This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json) Hash identifier: CBZBVGJzuEQ6FDO8OOrFe1hwtAXZn0Z8UNX0Co2mz6k= Subject key identifier: 3D:77:C3:56:34:9C:7E:F4:AC:7F:79:D8:33:A7:E4:7A:17:7D:AC:50 Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb Certificate serial: 019AF0BF5CB6CB333B3534DC1899F9835006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=) 2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=) 3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: M8ZqiAvKt++v7an6Pc6pQ61eGbGhhiTLT/d3nssgnhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5c:b6:cb:33:3b:35:34:dc:18:99:f9:83:50:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=3d77c356349c7ef4ac7f79d833a7e47a177dac50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:71:73:ca:6c:95:4b:4b:0a:28:68:7a:4c:85: 8a:fc:ad:09:e1:e2:b1:50:7a:ec:17:81:8c:3f:ec: ad:11:c8:d8:13:97:49:7b:c4:da:2e:90:c5:98:fb: 6d:2e:d4:f0:75:40:1e:a5:44:40:d2:19:36:45:89: 27:fa:1f:96:1e:46:d0:0f:d6:aa:f6:ab:1e:82:c2: 57:73:57:da:83:b7:56:9d:2d:e0:ca:e2:e8:7e:b3: 08:6a:27:85:a6:65:e0:21:82:81:98:2e:56:e1:63: bb:84:9c:d5:dd:87:de:24:88:da:83:10:2d:aa:e0: 7e:f9:e4:96:fd:c6:dc:6e:28:ec:ca:61:54:24:b0: 36:67:54:b9:20:18:e2:1f:19:8f:42:f7:62:53:d5: 7e:52:e9:6a:49:ed:62:79:0e:8d:12:12:2b:a9:84: 84:06:8a:2c:0e:5e:37:23:bc:bc:1f:90:13:99:66: 95:b3:91:be:cb:58:c9:29:06:60:62:b5:72:f9:3b: 27:fb:12:5b:26:e3:e9:c8:59:8c:83:51:a5:e8:e6: 29:11:bc:3d:14:2a:68:fd:54:42:49:89:0c:40:d9: 7d:4a:c7:c3:a4:7a:fa:08:d9:4a:cc:55:b1:31:4a: 9d:16:4b:de:e2:95:55:5b:02:a2:4d:1c:23:d4:f6: 01:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:77:C3:56:34:9C:7E:F4:AC:7F:79:D8:33:A7:E4:7A:17:7D:AC:50 X509v3 Authority Key Identifier: keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cc:ea:52:48:6d:32:12:c3:41:6f:bf:4d:b3:40:a8:da:f3: 61:fb:76:2a:7e:a2:67:50:86:3a:cb:d2:b2:1c:eb:73:b8:61: c1:b9:76:0c:42:e7:45:42:0f:a3:91:86:14:b4:9f:84:62:09: 18:55:d0:90:3b:89:71:a6:5e:59:10:dd:ec:39:43:fa:fc:29: f0:1f:f7:b2:78:6a:ec:2d:9d:2f:c8:75:88:67:09:fa:70:c1: 12:5a:7b:8c:55:14:1c:4b:da:2c:67:1e:16:06:74:b8:bb:54: cd:35:e5:0c:f0:5a:dd:05:52:7d:9f:d2:35:35:21:f5:04:cc: 7e:75:15:42:0c:b5:66:c6:2f:d4:97:13:e8:d8:a8:d2:07:5e: d4:29:0e:a2:d4:09:b4:df:e5:ef:f7:48:9f:ad:1b:2b:7b:a9: fa:b3:de:69:35:08:92:1a:cc:14:ee:5a:76:b5:f3:21:a7:e6: fc:85:22:b0:cc:a3:67:b4:20:33:b8:16:20:c7:d1:5b:bb:20: 69:94:07:70:b6:fe:42:f5:c3:e1:b6:34:8c:30:01:cc:6a:78: e7:bd:d7:c2:52:d9:2c:de:96:f3:23:33:24:ee:b6:c5:e2:bf: bb:64:83:d6:8e:f9:d4:55:3b:8f:c2:1d:bb:9f:29:bf:91:99: 68:8b:a7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1y2yzM7NTTcGJn5g1AGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjU1MTkzN2VmYzk2ZTE0NWUzM2ExZWJjYTI0NDkyZGMx MjBlY2IwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EygzZDc3YzM1NjM0OWM3ZWY0YWM3Zjc5ZDgzM2E3ZTQ3YTE3N2RhYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nFzymyVS0sKKGh6TIWK/K0J4eKx UHrsF4GMP+ytEcjYE5dJe8TaLpDFmPttLtTwdUAepURA0hk2RYkn+h+WHkbQD9aq 9qsegsJXc1fag7dWnS3gyuLofrMIaieFpmXgIYKBmC5W4WO7hJzV3YfeJIjagxAt quB++eSW/cbcbijsymFUJLA2Z1S5IBjiHxmPQvdiU9V+UulqSe1ieQ6NEhIrqYSE BoosDl43I7y8H5ATmWaVs5G+y1jJKQZgYrVy+Tsn+xJbJuPpyFmMg1Gl6OYpEbw9 FCpo/VRCSYkMQNl9SsfDpHr6CNlKzFWxMUqdFkve4pVVWwKiTRwj1PYBoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD13w1Y0nH70rH952DOn5HoXfaxQMB8GA1UdIwQY MBaAFLBlUZN+/JbhReM6HryiRJLcEg7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEt YmYwOWFkMzJjODg4LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEtYmYwOWFkMzJjODg4 LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMzqUkht MhLDQW+/TbNAqNrzYft2Kn6iZ1CGOsvSshzrc7hhwbl2DELnRUIPo5GGFLSfhGIJ GFXQkDuJcaZeWRDd7DlD+vwp8B/3snhq7C2dL8h1iGcJ+nDBElp7jFUUHEvaLGce FgZ0uLtUzTXlDPBa3QVSfZ/SNTUh9QTMfnUVQgy1ZsYv1JcT6Nio0gde1CkOotQJ tN/l7/dIn60bK3up+rPeaTUIkhrMFO5adrXzIafm/IUisMyjZ7QgM7gWIMfRW7sg aZQHcLb+QvXD4bY0jDABzGp4573XwlLZLN6W8yMzJO62xeK/u2SD1o751FU7j8Id u58pv5GZaIun1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:57 2025 by rpki-client