This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json) Hash identifier: oAlhUuCnXbwvFw/St115nnhFhTZvm1HI8FQSRCUyLm0= Subject key identifier: 38:87:24:E8:68:4A:97:C1:87:E6:C3:52:58:A4:F9:CB:40:40:73:5B Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Certificate serial: 019AF12CD516498B46D46D38907B8D34E14B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft Manifest number: 0AF2 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=) 2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: CtsYDXhYFS4WJ33bVuZltOq9MmcsC1VPL4/dHtOlIa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d5:16:49:8b:46:d4:6d:38:90:7b:8d:34:e1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=388724e8684a97c187e6c35258a4f9cb4040735b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:12:3b:4b:38:37:27:fc:aa:d9:07:4a:ed: 73:6f:ff:09:31:12:f6:15:cf:06:c1:6e:d7:1d:63: 56:15:65:ad:e0:b3:3e:cd:26:c8:e6:8b:c0:7d:fa: 16:d2:bd:bc:cc:59:51:2d:05:a6:ba:9a:dd:1f:10: 13:8a:b5:25:a8:29:d0:99:35:c6:4c:d7:b7:c6:78: 40:5e:f0:6c:fc:e1:53:f2:50:4b:0b:d6:52:84:77: 7f:bd:39:4d:8f:c4:8c:2e:9f:44:f3:98:6b:e0:4f: dd:1a:96:25:fe:cd:b9:fb:02:26:77:67:5a:e2:05: d6:9c:b8:ed:1d:9d:1b:80:09:21:23:ea:91:8e:f1: dd:2f:c6:fa:40:74:3d:06:1a:7a:b4:20:da:ed:8a: 73:6a:04:85:df:25:6e:b4:c1:18:14:b3:f6:66:83: e7:af:5b:c8:fa:ff:cc:17:59:4e:9e:93:ee:f5:83: 08:22:31:ff:7a:da:6c:4a:8b:8a:ce:db:40:85:9a: a0:4a:b3:e3:0a:21:03:fa:37:0e:d3:f6:b2:f0:96: e6:64:4e:8e:e5:10:ad:5b:bc:c8:02:58:6e:8c:70: 56:ee:34:76:a6:bd:ab:9d:92:3f:66:86:45:6a:02: d3:84:7f:59:bb:f7:54:31:86:d6:c8:b6:e6:37:84: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:87:24:E8:68:4A:97:C1:87:E6:C3:52:58:A4:F9:CB:40:40:73:5B X509v3 Authority Key Identifier: keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a1:6a:cd:70:9c:56:ad:d5:e0:d3:de:aa:e0:b2:0f:98:94: 7c:4f:eb:8a:5b:f9:f5:05:97:a0:43:c0:1a:3a:fb:b8:84:37: 79:f6:29:31:52:54:5c:59:d9:b9:1a:3d:76:80:88:32:20:1a: 69:9a:cc:aa:42:de:66:77:5c:fa:16:29:9d:27:9f:4a:24:c9: 2f:84:ce:b4:f5:48:4d:5c:c5:66:74:10:6e:4c:a9:06:0c:a0: 10:73:fe:4c:81:59:21:6b:c0:a9:ac:2d:45:a4:de:40:ee:5c: 16:be:8a:aa:c9:54:3a:2d:e9:30:45:f7:4a:73:dd:57:ea:ff: 02:95:2c:26:9b:57:9b:00:ac:8a:46:b6:5b:bb:b2:f6:c3:81: 76:21:94:ad:20:94:62:0c:66:26:72:28:94:29:67:7d:3a:f1: 08:b8:1d:31:6e:a2:3a:66:44:52:d5:26:25:e3:a1:df:58:3e: 74:9f:0a:c4:71:45:0f:dc:6d:3d:1e:bc:dc:60:5e:29:1e:5b: 4b:a4:2b:b7:2b:92:66:7d:96:a2:b7:8f:c0:45:22:94:1f:e0: 04:94:5d:c0:3d:f5:60:f4:db:74:49:f0:e9:d6:ef:1b:ca:ba: 63:f0:00:9b:d0:1d:b4:ca:8b:a6:74:f7:b9:4d:8e:99:2d:71: f0:79:80:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNUWSYtG1G04kHuNNOFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl NDQ4NTcwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EygzODg3MjRlODY4NGE5N2MxODdlNmMzNTI1OGE0ZjljYjQwNDA3MzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshgSO0s4Nyf8qtkHSu1zb/8JMRL2 Fc8GwW7XHWNWFWWt4LM+zSbI5ovAffoW0r28zFlRLQWmuprdHxATirUlqCnQmTXG TNe3xnhAXvBs/OFT8lBLC9ZShHd/vTlNj8SMLp9E85hr4E/dGpYl/s25+wImd2da 4gXWnLjtHZ0bgAkhI+qRjvHdL8b6QHQ9Bhp6tCDa7YpzagSF3yVutMEYFLP2ZoPn r1vI+v/MF1lOnpPu9YMIIjH/etpsSouKzttAhZqgSrPjCiED+jcO0/ay8JbmZE6O 5RCtW7zIAlhujHBW7jR2pr2rnZI/ZoZFagLThH9Zu/dUMYbWyLbmN4TmNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiHJOhoSpfBh+bDUlik+ctAQHNbMB8GA1UdIwQY MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKFqzXCc Vq3V4NPequCyD5iUfE/rilv59QWXoEPAGjr7uIQ3efYpMVJUXFnZuRo9doCIMiAa aZrMqkLeZndc+hYpnSefSiTJL4TOtPVITVzFZnQQbkypBgygEHP+TIFZIWvAqawt RaTeQO5cFr6KqslUOi3pMEX3SnPdV+r/ApUsJptXmwCsika2W7uy9sOBdiGUrSCU YgxmJnIolClnfTrxCLgdMW6iOmZEUtUmJeOh31g+dJ8KxHFFD9xtPR683GBeKR5b S6QrtyuSZn2WorePwEUilB/gBJRdwD31YPTbdEnw6dbvG8q6Y/AAm9AdtMqLpnT3 uU2OmS1x8HmALA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:04 2025 by rpki-client