This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json) Hash identifier: q7lBkbU9R5igie2UVbcPhs/2NjGz66vY4PzW999gLkQ= Subject key identifier: 97:6C:8E:32:87:DE:F5:2E:93:42:25:9B:7D:75:09:EE:E0:7A:4F:C8 Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2 Certificate serial: 019AF209AEC42D4EC4EED8962F97E5F69BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft Manifest number: 12DE Signing time: Sat 06 Dec 2025 05:01:52 +0000 Manifest this update: Sat 06 Dec 2025 05:01:52 +0000 Manifest next update: Sun 07 Dec 2025 05:01:52 +0000 Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: 9Utfn2ZhGDk1hKx7sC/b0WnloZ0ZdIymDZcjXE7T8hI=) 2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ae:c4:2d:4e:c4:ee:d8:96:2f:97:e5:f6:9b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2 Validity Not Before: Dec 6 05:01:52 2025 GMT Not After : Dec 7 05:01:52 2025 GMT Subject: CN=976c8e3287def52e9342259b7d7509eee07a4fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:6c:9c:1d:2f:c9:f3:6b:16:47:3b:3c:f2: a1:81:c3:2f:2a:bc:84:24:8a:82:9d:b8:ae:af:44: 46:cd:89:9d:fa:c6:17:bd:31:74:58:22:96:23:95: 80:bd:77:01:02:e8:eb:f2:0c:c8:db:08:41:bd:c8: b6:53:62:90:25:03:35:d7:17:65:d2:4c:9c:e5:aa: 7e:82:95:f4:57:7b:6a:41:6b:62:19:45:e4:b6:85: 38:6b:68:3d:fa:60:9d:f5:75:58:f8:df:03:9c:68: c6:c7:c1:1e:4e:ff:e1:45:3c:a8:3e:7e:dc:bf:e6: 21:c5:b3:5c:52:49:76:78:f3:f8:c6:df:36:49:b2: fc:6c:27:c8:5b:0f:2d:df:ac:a1:15:a5:9e:2a:9c: 5b:a7:fc:f6:44:51:17:9d:bd:d0:01:61:e1:c6:2d: 0f:c5:02:44:97:97:d6:67:bb:51:e1:86:54:a5:d0: 96:88:2c:c5:fe:fb:e9:65:1d:39:a5:67:e0:35:66: 9e:83:a3:89:9e:be:0d:24:46:6a:cd:bd:35:a2:2d: cb:c7:21:64:80:ab:3b:3e:56:11:48:ed:b3:43:f1: ec:75:91:cb:77:73:bd:99:82:6d:cd:ee:8e:89:b9: fe:95:91:82:43:bb:d8:06:d9:b3:ef:1f:d5:ed:ab: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6C:8E:32:87:DE:F5:2E:93:42:25:9B:7D:75:09:EE:E0:7A:4F:C8 X509v3 Authority Key Identifier: keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e3:22:9e:d6:66:64:0c:f5:21:14:a8:04:c0:a4:bd:16:54: 51:8e:9f:68:f3:e0:1a:b4:c2:c1:d7:6a:e3:49:5e:70:21:fb: 5a:fd:28:8c:21:98:49:65:2a:e5:cd:eb:dc:55:40:17:07:e9: 50:89:1c:48:b2:79:3a:02:48:37:a4:d5:a0:a5:b4:ab:13:24: d9:f1:4b:79:bc:a5:b7:e8:bc:26:54:2f:bb:9b:e4:1b:b4:a7: 1f:2c:11:0c:2e:1a:de:77:25:1b:3a:ae:96:b7:00:15:21:76: 66:88:bb:f1:f0:9e:c5:96:79:2f:38:8b:76:43:ca:d1:ae:28: ad:2d:a7:bf:db:f6:41:1f:fa:f1:83:8f:3a:c4:db:90:4d:af: fd:80:2c:14:7d:e6:a8:fa:77:89:65:d7:e3:fb:a7:2e:a4:78: 8b:90:15:5c:c1:dd:52:46:23:96:af:a0:73:2e:7c:b6:98:a8: 85:20:df:e6:40:05:c0:fc:a5:aa:82:ca:e4:c6:20:0c:98:51: 64:1a:26:09:87:90:81:d9:c4:08:84:25:f3:1d:10:5c:02:39: 55:99:40:34:59:b4:d4:b3:b3:d1:33:2d:96:32:dd:90:8f:1c: 1b:65:a5:66:e1:39:2c:5f:6f:53:93:de:ad:c6:cd:51:2c:6d: 8a:9e:a0:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa7ELU7E7tiWL5fl9pvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGE4NTY1Mjc2YjRhMjUxYmE1NzNkZDZkNWY1Zjg3ODIz OGViZDIwHhcNMjUxMjA2MDUwMTUyWhcNMjUxMjA3MDUwMTUyWjAzMTEwLwYDVQQD Eyg5NzZjOGUzMjg3ZGVmNTJlOTM0MjI1OWI3ZDc1MDllZWUwN2E0ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDRsnB0vyfNrFkc7PPKhgcMvKryE JIqCnbiur0RGzYmd+sYXvTF0WCKWI5WAvXcBAujr8gzI2whBvci2U2KQJQM11xdl 0kyc5ap+gpX0V3tqQWtiGUXktoU4a2g9+mCd9XVY+N8DnGjGx8EeTv/hRTyoPn7c v+YhxbNcUkl2ePP4xt82SbL8bCfIWw8t36yhFaWeKpxbp/z2RFEXnb3QAWHhxi0P xQJEl5fWZ7tR4YZUpdCWiCzF/vvpZR05pWfgNWaeg6OJnr4NJEZqzb01oi3LxyFk gKs7PlYRSO2zQ/HsdZHLd3O9mYJtze6Oibn+lZGCQ7vYBtmz7x/V7ashbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdsjjKH3vUuk0Ilm311Ce7gek/IMB8GA1UdIwQY MBaAFElKhWUna0olG6Vz3W1fX4eCOOvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYt YzZkOWY5MTViZDhiLzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYtYzZkOWY5MTViZDhi LzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOMintZm ZAz1IRSoBMCkvRZUUY6faPPgGrTCwddq40lecCH7Wv0ojCGYSWUq5c3r3FVAFwfp UIkcSLJ5OgJIN6TVoKW0qxMk2fFLebylt+i8JlQvu5vkG7SnHywRDC4a3nclGzqu lrcAFSF2Zoi78fCexZZ5LziLdkPK0a4orS2nv9v2QR/68YOPOsTbkE2v/YAsFH3m qPp3iWXX4/unLqR4i5AVXMHdUkYjlq+gcy58tpiohSDf5kAFwPylqoLK5MYgDJhR ZBomCYeQgdnECIQl8x0QXAI5VZlANFm01LOz0TMtljLdkI8cG2WlZuE5LF9vU5Pe rcbNUSxtip6gkg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:00 2025 by rpki-client