This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json) Hash identifier: WO9pGdPW4R29qUJpR/zDD9x/XqWEyoGfceUmBW2wW5g= Subject key identifier: AC:6F:BB:20:78:33:D9:F3:61:3A:22:A3:73:C3:1D:98:37:F2:BA:67 Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34 Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34 Certificate serial: 019B59E39CF80127136CED4B4CA4661FEFC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft Manifest number: 1113 Signing time: Fri 26 Dec 2025 09:00:47 +0000 Manifest this update: Fri 26 Dec 2025 09:00:47 +0000 Manifest next update: Sat 27 Dec 2025 09:00:47 +0000 Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: FL107CQyXfEtddMP6zJvA0btfT09kx4smLs03Ia3P+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:9c:f8:01:27:13:6c:ed:4b:4c:a4:66:1f:ef:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34 Validity Not Before: Dec 26 09:00:47 2025 GMT Not After : Dec 27 09:00:47 2025 GMT Subject: CN=ac6fbb207833d9f3613a22a373c31d9837f2ba67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:36:aa:4d:d2:d0:cc:1c:16:56:a5:fc:51: eb:04:61:72:06:29:35:a5:b3:b0:5f:63:c2:6f:8a: 96:12:be:39:65:5a:84:53:ea:08:f3:40:8c:b6:9a: 6d:a8:ef:c3:70:1a:ee:04:0a:e7:20:0a:a7:a7:1c: 65:b9:5b:62:c1:9d:0a:9c:98:cc:fb:4a:fb:1e:d1: 89:d6:21:12:07:bd:7d:5f:bf:81:a1:16:e0:55:6b: 60:44:9d:cf:89:5e:90:d1:60:f3:54:f6:43:f6:bf: 58:a8:73:74:7c:68:75:d2:53:0e:e7:13:f8:3b:d3: 97:76:97:42:4e:48:d1:74:b8:04:04:3c:bc:b8:7e: f0:07:21:39:2a:36:42:04:22:f7:f0:99:d8:1e:b5: 38:b1:8e:a8:88:ce:00:56:fe:ea:7f:7b:e9:4e:92: d6:30:91:5b:85:b2:a6:21:29:5e:35:1f:82:fa:e4: 92:3f:1b:e6:ff:41:13:a3:95:df:2e:9b:f4:13:8c: e0:43:6e:69:04:d4:0f:23:f0:78:a7:2a:d7:79:29: ec:27:45:c0:44:ef:57:2e:d7:e2:6e:4a:a1:a9:bb: 09:db:f8:f7:a6:cc:69:57:6e:13:e4:5c:c9:d5:76: 76:00:ad:7c:af:01:34:d9:92:f7:ad:78:8d:3d:6e: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6F:BB:20:78:33:D9:F3:61:3A:22:A3:73:C3:1D:98:37:F2:BA:67 X509v3 Authority Key Identifier: keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:2c:25:05:7d:ae:9c:58:7f:16:9e:a3:00:26:14:a5:91:17: 5b:e1:de:83:49:86:6e:b0:85:d8:1f:8e:4d:f1:06:0f:e9:78: fa:8a:08:87:ff:0c:29:75:df:c7:5a:c0:0e:40:d0:82:62:e6: 5c:ee:69:16:6f:2d:57:38:fd:f9:fb:c9:67:62:7f:41:8b:8d: 76:b1:e5:04:13:13:57:e2:71:75:31:a9:da:c1:21:12:08:b5: 16:a2:d5:57:99:8c:d1:c7:36:41:94:54:2d:78:24:f1:92:85: 27:fc:61:30:3b:88:f2:df:e2:7d:69:be:ad:55:b8:3f:c3:e1: 13:0d:c3:c1:e7:fc:04:17:69:7b:f9:26:f9:cc:45:73:fb:0c: 63:d9:43:e4:b2:b3:dc:eb:91:12:09:d9:58:1b:ec:4f:05:99: 57:04:4a:d5:b8:29:4e:01:69:fe:7f:99:91:6f:68:52:cb:d8: b1:fb:df:9a:44:8c:ff:7a:d8:b7:80:37:55:41:8f:ee:ff:64: 85:ea:a8:3d:3b:04:b1:5a:1b:e4:34:3d:c6:1b:88:0b:14:f8: c5:c3:25:71:67:49:af:15:c2:38:65:f4:89:38:4a:1d:98:52: a6:29:8f:0a:ff:a9:2b:3f:89:b5:4b:9d:64:1e:69:19:8b:fc: 01:e2:63:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45z4AScTbO1LTKRmH+/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDgwODZiOGQxZGM3ZjEwZTM0M2ZkMTY1NzE5MjM5YTc1 NWJkMzQwHhcNMjUxMjI2MDkwMDQ3WhcNMjUxMjI3MDkwMDQ3WjAzMTEwLwYDVQQD EyhhYzZmYmIyMDc4MzNkOWYzNjEzYTIyYTM3M2MzMWQ5ODM3ZjJiYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGE2qk3S0MwcFlal/FHrBGFyBik1 pbOwX2PCb4qWEr45ZVqEU+oI80CMtpptqO/DcBruBArnIAqnpxxluVtiwZ0KnJjM +0r7HtGJ1iESB719X7+BoRbgVWtgRJ3PiV6Q0WDzVPZD9r9YqHN0fGh10lMO5xP4 O9OXdpdCTkjRdLgEBDy8uH7wByE5KjZCBCL38JnYHrU4sY6oiM4AVv7qf3vpTpLW MJFbhbKmISleNR+C+uSSPxvm/0ETo5XfLpv0E4zgQ25pBNQPI/B4pyrXeSnsJ0XA RO9XLtfibkqhqbsJ2/j3psxpV24T5FzJ1XZ2AK18rwE02ZL3rXiNPW6kywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxvuyB4M9nzYToio3PDHZg38rpnMB8GA1UdIwQY MBaAFLFICGuNHcfxDjQ/0WVxkjmnVb00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEt ZTNkNWQ3ZWY0MjMyLzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEtZTNkNWQ3ZWY0MjMy LzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCwlBX2u nFh/Fp6jACYUpZEXW+Heg0mGbrCF2B+OTfEGD+l4+ooIh/8MKXXfx1rADkDQgmLm XO5pFm8tVzj9+fvJZ2J/QYuNdrHlBBMTV+JxdTGp2sEhEgi1FqLVV5mM0cc2QZRU LXgk8ZKFJ/xhMDuI8t/ifWm+rVW4P8PhEw3Dwef8BBdpe/km+cxFc/sMY9lD5LKz 3OuREgnZWBvsTwWZVwRK1bgpTgFp/n+ZkW9oUsvYsfvfmkSM/3rYt4A3VUGP7v9k heqoPTsEsVob5DQ9xhuICxT4xcMlcWdJrxXCOGX0iThKHZhSpimPCv+pKz+JtUud ZB5pGYv8AeJjXA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:23 2025 by rpki-client