This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json) Hash identifier: 4ba9+8iF5jxjV4xDLje4o3zMOk9SW2BkwnldHbQ8lJo= Subject key identifier: DA:85:7A:D0:F8:42:44:55:5B:4F:77:AE:D3:4D:9D:F7:A7:4B:14:23 Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62 Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62 Certificate serial: 019B2EFB5485B42B05774D344385C2CFA5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 01:03:01 +0000 Manifest this update: Thu 18 Dec 2025 01:03:01 +0000 Manifest next update: Fri 19 Dec 2025 01:03:01 +0000 Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=) 2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: 3oKC4ub5mWpB+pTFxK4uwT+DQWQkMW7Q/fhlOEwK0CQ=) 3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fb:54:85:b4:2b:05:77:4d:34:43:85:c2:cf:a5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62 Validity Not Before: Dec 18 01:03:01 2025 GMT Not After : Dec 19 01:03:01 2025 GMT Subject: CN=da857ad0f84244555b4f77aed34d9df7a74b1423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:37:1d:f2:fe:9e:38:7c:c9:54:3e:33:e6: 9e:e2:b8:e3:db:16:cc:8a:4f:fe:72:6d:35:7d:50: 90:c3:ec:16:c9:fe:0e:ea:40:c4:95:69:d6:f6:c4: 48:6c:0f:07:19:76:b0:47:54:83:4e:f0:fa:17:52: 72:5b:6c:24:12:cf:de:41:e6:36:ee:4f:c1:9f:4e: 89:a0:7e:04:78:98:b2:45:aa:90:3c:69:09:fa:40: 83:2c:d1:e1:e3:23:37:7c:92:ff:cc:02:05:a0:58: 65:ea:70:34:56:6e:03:96:55:c3:f0:bd:d8:40:1d: 9f:66:e4:8c:26:73:67:1e:ce:5d:67:ca:a6:e0:0f: d9:bc:31:b8:b2:73:69:76:b4:c4:e3:b6:3c:bd:38: a8:d8:d7:15:aa:19:a0:20:82:e4:66:12:1c:6d:53: 6a:8b:36:18:d8:44:60:61:d4:9d:27:36:b5:a6:ce: 04:47:05:9e:c4:9a:f5:8e:60:c9:ce:35:bd:6f:a2: 4e:e7:5d:c1:dd:23:7a:11:c4:89:76:10:24:e2:18: b7:e7:b8:f8:ac:24:c6:73:27:80:db:55:9a:5e:86: c2:6c:51:0f:9b:cf:5b:a2:31:ae:6c:4d:b7:90:7f: 2f:68:78:f7:c9:9b:0e:e1:5d:8f:75:96:de:f8:55: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:7A:D0:F8:42:44:55:5B:4F:77:AE:D3:4D:9D:F7:A7:4B:14:23 X509v3 Authority Key Identifier: keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:80:4c:50:cd:25:fa:f9:89:ee:33:d5:28:d8:cf:64:2b:c6: 71:5e:46:fa:4f:dc:49:06:93:9a:ca:41:4e:50:cd:c2:e4:32: 2b:a0:1e:3d:ca:24:2e:ba:30:ce:d5:f1:39:b2:4d:95:51:6a: 75:f8:2f:5c:f6:78:61:55:6e:38:7a:20:51:ef:aa:b9:f1:8f: 94:80:85:af:8b:69:13:d7:58:0c:d6:38:09:8f:ea:77:b3:28: 59:d1:b0:bd:75:46:91:d8:59:5d:85:c9:ba:4b:ed:38:21:0a: 81:e1:23:09:00:9f:2e:5c:5d:b7:50:4e:c4:7c:56:96:89:8d: be:5e:39:b8:03:81:e1:71:1b:2f:05:6e:07:39:9c:2f:de:d1: 87:9b:18:f2:24:4c:d8:14:8b:78:c1:2b:b7:f5:7d:b0:13:7e: e0:63:ee:5c:d0:19:7f:c0:b3:99:73:6d:b9:0e:c9:38:6e:63: 5d:bd:e2:15:8e:e7:63:a7:40:9e:fd:e7:e6:83:4f:6d:ab:cd: 05:bf:29:6a:df:22:66:e5:54:a5:1c:d2:11:b4:70:24:2c:19: ad:dc:b2:6a:cb:c3:72:3b:c4:f9:ec:40:31:04:6a:35:08:5e: 62:15:c6:83:01:a5:3a:76:70:11:f4:39:b5:70:74:a6:47:b1: 92:d4:00:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+1SFtCsFd000Q4XCz6X0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNGFhYTliMDg0ODY0ZjQ0YmFlMThiYTA3NmIyNjA2Nzc1 NGZiNjIwHhcNMjUxMjE4MDEwMzAxWhcNMjUxMjE5MDEwMzAxWjAzMTEwLwYDVQQD EyhkYTg1N2FkMGY4NDI0NDU1NWI0Zjc3YWVkMzRkOWRmN2E3NGIxNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6M3HfL+njh8yVQ+M+ae4rjj2xbM ik/+cm01fVCQw+wWyf4O6kDElWnW9sRIbA8HGXawR1SDTvD6F1JyW2wkEs/eQeY2 7k/Bn06JoH4EeJiyRaqQPGkJ+kCDLNHh4yM3fJL/zAIFoFhl6nA0Vm4DllXD8L3Y QB2fZuSMJnNnHs5dZ8qm4A/ZvDG4snNpdrTE47Y8vTio2NcVqhmgIILkZhIcbVNq izYY2ERgYdSdJza1ps4ERwWexJr1jmDJzjW9b6JO513B3SN6EcSJdhAk4hi357j4 rCTGcyeA21WaXobCbFEPm89bojGubE23kH8vaHj3yZsO4V2PdZbe+FXCMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqFetD4QkRVW093rtNNnfenSxQjMB8GA1UdIwQY MBaAFLFKqpsISGT0S64YugdrJgZ3VPtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEt NThmYWEyN2U1NTQ5LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEtNThmYWEyN2U1NTQ5 LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIBMUM0l +vmJ7jPVKNjPZCvGcV5G+k/cSQaTmspBTlDNwuQyK6AePcokLrowztXxObJNlVFq dfgvXPZ4YVVuOHogUe+qufGPlICFr4tpE9dYDNY4CY/qd7MoWdGwvXVGkdhZXYXJ ukvtOCEKgeEjCQCfLlxdt1BOxHxWlomNvl45uAOB4XEbLwVuBzmcL97Rh5sY8iRM 2BSLeMErt/V9sBN+4GPuXNAZf8CzmXNtuQ7JOG5jXb3iFY7nY6dAnv3n5oNPbavN Bb8pat8iZuVUpRzSEbRwJCwZrdyyasvDcjvE+exAMQRqNQheYhXGgwGlOnZwEfQ5 tXB0pkexktQAug== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:30 2025 by rpki-client