This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json) Hash identifier: 1FK8oOKYhks6eETKmu8FgOO9usQlTtoBAVp8FVM1mig= Subject key identifier: F2:47:66:D9:BA:47:3B:E2:8D:84:AF:AA:8B:A0:52:2D:1B:81:7A:73 Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Certificate serial: 019AF2090D5E6D65D47252459512A952F211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=) 2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=) 3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=) 4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=) 5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=) 6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=) 7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: JSvAIue94e3QcjwEEEgoK1Ci/DKughvdpq6X0HzouUE=) 8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=) 9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0d:5e:6d:65:d4:72:52:45:95:12:a9:52:f2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=f24766d9ba473be28d84afaa8ba0522d1b817a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:24:33:48:3d:44:f9:db:41:9c:86:a0:70: 4b:55:74:d5:e9:1a:41:08:de:c0:8a:7d:3b:43:49: 6e:a0:28:62:67:c3:64:5e:3f:5b:55:30:ad:7a:d6: 7c:90:bf:ef:a1:89:dd:90:b8:e2:f4:9a:8d:b8:d5: 01:ca:45:a1:70:a7:2d:ac:54:2b:f4:1f:65:b8:eb: f6:a3:cb:b5:bd:51:5a:10:d9:77:49:59:78:79:c9: 4e:dc:d7:ae:f7:1d:c6:ff:a3:f8:61:b0:14:a9:5f: 67:8c:ec:e6:a6:14:ea:d3:4f:47:02:76:1f:6c:f9: 5e:2a:4b:45:7f:a8:9c:b1:74:e0:45:22:12:be:a8: 77:2e:74:73:e8:9a:f4:e5:84:3b:e8:e6:fa:6e:87: 6a:fe:3b:9c:15:65:78:3f:5d:10:b3:77:1f:c8:70: 66:42:6a:b7:b3:c9:5b:fa:da:a0:c8:7a:09:ef:fc: 92:06:72:3b:f0:fe:03:85:8f:1c:46:3b:90:d3:93: 64:d4:64:41:4a:91:7c:25:17:85:6e:cd:e6:2a:45: 1e:64:7a:de:80:b2:ba:5e:6b:a8:c8:75:39:1f:82: c0:59:3c:f0:d6:65:f8:2f:c6:fb:a7:e2:00:7b:59: 35:40:c3:68:60:8c:38:5b:4b:6d:06:a1:bf:2c:77: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:47:66:D9:BA:47:3B:E2:8D:84:AF:AA:8B:A0:52:2D:1B:81:7A:73 X509v3 Authority Key Identifier: keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:bd:a3:94:e5:70:9b:72:de:73:d0:69:d5:7a:fd:0f:82:f0: 1d:bb:ab:ae:5a:3d:45:f5:29:61:16:df:1f:1f:bb:7c:6e:ce: 5e:27:fa:45:af:ad:ff:29:07:99:38:e7:5f:9a:d9:d2:5b:bc: 1a:92:99:c6:ce:24:cc:d8:1a:6f:51:76:73:eb:8b:94:e8:75: cd:11:3b:98:1e:b9:b8:77:0b:31:01:82:7e:a7:1b:6c:f7:0f: e1:d4:99:25:6b:fc:12:7b:dd:3f:36:6f:67:7c:fb:0f:bb:92: 54:a8:d5:d5:88:e4:ad:22:ff:68:ea:c1:3a:9b:92:8a:54:8e: bc:ee:82:68:95:30:87:c6:e1:1c:ad:2a:f4:87:4d:f5:7a:21: f3:dc:16:3d:05:92:49:56:ed:7c:c6:ca:3f:47:c0:fa:1c:98: 70:4d:95:63:04:73:52:89:a0:9c:d5:15:c8:41:cb:08:ec:b0: 01:7a:53:a7:d8:19:ae:fa:30:2e:5f:43:ac:2f:2a:fa:f5:59: 4b:e4:43:eb:82:60:87:8a:0c:72:f8:59:fb:de:f1:dc:19:3a: e8:44:08:76:cf:6e:3b:e1:e9:fa:40:94:50:42:ed:9f:b7:bb: cf:2e:02:d7:0a:2a:7f:8d:bd:70:72:59:62:50:2f:b8:a8:6f: 70:9b:eb:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ1ebWXUclJFlRKpUvIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl MTBkNGUwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EyhmMjQ3NjZkOWJhNDczYmUyOGQ4NGFmYWE4YmEwNTIyZDFiODE3YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUckM0g9RPnbQZyGoHBLVXTV6RpB CN7Ain07Q0luoChiZ8NkXj9bVTCtetZ8kL/voYndkLji9JqNuNUBykWhcKctrFQr 9B9luOv2o8u1vVFaENl3SVl4eclO3Neu9x3G/6P4YbAUqV9njOzmphTq009HAnYf bPleKktFf6icsXTgRSISvqh3LnRz6Jr05YQ76Ob6bodq/jucFWV4P10Qs3cfyHBm Qmq3s8lb+tqgyHoJ7/ySBnI78P4DhY8cRjuQ05Nk1GRBSpF8JReFbs3mKkUeZHre gLK6XmuoyHU5H4LAWTzw1mX4L8b7p+IAe1k1QMNoYIw4W0ttBqG/LHdd6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJHZtm6RzvijYSvqougUi0bgXpzMB8GA1UdIwQY MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt MjA1NGQ0ZTkwM2JjLzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAub2jlOVw m3Lec9Bp1Xr9D4LwHburrlo9RfUpYRbfHx+7fG7OXif6Ra+t/ykHmTjnX5rZ0lu8 GpKZxs4kzNgab1F2c+uLlOh1zRE7mB65uHcLMQGCfqcbbPcP4dSZJWv8EnvdPzZv Z3z7D7uSVKjV1YjkrSL/aOrBOpuSilSOvO6CaJUwh8bhHK0q9IdN9Xoh89wWPQWS SVbtfMbKP0fA+hyYcE2VYwRzUomgnNUVyEHLCOywAXpTp9gZrvowLl9DrC8q+vVZ S+RD64Jgh4oMcvhZ+97x3Bk66EQIds9uO+Hp+kCUUELtn7e7zy4C1woqf429cHJZ YlAvuKhvcJvrBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:43 2025 by rpki-client