This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json) Hash identifier: U+c5jKZmQMbmlqapVFqUJzNDgMoN+C9uL536n5KgYrg= Subject key identifier: 18:B2:9F:0D:AE:A1:F1:D1:CC:DC:F0:34:D7:57:F7:E3:DE:FA:E5:90 Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3 Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3 Certificate serial: 019AF61CE66B15EFBF7B7B1E9E0EF5B8C075 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft Manifest number: 041D Signing time: Sun 07 Dec 2025 00:01:20 +0000 Manifest this update: Sun 07 Dec 2025 00:01:20 +0000 Manifest next update: Mon 08 Dec 2025 00:01:20 +0000 Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=) 2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: u/oj+2GrOfxOUkXnbDlp/ADgj2fN10hGr3DVoMHbmTI=) 3: s4XNe0m5JYFtPI85hv2GLzYIY68.roa (hash: pE7eHdiD/UhztagcGqo6QdniDLwOOKzreXSfWjlvBJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:e6:6b:15:ef:bf:7b:7b:1e:9e:0e:f5:b8:c0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3 Validity Not Before: Dec 7 00:01:20 2025 GMT Not After : Dec 8 00:01:20 2025 GMT Subject: CN=18b29f0daea1f1d1ccdcf034d757f7e3defae590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:11:2e:71:3f:43:48:89:8d:3f:27:1a:80: 7d:b4:8a:0a:31:ad:f3:59:61:0e:62:16:e3:eb:32: 66:a0:5b:8e:49:23:a8:50:fa:cb:88:22:14:c8:72: 71:a2:c7:98:f0:1f:34:a9:86:0a:7e:85:b7:2b:da: d5:fb:6d:ad:b1:22:67:6c:1a:4e:55:d4:56:2d:23: 67:6a:61:37:95:b8:8d:63:6d:cb:b5:df:67:51:eb: 4a:8d:c1:d6:90:06:93:6c:ff:96:0f:10:5a:17:ce: b6:52:a6:c3:bb:6c:91:29:22:5f:8c:4a:50:71:ae: 04:56:91:1f:20:ff:a5:f6:dd:35:09:ed:bc:bb:de: c3:22:4a:29:1c:07:8a:19:6c:dc:1f:59:3e:42:e2: 0b:f4:97:99:b0:62:d5:1b:a1:73:42:9d:69:9c:28: 62:9e:85:2c:73:2b:8b:7a:d7:0e:24:cf:ee:1c:e3: 36:cd:87:ec:2d:ee:26:2e:30:de:20:00:f9:04:18: 03:78:9a:d1:34:9c:f8:90:05:6e:0d:b4:22:b7:8f: c3:69:50:a4:1f:55:8f:ab:1a:e7:78:a2:1b:55:c6: d1:5f:16:25:1f:6e:31:d7:a5:00:f4:13:95:9d:3a: b5:aa:f9:00:5d:9d:dc:4b:54:12:1c:48:81:c7:51: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B2:9F:0D:AE:A1:F1:D1:CC:DC:F0:34:D7:57:F7:E3:DE:FA:E5:90 X509v3 Authority Key Identifier: keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:10:3f:89:9f:16:2e:e1:5a:9c:2c:73:a3:62:f8:96:e1:fb: d9:45:c9:18:0c:fd:b1:11:51:03:07:85:9d:79:7e:77:35:f0: 7e:2f:ca:50:99:5b:af:95:bc:f9:0e:28:a1:87:6c:19:36:03: cb:21:5c:4d:f7:42:7d:8d:c2:53:7d:87:cc:52:5e:c1:ae:51: 32:4e:58:89:75:66:42:79:66:8d:20:4c:30:2b:ab:c6:df:ab: 3d:10:b5:b7:f1:20:9a:d3:fd:dd:3c:70:bc:c3:65:bc:97:f0: 13:0d:93:6a:46:bd:00:6e:0a:1e:56:f8:02:25:98:ee:9f:9f: 1b:c3:12:7c:8b:c1:71:73:57:90:c9:7e:38:63:b9:68:6e:1a: eb:60:bf:cc:cd:12:de:5a:ef:73:f9:91:e2:61:cd:65:37:78: a8:00:15:ca:40:a6:09:18:48:7d:66:da:47:e8:3e:fc:54:79: 8f:e7:a8:ea:ad:a7:b1:7c:3e:03:3c:ed:50:08:18:7f:b6:b6: 4e:d0:12:ce:f6:94:75:50:76:b2:8d:97:c8:eb:d9:bd:c7:dc: 9f:f4:e6:a0:af:e1:92:b1:ce:58:d4:9c:76:5c:d2:1f:d8:23: 1d:5d:8c:20:5f:f8:40:74:12:4e:6f:38:62:dc:fb:63:3b:41: c8:fa:d7:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HOZrFe+/e3seng71uMB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl NzAxZjMwHhcNMjUxMjA3MDAwMTIwWhcNMjUxMjA4MDAwMTIwWjAzMTEwLwYDVQQD EygxOGIyOWYwZGFlYTFmMWQxY2NkY2YwMzRkNzU3ZjdlM2RlZmFlNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSQRLnE/Q0iJjT8nGoB9tIoKMa3z WWEOYhbj6zJmoFuOSSOoUPrLiCIUyHJxoseY8B80qYYKfoW3K9rV+22tsSJnbBpO VdRWLSNnamE3lbiNY23Ltd9nUetKjcHWkAaTbP+WDxBaF862UqbDu2yRKSJfjEpQ ca4EVpEfIP+l9t01Ce28u97DIkopHAeKGWzcH1k+QuIL9JeZsGLVG6FzQp1pnChi noUscyuLetcOJM/uHOM2zYfsLe4mLjDeIAD5BBgDeJrRNJz4kAVuDbQit4/DaVCk H1WPqxrneKIbVcbRXxYlH24x16UA9BOVnTq1qvkAXZ3cS1QSHEiBx1GS6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiynw2uofHRzNzwNNdX9+Pe+uWQMB8GA1UdIwQY MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt NjNmMTk3ZmIxYzk2LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2 LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRA/iZ8W LuFanCxzo2L4luH72UXJGAz9sRFRAweFnXl+dzXwfi/KUJlbr5W8+Q4ooYdsGTYD yyFcTfdCfY3CU32HzFJewa5RMk5YiXVmQnlmjSBMMCurxt+rPRC1t/EgmtP93Txw vMNlvJfwEw2Taka9AG4KHlb4AiWY7p+fG8MSfIvBcXNXkMl+OGO5aG4a62C/zM0S 3lrvc/mR4mHNZTd4qAAVykCmCRhIfWbaR+g+/FR5j+eo6q2nsXw+AzztUAgYf7a2 TtASzvaUdVB2so2XyOvZvcfcn/TmoK/hkrHOWNScdlzSH9gjHV2MIF/4QHQSTm84 Ytz7YztByPrXvQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:32 2025 by rpki-client