This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json) Hash identifier: PQobyrqfXmFaVz3qnOZTM412urzC87RhNXwkq4ehF0E= Subject key identifier: 52:E4:37:90:77:80:C3:25:C5:C9:3F:91:41:25:60:95:43:36:9C:FD Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Certificate serial: 019AF3898F50F156C7F2EA23CAE98B95CB76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft Manifest number: 0ED5 Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=) 2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=) 3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: qmfpAGYNInb91hKg3DxEpet2A8MtG21ejK+evmbOQnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8f:50:f1:56:c7:f2:ea:23:ca:e9:8b:95:cb:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=52e437907780c325c5c93f914125609543369cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:06:ee:11:77:5a:08:8a:58:30:f0:41:e8: ff:75:7e:a8:c5:17:bb:b1:8d:c3:3e:da:85:53:7c: bb:59:35:a0:cd:43:2e:36:70:20:b0:5e:e4:16:06: 9c:74:db:ef:95:78:90:41:14:da:94:d3:ab:48:9c: aa:eb:d1:85:21:bb:18:3a:63:15:6f:26:bd:71:a8: cd:48:db:52:4c:c3:5e:97:bf:e0:84:82:9d:3b:81: 9a:8c:08:47:af:be:78:02:b9:1d:a7:45:51:ac:dc: 28:0b:8e:18:b8:63:ce:e8:4f:1e:56:1e:a9:cd:9e: dc:89:f4:68:51:89:a8:af:dc:26:10:d6:b2:52:21: fb:0c:51:7b:e2:4f:1d:be:b9:bf:ab:99:62:b1:48: ca:39:64:1c:df:11:e4:90:39:e9:57:57:0c:83:45: 4b:fa:41:1e:55:82:4d:87:77:97:02:12:58:fc:47: 6b:c5:b1:8a:26:49:7a:8e:dd:c7:04:e1:1f:3c:25: 66:1e:5c:a4:ec:33:43:02:23:f8:37:1c:11:6f:a5: 26:f2:dd:89:bc:6c:69:a1:44:0d:d5:18:58:43:df: 1f:d0:af:ec:d9:f8:b0:94:05:7a:a9:3d:f8:85:3d: 9f:3d:90:85:e5:4a:e5:0b:a3:21:c7:d7:0d:9c:de: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:37:90:77:80:C3:25:C5:C9:3F:91:41:25:60:95:43:36:9C:FD X509v3 Authority Key Identifier: keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7a:f6:9d:fa:ca:1a:cc:78:02:f8:f5:28:be:12:bb:40:60: fe:7e:cf:0e:08:44:da:50:d0:79:92:dc:33:18:27:97:9e:f5: 5c:92:a7:d9:e9:ad:8b:93:f5:65:0a:c7:ab:f1:d2:3d:a0:00: ed:49:f0:02:d5:02:9e:6e:3e:7e:58:5f:64:17:02:f8:9e:2e: f9:03:0b:27:82:70:c4:5f:cd:98:8a:f5:cd:1d:cb:6c:37:f0: 2f:ce:f8:13:fa:d0:a3:b4:b1:a2:7d:ef:01:c7:53:de:6b:54: 8e:82:b8:34:ab:bd:03:e0:8c:4e:42:2b:21:f9:3c:7e:83:a3: 1d:8f:3f:37:b4:0c:1e:ef:97:58:3e:81:f4:7c:99:3b:3b:ea: 0d:d5:73:ef:f5:a2:c3:b9:44:5c:46:fb:48:ba:0b:50:f5:54: 23:9e:ac:41:90:58:71:b9:56:23:21:fe:ac:f8:5c:b2:4e:a5: 7d:f6:b6:65:04:8b:d0:1e:6b:43:69:9e:f2:32:e0:7f:e6:48: 39:49:1b:b9:bf:fe:13:4a:0b:b8:e3:d1:f7:a0:8f:5d:65:90: 0e:5b:3a:e3:4a:b7:fc:99:ab:9b:11:81:bb:7e:40:a6:c6:a5: 82:b2:d5:c8:f6:42:65:b3:de:e9:fb:1f:8e:d6:18:82:8c:bd: 2b:d3:c1:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziY9Q8VbH8uojyumLlct2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4 NjU0ZDAwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD Eyg1MmU0Mzc5MDc3ODBjMzI1YzVjOTNmOTE0MTI1NjA5NTQzMzY5Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxMG7hF3WgiKWDDwQej/dX6oxRe7 sY3DPtqFU3y7WTWgzUMuNnAgsF7kFgacdNvvlXiQQRTalNOrSJyq69GFIbsYOmMV bya9cajNSNtSTMNel7/ghIKdO4GajAhHr754Arkdp0VRrNwoC44YuGPO6E8eVh6p zZ7cifRoUYmor9wmENayUiH7DFF74k8dvrm/q5lisUjKOWQc3xHkkDnpV1cMg0VL +kEeVYJNh3eXAhJY/EdrxbGKJkl6jt3HBOEfPCVmHlyk7DNDAiP4NxwRb6Um8t2J vGxpoUQN1RhYQ98f0K/s2fiwlAV6qT34hT2fPZCF5UrlC6Mhx9cNnN7CRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLkN5B3gMMlxck/kUElYJVDNpz9MB8GA1UdIwQY MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHr2nfrK Gsx4Avj1KL4Su0Bg/n7PDghE2lDQeZLcMxgnl571XJKn2emti5P1ZQrHq/HSPaAA 7UnwAtUCnm4+flhfZBcC+J4u+QMLJ4JwxF/NmIr1zR3LbDfwL874E/rQo7Sxon3v AcdT3mtUjoK4NKu9A+CMTkIrIfk8foOjHY8/N7QMHu+XWD6B9HyZOzvqDdVz7/Wi w7lEXEb7SLoLUPVUI56sQZBYcblWIyH+rPhcsk6lffa2ZQSL0B5rQ2me8jLgf+ZI OUkbub/+E0oLuOPR96CPXWWQDls640q3/JmrmxGBu35ApsalgrLVyPZCZbPe6fsf jtYYgoy9K9PB0A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:23 2025 by rpki-client