This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json) Hash identifier: BRgj4HcLpNhgaYlw8Byvl5yrWOV2/xjanXV+USveRZM= Subject key identifier: 99:AA:DB:B1:BC:8B:E4:66:29:E0:8C:9F:99:E2:B6:6F:C7:23:A0:A1 Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Certificate serial: 019B446E67472BFEE5A4DDD8284DB0946EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft Manifest number: 171F Signing time: Mon 22 Dec 2025 05:00:44 +0000 Manifest this update: Mon 22 Dec 2025 05:00:44 +0000 Manifest next update: Tue 23 Dec 2025 05:00:44 +0000 Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=) 2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: cjKrAnN3WpD3wi3qqFdUXIcr3R0h4kO1PeK4SV3gtXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:67:47:2b:fe:e5:a4:dd:d8:28:4d:b0:94:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Validity Not Before: Dec 22 05:00:44 2025 GMT Not After : Dec 23 05:00:44 2025 GMT Subject: CN=99aadbb1bc8be46629e08c9f99e2b66fc723a0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a1:45:e9:7b:d2:0d:2a:84:5e:0f:b1:f4:cb: 6d:db:8a:38:d1:ad:a9:0a:a2:5f:53:8f:b0:e0:65: cb:23:25:5d:68:25:bf:66:b6:fa:bf:8d:97:13:56: e0:97:af:93:31:90:c5:59:a6:4c:52:9c:f3:fe:c5: 2b:8f:ba:7e:8b:43:ae:40:90:0d:ed:6d:d4:80:e3: 6e:8d:4b:66:da:f6:20:ad:47:f0:95:b7:c4:fd:8b: 19:81:57:c5:75:a4:a9:dd:ec:47:ce:7c:82:38:53: 5b:94:bb:07:62:a0:e6:4d:7b:bf:83:d1:db:a5:6b: eb:3d:41:fe:6a:a1:91:fb:b2:14:96:a0:d0:18:0c: b0:bc:49:35:bf:af:90:64:2d:c8:6b:da:bd:80:b0: 28:16:0c:a2:ed:44:c8:56:59:0d:05:8a:b2:90:9a: e0:83:6a:e8:62:f8:bc:fc:a9:9c:1b:51:66:59:1e: 84:e9:fa:b0:2c:2f:79:2a:b7:d1:69:3c:2d:cc:b4: a3:92:7e:b7:2f:1d:cc:63:28:34:46:c0:18:a3:b1: 09:28:15:1d:c6:ac:58:40:20:a3:3a:cd:07:4f:af: 30:e8:eb:2c:c1:79:1d:7d:0e:36:f5:88:eb:eb:fe: 4b:58:11:2d:db:86:cc:22:44:9a:28:15:06:ac:14: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AA:DB:B1:BC:8B:E4:66:29:E0:8C:9F:99:E2:B6:6F:C7:23:A0:A1 X509v3 Authority Key Identifier: keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7a:e2:ae:7b:00:a4:70:25:d9:da:0d:23:64:e9:64:27:e6: 1d:a3:a6:13:08:9d:e8:60:12:34:22:ad:0f:21:51:ef:99:df: 87:41:fc:65:47:08:c5:94:ad:85:ff:64:d2:04:d4:b8:41:2f: fb:3c:8b:7a:46:ee:8b:98:ac:f3:0a:49:c3:80:ec:71:b1:72: aa:f1:bc:6b:90:93:3c:58:ec:22:2d:fc:da:fc:d6:04:a6:38: b7:be:c8:98:28:44:cc:90:5a:21:84:4a:77:6e:3b:04:4f:9e: ec:1f:67:a8:69:25:0d:b5:06:7f:2d:a7:cf:d5:e0:56:14:f0: 7f:56:bd:f7:74:1e:ea:b8:ba:6b:21:4d:41:cb:08:eb:5f:de: c4:dd:79:5e:9e:1c:11:46:ac:84:ad:fc:d9:d6:5f:69:6d:bd: 35:ee:6a:ff:e5:3d:c5:cb:44:ff:49:26:66:19:e6:f4:65:67: 17:83:eb:e8:ed:e0:b7:7c:b1:52:8b:53:be:b2:40:77:3a:53: 63:da:71:5d:26:36:ef:0f:70:1c:49:57:05:f5:e3:36:b0:47: 73:40:8a:8d:96:a5:b6:3e:92:ca:51:ce:3f:cc:9a:92:b8:f2: 4b:77:18:d1:65:85:82:df:14:46:8d:12:2d:78:43:42:8a:d4: ab:e2:81:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbmdHK/7lpN3YKE2wlG6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2 NzRmZWIwHhcNMjUxMjIyMDUwMDQ0WhcNMjUxMjIzMDUwMDQ0WjAzMTEwLwYDVQQD Eyg5OWFhZGJiMWJjOGJlNDY2MjllMDhjOWY5OWUyYjY2ZmM3MjNhMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KFF6XvSDSqEXg+x9Mtt24o40a2p CqJfU4+w4GXLIyVdaCW/Zrb6v42XE1bgl6+TMZDFWaZMUpzz/sUrj7p+i0OuQJAN 7W3UgONujUtm2vYgrUfwlbfE/YsZgVfFdaSp3exHznyCOFNblLsHYqDmTXu/g9Hb pWvrPUH+aqGR+7IUlqDQGAywvEk1v6+QZC3Ia9q9gLAoFgyi7UTIVlkNBYqykJrg g2roYvi8/KmcG1FmWR6E6fqwLC95KrfRaTwtzLSjkn63Lx3MYyg0RsAYo7EJKBUd xqxYQCCjOs0HT68w6OsswXkdfQ429Yjr6/5LWBEt24bMIkSaKBUGrBSy9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmq27G8i+RmKeCMn5nitm/HI6ChMB8GA1UdIwQY MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHrirnsA pHAl2doNI2TpZCfmHaOmEwid6GASNCKtDyFR75nfh0H8ZUcIxZSthf9k0gTUuEEv +zyLekbui5is8wpJw4DscbFyqvG8a5CTPFjsIi382vzWBKY4t77ImChEzJBaIYRK d247BE+e7B9nqGklDbUGfy2nz9XgVhTwf1a993Qe6ri6ayFNQcsI61/exN15Xp4c EUashK382dZfaW29Ne5q/+U9xctE/0kmZhnm9GVnF4Pr6O3gt3yxUotTvrJAdzpT Y9pxXSY27w9wHElXBfXjNrBHc0CKjZaltj6SylHOP8yakrjyS3cY0WWFgt8URo0S LXhDQorUq+KByg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:52:22 2025 by rpki-client