This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json) Hash identifier: YMUmrl1820u+1QZm2a5PCP5V/SFxByhnU2/gZzuJ1mA= Subject key identifier: AC:3C:AD:95:DB:B6:70:55:6C:9D:5A:E0:ED:64:28:D0:6F:1A:DA:CC Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65 Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965 Certificate serial: 019B0C380E47EC5BC0D943683AC365362E62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft Manifest number: 1122 Signing time: Thu 11 Dec 2025 07:02:38 +0000 Manifest this update: Thu 11 Dec 2025 07:02:38 +0000 Manifest next update: Fri 12 Dec 2025 07:02:38 +0000 Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: N6tIjDzfGXBNuzcFN97k+vuVSW/Rb2wgBCEtjHb51vc=) 2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=) 3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:38:0e:47:ec:5b:c0:d9:43:68:3a:c3:65:36:2e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965 Validity Not Before: Dec 11 07:02:38 2025 GMT Not After : Dec 12 07:02:38 2025 GMT Subject: CN=ac3cad95dbb670556c9d5ae0ed6428d06f1adacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:c9:63:f9:59:c6:16:56:b9:f7:5a:cb:d0: af:17:9c:95:38:8e:d5:5e:83:30:42:b2:da:97:28: dc:47:14:d7:d4:4b:67:4c:bd:67:89:12:2a:07:e3: 32:39:f2:6f:f0:a4:6e:7c:4b:43:61:49:b2:a6:af: 77:a0:d4:fb:4a:ff:09:27:e3:9d:9a:db:58:a7:ad: 49:30:3d:62:e8:8f:20:cc:fc:8e:9c:f6:57:80:be: 39:fd:3d:25:32:47:21:89:b8:9d:cb:79:60:01:45: 80:89:f5:26:a7:f0:9d:e4:9d:15:38:4c:8a:70:c1: 2c:a9:86:ca:2a:00:77:83:6b:e7:4d:48:25:b1:82: 23:f6:e8:ed:cd:71:24:3c:9a:70:e8:1f:60:df:ac: e0:65:47:95:bd:c9:e4:62:d8:ec:66:f2:f3:01:72: ed:a4:e9:a4:b3:9e:9c:f4:6a:0d:5f:0b:27:25:69: 13:e8:1f:5d:62:d4:1c:15:ee:e2:c1:e1:95:30:b9: e3:02:15:74:e9:42:2a:0d:92:8e:d7:50:9c:1c:cc: 15:ba:14:25:e6:53:97:de:ff:3e:b2:2b:b9:10:5b: c3:38:ef:40:ff:db:0f:9e:0a:15:cb:c9:81:4d:2a: 1a:94:f2:9e:0c:81:6f:d4:22:cb:31:0a:d3:61:e9: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3C:AD:95:DB:B6:70:55:6C:9D:5A:E0:ED:64:28:D0:6F:1A:DA:CC X509v3 Authority Key Identifier: keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e9:a6:38:68:2c:dc:0a:a1:eb:22:4c:c4:50:49:e2:de:2c: ae:ce:e6:a7:b4:35:11:2d:09:68:f3:02:87:d4:5a:a3:aa:20: 25:c3:3d:c1:5f:92:bd:5c:c8:47:92:5e:df:6f:2f:c7:33:dd: c4:a2:03:13:d4:be:61:bf:01:06:64:1b:67:64:14:15:6a:ce: 00:71:9f:6c:71:b1:78:85:c4:da:ec:b9:4f:2c:de:a9:40:4d: 88:8f:db:bd:63:1a:58:e4:af:55:56:fb:af:bb:6e:65:35:59: 67:ba:40:b1:70:ef:88:92:40:f9:cf:b7:55:cd:7e:8e:2f:e7: 09:8b:a9:cb:bb:79:7c:09:fb:13:3c:d7:14:35:ef:9d:2e:f4: 46:1e:e2:94:37:b8:8c:a0:85:b8:96:8e:51:10:b7:63:ec:53: c6:d1:67:38:83:55:3b:8d:01:a0:ba:b0:37:fa:6e:14:c5:98: cf:ed:c8:6c:52:ec:7e:ca:0f:a4:d5:0f:89:7c:77:ca:e3:fc: 50:7f:83:03:3b:24:2f:74:48:d6:f4:07:dc:52:99:c9:82:b3: 8f:82:90:00:82:d5:d0:3a:b7:9a:7d:51:a2:fd:b1:95:e2:72: c2:61:51:b8:16:4e:65:d7:d6:61:3b:49:18:6d:c9:16:2c:06: 43:9c:cf:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMOA5H7FvA2UNoOsNlNi5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NDBjZjc3OGRkOTgxNzY1N2NkOGQ0ZmVlZGQ0MjNkNDZk MWE5NjUwHhcNMjUxMjExMDcwMjM4WhcNMjUxMjEyMDcwMjM4WjAzMTEwLwYDVQQD EyhhYzNjYWQ5NWRiYjY3MDU1NmM5ZDVhZTBlZDY0MjhkMDZmMWFkYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrnJY/lZxhZWufday9CvF5yVOI7V XoMwQrLalyjcRxTX1EtnTL1niRIqB+MyOfJv8KRufEtDYUmypq93oNT7Sv8JJ+Od mttYp61JMD1i6I8gzPyOnPZXgL45/T0lMkchibidy3lgAUWAifUmp/Cd5J0VOEyK cMEsqYbKKgB3g2vnTUglsYIj9ujtzXEkPJpw6B9g36zgZUeVvcnkYtjsZvLzAXLt pOmks56c9GoNXwsnJWkT6B9dYtQcFe7iweGVMLnjAhV06UIqDZKO11CcHMwVuhQl 5lOX3v8+siu5EFvDOO9A/9sPngoVy8mBTSoalPKeDIFv1CLLMQrTYel1YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw8rZXbtnBVbJ1a4O1kKNBvGtrMMB8GA1UdIwQY MBaAFElAz3eN2YF2V82NT+7dQj1G0allMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAt MDAzOTRiNjEwYTM0LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAtMDAzOTRiNjEwYTM0 LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlemmOGgs 3Aqh6yJMxFBJ4t4srs7mp7Q1ES0JaPMCh9Rao6ogJcM9wV+SvVzIR5Je328vxzPd xKIDE9S+Yb8BBmQbZ2QUFWrOAHGfbHGxeIXE2uy5TyzeqUBNiI/bvWMaWOSvVVb7 r7tuZTVZZ7pAsXDviJJA+c+3Vc1+ji/nCYupy7t5fAn7EzzXFDXvnS70Rh7ilDe4 jKCFuJaOURC3Y+xTxtFnOINVO40BoLqwN/puFMWYz+3IbFLsfsoPpNUPiXx3yuP8 UH+DAzskL3RI1vQH3FKZyYKzj4KQAILV0Dq3mn1Rov2xleJywmFRuBZOZdfWYTtJ GG3JFiwGQ5zPig== -----END CERTIFICATE-----Generated at Thu Dec 11 15:13:22 2025 by rpki-client