This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File: sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier: aTQdTOg1exkCE0Th4AmOI7rtZEO9PNun9aTCA0zmEjg=
Subject key identifier: 0D:B7:46:AD:F4:E4:8E:47:86:95:36:1F:DA:5A:35:90:89:CA:6F:22
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 019AF49BEE56CDAD5EBCE23C9FE38686E0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number: 1767
Signing time: Sat 06 Dec 2025 17:00:51 +0000
Manifest this update: Sat 06 Dec 2025 17:00:51 +0000
Manifest next update: Sun 07 Dec 2025 17:00:51 +0000
Files and hashes: 1: Kn5YPKTavnkR9we3GavTZvxru0g.roa (hash: xBxCBv93EeHCLyNABUtZ7jn766Ch4SgbtDnPEkzOvDM=)
2: aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa (hash: MOXkGsTfJLVwHpeFy8hnMbfGHfgWVvoGY31VFj0P0FE=)
3: bELo5qIIpuod7qBLIUKqwA9Ds9w.roa (hash: WzrJgL+uq92c99WVaAJUBgvncMaquptkbbkZrtxJTI8=)
4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: 5tFxacJTpuLd5UjNASWTL0XwmbID6hjjatvoPWxCHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:9b:ee:56:cd:ad:5e:bc:e2:3c:9f:e3:86:86:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Dec 6 17:00:51 2025 GMT
Not After : Dec 7 17:00:51 2025 GMT
Subject: CN=0db746adf4e48e478695361fda5a359089ca6f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:4f:96:86:ff:0c:f1:db:07:0b:bb:68:70:
b7:98:9a:92:3f:6f:fa:f1:aa:a2:fa:9b:2a:fc:22:
69:66:0c:1a:c1:00:50:22:0d:60:76:3e:37:89:78:
20:5d:b0:f0:04:0c:e6:fb:6a:d7:b9:c0:e6:72:91:
2a:cf:f1:2a:04:21:19:87:16:70:d8:d5:8c:11:0b:
35:f5:e6:7f:72:f8:d5:e6:ce:f4:62:42:85:47:39:
eb:0f:12:f0:a7:c7:8d:5c:b1:2c:c7:b6:6e:e8:2e:
c1:a3:22:70:ca:3a:20:fd:88:c4:15:5e:d5:da:78:
97:cc:f8:cf:8c:4b:ef:5a:4a:a6:fd:65:0f:21:ac:
3f:a8:c0:ec:07:2f:75:b6:f2:f3:7c:1f:ed:f9:63:
41:e7:e6:18:90:08:d0:0c:12:f0:0f:05:4b:3b:39:
3b:aa:1c:f2:d5:72:14:a8:7d:4c:8c:79:ed:32:41:
5c:f5:ad:cb:ba:d5:cb:ef:e5:32:98:be:3f:17:db:
64:b6:88:af:6e:31:87:11:67:49:bf:f7:bc:ab:d5:
5b:f7:b5:a2:2e:2d:e3:22:b6:d5:18:0c:d3:cc:5b:
d7:e7:98:8d:df:91:80:d2:ea:38:d6:8d:fe:f6:4c:
1c:03:08:f8:f8:41:76:50:d9:74:08:7f:ed:95:bc:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:46:AD:F4:E4:8E:47:86:95:36:1F:DA:5A:35:90:89:CA:6F:22
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3e:10:80:79:e3:06:76:50:b1:b3:13:db:71:bf:39:61:81:
f5:c1:bb:82:9c:e7:a7:14:7c:3e:76:a4:c2:b2:5e:ca:2d:84:
8e:46:24:77:a4:b1:dc:cd:8b:24:2e:d7:26:1e:36:42:42:15:
bb:5e:c6:ec:b0:4e:99:19:5f:7f:41:b1:72:d7:5a:bf:49:1d:
92:1e:44:6e:31:ea:f8:db:a7:6e:94:ca:0b:0f:04:de:57:46:
7f:f5:9b:a9:97:23:13:2e:4d:6d:3f:1d:c2:83:7d:5e:90:54:
4f:da:da:37:eb:1d:b4:87:db:01:82:78:69:52:1a:18:00:64:
c4:8d:03:a0:b5:f1:98:65:f6:99:ca:3a:92:e5:47:b6:f8:f9:
ee:86:6c:7b:b7:2f:fa:92:73:64:2f:d1:f6:4c:ba:83:1f:e2:
e4:e0:c7:6d:73:f5:8c:e3:8d:89:6e:72:70:44:1e:27:81:e8:
31:51:fe:30:55:92:ad:69:00:9c:85:60:e6:be:a5:3d:3a:79:
b9:f5:ff:ed:6b:f8:ec:85:2d:c6:a2:d5:56:17:89:fc:69:77:
79:0d:6a:cc:92:bf:04:97:66:1f:10:ef:83:7b:7e:5b:fb:76:
9d:b8:97:64:d8:d3:f2:04:cc:fe:23:8b:66:84:7d:0e:d4:67:
71:ff:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:56 2025 by rpki-client