:d1:ce:df:97:52:3a:08:80: 3d:55:e6:2f:d5:7e:e0:88:b6:51:d7:52:35:02:67: 16:ae:bb:4b:50:3b:9b:09:6e:57:0f:87:97:b9:d2: 20:0d:93:b6:f1:67:61:fc:11:8d:b0:d2:ff:65:c8: a7:07:e3:0e:6f:4a:c9:53:1d:59:a6:4d:50:fd:12: fc:bf:25:db:76:72:70:d8:a3:28:9e:f1:19:f0:86: 92:31:f0:64:ba:56:27:c0:d3:ed:6b:4f:e2:e7:35: 91:38:09:8f:13:67:19:84:d0:46:28:f9:5e:d9:0f: 01:37:e6:30:02:1c:8c:dc:d1:7e:ae:ce:33:e7:d4: 86:95:b4:4f:42:2a:20:47:4a:44:0d:da:1d:90:a4: 92:99:73:1e:fa:d2:bb:26:f9:31:0f:28:99:37:d4: ec:c8:9b:73:96:07:99:0c:14:6f:aa:d4:90:87:06: e5:44:39:72:ec:d8:d2:89:b0:51:44:64:f4:14:7d: 26:2e:33:90:44:49:83:33:c4:2d:b0:f7:47:f6:09: d1:b4:36:cb:55:73:7d:27:32:70:97:a2:e4:d1:22: 46:f8:0f:24:01:60:8c:0e:88:4f:5e:4f:7f:05:19: 5b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7C:A0:38:BF:F5:B3:9C:29:59:29:93:C0:21:7F:EB:8C:AE:15:0E X509v3 Authority Key Identifier: keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:55:93:08:29:f0:72:1f:f7:9f:53:b0:6a:57:e4:eb:d1:85: 78:69:17:04:ff:66:bf:b2:31:44:c5:9c:c2:51:db:24:25:fd: 5f:1f:6d:d4:24:3c:e0:d4:ce:43:46:f1:2a:30:1c:b8:cc:1c: a2:38:90:d3:3b:7c:93:2b:c1:1b:74:08:d2:f5:d7:be:d7:01: de:04:12:5d:94:c8:1b:bc:15:49:98:d2:9d:10:6e:12:1c:4a: 1a:11:5a:5d:fc:9e:32:11:6f:15:fc:3a:7c:68:b8:1a:6b:dc: 9f:e3:e6:3b:c9:e3:f8:20:f3:11:55:de:67:95:dc:56:9f:99: fe:8a:a7:ec:f2:ce:ce:2d:d1:06:72:98:e5:26:40:85:83:21: 7f:b6:48:75:84:67:eb:d9:2a:c4:cf:d8:38:d9:7a:59:48:e9: b4:18:e4:b0:b6:63:db:d3:24:3c:48:27:65:88:86:f3:8f:d5: 73:fc:10:6f:9c:59:7b:30:f7:62:0d:dc:61:0f:05:23:25:ec: 69:c2:90:c3:09:22:06:65:f4:4d:4c:51:4d:aa:e0:23:40:7a: e6:20:7c:70:fb:f3:ca:5d:cb:34:38:0d:85:c0:8b:40:13:f7: 28:8f:da:9b:07:d0:90:42:1b:ae:8a:18:d1:15:5e:4a:c7:e1: 26:cf:68:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrcsFb8jXfnXT5XkbvaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWZiOTlkMmEwNmVlOTlkZWE5NTY2ZjE2YmYyMjZkYjNl NTZjOTIwHhcNMjUxMjA2MTEwMTE1WhcNMjUxMjA3MTEwMTE1WjAzMTEwLwYDVQQD Eyg2YjdjYTAzOGJmZjViMzljMjk1OTI5OTNjMDIxN2ZlYjhjYWUxNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQrh3+pklnum+P8M3eEMLYYVBcf+ 0c7fl1I6CIA9VeYv1X7giLZR11I1AmcWrrtLUDubCW5XD4eXudIgDZO28Wdh/BGN sNL/ZcinB+MOb0rJUx1Zpk1Q/RL8vyXbdnJw2KMonvEZ8IaSMfBkulYnwNPta0/i 5zWROAmPE2cZhNBGKPle2Q8BN+YwAhyM3NF+rs4z59SGlbRPQiogR0pEDdodkKSS mXMe+tK7JvkxDyiZN9TsyJtzlgeZDBRvqtSQhwblRDly7NjSibBRRGT0FH0mLjOQ REmDM8QtsPdH9gnRtDbLVXN9JzJwl6Lk0SJG+A8kAWCMDohPXk9/BRlbqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt8oDi/9bOcKVkpk8Ahf+uMrhUOMB8GA1UdIwQY MBaAFErvuZ0qBu6Z3qlWbxa/Im2z5WySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEt ZWQwYTdhYmE4Y2IyLzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xNjlhM2ItNmE3My00OWVjLWFmZmEtZWQwYTdhYmE4Y2Iy LzEvU3UtNW5Tb0c3cG5lcVZadkZyOGliYlBsYkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFWTCCnw ch/3n1Owalfk69GFeGkXBP9mv7IxRMWcwlHbJCX9Xx9t1CQ84NTOQ0bxKjAcuMwc ojiQ0zt8kyvBG3QI0vXXvtcB3gQSXZTIG7wVSZjSnRBuEhxKGhFaXfyeMhFvFfw6 fGi4Gmvcn+PmO8nj+CDzEVXeZ5XcVp+Z/oqn7PLOzi3RBnKY5SZAhYMhf7ZIdYRn 69kqxM/YONl6WUjptBjksLZj29MkPEgnZYiG84/Vc/wQb5xZezD3Yg3cYQ8FIyXs acKQwwkiBmX0TUxRTargI0B65iB8cPvzyl3LNDgNhcCLQBP3KI/amwfQkEIbrooY 0RVeSsfhJs9oxg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:27 2025 by rpki-client