This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json) Hash identifier: 2BdFHhELna5xSWO6jJ8IgYLdym1w6YUs2/45cwXlf50= Subject key identifier: 1F:11:37:0A:F0:5A:FE:33:55:BF:0D:2C:87:C6:86:8B:AB:E6:48:17 Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Certificate serial: 019B2B53BAF2FF29F6FFA5851876FA198949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft Manifest number: 07B8 Signing time: Wed 17 Dec 2025 08:01:06 +0000 Manifest this update: Wed 17 Dec 2025 08:01:06 +0000 Manifest next update: Thu 18 Dec 2025 08:01:06 +0000 Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=) 2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: II/knLs/PKTriWwnSeinEby5x5/0Sk4sVcmCdvxwas8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:ba:f2:ff:29:f6:ff:a5:85:18:76:fa:19:89:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Validity Not Before: Dec 17 08:01:06 2025 GMT Not After : Dec 18 08:01:06 2025 GMT Subject: CN=1f11370af05afe3355bf0d2c87c6868babe64817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:db:d8:17:41:61:3d:bf:d0:cd:d1:5e:cf: 92:fe:f5:b4:41:c1:28:ed:2d:e2:b1:1e:77:93:fc: 0f:89:ec:c9:74:a2:32:26:9b:55:1c:94:ad:84:2c: 8a:49:14:db:10:54:c0:bf:7d:74:5b:ec:a6:7f:e4: 86:44:57:23:54:d8:df:56:cb:d1:8a:d3:ec:b8:83: 09:19:df:dd:5f:46:02:c8:98:1a:54:a8:0b:5b:70: ac:73:3f:9e:c8:2b:5c:d5:96:3d:ae:cc:b3:1f:5a: 09:92:04:5e:65:55:b6:6c:7f:a9:d1:a0:eb:86:fa: cf:ff:35:ce:50:89:28:76:5e:cf:12:5a:ad:38:11: f4:9e:77:e4:cb:d8:5f:33:2c:96:85:2e:bd:fa:2f: db:a4:63:ce:54:e9:91:ae:c8:5f:ee:cc:14:6f:ab: 76:5a:77:61:02:e3:07:8c:e6:da:95:7d:a3:d8:65: 2e:3a:d9:25:2c:f6:3d:64:34:12:38:e2:4e:19:ad: 00:a5:9d:3b:9b:6d:ad:ef:fb:94:a9:98:34:e7:7c: 2f:64:1d:8c:25:80:32:3e:04:cf:7a:2f:68:28:71: ec:67:ad:cc:a5:24:c7:05:5f:6b:de:89:90:46:9e: 7a:54:7d:da:73:42:3a:1a:95:9f:ca:0e:36:f7:33: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:11:37:0A:F0:5A:FE:33:55:BF:0D:2C:87:C6:86:8B:AB:E6:48:17 X509v3 Authority Key Identifier: keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:09:43:35:38:36:1f:a4:af:19:91:b5:3f:5f:98:52:51:05: 98:fb:79:90:da:92:96:a0:8b:2f:7b:7f:b7:b8:ee:3b:e4:77: 10:e0:c6:8f:02:ef:81:89:a6:36:3f:79:8a:63:37:ca:c3:9a: e9:88:11:b3:4c:64:a8:d3:03:3c:04:1f:59:b0:2c:12:26:55: e2:44:60:bc:87:ae:d6:dd:d1:d2:06:99:69:95:a9:8e:7e:87: 41:ec:b9:d3:00:06:09:99:ef:25:13:8b:ea:9b:21:41:f8:3e: 55:06:99:31:bb:b9:1c:b0:07:83:4f:07:20:c2:c2:81:14:c3: cf:91:50:12:09:92:21:4e:22:6e:bd:ba:9d:8a:cc:49:eb:65: f4:3a:af:f8:0d:2a:a1:32:20:5b:ad:2a:34:87:3c:3b:0e:ae: 58:ef:96:82:df:01:f6:21:7e:d2:36:ee:5d:17:ca:eb:c2:2d: d1:44:ae:bf:ba:dd:68:3d:ac:b6:30:c4:62:f5:7e:26:df:e4: 40:bd:9c:bf:1b:32:c1:88:9e:39:af:a0:2b:4f:e4:02:d8:45: da:00:9f:d3:e8:43:cd:1a:a2:63:eb:e4:fc:41:3b:d2:51:c3: 81:fb:63:d6:ae:46:22:1c:0f:32:e2:74:63:54:83:b7:12:49: 46:27:45:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU7ry/yn2/6WFGHb6GYlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw YThkMTEwHhcNMjUxMjE3MDgwMTA2WhcNMjUxMjE4MDgwMTA2WjAzMTEwLwYDVQQD EygxZjExMzcwYWYwNWFmZTMzNTViZjBkMmM4N2M2ODY4YmFiZTY0ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns7b2BdBYT2/0M3RXs+S/vW0QcEo 7S3isR53k/wPiezJdKIyJptVHJSthCyKSRTbEFTAv310W+ymf+SGRFcjVNjfVsvR itPsuIMJGd/dX0YCyJgaVKgLW3Cscz+eyCtc1ZY9rsyzH1oJkgReZVW2bH+p0aDr hvrP/zXOUIkodl7PElqtOBH0nnfky9hfMyyWhS69+i/bpGPOVOmRrshf7swUb6t2 WndhAuMHjObalX2j2GUuOtklLPY9ZDQSOOJOGa0ApZ07m22t7/uUqZg053wvZB2M JYAyPgTPei9oKHHsZ63MpSTHBV9r3omQRp56VH3ac0I6GpWfyg429zOsxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8RNwrwWv4zVb8NLIfGhour5kgXMB8GA1UdIwQY MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt Y2JlYzQzZmQ5MmExLzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgglDNTg2 H6SvGZG1P1+YUlEFmPt5kNqSlqCLL3t/t7juO+R3EODGjwLvgYmmNj95imM3ysOa 6YgRs0xkqNMDPAQfWbAsEiZV4kRgvIeu1t3R0gaZaZWpjn6HQey50wAGCZnvJROL 6pshQfg+VQaZMbu5HLAHg08HIMLCgRTDz5FQEgmSIU4ibr26nYrMSetl9Dqv+A0q oTIgW60qNIc8Ow6uWO+Wgt8B9iF+0jbuXRfK68It0USuv7rdaD2stjDEYvV+Jt/k QL2cvxsywYieOa+gK0/kAthF2gCf0+hDzRqiY+vk/EE70lHDgftj1q5GIhwPMuJ0 Y1SDtxJJRidFSw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:08 2025 by rpki-client