This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json) Hash identifier: hyW4T3BhnQ4Bpno+dMsWIIveWx/RvFwKBdSOman/aYE= Subject key identifier: 74:07:C3:4B:84:7D:2D:FC:5F:37:A9:22:56:95:62:47:09:03:84:94 Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1 Certificate serial: 019B0E92AEC43CF1CC551AE3628D541D09B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft Manifest number: 0B74 Signing time: Thu 11 Dec 2025 18:00:52 +0000 Manifest this update: Thu 11 Dec 2025 18:00:52 +0000 Manifest next update: Fri 12 Dec 2025 18:00:52 +0000 Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: 9Swl2Vzaf3HcN5K9kNW3s6JmBAn0phbiglCh2Z13LNU=) 2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:ae:c4:3c:f1:cc:55:1a:e3:62:8d:54:1d:09:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1 Validity Not Before: Dec 11 18:00:52 2025 GMT Not After : Dec 12 18:00:52 2025 GMT Subject: CN=7407c34b847d2dfc5f37a9225695624709038494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:a7:be:85:ee:a3:45:62:b5:46:b2:c9:c9: 87:74:79:ce:12:a2:1d:32:e7:81:4f:0d:aa:c8:ee: cc:6e:2f:90:50:30:85:60:c6:9a:0d:be:e0:00:2f: 2c:6d:3d:5c:c6:e4:f5:6d:7f:51:08:8b:f9:bc:f9: cb:be:51:ab:81:3a:70:94:56:a6:bf:b0:80:b2:65: 8c:74:f5:5c:49:75:dd:95:01:bf:b5:17:f6:fb:41: 8e:a5:cd:93:7b:ef:73:00:f8:e3:35:7e:cc:2a:df: 98:2b:7b:cc:65:eb:89:c3:3b:88:9c:32:1a:74:49: 11:1c:28:de:e2:1b:e4:c1:3c:89:92:c6:7f:07:ce: a1:06:67:d0:09:36:97:cd:9c:79:5e:7f:89:08:9a: 18:0f:06:2d:35:63:15:2f:fb:27:8b:d9:f2:14:b9: 55:58:12:19:11:8b:47:d8:66:17:ca:2b:2d:31:21: 7a:81:bb:54:30:ab:75:4a:17:0a:26:64:8c:26:ae: f1:a6:42:71:55:ff:44:15:6d:9a:a0:62:e0:5f:55: 87:de:f0:22:75:a5:9a:13:ef:5a:ce:57:d5:34:38: 53:85:be:4c:2b:eb:6e:09:96:9b:f7:b9:55:0c:be: 02:30:23:b4:82:63:87:d2:5f:7e:b6:28:04:b6:49: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:07:C3:4B:84:7D:2D:FC:5F:37:A9:22:56:95:62:47:09:03:84:94 X509v3 Authority Key Identifier: keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:46:3f:95:7f:d3:13:1a:1e:4b:11:37:26:de:9a:05:f9:27: 14:cb:5d:f7:47:19:99:27:b6:17:ab:7a:ef:5c:af:24:26:0b: db:5b:d8:a5:8e:47:7b:48:3d:f4:39:d3:98:51:18:77:fc:09: 6b:ce:b5:f7:f0:e6:2c:5f:86:78:44:1d:94:9e:4b:ef:a9:e3: d3:a4:9c:6f:2c:89:0c:5c:83:29:cf:43:b4:d1:15:50:d2:72: 49:ef:86:bd:ef:41:2d:b5:49:76:9a:0c:3d:c8:31:2a:68:cd: e7:d1:7e:a6:20:1d:50:c8:10:2c:91:95:77:f8:13:4d:b1:3b: 0f:eb:94:c6:90:6a:0f:3d:62:f1:3a:06:3e:cc:3e:4c:f2:9f: 3d:38:d7:32:bc:28:de:77:16:54:16:87:0b:bc:a3:27:34:41: 6a:a7:b3:4d:80:83:7e:50:23:2a:34:04:2f:e2:0a:44:f5:cf: ff:ea:d8:fd:ee:33:28:74:a0:5c:02:6f:30:0d:e2:b4:e0:69: 16:2a:9f:ce:42:dd:8e:4b:65:df:7f:9a:f9:bd:40:d1:a8:90: f7:42:57:6f:df:6c:14:e5:e8:f1:bf:89:71:92:36:0e:21:d9: 03:20:59:37:3a:81:70:c2:7f:23:d2:c4:ef:93:e1:0c:b5:c3: d0:ff:ba:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkq7EPPHMVRrjYo1UHQm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWJkNDU0M2RmMjlkYTY0ZTQyMzJlZjM3OTFmNTM0NTcz YzEyZjEwHhcNMjUxMjExMTgwMDUyWhcNMjUxMjEyMTgwMDUyWjAzMTEwLwYDVQQD Eyg3NDA3YzM0Yjg0N2QyZGZjNWYzN2E5MjI1Njk1NjI0NzA5MDM4NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxSnvoXuo0VitUayycmHdHnOEqId MueBTw2qyO7Mbi+QUDCFYMaaDb7gAC8sbT1cxuT1bX9RCIv5vPnLvlGrgTpwlFam v7CAsmWMdPVcSXXdlQG/tRf2+0GOpc2Te+9zAPjjNX7MKt+YK3vMZeuJwzuInDIa dEkRHCje4hvkwTyJksZ/B86hBmfQCTaXzZx5Xn+JCJoYDwYtNWMVL/sni9nyFLlV WBIZEYtH2GYXyistMSF6gbtUMKt1ShcKJmSMJq7xpkJxVf9EFW2aoGLgX1WH3vAi daWaE+9azlfVNDhThb5MK+tuCZab97lVDL4CMCO0gmOH0l9+tigEtknwtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQHw0uEfS38XzepIlaVYkcJA4SUMB8GA1UdIwQY MBaAFErr1FQ98p2mTkIy7zeR9TRXPBLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYt ZDAwMzA2M2FlNWJiLzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYtZDAwMzA2M2FlNWJi LzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUY/lX/T ExoeSxE3Jt6aBfknFMtd90cZmSe2F6t671yvJCYL21vYpY5He0g99DnTmFEYd/wJ a8619/DmLF+GeEQdlJ5L76nj06ScbyyJDFyDKc9DtNEVUNJySe+Gve9BLbVJdpoM PcgxKmjN59F+piAdUMgQLJGVd/gTTbE7D+uUxpBqDz1i8ToGPsw+TPKfPTjXMrwo 3ncWVBaHC7yjJzRBaqezTYCDflAjKjQEL+IKRPXP/+rY/e4zKHSgXAJvMA3itOBp FiqfzkLdjktl33+a+b1A0aiQ90JXb99sFOXo8b+JcZI2DiHZAyBZNzqBcMJ/I9LE 75PhDLXD0P+6kQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:10 2025 by rpki-client