This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json) Hash identifier: jNrIdzJ/n8/b4SK7GBNqsPHfkZWSthW2mMIkIYrdD4A= Subject key identifier: 63:BB:1C:80:ED:44:B6:DF:FC:CB:F3:E1:7A:0C:41:BA:71:06:EA:42 Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Certificate serial: 019AF5E6459FCA057B38F4CC2CC604726627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft Manifest number: 15E2 Signing time: Sat 06 Dec 2025 23:01:40 +0000 Manifest this update: Sat 06 Dec 2025 23:01:40 +0000 Manifest next update: Sun 07 Dec 2025 23:01:40 +0000 Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: AaPAsu1F8SqyAfnpQPKOMwhsStraIol5hYribPjqQUA=) 2: nP21AC5prEFloL4b-rvpds4zVIk.roa (hash: uwmza4+iHSYo9L5fLNkaMpr9S0IJA2DNF48xVtFHmFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:45:9f:ca:05:7b:38:f4:cc:2c:c6:04:72:66:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Validity Not Before: Dec 6 23:01:40 2025 GMT Not After : Dec 7 23:01:40 2025 GMT Subject: CN=63bb1c80ed44b6dffccbf3e17a0c41ba7106ea42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:07:72:16:b8:af:ae:7c:ef:54:d6:db:fa: 3e:4c:7c:26:b6:9e:d1:40:1c:b6:5e:56:a2:d1:0c: c3:a0:e5:f4:79:94:e6:9b:b7:f3:93:dd:4a:57:8f: 60:86:c5:46:88:f2:53:14:4f:c4:d3:56:f7:bb:4a: da:2c:6f:a1:7b:84:18:45:9f:20:a8:54:49:2d:f8: 68:4f:0e:4c:b7:75:0c:5c:a6:5e:6e:62:58:c2:6d: a9:83:77:4b:d1:36:55:60:40:9b:1f:4f:c0:cc:e8: 58:d4:4c:f5:c3:63:ca:08:a8:40:19:be:41:fc:45: 79:88:55:4b:b0:06:e6:6e:40:ba:31:7c:a3:b3:4f: bd:ea:65:23:21:51:b9:12:7c:02:64:a6:63:b2:c8: ab:06:62:f7:cc:bb:c0:31:86:9c:df:34:d0:3b:48: 3c:e4:a6:cb:35:66:78:cd:34:19:6b:e2:72:1e:77: 20:c1:74:ea:d6:87:96:99:04:46:09:58:3c:7a:2f: 5e:1b:f5:e2:25:aa:e8:4e:c3:eb:dc:cc:2d:e1:b1: b6:33:c4:a8:82:03:15:ed:86:95:cd:79:d9:f8:d1: be:c9:9b:47:16:20:39:41:91:b2:2a:68:00:b1:d1: 68:c8:6d:e4:44:e3:88:bb:69:07:a4:b4:0d:8c:84: 61:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BB:1C:80:ED:44:B6:DF:FC:CB:F3:E1:7A:0C:41:BA:71:06:EA:42 X509v3 Authority Key Identifier: keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b3:03:17:a7:c7:a6:ff:67:6f:6d:26:71:7d:0c:0e:b2:2e: a8:17:50:80:4b:b6:48:9a:b2:3a:fe:50:f8:14:68:d5:e5:d3: 80:6c:fe:e2:ce:f7:ba:01:39:a9:df:ec:fe:17:d0:a1:46:1b: 32:1b:9a:d4:a1:3c:b2:61:4f:c4:fd:92:c9:41:95:43:56:f5: 28:54:ef:02:ac:ac:41:7c:02:4b:9e:39:10:48:70:4b:8e:36: f7:e0:0f:3f:df:f2:ac:ba:e4:6c:ed:cf:f5:92:d8:2d:a2:70: c8:6b:f9:d3:63:22:5d:26:8f:62:ba:3f:b5:2c:c0:48:26:fb: 1b:ec:13:62:dd:0f:b7:9e:ae:45:e6:c5:43:95:eb:fd:0e:b2: 69:72:e7:1e:77:3b:b5:b7:51:51:43:6b:7c:a2:a9:19:1d:6f: 64:b1:87:9c:e0:38:f8:be:bd:d0:0f:ad:f3:b8:8d:92:e9:7a: 29:fb:c1:8b:f6:5f:8c:09:8a:62:7e:a8:2e:b8:01:98:61:cd: e8:15:c3:7f:82:ec:c4:97:14:d4:49:d7:b6:90:f4:1c:47:89: b2:8f:89:82:2f:08:f7:cc:43:13:d8:db:15:fd:f4:60:f2:bf: 5c:09:93:87:92:8d:e0:94:ec:c5:c1:bd:46:b6:85:d9:38:70: 15:03:13:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15kWfygV7OPTMLMYEcmYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZThkMDg5MDlkMTg1YWY0MWQwYTBjM2JlNWVhMjhjMzUy ZjAyMjYwHhcNMjUxMjA2MjMwMTQwWhcNMjUxMjA3MjMwMTQwWjAzMTEwLwYDVQQD Eyg2M2JiMWM4MGVkNDRiNmRmZmNjYmYzZTE3YTBjNDFiYTcxMDZlYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkgHcha4r65871TW2/o+THwmtp7R QBy2Xlai0QzDoOX0eZTmm7fzk91KV49ghsVGiPJTFE/E01b3u0raLG+he4QYRZ8g qFRJLfhoTw5Mt3UMXKZebmJYwm2pg3dL0TZVYECbH0/AzOhY1Ez1w2PKCKhAGb5B /EV5iFVLsAbmbkC6MXyjs0+96mUjIVG5EnwCZKZjssirBmL3zLvAMYac3zTQO0g8 5KbLNWZ4zTQZa+JyHncgwXTq1oeWmQRGCVg8ei9eG/XiJaroTsPr3Mwt4bG2M8So ggMV7YaVzXnZ+NG+yZtHFiA5QZGyKmgAsdFoyG3kROOIu2kHpLQNjIRheQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO7HIDtRLbf/Mvz4XoMQbpxBupCMB8GA1UdIwQY MBaAFEro0IkJ0YWvQdCgw75eoow1LwImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUt OTQyNTg1NmVjNTQyLzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUtOTQyNTg1NmVjNTQy LzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrMDF6fH pv9nb20mcX0MDrIuqBdQgEu2SJqyOv5Q+BRo1eXTgGz+4s73ugE5qd/s/hfQoUYb Mhua1KE8smFPxP2SyUGVQ1b1KFTvAqysQXwCS545EEhwS4429+APP9/yrLrkbO3P 9ZLYLaJwyGv502MiXSaPYro/tSzASCb7G+wTYt0Pt56uRebFQ5Xr/Q6yaXLnHnc7 tbdRUUNrfKKpGR1vZLGHnOA4+L690A+t87iNkul6KfvBi/ZfjAmKYn6oLrgBmGHN 6BXDf4LsxJcU1EnXtpD0HEeJso+Jgi8I98xDE9jbFf30YPK/XAmTh5KN4JTsxcG9 RraF2ThwFQMTQg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:01 2025 by rpki-client