This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft File: svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json) Hash identifier: Yh0pfwwS8wik8DHntaCwQWwOsBNg5TBQuFtSBxqUiDw= Subject key identifier: FD:92:D9:96:3C:CC:6E:DC:9B:CB:C3:9B:68:9C:6B:7A:C1:FB:BB:E9 Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37 Certificate issuer: /CN=b2fba356186c1dc5031c2fb20bc635491f878637 Certificate serial: 019B311E95AA4BD89F2E901E65262723B5BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft Manifest number: 1115 Signing time: Thu 18 Dec 2025 11:00:46 +0000 Manifest this update: Thu 18 Dec 2025 11:00:46 +0000 Manifest next update: Fri 19 Dec 2025 11:00:46 +0000 Files and hashes: 1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=) 2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: 3sEJgYHSuLK2uvUApEErXBGZhZ9mhOvsJo3pGAfTZbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:95:aa:4b:d8:9f:2e:90:1e:65:26:27:23:b5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637 Validity Not Before: Dec 18 11:00:46 2025 GMT Not After : Dec 19 11:00:46 2025 GMT Subject: CN=fd92d9963ccc6edc9bcbc39b689c6b7ac1fbbbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:0d:1c:08:98:cb:a0:4b:76:80:81:50:2a: 9d:e2:46:00:51:b0:fd:97:50:46:ff:d3:9c:96:45: 17:84:69:3e:0b:39:db:e2:c1:09:63:38:ff:47:fe: 20:6f:c3:eb:de:eb:92:b0:8a:10:a7:eb:e9:37:fa: 37:8e:c9:9e:cd:3d:3d:32:dd:e4:b8:17:8b:ca:e7: 3c:1f:12:ca:dc:91:27:db:27:b6:d8:85:1d:7f:1c: ea:93:42:a1:53:e2:c4:5e:a9:22:21:16:fc:fd:30: eb:2d:b8:29:a0:4f:4e:0e:61:ae:42:e1:19:44:c2: 2a:fb:30:07:b1:6f:4a:93:08:9d:1c:0a:57:52:ff: 75:62:17:5a:82:e3:da:c7:85:36:3e:91:22:d5:46: 90:05:89:f4:21:d2:e1:a5:e7:db:15:c5:52:d0:64: bc:cc:42:41:52:06:17:f9:61:a6:1d:db:ca:f5:82: 41:16:3b:33:a0:8b:fb:2e:30:85:00:c9:3d:fc:08: 1c:6d:dd:58:18:02:07:e0:e4:5d:c2:e3:2c:94:20: 2a:e8:ec:b3:63:44:5f:f7:cd:df:fd:0d:bc:6d:c1: 52:98:1b:b8:c9:da:3e:57:13:3b:e7:5e:1d:dc:a3: 7d:c2:2e:77:bc:97:b3:82:a7:0f:53:1b:6a:3f:76: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:D9:96:3C:CC:6E:DC:9B:CB:C3:9B:68:9C:6B:7A:C1:FB:BB:E9 X509v3 Authority Key Identifier: keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1a:6f:e8:67:42:ed:6e:ca:5d:87:c5:9d:ae:d1:6d:2f:c7: 41:38:c1:9b:b1:f9:a4:20:f3:07:c3:44:bd:b1:ca:9d:49:6c: 42:a4:13:b1:f5:c2:7d:ba:91:83:30:4b:8e:f5:e2:89:51:6c: e4:52:25:8e:4e:17:79:55:15:d1:bf:2f:9a:9a:cb:d3:e1:10: cb:e5:12:52:92:cb:de:33:1f:3b:90:b8:3c:46:a4:a3:fb:25: b9:b1:75:84:3b:5f:c2:01:77:40:5f:b6:3d:e0:d6:cc:f5:2b: 6f:f7:b0:56:e9:6d:b8:f8:54:f8:8d:b5:c0:48:21:d0:bf:81: 43:e9:d8:25:c7:ee:ba:85:e5:17:7d:3d:3f:75:b9:a1:bd:60: f0:a7:1c:7f:5c:5d:47:62:c6:38:1f:5c:6a:14:d4:e0:00:32: 88:a9:11:ca:ac:2c:68:06:d0:9b:f5:e0:42:a4:4f:de:1b:54: c6:15:ec:49:f1:0d:0e:50:77:fe:9a:08:2a:3e:9e:e2:4f:7a: f2:93:3c:f2:c0:aa:65:72:63:35:91:e4:8f:8f:af:cb:d1:aa: 91:9a:32:02:b1:a3:3b:e3:50:c6:e3:77:da:a1:5b:be:9a:20: 27:fe:1c:45:b8:7e:7b:53:51:81:b7:38:99:cd:3e:4c:9e:11: 76:76:74:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHpWqS9ifLpAeZSYnI7W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZmJhMzU2MTg2YzFkYzUwMzFjMmZiMjBiYzYzNTQ5MWY4 Nzg2MzcwHhcNMjUxMjE4MTEwMDQ2WhcNMjUxMjE5MTEwMDQ2WjAzMTEwLwYDVQQD EyhmZDkyZDk5NjNjY2M2ZWRjOWJjYmMzOWI2ODljNmI3YWMxZmJiYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWgNHAiYy6BLdoCBUCqd4kYAUbD9 l1BG/9OclkUXhGk+Cznb4sEJYzj/R/4gb8Pr3uuSsIoQp+vpN/o3jsmezT09Mt3k uBeLyuc8HxLK3JEn2ye22IUdfxzqk0KhU+LEXqkiIRb8/TDrLbgpoE9ODmGuQuEZ RMIq+zAHsW9KkwidHApXUv91YhdaguPax4U2PpEi1UaQBYn0IdLhpefbFcVS0GS8 zEJBUgYX+WGmHdvK9YJBFjszoIv7LjCFAMk9/Agcbd1YGAIH4ORdwuMslCAq6Oyz Y0Rf983f/Q28bcFSmBu4ydo+VxM7514d3KN9wi53vJezgqcPUxtqP3bT8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2S2ZY8zG7cm8vDm2ica3rB+7vpMB8GA1UdIwQY MBaAFLL7o1YYbB3FAxwvsgvGNUkfh4Y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUt Mjg2NTNjYzEyMzY4LzEvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUtMjg2NTNjYzEyMzY4 LzEvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExpv6GdC 7W7KXYfFna7RbS/HQTjBm7H5pCDzB8NEvbHKnUlsQqQTsfXCfbqRgzBLjvXiiVFs 5FIljk4XeVUV0b8vmprL0+EQy+USUpLL3jMfO5C4PEako/slubF1hDtfwgF3QF+2 PeDWzPUrb/ewVultuPhU+I21wEgh0L+BQ+nYJcfuuoXlF309P3W5ob1g8Kccf1xd R2LGOB9cahTU4AAyiKkRyqwsaAbQm/XgQqRP3htUxhXsSfENDlB3/poIKj6e4k96 8pM88sCqZXJjNZHkj4+vy9GqkZoyArGjO+NQxuN32qFbvpogJ/4cRbh+e1NRgbc4 mc0+TJ4RdnZ0mg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:41:35 2025 by rpki-client