This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json) Hash identifier: l97rxW7C+F2kHbcgb10miaXVUK2yGFIgwSVolETIvQA= Subject key identifier: 05:F3:65:0C:65:C4:D5:0B:0C:73:9A:24:32:05:1D:39:B7:5D:E5:D7 Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a Certificate serial: 019AF31CAA9B51E440843C746F84E0F165D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:13 +0000 Manifest this update: Sat 06 Dec 2025 10:02:13 +0000 Manifest next update: Sun 07 Dec 2025 10:02:13 +0000 Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=) 2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: qqi4NkwyFgtKTkXSZ08qeitxLWyDVG1/DlpdTZOK11A=) 3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:aa:9b:51:e4:40:84:3c:74:6f:84:e0:f1:65:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a Validity Not Before: Dec 6 10:02:13 2025 GMT Not After : Dec 7 10:02:13 2025 GMT Subject: CN=05f3650c65c4d50b0c739a2432051d39b75de5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:f1:f7:ff:37:d8:3d:89:f9:5e:dc:b6:a7: a8:86:18:75:54:c3:79:10:76:03:b7:5a:0b:54:41: 82:01:19:4e:d2:d8:28:75:71:ab:b7:a0:be:42:bd: f2:21:6f:9a:3d:c4:b7:bb:56:32:bc:63:b3:37:28: 13:25:d4:af:a0:6e:f2:25:18:f0:a2:38:60:c1:37: a9:69:3b:95:d9:29:9c:26:13:32:12:ae:27:1d:bd: 81:bc:12:8e:a1:92:da:dc:9c:c4:7e:9b:20:96:41: 23:0e:ca:c2:34:d4:35:5e:1e:f2:53:93:9c:77:70: 96:ae:2f:80:64:c6:26:3e:7d:ca:cc:ba:ea:27:86: 63:16:d0:54:20:fc:f4:89:55:a6:89:40:50:3b:1c: 42:61:0e:d3:56:d2:0c:4f:ac:3c:ce:c9:b6:33:7f: d5:c6:74:e4:d1:94:bf:81:48:8c:4c:5b:89:6f:32: 87:a8:b7:df:4f:e5:e4:4b:11:1e:30:7b:65:f0:22: 8e:13:33:c8:cf:37:cc:18:19:0a:c0:79:d7:36:1b: 70:64:d1:8b:5d:56:63:b7:f8:19:4f:38:b7:56:1b: 7c:13:ae:44:e2:7b:0c:1a:c3:92:ef:9f:ae:ed:22: 69:39:ef:ad:48:08:1c:6d:06:64:ff:40:e4:c8:8d: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F3:65:0C:65:C4:D5:0B:0C:73:9A:24:32:05:1D:39:B7:5D:E5:D7 X509v3 Authority Key Identifier: keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5f:b1:8c:10:a9:10:c8:63:b1:59:c4:c3:f9:80:b2:32:0a: 09:c1:88:9f:36:f2:41:2d:cd:e6:88:4d:f6:fa:69:1f:44:0e: f7:4f:0d:0d:02:cd:2d:85:12:ef:87:e6:7f:7a:b5:4e:ee:51: 36:c0:b4:5c:f0:e7:c4:8f:f4:fb:aa:3b:b6:e3:9e:9d:de:9d: ec:af:5a:6f:a5:65:c0:d1:66:9b:f6:ef:ee:0e:90:4a:1c:31: 5a:17:a8:b3:18:96:b1:9f:39:6c:4d:3b:90:d0:d6:b3:da:ae: 6a:b4:f9:fa:c6:d3:c6:53:4e:92:ee:4e:ed:53:06:79:4d:6e: 2b:23:8e:28:e9:80:86:31:ef:02:de:9a:16:fa:5b:70:92:24: 75:a7:cf:82:5a:30:76:7b:84:b0:55:45:68:eb:67:44:0e:98: 2e:a3:84:e8:6b:e2:03:f9:db:1d:a2:fa:76:6b:67:3e:50:fc: 0f:9f:ee:ca:10:7e:44:9c:89:0f:05:ed:61:de:ed:d4:5e:48: 38:1d:b6:0e:0b:46:d8:28:dc:29:8d:3c:69:8d:fb:22:83:bf: eb:71:0c:a5:f0:d7:ac:44:0a:fa:13:a2:2b:e8:5f:37:ad:c7: d7:82:1d:09:fb:4e:d2:96:0f:ac:9a:01:7a:8b:ba:7c:81:6d: e7:cf:8c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKqbUeRAhDx0b4Tg8WXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQwZWFmODAyNTBhYjgyNDg5ODliZTcxYTQwMzk3MThk NjkzNWEwHhcNMjUxMjA2MTAwMjEzWhcNMjUxMjA3MTAwMjEzWjAzMTEwLwYDVQQD EygwNWYzNjUwYzY1YzRkNTBiMGM3MzlhMjQzMjA1MWQzOWI3NWRlNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLfx9/832D2J+V7ctqeohhh1VMN5 EHYDt1oLVEGCARlO0tgodXGrt6C+Qr3yIW+aPcS3u1YyvGOzNygTJdSvoG7yJRjw ojhgwTepaTuV2SmcJhMyEq4nHb2BvBKOoZLa3JzEfpsglkEjDsrCNNQ1Xh7yU5Oc d3CWri+AZMYmPn3KzLrqJ4ZjFtBUIPz0iVWmiUBQOxxCYQ7TVtIMT6w8zsm2M3/V xnTk0ZS/gUiMTFuJbzKHqLffT+XkSxEeMHtl8CKOEzPIzzfMGBkKwHnXNhtwZNGL XVZjt/gZTzi3Vht8E65E4nsMGsOS75+u7SJpOe+tSAgcbQZk/0DkyI3Y/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXzZQxlxNULDHOaJDIFHTm3XeXXMB8GA1UdIwQY MBaAFElNDq+AJQq4JImJvnGkA5cY1pNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQt MTljNTQyN2U0MTZmLzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQtMTljNTQyN2U0MTZm LzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVl+xjBCp EMhjsVnEw/mAsjIKCcGInzbyQS3N5ohN9vppH0QO908NDQLNLYUS74fmf3q1Tu5R NsC0XPDnxI/0+6o7tuOend6d7K9ab6VlwNFmm/bv7g6QShwxWheosxiWsZ85bE07 kNDWs9quarT5+sbTxlNOku5O7VMGeU1uKyOOKOmAhjHvAt6aFvpbcJIkdafPglow dnuEsFVFaOtnRA6YLqOE6GviA/nbHaL6dmtnPlD8D5/uyhB+RJyJDwXtYd7t1F5I OB22DgtG2CjcKY08aY37IoO/63EMpfDXrEQK+hOiK+hfN63H14IdCftO0pYPrJoB eou6fIFt58+MpA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:38 2025 by rpki-client