This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json) Hash identifier: SxzKPd7oxPlIw4qhbYM4GG/Gaa9Bf6GSTGKV1V600DM= Subject key identifier: 33:55:C5:D2:B0:5F:6D:D4:5C:80:02:67:96:20:C5:56:D3:D0:6C:0F Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2 Certificate serial: 019B378E82FD0AF419DC68E3B229FB7C2F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft Manifest number: 1302 Signing time: Fri 19 Dec 2025 17:00:44 +0000 Manifest this update: Fri 19 Dec 2025 17:00:44 +0000 Manifest next update: Sat 20 Dec 2025 17:00:44 +0000 Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: sSNEBs2HYhgHruALrFK4yaJjGL1bME2B3Cbuc4l6V2g=) 2: colowNm5_qh5Va7chPSOw1VK1ck.roa (hash: nloDqYvIeZi3RS1elNvQ7LOm+0c8P6a1rYXwvCChzp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:82:fd:0a:f4:19:dc:68:e3:b2:29:fb:7c:2f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2 Validity Not Before: Dec 19 17:00:44 2025 GMT Not After : Dec 20 17:00:44 2025 GMT Subject: CN=3355c5d2b05f6dd45c8002679620c556d3d06c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:21:d1:7c:58:dd:bf:1b:2a:1e:67:e9:12: c3:0e:b6:2e:bd:98:46:b4:0c:92:7b:33:2b:27:3b: d7:8e:5d:6e:f1:99:ab:45:06:0c:6b:5f:a3:9a:67: b7:68:88:21:9d:e5:a7:a4:d4:be:84:8b:67:c8:17: 6f:cb:19:12:37:a9:c3:32:8a:91:18:36:e5:70:ae: 86:41:d5:53:29:41:1a:62:36:d4:82:ed:82:18:36: 6f:26:b2:9e:02:21:56:89:64:76:4a:4e:0f:44:2e: 1e:1f:8e:7d:da:2b:ff:61:7f:37:47:fd:e0:1c:60: fa:8d:42:70:7d:a8:40:ad:a1:ad:87:fd:1c:d8:24: ba:12:64:ff:9a:f0:4c:52:89:4c:e7:7b:e5:6b:b2: bf:ec:58:6c:3d:de:6f:09:1f:76:eb:21:0f:3a:12: 12:16:34:e3:b8:ce:29:ca:b9:cc:1b:21:16:84:c0: 5a:b3:af:48:39:83:9e:ef:ae:2f:84:cb:50:cc:cc: 49:3e:ed:b1:4b:ad:85:5e:20:11:f0:73:da:b6:a8: 44:b5:c5:4b:2e:11:87:e3:a0:13:3b:85:43:4f:d2: 85:61:2d:36:a3:1c:54:a3:4b:d7:59:ca:7e:bc:b9: 8c:ac:70:be:a7:81:7b:29:6a:38:42:50:3a:e7:09: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:C5:D2:B0:5F:6D:D4:5C:80:02:67:96:20:C5:56:D3:D0:6C:0F X509v3 Authority Key Identifier: keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f8:2a:56:38:86:7e:bf:a7:de:e9:8d:3e:f4:71:37:9a:99: ab:88:73:a5:ae:bc:10:30:c5:fa:ed:9e:21:2e:d8:ca:47:93: 90:ac:85:45:2b:8e:b9:00:ba:d3:c2:bf:8c:1f:c7:d5:6b:dd: 6f:5a:47:ab:c7:bd:59:99:b4:8e:e9:36:3a:88:9a:e7:54:64: 0c:b8:d7:f7:14:99:65:50:b4:2b:a5:1c:13:06:8d:a1:c9:90: 28:8c:e9:f0:f1:9c:bf:2b:f6:80:af:1d:4d:45:2e:c2:3a:43: ce:f3:5d:d8:14:82:34:21:b6:86:6e:16:5d:60:53:55:4f:d6: 1c:f0:c0:bd:e2:5d:a1:f5:5c:fc:91:6d:cd:c0:41:38:51:b2: 5a:53:14:2d:a2:8e:7d:c8:9f:01:18:f2:ff:62:53:6f:e1:0d: 50:2e:a1:1f:25:1f:96:ef:e4:97:46:62:35:ec:0c:de:3c:9a: 9c:3a:ab:4c:1c:ee:a5:03:f5:34:34:08:a2:3f:0b:73:1a:46: 25:b0:cc:4a:e2:2e:7a:9d:3d:70:bd:94:d2:77:c3:42:16:58: 5d:c3:60:a3:55:f5:08:20:7d:a4:d4:92:cf:a3:9f:5f:43:59: a3:7c:34:96:c0:3b:cd:36:cd:c2:fd:92:3c:34:4a:b3:a7:5b: 3b:eb:c8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3joL9CvQZ3Gjjsin7fC8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGE4NTY1Mjc2YjRhMjUxYmE1NzNkZDZkNWY1Zjg3ODIz OGViZDIwHhcNMjUxMjE5MTcwMDQ0WhcNMjUxMjIwMTcwMDQ0WjAzMTEwLwYDVQQD EygzMzU1YzVkMmIwNWY2ZGQ0NWM4MDAyNjc5NjIwYzU1NmQzZDA2YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oEh0XxY3b8bKh5n6RLDDrYuvZhG tAySezMrJzvXjl1u8ZmrRQYMa1+jmme3aIghneWnpNS+hItnyBdvyxkSN6nDMoqR GDblcK6GQdVTKUEaYjbUgu2CGDZvJrKeAiFWiWR2Sk4PRC4eH4592iv/YX83R/3g HGD6jUJwfahAraGth/0c2CS6EmT/mvBMUolM53vla7K/7FhsPd5vCR926yEPOhIS FjTjuM4pyrnMGyEWhMBas69IOYOe764vhMtQzMxJPu2xS62FXiAR8HPatqhEtcVL LhGH46ATO4VDT9KFYS02oxxUo0vXWcp+vLmMrHC+p4F7KWo4QlA65wligwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNVxdKwX23UXIACZ5YgxVbT0GwPMB8GA1UdIwQY MBaAFElKhWUna0olG6Vz3W1fX4eCOOvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYt YzZkOWY5MTViZDhiLzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xOGEyZmQtMTVmNS00M2U2LWI3ODYtYzZkOWY5MTViZDhi LzEvU1VxRlpTZHJTaVVicFhQZGJWOWZoNEk0NjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/gqVjiG fr+n3umNPvRxN5qZq4hzpa68EDDF+u2eIS7YykeTkKyFRSuOuQC608K/jB/H1Wvd b1pHq8e9WZm0juk2Ooia51RkDLjX9xSZZVC0K6UcEwaNocmQKIzp8PGcvyv2gK8d TUUuwjpDzvNd2BSCNCG2hm4WXWBTVU/WHPDAveJdofVc/JFtzcBBOFGyWlMULaKO fcifARjy/2JTb+ENUC6hHyUflu/kl0ZiNewM3jyanDqrTBzupQP1NDQIoj8LcxpG JbDMSuIuep09cL2U0nfDQhZYXcNgo1X1CCB9pNSSz6OfX0NZo3w0lsA7zTbNwv2S PDRKs6dbO+vIKw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:38 2025 by rpki-client