This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json) Hash identifier: 04SdTj/+t5DHi/7pTpas9XhLbTEvamQgEmSFirlXpCo= Subject key identifier: DE:B6:35:CD:20:33:17:E4:3E:72:87:48:5C:CA:B9:D0:EE:FD:AA:BC Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb Certificate serial: 019AF12DE6EE98628029FC786F5D46202A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft Manifest number: 068C Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: 6DhrM786lOGfe0BYFMew7ekW7Fe3HFSHr2rCaCHruMI=) 2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e6:ee:98:62:80:29:fc:78:6f:5d:46:20:2a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=deb635cd203317e43e7287485ccab9d0eefdaabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:c3:64:56:2f:c9:e6:1f:9d:99:f6:63:b4: 55:3f:7a:16:af:35:f6:4c:5f:c4:8c:74:32:be:6d: c0:bd:dd:0b:aa:4d:51:7d:b8:34:3b:c5:01:40:9d: 6f:cc:f9:db:12:7b:5b:d5:9e:16:6a:0a:46:e9:28: 29:ee:cc:68:bb:9a:87:a1:c0:b6:d7:97:e9:b8:82: f4:b2:01:aa:2f:7a:67:28:7e:9f:7b:5a:da:8d:7f: 0b:65:d9:74:89:8f:39:bf:8f:f1:0e:4b:28:41:fb: 2d:64:80:88:cd:ec:36:78:fc:27:a9:70:34:33:2a: d6:df:9f:05:0d:98:9e:5d:15:c8:43:4f:9e:97:79: 3d:7d:31:8c:0a:05:0a:53:a4:f1:49:8c:59:2c:ca: ac:f4:f9:f3:45:89:30:bd:0f:ce:53:e4:5a:be:77: a7:a7:25:fd:d5:43:55:d4:67:70:be:3d:4d:71:a9: 8f:12:14:c9:30:4b:cd:00:33:43:52:c8:9a:db:13: 32:85:f3:2b:0c:a3:e3:fc:a1:81:39:ff:ab:4a:12: 14:89:d0:f9:df:20:cf:9c:5b:96:bd:b1:a3:93:ef: e7:22:28:9c:a1:71:7f:60:71:2e:e7:a8:45:f0:14: 6a:be:86:6b:76:64:ef:8d:bd:ef:e4:93:c7:67:b3: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B6:35:CD:20:33:17:E4:3E:72:87:48:5C:CA:B9:D0:EE:FD:AA:BC X509v3 Authority Key Identifier: keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:27:1d:8b:b9:8c:a3:cc:66:34:10:7e:8d:16:e2:d0:d4:2c: 24:3d:96:62:40:c6:22:39:40:6a:e3:0b:fa:ac:4b:e9:b9:38: 8a:d2:d1:6c:cf:c1:bb:92:6c:0d:f3:2f:4a:51:d6:3b:b8:5f: 62:2e:77:83:eb:c4:f3:a2:5d:91:59:38:80:da:c7:4f:61:98: 65:3a:c6:30:05:c5:be:1b:e7:60:d0:7a:92:fb:ff:f2:af:5b: 91:be:a3:a6:5e:dd:96:67:ca:cd:7a:29:c7:d1:78:32:8a:cd: e8:37:27:98:1d:c8:74:02:e2:4c:a4:bd:e8:43:9d:c1:3f:94: 96:33:b9:20:9f:1a:6f:03:73:02:18:d4:c1:69:b8:da:4f:27: a7:03:5a:60:69:f6:f5:bf:1a:1e:0a:fb:2d:4b:36:ee:08:2f: e3:0a:21:01:81:7e:f5:43:b3:44:3a:d0:48:4a:18:f9:fd:f9: 51:9e:b3:3a:24:bc:32:cb:1c:b0:63:09:aa:9d:47:0c:05:ae: f1:e3:03:2c:05:88:a6:b8:40:11:fa:e7:04:d8:31:c7:9f:ca: 25:9f:de:17:04:1a:63:a3:b2:b5:e7:cc:2e:40:86:ea:34:e8: 36:02:fc:ed:44:df:36:56:a4:1c:c3:cb:2e:76:15:72:c7:95: 57:6f:24:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLebumGKAKfx4b11GICpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0 YWZjZWIwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD EyhkZWI2MzVjZDIwMzMxN2U0M2U3Mjg3NDg1Y2NhYjlkMGVlZmRhYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S7DZFYvyeYfnZn2Y7RVP3oWrzX2 TF/EjHQyvm3Avd0Lqk1Rfbg0O8UBQJ1vzPnbEntb1Z4WagpG6Sgp7sxou5qHocC2 15fpuIL0sgGqL3pnKH6fe1rajX8LZdl0iY85v4/xDksoQfstZICIzew2ePwnqXA0 MyrW358FDZieXRXIQ0+el3k9fTGMCgUKU6TxSYxZLMqs9PnzRYkwvQ/OU+Ravnen pyX91UNV1Gdwvj1NcamPEhTJMEvNADNDUsia2xMyhfMrDKPj/KGBOf+rShIUidD5 3yDPnFuWvbGjk+/nIiicoXF/YHEu56hF8BRqvoZrdmTvjb3v5JPHZ7NczwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN62Nc0gMxfkPnKHSFzKudDu/aq8MB8GA1UdIwQY MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOycdi7mM o8xmNBB+jRbi0NQsJD2WYkDGIjlAauML+qxL6bk4itLRbM/Bu5JsDfMvSlHWO7hf Yi53g+vE86JdkVk4gNrHT2GYZTrGMAXFvhvnYNB6kvv/8q9bkb6jpl7dlmfKzXop x9F4MorN6DcnmB3IdALiTKS96EOdwT+UljO5IJ8abwNzAhjUwWm42k8npwNaYGn2 9b8aHgr7LUs27ggv4wohAYF+9UOzRDrQSEoY+f35UZ6zOiS8MsscsGMJqp1HDAWu 8eMDLAWIprhAEfrnBNgxx5/KJZ/eFwQaY6OytefMLkCG6jToNgL87UTfNlakHMPL LnYVcseVV28k7w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:18 2025 by rpki-client