This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json) Hash identifier: 1HYFmQKjQuWPHGh0ThUQ0FhRA0RDYWK+UYr8o460kaM= Subject key identifier: 87:7C:D7:99:91:5A:C7:B2:7A:0A:B7:02:07:FD:74:5C:81:AF:CF:10 Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20 Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20 Certificate serial: 019B59E4634B36F3BE0B7B1DDFCFBF3B5D0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:01:38 +0000 Manifest this update: Fri 26 Dec 2025 09:01:38 +0000 Manifest next update: Sat 27 Dec 2025 09:01:38 +0000 Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=) 2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: c5ZvovpHs/mTW7iIjipMPgSV2KXvTS2wqPbHxNEg2jU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:63:4b:36:f3:be:0b:7b:1d:df:cf:bf:3b:5d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20 Validity Not Before: Dec 26 09:01:38 2025 GMT Not After : Dec 27 09:01:38 2025 GMT Subject: CN=877cd799915ac7b27a0ab70207fd745c81afcf10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:0b:f1:49:5c:c3:92:7a:79:63:3d:88:d7: 14:a3:b7:b6:a9:a6:e6:29:12:b6:55:f3:9c:87:f0: 1e:5b:eb:48:72:37:cf:d8:a4:79:b8:ee:de:0e:ed: 5f:40:5d:94:09:57:9d:e8:15:e2:b1:ce:8e:68:ee: 8c:4c:a2:8f:2e:6a:bb:65:a6:bc:e7:1c:42:2c:69: 15:92:f1:9c:51:79:da:d4:a8:f3:f0:af:f9:67:95: ec:43:de:22:a3:00:8f:29:f1:56:95:50:be:24:55: 4d:ef:42:67:39:ad:3b:be:1d:75:a1:7e:42:f8:e3: b9:2d:0c:e2:ba:a8:62:ea:e5:c8:c8:68:c8:32:83: 38:8e:cb:0f:ea:ff:81:5f:ba:9e:3f:33:32:a9:01: 63:9e:5d:47:08:65:ed:41:6d:6d:5c:5f:c3:d1:92: 5f:20:6a:3a:33:50:3f:38:e4:c1:27:e8:09:5d:a3: 10:e8:a8:5f:ec:5a:93:a4:97:ca:f7:c5:ed:f2:b5: 90:e3:9c:ac:38:64:6a:66:d2:b8:83:f9:fb:b9:e0: 7a:da:49:ca:1c:c9:c0:a7:4b:08:f8:19:f2:b6:62: 21:65:3c:72:74:02:69:2f:1a:28:ff:4f:80:cc:8b: a3:d9:69:c2:c3:33:c7:1f:8d:d9:15:c5:0d:c0:bd: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:D7:99:91:5A:C7:B2:7A:0A:B7:02:07:FD:74:5C:81:AF:CF:10 X509v3 Authority Key Identifier: keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a8:36:37:78:80:62:11:41:46:40:30:9f:56:c5:5f:c3:f3: 1b:9b:9d:ef:77:71:e5:9f:d9:20:b4:6e:61:15:0a:71:97:03: 69:ef:c5:52:26:6a:30:88:82:74:b4:22:8b:52:c7:3b:14:70: 21:43:ee:15:89:ec:ef:56:e3:38:60:2e:41:1b:37:e5:69:74: 8d:bd:34:d5:f1:90:92:2d:6e:61:36:f0:94:59:e0:26:56:6a: 78:be:66:e8:73:3d:c5:5f:dd:78:52:52:8f:20:98:51:43:6b: da:6a:00:03:a4:2d:de:c2:2d:b6:b2:4c:de:e6:7d:52:40:1b: b0:7d:0c:70:b2:ef:b3:34:a5:a2:1b:cc:6a:fd:d1:15:d6:4d: 8d:00:46:1e:3e:53:8f:d7:2c:23:87:cc:5a:e4:88:43:66:88: 7f:67:d9:ae:95:4a:47:b7:ca:b0:1e:24:cf:0c:ed:db:cf:bf: 88:c8:bd:b7:eb:e1:11:8d:8e:6f:bb:1e:f8:54:7f:d4:07:e2: 3c:6f:17:ae:d2:12:f0:15:4c:57:24:f5:f6:f2:77:e9:1b:ea: ca:23:23:ce:0c:d7:ff:b7:d6:de:35:b9:10:80:0f:81:20:5b: 00:db:1d:b1:08:7e:07:e0:7d:ca:85:f5:99:31:50:2b:4a:b0: 92:0d:01:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5GNLNvO+C3sd38+/O10PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZWZjZmVkNTFmZjE1OGZiZTY4Y2NkNjBiN2IzOWJlNWYz ZWFlMjAwHhcNMjUxMjI2MDkwMTM4WhcNMjUxMjI3MDkwMTM4WjAzMTEwLwYDVQQD Eyg4NzdjZDc5OTkxNWFjN2IyN2EwYWI3MDIwN2ZkNzQ1YzgxYWZjZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2wL8Ulcw5J6eWM9iNcUo7e2qabm KRK2VfOch/AeW+tIcjfP2KR5uO7eDu1fQF2UCVed6BXisc6OaO6MTKKPLmq7Zaa8 5xxCLGkVkvGcUXna1Kjz8K/5Z5XsQ94iowCPKfFWlVC+JFVN70JnOa07vh11oX5C +OO5LQziuqhi6uXIyGjIMoM4jssP6v+BX7qePzMyqQFjnl1HCGXtQW1tXF/D0ZJf IGo6M1A/OOTBJ+gJXaMQ6Khf7FqTpJfK98Xt8rWQ45ysOGRqZtK4g/n7ueB62knK HMnAp0sI+BnytmIhZTxydAJpLxoo/0+AzIuj2WnCwzPHH43ZFcUNwL2JhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId815mRWseyegq3Agf9dFyBr88QMB8GA1UdIwQY MBaAFErvz+1R/xWPvmjM1gt7Ob5fPq4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0Mzct ZGI2NjcxYWM3NjcyLzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0MzctZGI2NjcxYWM3Njcy LzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6g2N3iA YhFBRkAwn1bFX8PzG5ud73dx5Z/ZILRuYRUKcZcDae/FUiZqMIiCdLQii1LHOxRw IUPuFYns71bjOGAuQRs35Wl0jb001fGQki1uYTbwlFngJlZqeL5m6HM9xV/deFJS jyCYUUNr2moAA6Qt3sIttrJM3uZ9UkAbsH0McLLvszSlohvMav3RFdZNjQBGHj5T j9csI4fMWuSIQ2aIf2fZrpVKR7fKsB4kzwzt28+/iMi9t+vhEY2Ob7se+FR/1Afi PG8XrtIS8BVMVyT19vJ36RvqyiMjzgzX/7fW3jW5EIAPgSBbANsdsQh+B+B9yoX1 mTFQK0qwkg0B3g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:33 2025 by rpki-client