This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json) Hash identifier: Ad6g12G/1OOUekibaStwuOZuRaqMc3Ldpoit09+93hg= Subject key identifier: 18:7D:A6:EB:ED:18:A2:51:68:55:D3:86:55:F6:31:DA:74:90:44:A9 Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Certificate serial: 019AF0BF7F1FAFBEBB2480F1CA63653C9C11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft Manifest number: 07 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: R1nYkhgd6_jf8Pad1Xet3T1Tp0A.asa (hash: trc6yr/v/EBFjhhDrpsvLCydYdOKVkQopbnggaBE5ZE=) 2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: OZ6U6zxt5PZoIoC1W7BXJPj7qnPtu7+lolKe4neisE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7f:1f:af:be:bb:24:80:f1:ca:63:65:3c:9c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=187da6ebed18a2516855d38655f631da749044a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:92:c0:21:95:1c:a5:76:9f:bc:48:e4:1a: 14:24:19:bd:7c:8c:d3:de:86:61:ee:7a:f8:62:f2: fd:3e:2b:e3:cb:9d:a4:07:cc:cb:8d:9e:76:8e:c4: 5a:e5:bb:6b:7b:72:6d:88:c1:ae:08:43:8a:d4:f6: 21:d6:bd:1c:d4:31:eb:75:75:87:d7:24:20:c2:b2: b0:fb:d5:5c:2f:bf:46:1b:db:86:9d:c9:d6:11:ba: 03:5f:87:ea:bd:e6:f6:6e:b5:8c:35:26:b7:88:82: 23:f8:94:41:2d:b3:81:5d:7f:eb:7e:22:bb:fa:4d: 15:c4:03:dc:3d:e2:c2:45:e3:87:4f:8a:44:cd:ae: 7b:5c:15:9c:b7:31:b7:4b:c6:db:97:a8:54:ee:ef: a6:44:19:4b:bf:10:d4:46:85:8b:a3:d2:f4:33:85: 9b:66:63:47:26:3f:e0:30:5a:fe:4f:83:84:2c:96: 23:d0:a0:33:88:84:8d:b6:51:42:28:cd:d7:b2:dc: 85:1c:75:aa:fc:a4:15:1b:83:09:26:89:6d:d8:30: e8:40:20:a0:96:d6:3b:70:62:9a:22:31:52:85:94: 8c:e7:c3:15:8b:f5:d3:cc:4a:92:8b:02:76:13:bb: f7:79:33:f2:66:5a:dd:ce:80:dc:9b:25:9a:4d:f0: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7D:A6:EB:ED:18:A2:51:68:55:D3:86:55:F6:31:DA:74:90:44:A9 X509v3 Authority Key Identifier: keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ce:ba:51:7d:d2:ca:a0:bf:1c:45:22:6b:b6:2a:e1:48:1d: 16:a6:08:1a:d4:8f:8f:6d:d2:19:a7:b1:52:6e:55:3a:23:08: 72:e4:19:4b:80:b6:70:2e:ad:71:47:fe:df:32:7c:60:93:53: 6f:7a:bd:44:03:9f:e0:be:3e:f3:a2:a4:e6:0f:ba:1d:98:06: 5c:f7:99:3d:eb:87:83:33:e6:46:bd:c6:63:4b:3c:67:65:1b: 71:3f:12:4a:0d:28:d8:b6:8b:9d:9a:65:71:01:3c:fc:0c:ce: 16:5a:d3:68:86:0f:4b:48:06:e7:26:44:a9:74:ea:4c:9e:cb: d8:78:a4:27:6a:b5:5d:91:c6:a4:14:d8:3b:ac:d6:9e:84:7e: 44:c1:ad:41:21:e6:19:c2:38:92:97:ea:24:aa:3a:0c:c3:19: 41:82:4d:d4:21:e5:a1:83:65:07:cf:4e:46:5c:34:46:64:c0: 0a:10:b6:34:44:07:18:7a:a0:20:b8:03:12:bf:8f:42:d8:d8: 95:51:f1:90:42:d8:58:10:7f:69:9b:b1:b7:48:03:32:fd:66: 4d:d3:5a:ba:59:23:4a:73:d2:16:94:99:db:49:5b:78:ca:da: 2d:3a:4a:b4:b3:ec:3f:2d:ef:87:0a:37:80:6d:6b:28:66:c7: e0:3e:7e:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv38fr767JIDxymNlPJwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjUzMmUyOWYyMmZhMjMxZGM2ZmM4ZTUzMGVmYjFjNzYx MTllMGEwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EygxODdkYTZlYmVkMThhMjUxNjg1NWQzODY1NWY2MzFkYTc0OTA0NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZWSwCGVHKV2n7xI5BoUJBm9fIzT 3oZh7nr4YvL9Pivjy52kB8zLjZ52jsRa5btre3JtiMGuCEOK1PYh1r0c1DHrdXWH 1yQgwrKw+9VcL79GG9uGncnWEboDX4fqveb2brWMNSa3iIIj+JRBLbOBXX/rfiK7 +k0VxAPcPeLCReOHT4pEza57XBWctzG3S8bbl6hU7u+mRBlLvxDURoWLo9L0M4Wb ZmNHJj/gMFr+T4OELJYj0KAziISNtlFCKM3XstyFHHWq/KQVG4MJJolt2DDoQCCg ltY7cGKaIjFShZSM58MVi/XTzEqSiwJ2E7v3eTPyZlrdzoDcmyWaTfDvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh9puvtGKJRaFXThlX2Mdp0kESpMB8GA1UdIwQY MBaAFLElMuKfIvojHcb8jlMO+xx2EZ4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2Qt OTMzZWZiZDc3ZjViLzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2QtOTMzZWZiZDc3ZjVi LzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhc66UX3S yqC/HEUia7Yq4UgdFqYIGtSPj23SGaexUm5VOiMIcuQZS4C2cC6tcUf+3zJ8YJNT b3q9RAOf4L4+86Kk5g+6HZgGXPeZPeuHgzPmRr3GY0s8Z2UbcT8SSg0o2LaLnZpl cQE8/AzOFlrTaIYPS0gG5yZEqXTqTJ7L2HikJ2q1XZHGpBTYO6zWnoR+RMGtQSHm GcI4kpfqJKo6DMMZQYJN1CHloYNlB89ORlw0RmTAChC2NEQHGHqgILgDEr+PQtjY lVHxkELYWBB/aZuxt0gDMv1mTdNaulkjSnPSFpSZ20lbeMraLTpKtLPsPy3vhwo3 gG1rKGbH4D5+PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:59 2025 by rpki-client