This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json) Hash identifier: yYfHB3rzzm4VUjkc3YTERdI09buxbjO0qkGS7p7XBXo= Subject key identifier: A6:24:37:7D:09:8C:BA:49:17:D0:1E:13:DB:1F:C6:34:F7:1F:81:93 Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6 Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6 Certificate serial: 019B3D90A7E0D98BBBB6BA6841D4802022DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 21:00:48 +0000 Manifest this update: Sat 20 Dec 2025 21:00:48 +0000 Manifest next update: Sun 21 Dec 2025 21:00:48 +0000 Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: pCYUZA6f9pxLjqPZQYxApwsnj81ZL7j3gpNYmnQOOjM=) 2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a7:e0:d9:8b:bb:b6:ba:68:41:d4:80:20:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6 Validity Not Before: Dec 20 21:00:48 2025 GMT Not After : Dec 21 21:00:48 2025 GMT Subject: CN=a624377d098cba4917d01e13db1fc634f71f8193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:cc:43:32:62:f9:5c:b2:0c:cc:70:9c:17: d0:7d:67:24:d3:73:01:d0:d4:78:b0:96:e9:15:e2: 34:af:15:2c:dc:3f:d9:7b:d9:d3:ab:dc:09:c4:31: d8:b2:e7:90:dd:55:c9:79:62:7a:93:23:a3:34:c5: 76:28:c0:b4:0e:6a:a9:ab:8e:f7:bc:78:d4:99:eb: 46:22:a7:32:46:bf:36:b3:2b:c9:6d:31:02:ea:49: 5e:13:9b:3b:9b:99:20:30:e6:9f:20:ee:11:00:97: d3:f2:96:ee:54:be:4d:38:b4:77:16:12:29:06:e3: 60:90:43:dc:60:78:3d:19:5b:e2:5d:94:31:16:15: be:25:fb:40:9d:c4:f9:df:f2:28:86:44:5d:e9:5d: d5:16:77:f7:71:73:05:dc:69:ee:c5:2e:1e:5c:78: 3e:0f:61:06:d9:1f:81:2a:2e:e3:d9:cd:38:45:f8: 2a:58:df:07:47:e4:ec:ec:ad:6c:4a:81:07:db:0d: c2:c2:30:02:f1:68:87:e7:77:e3:ae:02:3e:bf:53: 41:b0:08:4d:df:94:7e:ba:80:bc:c9:c6:eb:66:f7: 93:30:2a:e0:6a:13:1a:16:58:e2:e9:38:91:87:09: 14:1b:de:1e:8d:41:36:d9:29:fb:5a:39:dd:bb:bf: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:24:37:7D:09:8C:BA:49:17:D0:1E:13:DB:1F:C6:34:F7:1F:81:93 X509v3 Authority Key Identifier: keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c8:6a:ab:38:1b:73:74:8e:62:06:e9:60:7e:4a:dc:11:d9: 37:56:f7:c9:f9:bc:12:d8:fe:fc:d1:a6:83:d7:1c:8c:37:a3: 0a:f2:0c:bd:fb:c4:27:76:c7:99:47:94:de:38:9f:10:75:d5: 00:0a:e0:82:aa:54:f7:62:1f:d2:ff:0f:87:49:6d:40:01:03: 73:b5:13:0d:f9:94:80:14:34:63:ed:e8:65:eb:fe:5f:30:23: 19:ca:2a:10:fe:ea:6f:23:a2:ba:b4:36:54:a1:0f:fb:88:56: 33:70:a6:fa:c1:cf:46:2b:98:64:90:13:cd:77:c2:5e:cb:6f: d3:ef:8d:26:dd:c3:8d:7b:98:96:46:87:a8:53:91:58:90:9e: 73:da:88:b6:f5:db:71:83:2b:32:ba:18:6e:59:a5:43:d7:ff: 87:d3:2c:1f:36:73:17:22:9b:1a:f3:ac:1a:e8:2a:fc:e7:34: 60:91:d8:06:cc:b6:3d:03:e4:2f:c9:40:65:7a:c3:a4:6f:9c: 3e:44:1b:cb:a1:3f:9e:8b:b8:c7:ce:ba:af:2e:77:23:19:3e: f7:87:54:78:10:2a:74:52:22:4c:15:e8:6c:98:fe:03:11:0f: f9:e7:05:86:ae:ff:c0:be:c4:c0:c4:5a:77:ad:b9:1c:19:67: b9:62:fa:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKfg2Yu7trpoQdSAICLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODhmM2FiOTRhMDc1ODcyMjBlM2Q3MTZmN2I3MTdkZjFk OWU2ZDYwHhcNMjUxMjIwMjEwMDQ4WhcNMjUxMjIxMjEwMDQ4WjAzMTEwLwYDVQQD EyhhNjI0Mzc3ZDA5OGNiYTQ5MTdkMDFlMTNkYjFmYzYzNGY3MWY4MTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxczMQzJi+VyyDMxwnBfQfWck03MB 0NR4sJbpFeI0rxUs3D/Ze9nTq9wJxDHYsueQ3VXJeWJ6kyOjNMV2KMC0Dmqpq473 vHjUmetGIqcyRr82syvJbTEC6kleE5s7m5kgMOafIO4RAJfT8pbuVL5NOLR3FhIp BuNgkEPcYHg9GVviXZQxFhW+JftAncT53/IohkRd6V3VFnf3cXMF3GnuxS4eXHg+ D2EG2R+BKi7j2c04RfgqWN8HR+Ts7K1sSoEH2w3CwjAC8WiH53fjrgI+v1NBsAhN 35R+uoC8ycbrZveTMCrgahMaFlji6TiRhwkUG94ejUE22Sn7Wjndu7+mGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYkN30JjLpJF9AeE9sfxjT3H4GTMB8GA1UdIwQY MBaAFEqI86uUoHWHIg49cW97cX3x2ebWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEt ZDQ1MTljNTM5YzlhLzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEtZDQ1MTljNTM5Yzlh LzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXshqqzgb c3SOYgbpYH5K3BHZN1b3yfm8Etj+/NGmg9ccjDejCvIMvfvEJ3bHmUeU3jifEHXV AArggqpU92If0v8Ph0ltQAEDc7UTDfmUgBQ0Y+3oZev+XzAjGcoqEP7qbyOiurQ2 VKEP+4hWM3Cm+sHPRiuYZJATzXfCXstv0++NJt3DjXuYlkaHqFORWJCec9qItvXb cYMrMroYblmlQ9f/h9MsHzZzFyKbGvOsGugq/Oc0YJHYBsy2PQPkL8lAZXrDpG+c PkQby6E/nou4x866ry53Ixk+94dUeBAqdFIiTBXobJj+AxEP+ecFhq7/wL7EwMRa d625HBlnuWL64Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:23:56 2025 by rpki-client