This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json) Hash identifier: 5wvrlfF2wBsD1h78IA0Ce54VslozuU9OgEnhZg8WJdQ= Subject key identifier: FE:C1:68:DD:81:E6:C0:77:51:66:E7:A5:3B:B7:B3:8B:68:FB:30:BC Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75 Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975 Certificate serial: 019AF31C42665CDFFB43CB89CB493048465E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft Manifest number: 0B32 Signing time: Sat 06 Dec 2025 10:01:46 +0000 Manifest this update: Sat 06 Dec 2025 10:01:46 +0000 Manifest next update: Sun 07 Dec 2025 10:01:46 +0000 Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: 4dggU3t9MizVGS6f7i1+foFPvQSKbOoqL4Mblg24UD4=) 2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:42:66:5c:df:fb:43:cb:89:cb:49:30:48:46:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975 Validity Not Before: Dec 6 10:01:46 2025 GMT Not After : Dec 7 10:01:46 2025 GMT Subject: CN=fec168dd81e6c0775166e7a53bb7b38b68fb30bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c1:35:db:10:79:9e:21:7b:df:eb:2e:ff:76: 2e:b5:2f:9f:b1:0e:cd:05:ca:ca:21:e5:d7:b6:ce: 2a:61:e6:3d:c0:7f:a1:c0:e9:06:45:50:0b:5d:f4: 2a:71:d1:83:9f:d5:4b:c8:23:21:3b:b7:10:f0:20: e0:b6:bd:e3:ba:8d:53:02:bd:d0:f5:51:9f:39:02: c2:55:fe:24:89:5c:94:1a:73:83:e6:e7:5f:89:46: 10:6b:b8:26:64:48:3d:03:ee:a6:3a:15:ce:ee:93: 8a:8f:29:9e:2d:eb:bc:f6:c8:49:97:56:5f:1b:83: d3:db:3b:17:b7:ca:38:69:86:3b:67:34:bc:b8:79: 1b:2d:d0:0b:b3:1c:50:8e:14:b0:99:38:74:85:8c: 38:3f:37:e3:1e:f6:99:50:c1:9d:e2:75:b7:c1:87: 40:b8:8d:f8:38:21:b2:84:2b:b0:22:b3:32:ba:b2: 33:4e:be:02:2d:12:3c:91:45:a6:d5:c3:57:34:e5: 34:c4:5a:c7:3c:05:c7:29:13:10:4d:69:74:fc:f3: 65:5c:47:27:7b:94:2d:97:6b:a7:0e:7d:d7:20:38: f1:29:ee:9c:63:f7:05:cb:00:c7:82:44:79:7b:6a: 09:95:e5:11:e1:2d:4f:d9:86:08:12:1b:98:a4:98: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C1:68:DD:81:E6:C0:77:51:66:E7:A5:3B:B7:B3:8B:68:FB:30:BC X509v3 Authority Key Identifier: keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c9:fd:5a:04:7e:b3:0b:db:0a:58:fb:f8:65:18:d9:2e:77: c6:c3:71:a9:76:8f:88:a8:71:17:60:62:5c:f5:b6:2c:1a:87: 6b:c0:22:75:5f:e2:9d:c7:82:9a:a5:42:f8:ed:c5:e1:a7:98: 38:28:ec:f1:2b:b0:98:55:2a:4a:fb:12:aa:bc:f9:1c:2f:c9: 73:c2:da:83:1c:51:c4:e2:ec:59:d3:76:20:ef:df:ff:1e:53: ca:72:30:24:79:bb:72:ee:66:b5:44:bd:3e:fb:91:8e:27:41: cf:21:d0:97:6a:4f:76:3c:00:1b:a4:6e:0b:cc:91:56:c7:67: 17:04:21:8a:f0:c7:0d:f2:63:71:a8:2b:c3:c6:3b:28:56:ce: ec:24:64:02:99:98:f7:c2:0f:54:45:a4:1b:41:87:71:73:d3: 2f:ff:a9:8d:31:09:b2:b2:d8:83:cf:65:b9:d9:25:0f:d4:b0: 3c:b7:7d:d6:45:ec:54:6d:35:b8:84:71:fc:65:a5:fe:f2:d6: 3e:37:77:82:c3:f0:0e:3c:7e:ac:ae:76:1d:c4:3b:a2:48:0e: 99:f5:ce:3c:c1:0e:86:35:6c:89:f4:a6:6d:74:fa:5b:02:37: 8b:c0:51:b0:8a:be:3e:b4:0d:3c:e6:8b:a3:12:73:7e:e1:2a: dc:29:7c:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEJmXN/7Q8uJy0kwSEZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2EwNDU4NmE4NWVkMTJlOWNkYTgzNGRmZGZhMTE5YzFh NTg5NzUwHhcNMjUxMjA2MTAwMTQ2WhcNMjUxMjA3MTAwMTQ2WjAzMTEwLwYDVQQD EyhmZWMxNjhkZDgxZTZjMDc3NTE2NmU3YTUzYmI3YjM4YjY4ZmIzMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ME12xB5niF73+su/3YutS+fsQ7N BcrKIeXXts4qYeY9wH+hwOkGRVALXfQqcdGDn9VLyCMhO7cQ8CDgtr3juo1TAr3Q 9VGfOQLCVf4kiVyUGnOD5udfiUYQa7gmZEg9A+6mOhXO7pOKjymeLeu89shJl1Zf G4PT2zsXt8o4aYY7ZzS8uHkbLdALsxxQjhSwmTh0hYw4PzfjHvaZUMGd4nW3wYdA uI34OCGyhCuwIrMyurIzTr4CLRI8kUWm1cNXNOU0xFrHPAXHKRMQTWl0/PNlXEcn e5Qtl2unDn3XIDjxKe6cY/cFywDHgkR5e2oJleUR4S1P2YYIEhuYpJjPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7BaN2B5sB3UWbnpTu3s4to+zC8MB8GA1UdIwQY MBaAFErKBFhqhe0S6c2oNN/foRnBpYl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2Ut MWI1ZGU1Yjc2MDYyLzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2UtMWI1ZGU1Yjc2MDYy LzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsn9WgR+ swvbClj7+GUY2S53xsNxqXaPiKhxF2BiXPW2LBqHa8AidV/inceCmqVC+O3F4aeY OCjs8SuwmFUqSvsSqrz5HC/Jc8LagxxRxOLsWdN2IO/f/x5TynIwJHm7cu5mtUS9 PvuRjidBzyHQl2pPdjwAG6RuC8yRVsdnFwQhivDHDfJjcagrw8Y7KFbO7CRkApmY 98IPVEWkG0GHcXPTL/+pjTEJsrLYg89ludklD9SwPLd91kXsVG01uIRx/GWl/vLW Pjd3gsPwDjx+rK52HcQ7okgOmfXOPMEOhjVsifSmbXT6WwI3i8BRsIq+PrQNPOaL oxJzfuEq3Cl8lg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:55 2025 by rpki-client