This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json) Hash identifier: 0d+V0NgCO8ew6tIjOy6kq8rRoGBXumhKMH+SjsRrS4s= Subject key identifier: 5F:FB:0C:81:43:06:88:EA:1B:A7:D1:34:70:F9:DB:3C:36:40:30:BA Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Certificate serial: 019B35323408349E709734E328F4A6C2CCFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 06:00:41 +0000 Manifest this update: Fri 19 Dec 2025 06:00:41 +0000 Manifest next update: Sat 20 Dec 2025 06:00:41 +0000 Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=) 2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=) 3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=) 4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=) 5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: Rg8K84Q1BtXROF77BvHAbbzMnTlws2r2OkKq8e/75+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:34:08:34:9e:70:97:34:e3:28:f4:a6:c2:cc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Validity Not Before: Dec 19 06:00:41 2025 GMT Not After : Dec 20 06:00:41 2025 GMT Subject: CN=5ffb0c81430688ea1ba7d13470f9db3c364030ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:c5:98:fb:f3:bc:b8:76:d5:2a:45:51:f4: 52:87:93:2f:0f:b9:23:dd:b7:c1:62:aa:56:5f:a6: 0a:49:25:2d:4d:31:d3:ec:f9:aa:8b:2b:9e:fa:dd: a4:10:fe:e7:6c:11:60:48:d1:e8:9b:7a:ca:03:5e: 19:9c:7e:b2:2b:04:bb:b3:6a:e5:2d:d5:bf:04:40: ef:1e:72:49:2e:90:81:21:20:98:03:82:ac:cb:80: cc:a0:4b:94:ff:63:ec:be:c5:11:78:1a:49:c7:31: 71:80:9c:95:56:58:13:70:9e:6b:d5:ba:24:19:f2: d2:df:ca:62:56:0a:55:49:38:4e:d2:69:df:b1:d5: 0e:4f:5b:92:0c:8c:f6:86:e1:4b:95:5b:b8:f4:23: dd:28:51:a3:92:76:a7:7c:93:b5:c9:0b:59:fd:8c: b6:ee:ae:3f:78:be:29:a1:f7:61:a0:fd:41:b9:56: 79:c2:10:31:14:a5:d9:e4:ec:8e:98:a6:65:d9:67: a1:c7:0a:02:b3:10:ff:bd:47:a5:10:57:8b:e1:0f: 6a:a4:4d:88:f3:b9:a5:10:f6:61:c2:a5:f6:54:80: 00:cc:4e:61:55:7a:8c:5d:0c:f5:a7:b7:81:b1:84: 60:c5:24:97:fc:bb:2d:52:86:36:22:8e:9f:33:70: 63:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FB:0C:81:43:06:88:EA:1B:A7:D1:34:70:F9:DB:3C:36:40:30:BA X509v3 Authority Key Identifier: keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4e:93:2e:95:11:51:c4:0d:08:b7:b0:5d:95:55:d1:b4:48: 7d:b3:36:10:94:9e:26:59:9d:6d:8b:08:9d:14:f8:dd:a8:78: 65:a5:d7:85:81:63:c0:1c:90:57:7d:0a:a5:19:6d:f4:7f:5c: 7f:1b:f0:16:aa:ee:30:ef:31:91:c4:94:8f:ed:b9:68:61:82: 62:4a:27:bc:a1:30:75:0b:f3:c6:e4:70:02:54:d5:9e:55:ce: 2d:2d:89:c2:ad:a4:98:47:14:f8:20:64:4c:c1:05:61:de:47: 69:77:fd:b2:9c:1b:66:4c:3b:45:03:d4:4f:40:68:9c:70:af: eb:50:89:0d:47:7c:8d:26:7f:2f:2f:b0:37:bc:32:c9:3a:01: b9:bf:cc:23:db:52:45:d4:bd:60:70:ca:02:13:c4:e4:4a:fc: d9:1d:fa:28:d8:56:dc:3e:e5:c4:4c:9f:fc:3d:67:e9:35:cb: 76:51:66:93:d5:da:78:83:59:65:21:b1:d8:bf:3e:15:72:1c: 85:7e:53:86:ef:80:87:b4:53:a1:f3:ea:a6:2c:47:e9:c0:4d: eb:59:83:4a:05:b8:39:a8:8c:15:f9:91:8f:de:ca:43:af:bd: 6c:32:00:2a:91:50:3d:0e:af:68:14:e1:4b:37:d5:cc:4f:35: 52:4f:a0:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MjQINJ5wlzTjKPSmwsz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh ZjgyOTAwHhcNMjUxMjE5MDYwMDQxWhcNMjUxMjIwMDYwMDQxWjAzMTEwLwYDVQQD Eyg1ZmZiMGM4MTQzMDY4OGVhMWJhN2QxMzQ3MGY5ZGIzYzM2NDAzMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswHFmPvzvLh21SpFUfRSh5MvD7kj 3bfBYqpWX6YKSSUtTTHT7Pmqiyue+t2kEP7nbBFgSNHom3rKA14ZnH6yKwS7s2rl LdW/BEDvHnJJLpCBISCYA4Ksy4DMoEuU/2PsvsUReBpJxzFxgJyVVlgTcJ5r1bok GfLS38piVgpVSThO0mnfsdUOT1uSDIz2huFLlVu49CPdKFGjknanfJO1yQtZ/Yy2 7q4/eL4pofdhoP1BuVZ5whAxFKXZ5OyOmKZl2WehxwoCsxD/vUelEFeL4Q9qpE2I 87mlEPZhwqX2VIAAzE5hVXqMXQz1p7eBsYRgxSSX/LstUoY2Io6fM3Bj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/7DIFDBojqG6fRNHD52zw2QDC6MB8GA1UdIwQY MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt NDZiNDZmYzBlNDk2LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2 LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvU6TLpUR UcQNCLewXZVV0bRIfbM2EJSeJlmdbYsInRT43ah4ZaXXhYFjwByQV30KpRlt9H9c fxvwFqruMO8xkcSUj+25aGGCYkonvKEwdQvzxuRwAlTVnlXOLS2Jwq2kmEcU+CBk TMEFYd5HaXf9spwbZkw7RQPUT0BonHCv61CJDUd8jSZ/Ly+wN7wyyToBub/MI9tS RdS9YHDKAhPE5Er82R36KNhW3D7lxEyf/D1n6TXLdlFmk9XaeINZZSGx2L8+FXIc hX5Thu+Ah7RTofPqpixH6cBN61mDSgW4OaiMFfmRj97KQ6+9bDIAKpFQPQ6vaBTh SzfVzE81Uk+gpg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:35:47 2025 by rpki-client