This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json) Hash identifier: GAV9C0Sd8+o2yEpkJ6AqhI7dq3dNz7WsvSHlo6KyLEY= Subject key identifier: B7:FC:6F:C5:40:5D:4C:EA:B4:49:14:0E:FE:7E:15:79:5C:79:0F:AA Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34 Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34 Certificate serial: 019AF19AAB91B71BEBA94A930D770F6F2E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft Manifest number: 10DD Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: iTo/vc+o9vKQBPZgBlxrUfq4gzk6M8cJyRkqo5RWGUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ab:91:b7:1b:eb:a9:4a:93:0d:77:0f:6f:2e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=b7fc6fc5405d4ceab449140efe7e15795c790faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:39:6e:a5:2e:ba:d0:6c:41:79:f3:d6:06: 03:59:71:a9:c5:73:46:ec:fa:a6:5d:76:78:4f:7e: c7:89:cd:1c:de:16:d2:75:3b:34:38:4b:98:12:e9: 3e:b5:57:13:e1:29:6a:eb:65:66:f4:b3:98:fa:ba: a1:9c:d8:2d:43:ce:4d:15:16:b0:71:20:6b:6f:dc: 05:38:86:61:56:ff:e7:63:cb:45:0c:6c:2f:59:09: 14:63:b7:ba:c6:ff:6e:e7:80:50:10:05:00:77:22: cc:89:ee:0f:5d:98:1c:1a:69:4c:d8:a1:b1:68:29: 6f:ee:16:26:63:fc:d9:17:b9:ff:7f:f3:2a:e2:74: be:a6:84:ee:16:ef:67:bd:10:ce:27:2c:da:6a:c2: 4f:c2:c5:1e:00:cd:fb:b5:c6:73:ac:79:48:70:b9: d3:91:0b:c6:45:b9:1b:28:51:7c:3f:f6:c4:c3:ca: 14:62:cc:f8:7b:a4:d8:99:ae:d0:95:dc:c6:89:18: da:ba:a0:57:a7:80:86:53:4a:4f:8a:1b:6c:51:ab: da:e2:04:df:69:47:d7:17:57:d7:c8:86:65:ab:68: 6a:66:c0:b2:f7:c6:71:f8:47:97:d7:d9:39:a9:43: 2e:25:04:78:76:06:0a:e2:a7:41:f8:d8:48:ee:0d: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FC:6F:C5:40:5D:4C:EA:B4:49:14:0E:FE:7E:15:79:5C:79:0F:AA X509v3 Authority Key Identifier: keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:44:7c:ef:b4:8e:e2:fd:09:7b:93:1d:05:fe:47:14:1e:8e: 06:cc:85:ba:27:fd:9b:b9:fb:9d:e4:91:b5:00:b4:c3:f5:6e: 0e:8e:a9:8d:5f:64:16:14:24:78:7e:6e:7c:01:74:bd:eb:81: 53:af:11:f0:79:9b:86:6d:16:cd:cc:f5:ca:77:77:53:63:dc: 90:7e:9a:64:b9:81:50:97:9b:03:1b:e2:98:4f:01:80:57:3b: f9:a9:e8:9a:6c:fb:9b:1d:d5:20:33:59:b2:6a:3b:02:9a:88: 6d:ea:4d:d8:53:87:ee:65:26:1c:b1:e9:a1:1d:14:78:74:6f: b1:00:66:c7:08:71:fb:7d:b9:c6:1f:81:00:e1:57:6e:eb:0c: a1:2a:b7:64:71:0f:3c:46:96:4f:8a:9a:0a:a5:36:e6:6e:1d: 80:17:8d:0e:3e:a9:00:70:ab:fb:8a:26:ec:d0:e5:31:43:4a: 78:f4:0c:2c:bb:45:1a:85:73:af:64:99:a9:4c:4d:15:bd:18: 91:27:ee:27:d4:db:c6:98:05:7a:ca:b8:87:16:3d:f1:ec:8c: d1:1e:d1:bf:bb:49:5c:f3:06:2f:64:0b:99:7a:5d:1e:b4:d2: 7c:8b:5f:78:54:3d:9c:ac:14:10:92:74:af:13:34:85:7f:d7: f9:5c:09:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmquRtxvrqUqTDXcPby5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDgwODZiOGQxZGM3ZjEwZTM0M2ZkMTY1NzE5MjM5YTc1 NWJkMzQwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD EyhiN2ZjNmZjNTQwNWQ0Y2VhYjQ0OTE0MGVmZTdlMTU3OTVjNzkwZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPE5bqUuutBsQXnz1gYDWXGpxXNG 7PqmXXZ4T37Hic0c3hbSdTs0OEuYEuk+tVcT4Slq62Vm9LOY+rqhnNgtQ85NFRaw cSBrb9wFOIZhVv/nY8tFDGwvWQkUY7e6xv9u54BQEAUAdyLMie4PXZgcGmlM2KGx aClv7hYmY/zZF7n/f/Mq4nS+poTuFu9nvRDOJyzaasJPwsUeAM37tcZzrHlIcLnT kQvGRbkbKFF8P/bEw8oUYsz4e6TYma7QldzGiRjauqBXp4CGU0pPihtsUava4gTf aUfXF1fXyIZlq2hqZsCy98Zx+EeX19k5qUMuJQR4dgYK4qdB+NhI7g1dtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf8b8VAXUzqtEkUDv5+FXlceQ+qMB8GA1UdIwQY MBaAFLFICGuNHcfxDjQ/0WVxkjmnVb00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEt ZTNkNWQ3ZWY0MjMyLzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEtZTNkNWQ3ZWY0MjMy LzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFER877SO 4v0Je5MdBf5HFB6OBsyFuif9m7n7neSRtQC0w/VuDo6pjV9kFhQkeH5ufAF0veuB U68R8Hmbhm0Wzcz1ynd3U2PckH6aZLmBUJebAxvimE8BgFc7+anommz7mx3VIDNZ smo7ApqIbepN2FOH7mUmHLHpoR0UeHRvsQBmxwhx+325xh+BAOFXbusMoSq3ZHEP PEaWT4qaCqU25m4dgBeNDj6pAHCr+4om7NDlMUNKePQMLLtFGoVzr2SZqUxNFb0Y kSfuJ9TbxpgFesq4hxY98eyM0R7Rv7tJXPMGL2QLmXpdHrTSfItfeFQ9nKwUEJJ0 rxM0hX/X+VwJJA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:27 2025 by rpki-client