This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json) Hash identifier: JsWIh7WoCuOp+JBOi8CI8M+EPcfe51bOjH3igp50gY4= Subject key identifier: 65:92:3F:D1:AB:4F:E2:B0:D3:90:32:67:45:DA:36:9B:B9:0F:8B:65 Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb Certificate serial: 019AF12D0183A5A9B6BF7B7D6DC5EB1908E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft Manifest number: 070B Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=) 2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: v5LNEzNDhAzEVDwcTH1+RRyhlB32T8ihgAkEowAxfYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:01:83:a5:a9:b6:bf:7b:7d:6d:c5:eb:19:08:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=65923fd1ab4fe2b0d390326745da369bb90f8b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:cf:ed:ad:9b:ab:90:d3:03:96:1d:06:51: e8:9e:28:b4:a6:e4:63:ca:b5:47:89:9c:c3:84:40: e8:ef:47:5d:e3:4a:51:99:b2:bd:5c:06:ad:4e:a2: 36:a3:f2:b5:3c:67:9f:99:13:f9:69:f1:14:34:1b: 7f:2a:ba:4f:3f:6a:03:26:4f:47:d4:df:e4:76:79: 37:83:00:aa:4c:bd:a2:72:07:c4:68:65:1a:29:96: 0e:ba:5d:e6:cb:0b:32:af:85:55:51:3d:55:75:3d: 1e:3e:c6:14:86:18:42:8d:45:e5:78:72:70:97:c7: 84:bf:be:a4:aa:ae:cd:94:37:20:65:bb:28:e3:fd: 5e:9b:84:d8:3f:9b:a9:e6:1e:0a:32:0e:e0:ad:c2: 9c:37:8d:54:4a:b4:f1:cf:4e:1c:2b:48:79:d0:da: a9:4b:81:b8:35:3f:ee:79:e2:50:cf:8e:ab:1b:8f: 78:8f:b2:62:5b:58:26:05:4f:8f:e0:3f:6d:6f:5b: 23:ea:53:0c:57:19:f9:e7:2f:e1:cc:54:a9:ba:8f: 4d:58:e7:4a:d4:f2:92:15:16:a2:30:6d:ed:4f:42: bb:54:a8:7e:c3:ab:57:4d:2b:59:88:5e:c2:d1:22: 48:cf:27:36:53:d7:09:01:7d:15:32:f8:61:46:f5: 26:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:3F:D1:AB:4F:E2:B0:D3:90:32:67:45:DA:36:9B:B9:0F:8B:65 X509v3 Authority Key Identifier: keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:20:65:0e:41:2c:92:ae:fb:4c:5a:c0:fe:2b:5b:38:83:e6: bf:c9:63:c4:21:bb:80:d0:0f:d8:df:a5:69:2f:92:82:1e:f3: 16:c2:f4:da:77:13:ff:e6:0d:b7:17:5d:97:a2:22:42:4e:6c: 7b:44:16:d4:cf:2c:38:13:15:24:bf:d8:2f:35:05:c0:02:88: c9:9a:e3:7c:7c:b3:7e:17:a3:97:66:9e:76:8d:7f:f6:e3:e8: 01:94:52:b8:57:15:f1:35:a8:bf:87:8a:39:75:92:c9:f9:73: 34:80:46:c5:5a:46:a2:50:2e:1c:bd:f5:86:5c:ff:b5:0e:4e: 94:af:53:dc:11:0e:d9:b9:03:d4:dd:09:07:53:42:ee:88:25: 1d:9e:8e:bf:c4:62:6e:e3:92:b1:30:50:c2:89:75:97:bc:df: 33:d4:a5:dd:25:42:3d:26:0b:db:0d:30:a9:39:aa:15:a9:8b: ce:64:5f:b6:a9:d9:80:ae:2b:11:d0:b3:2b:fb:f9:5d:f8:25: 04:ba:ce:e0:45:4e:f3:19:ec:3b:1f:2a:d0:df:0c:0b:83:d2: 53:87:7d:10:3b:21:0e:19:ff:da:ae:83:5f:5b:54:03:30:fb: fc:bc:0c:7e:31:d0:ab:c4:ea:2d:19:c9:0d:91:d3:51:2b:b6: 65:38:e6:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQGDpam2v3t9bcXrGQjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NDI5YWRhYzQ0MGMwNjM3MzIwNDVkYWViY2MzZDkxNTJl MzVjYmIwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD Eyg2NTkyM2ZkMWFiNGZlMmIwZDM5MDMyNjc0NWRhMzY5YmI5MGY4YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gDP7a2bq5DTA5YdBlHonii0puRj yrVHiZzDhEDo70dd40pRmbK9XAatTqI2o/K1PGefmRP5afEUNBt/KrpPP2oDJk9H 1N/kdnk3gwCqTL2icgfEaGUaKZYOul3mywsyr4VVUT1VdT0ePsYUhhhCjUXleHJw l8eEv76kqq7NlDcgZbso4/1em4TYP5up5h4KMg7grcKcN41USrTxz04cK0h50Nqp S4G4NT/ueeJQz46rG494j7JiW1gmBU+P4D9tb1sj6lMMVxn55y/hzFSpuo9NWOdK 1PKSFRaiMG3tT0K7VKh+w6tXTStZiF7C0SJIzyc2U9cJAX0VMvhhRvUmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWSP9GrT+Kw05AyZ0XaNpu5D4tlMB8GA1UdIwQY MBaAFElCmtrEQMBjcyBF2uvMPZFS41y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMt ZWE5NDVkNjA0YjBlLzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS80ODA4ZDctOGVmYi00MjE5LThmZTMtZWE5NDVkNjA0YjBl LzEvU1VLYTJzUkF3R056SUVYYTY4dzlrVkxqWExzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2SBlDkEs kq77TFrA/itbOIPmv8ljxCG7gNAP2N+laS+Sgh7zFsL02ncT/+YNtxddl6IiQk5s e0QW1M8sOBMVJL/YLzUFwAKIyZrjfHyzfhejl2aedo1/9uPoAZRSuFcV8TWov4eK OXWSyflzNIBGxVpGolAuHL31hlz/tQ5OlK9T3BEO2bkD1N0JB1NC7oglHZ6Ov8Ri buOSsTBQwol1l7zfM9Sl3SVCPSYL2w0wqTmqFamLzmRftqnZgK4rEdCzK/v5Xfgl BLrO4EVO8xnsOx8q0N8MC4PSU4d9EDshDhn/2q6DX1tUAzD7/LwMfjHQq8TqLRnJ DZHTUSu2ZTjmWw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:52 2025 by rpki-client