This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json) Hash identifier: zp0l56YfsZW9Dgcr+ct968pX+aF6f15qDDIelstGXf8= Subject key identifier: 12:C3:79:16:7A:5D:40:AC:F4:51:28:92:DC:AD:91:E0:F1:67:37:F0 Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Certificate serial: 019AF3F816DBDD09E8C56E44F1D73180222A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft Manifest number: 15E1 Signing time: Sat 06 Dec 2025 14:01:53 +0000 Manifest this update: Sat 06 Dec 2025 14:01:53 +0000 Manifest next update: Sun 07 Dec 2025 14:01:53 +0000 Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: ZVsW0FzsO9C9ObkTDxBIZF6wDeNOds4BrrdvfRc0LfQ=) 2: nP21AC5prEFloL4b-rvpds4zVIk.roa (hash: uwmza4+iHSYo9L5fLNkaMpr9S0IJA2DNF48xVtFHmFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:16:db:dd:09:e8:c5:6e:44:f1:d7:31:80:22:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226 Validity Not Before: Dec 6 14:01:53 2025 GMT Not After : Dec 7 14:01:53 2025 GMT Subject: CN=12c379167a5d40acf4512892dcad91e0f16737f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:e9:f5:79:4b:8d:40:28:79:db:44:8a:58: 9d:e2:36:67:a8:07:58:27:e7:32:de:e1:a3:83:73: 55:7f:42:96:2c:9b:3e:11:23:41:ad:ab:f1:57:87: 35:a2:ae:92:81:54:16:a8:cc:3e:40:56:9d:6d:79: 10:8e:6a:15:b3:d0:7b:e0:6c:d9:ce:da:21:18:5c: ca:57:40:5c:5b:3e:2e:da:ee:31:b3:5a:fc:db:19: 83:2a:99:65:69:db:16:2a:2c:79:ff:bb:8e:bc:fe: 96:1c:ab:ae:75:81:32:bc:65:bc:1a:8c:d3:ba:fb: df:53:30:7a:bd:d5:11:d0:e7:f7:e1:25:4e:56:1f: d6:f2:53:bc:80:94:5c:03:bb:54:6c:c1:be:1f:6c: 31:96:99:49:e5:9b:11:2c:d7:65:25:01:17:74:3d: c6:42:e2:ff:be:0c:6d:eb:8a:fe:b4:36:3a:dc:f1: 65:db:60:68:12:c2:95:80:00:07:5b:f8:da:28:a5: a1:ea:88:43:3d:73:60:f1:d8:fc:f7:0e:df:5e:1e: 3c:f9:bb:aa:64:57:31:f6:4b:c4:d7:12:c9:df:8f: 6b:8c:c1:2c:42:97:74:4b:ad:a0:bb:79:ff:88:36: 38:bb:43:18:45:7b:fd:bf:1b:7f:a4:72:8e:af:02: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C3:79:16:7A:5D:40:AC:F4:51:28:92:DC:AD:91:E0:F1:67:37:F0 X509v3 Authority Key Identifier: keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:b6:de:d1:b3:9a:6a:80:cc:18:78:10:b5:13:8f:08:c2: 7f:79:f5:4b:24:09:02:7b:37:5f:7f:d1:e0:13:fd:d2:34:dc: bc:5b:83:2c:85:64:4f:1f:19:7e:03:7b:45:7e:a3:ad:96:f0: 22:64:72:f7:99:9a:25:2a:7a:e1:62:e1:ef:bd:43:04:70:d7: 11:88:e0:00:3b:73:6c:a9:11:b5:b8:89:4d:b8:88:e6:ca:4d: 88:6c:b2:9f:83:7a:a1:e3:46:04:e3:4b:78:ba:64:8a:a4:73: a2:8c:cd:ff:f3:22:e3:a5:46:e2:d4:69:55:7b:c9:b5:02:01: b5:c4:ac:3a:ff:7c:84:2a:87:7c:47:96:a1:a9:97:08:56:a8: 6c:05:b8:cd:bf:93:dc:ad:88:b6:15:39:02:35:f8:d3:dc:b4: fc:07:92:68:ac:b0:68:6f:f5:27:6c:33:41:cc:0d:2c:e5:e6: 37:4c:38:94:2e:2e:28:78:50:4d:ec:d5:6c:59:63:5d:b4:9d: f5:a0:e1:5a:47:98:48:be:7d:d6:f7:b6:a8:73:21:6f:b9:ae: e4:19:3d:ce:13:60:57:f6:a3:4b:d4:9c:f5:36:90:26:e2:db: 0d:ca:c2:89:26:7b:89:df:b4:f8:af:07:1f:74:d7:a7:fd:12: 96:f3:2b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+Bbb3QnoxW5E8dcxgCIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZThkMDg5MDlkMTg1YWY0MWQwYTBjM2JlNWVhMjhjMzUy ZjAyMjYwHhcNMjUxMjA2MTQwMTUzWhcNMjUxMjA3MTQwMTUzWjAzMTEwLwYDVQQD EygxMmMzNzkxNjdhNWQ0MGFjZjQ1MTI4OTJkY2FkOTFlMGYxNjczN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ejp9XlLjUAoedtEilid4jZnqAdY J+cy3uGjg3NVf0KWLJs+ESNBravxV4c1oq6SgVQWqMw+QFadbXkQjmoVs9B74GzZ ztohGFzKV0BcWz4u2u4xs1r82xmDKplladsWKix5/7uOvP6WHKuudYEyvGW8GozT uvvfUzB6vdUR0Of34SVOVh/W8lO8gJRcA7tUbMG+H2wxlplJ5ZsRLNdlJQEXdD3G QuL/vgxt64r+tDY63PFl22BoEsKVgAAHW/jaKKWh6ohDPXNg8dj89w7fXh48+buq ZFcx9kvE1xLJ349rjMEsQpd0S62gu3n/iDY4u0MYRXv9vxt/pHKOrwKEcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLDeRZ6XUCs9FEoktytkeDxZzfwMB8GA1UdIwQY MBaAFEro0IkJ0YWvQdCgw75eoow1LwImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUt OTQyNTg1NmVjNTQyLzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80MTQ0NmItZTQ5YS00YWU3LTgxZTUtOTQyNTg1NmVjNTQy LzEvU3VqUWlRblJoYTlCMEtERHZsNmlqRFV2QWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9G23tGz mmqAzBh4ELUTjwjCf3n1SyQJAns3X3/R4BP90jTcvFuDLIVkTx8ZfgN7RX6jrZbw ImRy95maJSp64WLh771DBHDXEYjgADtzbKkRtbiJTbiI5spNiGyyn4N6oeNGBONL eLpkiqRzoozN//Mi46VG4tRpVXvJtQIBtcSsOv98hCqHfEeWoamXCFaobAW4zb+T 3K2IthU5AjX409y0/AeSaKywaG/1J2wzQcwNLOXmN0w4lC4uKHhQTezVbFljXbSd 9aDhWkeYSL591ve2qHMhb7mu5Bk9zhNgV/ajS9Sc9TaQJuLbDcrCiSZ7id+0+K8H H3TXp/0SlvMrhw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:14 2025 by rpki-client