This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json) Hash identifier: l1FIifFq3Y/Pg05poJtllZI2WVYqSxE12AoJirkrhFI= Subject key identifier: 5E:C8:A1:DC:7E:ED:41:92:53:EB:38:D6:EB:C4:20:A0:70:40:20:43 Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20 Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20 Certificate serial: 019B3532F1B7D82080A499BD0E4DA776EEF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 06:01:29 +0000 Manifest this update: Fri 19 Dec 2025 06:01:29 +0000 Manifest next update: Sat 20 Dec 2025 06:01:29 +0000 Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=) 2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: lCVcSPvBTeO20viV3CqTASfkLAwa6Tc8xMF0kPvYMFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:f1:b7:d8:20:80:a4:99:bd:0e:4d:a7:76:ee:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20 Validity Not Before: Dec 19 06:01:29 2025 GMT Not After : Dec 20 06:01:29 2025 GMT Subject: CN=5ec8a1dc7eed419253eb38d6ebc420a070402043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:3e:7d:22:ae:97:fb:2a:38:48:14:79:31: 09:41:3a:ee:3e:04:11:12:2b:f8:f7:3d:51:34:8f: 50:cc:e9:d0:89:c5:f8:a7:5f:e6:e4:2a:a0:2e:2a: 21:07:58:51:9b:95:84:c3:0e:8e:85:d9:a4:00:21: 53:89:ae:f8:ff:24:15:12:fc:f5:0d:a0:16:05:8e: 8b:61:79:ff:9e:41:28:8a:a1:cc:3a:3b:08:0d:fa: d6:17:24:3b:65:2d:14:8a:b0:65:5b:25:37:b3:60: 10:31:fc:29:d6:f0:3b:94:a7:b9:46:ef:c8:69:d1: b8:a4:b2:e3:e8:21:03:91:66:37:30:c6:47:30:0f: a2:33:ba:b3:03:4d:10:99:b1:78:6a:2b:5a:11:9f: 15:74:4a:3e:2f:7c:d3:f5:da:f5:39:fc:5e:dd:0a: ff:8e:1c:f2:18:c1:d6:27:82:b1:ca:2f:13:ca:ba: 21:32:35:92:24:f8:25:51:99:ca:94:dc:94:5f:9b: df:bf:5a:43:08:d8:b9:f5:3e:f3:cc:bc:27:8a:81: 71:54:0d:92:3c:cb:e2:6b:4d:98:bb:3b:05:f0:ec: 3e:d7:4e:0b:7f:ad:ff:bb:3b:68:df:56:b6:b0:74: be:f3:26:6d:da:6e:13:3c:40:3c:44:bf:e7:79:40: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C8:A1:DC:7E:ED:41:92:53:EB:38:D6:EB:C4:20:A0:70:40:20:43 X509v3 Authority Key Identifier: keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:d8:6e:84:7a:d7:cd:ae:8b:08:8d:07:82:cc:bc:8f:9d: 2f:56:b0:2b:5d:99:dc:fe:65:6f:4e:7a:b2:b7:fc:bd:6f:8b: 40:0c:3a:73:11:a0:44:dc:0d:99:96:b6:ee:9b:79:d5:7a:05: 35:d8:d7:20:cc:9c:05:96:97:89:45:5c:76:5c:33:f1:c8:d3: 8a:cd:b2:5d:0a:e6:0d:c7:cb:44:09:18:ee:91:88:56:bb:ba: 9c:2c:1e:39:08:fe:57:cc:c4:3c:4e:5a:5a:b9:24:2b:da:e9: 67:78:4c:be:cb:e2:33:7a:7d:ef:eb:44:c4:14:65:1f:dd:3d: 11:b1:91:75:94:de:85:b7:ca:35:c1:5a:d7:01:06:f2:b5:8c: b3:17:db:d2:b3:76:60:35:cf:de:6d:33:9f:9e:47:0d:e6:67: 7e:11:00:3f:cf:14:a0:f8:29:1a:a2:44:95:bb:72:90:33:5a: c3:e6:a6:a2:c4:26:26:20:41:50:f1:25:f5:44:b2:f7:9e:1b: 75:d9:44:d5:4b:d1:fe:70:1f:f4:b1:18:e1:13:44:f0:93:82: 9c:fd:51:01:3e:46:74:c6:84:27:ce:4a:68:5d:5b:0f:39:b4: 76:3e:b1:86:da:ae:96:b1:20:61:14:f3:5e:d3:50:0f:7a:5c: 1e:63:66:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MvG32CCApJm9Dk2ndu7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWZjZmVkNTFmZjE1OGZiZTY4Y2NkNjBiN2IzOWJlNWYz ZWFlMjAwHhcNMjUxMjE5MDYwMTI5WhcNMjUxMjIwMDYwMTI5WjAzMTEwLwYDVQQD Eyg1ZWM4YTFkYzdlZWQ0MTkyNTNlYjM4ZDZlYmM0MjBhMDcwNDAyMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeA+fSKul/sqOEgUeTEJQTruPgQR Eiv49z1RNI9QzOnQicX4p1/m5CqgLiohB1hRm5WEww6OhdmkACFTia74/yQVEvz1 DaAWBY6LYXn/nkEoiqHMOjsIDfrWFyQ7ZS0UirBlWyU3s2AQMfwp1vA7lKe5Ru/I adG4pLLj6CEDkWY3MMZHMA+iM7qzA00QmbF4aitaEZ8VdEo+L3zT9dr1Ofxe3Qr/ jhzyGMHWJ4Kxyi8TyrohMjWSJPglUZnKlNyUX5vfv1pDCNi59T7zzLwnioFxVA2S PMvia02YuzsF8Ow+104Lf63/uzto31a2sHS+8yZt2m4TPEA8RL/neUDgcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7Iodx+7UGSU+s41uvEIKBwQCBDMB8GA1UdIwQY MBaAFErvz+1R/xWPvmjM1gt7Ob5fPq4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0Mzct ZGI2NjcxYWM3NjcyLzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0MzctZGI2NjcxYWM3Njcy LzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMTYboR6 182uiwiNB4LMvI+dL1awK12Z3P5lb056srf8vW+LQAw6cxGgRNwNmZa27pt51XoF NdjXIMycBZaXiUVcdlwz8cjTis2yXQrmDcfLRAkY7pGIVru6nCweOQj+V8zEPE5a WrkkK9rpZ3hMvsviM3p97+tExBRlH909EbGRdZTehbfKNcFa1wEG8rWMsxfb0rN2 YDXP3m0zn55HDeZnfhEAP88UoPgpGqJElbtykDNaw+amosQmJiBBUPEl9USy954b ddlE1UvR/nAf9LEY4RNE8JOCnP1RAT5GdMaEJ85KaF1bDzm0dj6xhtqulrEgYRTz XtNQD3pcHmNmXg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:15:51 2025 by rpki-client