This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft File: svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json) Hash identifier: Pe/vQ/Np16xvRxPGXWEGWvwOKC21ObIPCRJ2uCYWKEA= Subject key identifier: E7:E1:D5:5B:42:A7:1E:E8:13:5E:EF:DB:74:65:71:8D:A7:83:B0:51 Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37 Certificate issuer: /CN=b2fba356186c1dc5031c2fb20bc635491f878637 Certificate serial: 019B19F1E260A0A2ED996D9CED84FB60FF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft Manifest number: 1109 Signing time: Sat 13 Dec 2025 23:00:41 +0000 Manifest this update: Sat 13 Dec 2025 23:00:41 +0000 Manifest next update: Sun 14 Dec 2025 23:00:41 +0000 Files and hashes: 1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=) 2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: /FSjfnWAlSgg/tc6pqVJysounRtdS9pAeBARVHX1Qkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:e2:60:a0:a2:ed:99:6d:9c:ed:84:fb:60:ff:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637 Validity Not Before: Dec 13 23:00:41 2025 GMT Not After : Dec 14 23:00:41 2025 GMT Subject: CN=e7e1d55b42a71ee8135eefdb7465718da783b051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:a6:75:2c:55:fb:91:5b:55:2c:4e:0e:e0: 6e:26:37:46:d9:0b:33:a9:3c:f8:22:00:8b:30:ed: 18:6a:ea:43:5a:92:e8:72:a4:68:f9:46:a9:51:f3: 09:d2:5b:cd:a1:42:f0:9c:8e:9e:1a:41:87:e6:66: 92:21:b4:12:4f:0c:f4:c0:b2:cf:b7:dd:4c:b8:d8: bf:95:3e:6c:25:b3:03:e7:2b:d6:87:6b:92:b2:73: 73:a7:19:ce:db:f8:63:a3:05:08:33:77:d3:35:1d: ad:1e:dc:c7:dd:0e:84:5b:d2:fe:95:83:0d:4b:24: 28:52:01:be:58:2a:23:b7:f8:db:7c:8c:60:28:ee: 4e:d9:da:fc:a7:ab:31:28:8e:8b:bb:6f:c3:87:07: f4:63:b6:c3:66:8a:6b:43:7a:f4:a1:11:ca:47:0c: 58:4b:3e:27:1c:06:2c:1e:88:4b:d1:7d:aa:94:22: 83:d2:66:08:22:d4:aa:f0:f2:f1:eb:6f:f4:25:8f: 56:ff:60:49:87:c7:d8:75:f8:cb:4d:d4:0b:99:1c: 80:8e:f9:80:f3:7c:ea:a3:09:5b:ae:85:53:b5:93: c7:14:3c:9a:3b:27:6f:f6:4b:2f:90:0a:df:8d:2a: bd:2f:54:cb:40:94:ee:27:f8:40:b4:9d:be:28:3c: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E1:D5:5B:42:A7:1E:E8:13:5E:EF:DB:74:65:71:8D:A7:83:B0:51 X509v3 Authority Key Identifier: keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:14:f4:e1:68:a9:f4:f6:f0:7f:61:63:6f:08:8d:6b:f0:1a: 26:61:f2:08:8e:6a:f0:05:7f:3f:52:b4:8e:c6:31:c6:88:33: c1:76:6c:f6:e0:9d:f5:d2:29:a2:a0:ef:6a:e4:39:13:b8:7a: f2:38:66:e2:c4:27:bb:46:5c:be:ce:c0:c4:41:5f:eb:4a:0c: 1b:ce:a0:38:da:c1:bd:d7:5d:19:0a:d9:c2:25:a6:66:f7:7f: 59:50:91:b2:cb:d1:f5:ce:bb:d1:fb:12:e8:45:53:f5:b7:2f: 7b:a3:72:4e:3a:3e:09:58:e7:97:e5:64:74:3c:f3:3c:bd:2d: 75:92:7f:4e:cd:19:64:7c:68:02:67:d5:e6:34:b8:e8:d5:24: 63:5c:46:b6:45:17:a8:bb:97:c4:43:47:26:90:ed:2b:02:71: e7:ea:22:78:dd:fd:2d:c9:d9:48:b7:2e:a2:dd:56:61:f2:4c: 36:30:7b:af:9b:01:e9:29:2d:98:21:34:de:f7:91:b9:23:17: 5e:2c:8c:ee:9c:87:0b:39:ba:14:c8:30:09:00:96:0a:d2:44: c4:82:40:de:44:52:66:73:94:26:92:fb:d3:bb:96:d5:9f:cb: ff:63:33:d5:b0:ef:05:ff:44:91:02:81:f0:cd:6c:c3:31:bf: f4:16:33:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8eJgoKLtmW2c7YT7YP9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZmJhMzU2MTg2YzFkYzUwMzFjMmZiMjBiYzYzNTQ5MWY4 Nzg2MzcwHhcNMjUxMjEzMjMwMDQxWhcNMjUxMjE0MjMwMDQxWjAzMTEwLwYDVQQD EyhlN2UxZDU1YjQyYTcxZWU4MTM1ZWVmZGI3NDY1NzE4ZGE3ODNiMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdemdSxV+5FbVSxODuBuJjdG2Qsz qTz4IgCLMO0YaupDWpLocqRo+UapUfMJ0lvNoULwnI6eGkGH5maSIbQSTwz0wLLP t91MuNi/lT5sJbMD5yvWh2uSsnNzpxnO2/hjowUIM3fTNR2tHtzH3Q6EW9L+lYMN SyQoUgG+WCojt/jbfIxgKO5O2dr8p6sxKI6Lu2/Dhwf0Y7bDZoprQ3r0oRHKRwxY Sz4nHAYsHohL0X2qlCKD0mYIItSq8PLx62/0JY9W/2BJh8fYdfjLTdQLmRyAjvmA 83zqowlbroVTtZPHFDyaOydv9ksvkArfjSq9L1TLQJTuJ/hAtJ2+KDximQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfh1VtCpx7oE17v23RlcY2ng7BRMB8GA1UdIwQY MBaAFLL7o1YYbB3FAxwvsgvGNUkfh4Y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUt Mjg2NTNjYzEyMzY4LzEvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUtMjg2NTNjYzEyMzY4 LzEvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRT04Wip 9Pbwf2FjbwiNa/AaJmHyCI5q8AV/P1K0jsYxxogzwXZs9uCd9dIpoqDvauQ5E7h6 8jhm4sQnu0Zcvs7AxEFf60oMG86gONrBvdddGQrZwiWmZvd/WVCRssvR9c670fsS 6EVT9bcve6NyTjo+CVjnl+VkdDzzPL0tdZJ/Ts0ZZHxoAmfV5jS46NUkY1xGtkUX qLuXxENHJpDtKwJx5+oieN39LcnZSLcuot1WYfJMNjB7r5sB6SktmCE03veRuSMX XiyM7pyHCzm6FMgwCQCWCtJExIJA3kRSZnOUJpL707uW1Z/L/2Mz1bDvBf9EkQKB 8M1swzG/9BYz4Q== -----END CERTIFICATE-----Generated at Sun Dec 14 05:29:38 2025 by rpki-client