This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json) Hash identifier: 6zVItEz2FunEBIPhe85ozfuM63pKqjDRSKJ3/CuOIMc= Subject key identifier: 43:19:9F:A0:DB:4C:7A:B8:FD:D9:E3:92:8E:CD:B3:DB:A3:B7:DA:37 Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Certificate serial: 019B2399DEE75DA297BDEEF485EAA19DEF5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft Manifest number: 170E Signing time: Mon 15 Dec 2025 20:00:45 +0000 Manifest this update: Mon 15 Dec 2025 20:00:45 +0000 Manifest next update: Tue 16 Dec 2025 20:00:45 +0000 Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=) 2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: 0+pmHfIdwGLVsSwipXfQewR51zi707GpWu1SfmyI604=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:de:e7:5d:a2:97:bd:ee:f4:85:ea:a1:9d:ef:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb Validity Not Before: Dec 15 20:00:45 2025 GMT Not After : Dec 16 20:00:45 2025 GMT Subject: CN=43199fa0db4c7ab8fdd9e3928ecdb3dba3b7da37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:95:f8:3b:01:9c:d5:05:aa:91:9b:75:0d: 9e:c8:6b:1d:d0:38:b6:2d:2e:9b:60:ea:13:2e:b9: 9a:d9:23:4b:24:70:17:1e:b2:42:d6:d1:4c:10:be: c0:ab:f4:c6:da:37:03:88:b0:22:b6:35:77:3e:5e: b2:18:4a:7f:86:b4:1b:fd:2c:4f:d7:54:a5:d1:90: 28:c6:4f:9b:48:a8:cf:38:e1:04:05:93:b6:7e:e5: 9b:6a:29:31:e7:48:a4:d5:d5:92:69:0f:57:c9:e7: 36:7b:9a:bb:db:8e:18:da:87:78:0c:83:58:c7:05: ec:59:8d:d3:0b:cc:5e:9a:a0:99:0e:3d:03:0a:25: 98:8f:71:27:eb:f3:03:55:0d:b0:9a:c2:53:74:a0: 9f:1b:40:fc:93:b5:55:fb:a3:0e:b1:79:4f:e8:1c: 66:de:c3:fb:e1:38:97:94:e6:ca:5c:d3:b1:b0:f0: b3:f4:e1:91:a8:61:ce:e8:29:5b:f5:d9:2b:35:c7: 62:8f:75:51:6b:99:ff:19:c6:b9:f6:bd:e6:22:1d: 5e:90:9b:cd:32:e0:ae:27:24:4a:93:cf:0a:00:57: 22:5c:b0:cc:d6:7d:7d:14:49:a0:cb:13:6a:25:0e: 01:64:ff:fc:6d:bc:13:e9:9a:92:f5:c2:ac:5f:87: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:19:9F:A0:DB:4C:7A:B8:FD:D9:E3:92:8E:CD:B3:DB:A3:B7:DA:37 X509v3 Authority Key Identifier: keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8c:73:55:ae:e7:50:dd:08:fa:71:65:5d:8e:16:9b:02:b2: e1:7b:f1:21:6a:47:4e:63:a6:06:74:b9:51:cc:2e:b3:d2:f8: 51:04:a4:08:1e:19:59:42:4b:d8:f2:45:3b:58:2f:21:bb:05: de:8d:d9:cf:f3:e3:66:6f:a0:ba:04:c7:c8:14:66:8c:b6:a7: 5e:ba:8c:c1:e0:2f:58:5d:00:2d:cb:cd:45:28:d9:a1:87:89: db:fb:8c:e2:34:fc:f7:1a:5a:dd:bf:06:a9:db:d1:9c:f4:72: 49:48:3f:45:a0:5b:88:04:8c:f7:29:3b:f1:6a:3f:6f:a6:22: ee:4f:25:5d:e0:d4:52:75:85:77:36:91:ba:ef:24:b4:6e:6f: bf:3b:2c:c2:86:f0:8b:3a:95:dd:68:6f:ec:cb:ea:6f:49:89: 3d:d6:76:74:ec:17:01:87:78:69:ee:1a:5b:83:55:22:8b:91: 54:6e:b4:27:81:46:2f:55:9f:a4:a7:86:0d:4d:b4:0c:67:6c: 6a:99:ec:68:8a:fb:76:41:85:27:13:d7:de:9c:64:7e:a4:06: d7:b4:3d:6e:3d:7e:58:a9:fb:43:6d:b3:e2:16:48:60:e3:13: 8f:07:1c:0d:36:b5:30:f5:ed:c7:df:02:f6:ab:c4:8d:e5:f8: b2:4c:6a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmd7nXaKXve70heqhne9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTM5MTE2OWYwYzlmMjFhYThmMmU4OWU3Mzc1YzcyZWM2 NzRmZWIwHhcNMjUxMjE1MjAwMDQ1WhcNMjUxMjE2MjAwMDQ1WjAzMTEwLwYDVQQD Eyg0MzE5OWZhMGRiNGM3YWI4ZmRkOWUzOTI4ZWNkYjNkYmEzYjdkYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseqV+DsBnNUFqpGbdQ2eyGsd0Di2 LS6bYOoTLrma2SNLJHAXHrJC1tFMEL7Aq/TG2jcDiLAitjV3Pl6yGEp/hrQb/SxP 11Sl0ZAoxk+bSKjPOOEEBZO2fuWbaikx50ik1dWSaQ9Xyec2e5q7244Y2od4DINY xwXsWY3TC8xemqCZDj0DCiWYj3En6/MDVQ2wmsJTdKCfG0D8k7VV+6MOsXlP6Bxm 3sP74TiXlObKXNOxsPCz9OGRqGHO6Clb9dkrNcdij3VRa5n/Gca59r3mIh1ekJvN MuCuJyRKk88KAFciXLDM1n19FEmgyxNqJQ4BZP/8bbwT6ZqS9cKsX4d9gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMZn6DbTHq4/dnjko7Ns9ujt9o3MB8GA1UdIwQY MBaAFLLjkRafDJ8hqo8uiec3XHLsZ0/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMt NTY4NjI3OWVjOTZlLzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84OGMyMDQtYmMzMC00YjlkLWI5ZWMtNTY4NjI3OWVjOTZl LzEvc3VPUkZwOE1ueUdxank2SjV6ZGNjdXhuVC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYxzVa7n UN0I+nFlXY4WmwKy4XvxIWpHTmOmBnS5Ucwus9L4UQSkCB4ZWUJL2PJFO1gvIbsF 3o3Zz/PjZm+gugTHyBRmjLanXrqMweAvWF0ALcvNRSjZoYeJ2/uM4jT89xpa3b8G qdvRnPRySUg/RaBbiASM9yk78Wo/b6Yi7k8lXeDUUnWFdzaRuu8ktG5vvzsswobw izqV3Whv7Mvqb0mJPdZ2dOwXAYd4ae4aW4NVIouRVG60J4FGL1WfpKeGDU20DGds apnsaIr7dkGFJxPX3pxkfqQG17Q9bj1+WKn7Q22z4hZIYOMTjwccDTa1MPXtx98C 9qvEjeX4skxq1w== -----END CERTIFICATE-----Generated at Mon Dec 15 21:40:08 2025 by rpki-client