This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json) Hash identifier: v5rwlgIRj/1kcgJkT1xHK4eLIm3GzTCmyyX+HyOH8Lw= Subject key identifier: 5B:97:38:82:0B:11:AE:4C:60:80:C6:E1:64:A7:CE:9A:F1:1B:FC:3E Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48 Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48 Certificate serial: 019AF6535B6B2BDB3B80A27D83E64C386A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft Manifest number: 0386 Signing time: Sun 07 Dec 2025 01:00:49 +0000 Manifest this update: Sun 07 Dec 2025 01:00:49 +0000 Manifest next update: Mon 08 Dec 2025 01:00:49 +0000 Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: TMt2XZ2aExYns4GvyYFbzNKiFHYS92kV9GTPFjPNqUk=) 2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:5b:6b:2b:db:3b:80:a2:7d:83:e6:4c:38:6a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48 Validity Not Before: Dec 7 01:00:49 2025 GMT Not After : Dec 8 01:00:49 2025 GMT Subject: CN=5b9738820b11ae4c6080c6e164a7ce9af11bfc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3b:0f:76:af:36:4a:fa:f4:d3:d2:51:03:39: 3a:a2:cc:73:6b:8b:89:29:32:14:5c:e9:7e:e7:06: 42:b5:46:18:0d:ed:88:fb:f8:09:6b:65:ac:d4:73: f0:bc:85:8a:e0:4e:d5:ac:86:9c:c0:22:67:7d:00: 27:6f:ab:d4:af:17:d1:3a:cb:62:44:00:ba:0c:27: 49:4b:e0:6a:a6:89:75:e6:4d:07:43:02:5e:a7:b1: 6d:74:91:3c:e4:8c:11:6b:ba:f5:05:27:02:66:42: 0c:7f:d1:5c:05:ae:d8:25:e2:b1:0a:50:bd:4d:da: b0:e6:aa:86:d1:6a:39:7a:a0:01:d8:57:d1:61:e2: 91:7e:d7:95:3a:53:81:77:16:97:8c:84:29:e3:e4: 47:2f:be:56:29:c0:a6:09:bd:40:23:55:e4:e9:31: af:9e:c1:d2:4b:af:50:02:58:f0:76:89:5f:ef:dd: 32:2c:72:ae:a4:f2:f9:cb:e5:b0:4b:95:19:d9:c9: c9:43:f0:6e:e2:be:87:9d:11:c3:b1:29:82:2f:1d: 5b:ba:b6:ce:9c:d4:01:9e:e6:b1:d6:70:84:a0:da: 33:c4:78:0d:0e:6e:5a:58:c7:68:98:66:f0:db:f0: b1:2d:33:39:ee:e2:06:6c:b9:e3:da:2e:18:7b:1b: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:97:38:82:0B:11:AE:4C:60:80:C6:E1:64:A7:CE:9A:F1:1B:FC:3E X509v3 Authority Key Identifier: keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8b:62:cf:e7:b1:b0:09:58:c4:3b:f8:17:fc:51:7c:50:dc: 6a:f2:06:0b:af:a6:4b:6a:d7:0a:63:fd:66:d3:de:90:bd:e1: 47:b9:00:1e:30:43:5d:72:6d:67:e2:0d:c4:5e:5e:06:53:0f: 16:0a:8d:39:7a:bd:11:c4:6a:2d:23:6d:75:89:e5:60:c5:a7: f5:de:0b:97:3c:cc:fa:29:e3:d4:3c:5a:1a:34:50:fd:a1:97: 24:a9:1c:ce:94:22:22:ff:9e:c1:60:ca:59:8b:56:dc:a7:82: 2f:6a:26:9c:00:67:e1:12:c3:7f:d3:aa:d4:26:0e:f1:03:0d: 24:6e:89:75:c9:c2:87:42:1f:1e:45:82:24:5f:e2:9d:99:a9: 6d:37:6e:fb:d5:33:a3:84:59:c0:fd:7f:ff:a1:b1:36:9c:0f: 24:91:55:ce:ca:19:83:61:26:7d:94:8d:b2:d0:67:e9:a4:23: 3d:ca:4b:04:c8:fd:a6:22:8f:15:ab:da:71:c4:46:40:d9:68: b3:63:03:de:91:2c:64:41:48:27:c6:8a:b6:78:8d:42:c4:bf: 90:d5:13:7c:81:fc:c3:26:64:f0:17:eb:25:fa:82:55:b5:2d: d8:e8:63:05:58:b7:9f:ac:49:12:d0:6b:d6:78:e8:f5:1b:7e: e7:a6:31:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U1trK9s7gKJ9g+ZMOGoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MjE5MjgxM2QyMmVmYTA0YmNiYjI0ZTBiZjBmZTM0ZDhk ZmJhNDgwHhcNMjUxMjA3MDEwMDQ5WhcNMjUxMjA4MDEwMDQ5WjAzMTEwLwYDVQQD Eyg1Yjk3Mzg4MjBiMTFhZTRjNjA4MGM2ZTE2NGE3Y2U5YWYxMWJmYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zsPdq82Svr009JRAzk6osxza4uJ KTIUXOl+5wZCtUYYDe2I+/gJa2Ws1HPwvIWK4E7VrIacwCJnfQAnb6vUrxfROsti RAC6DCdJS+Bqpol15k0HQwJep7FtdJE85IwRa7r1BScCZkIMf9FcBa7YJeKxClC9 Tdqw5qqG0Wo5eqAB2FfRYeKRfteVOlOBdxaXjIQp4+RHL75WKcCmCb1AI1Xk6TGv nsHSS69QAljwdolf790yLHKupPL5y+WwS5UZ2cnJQ/Bu4r6HnRHDsSmCLx1burbO nNQBnuax1nCEoNozxHgNDm5aWMdomGbw2/CxLTM57uIGbLnj2i4YexstkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuXOIILEa5MYIDG4WSnzprxG/w+MB8GA1UdIwQY MBaAFNUhkoE9Iu+gS8uyTgvw/jTY37pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDIt ZDhjNDRkNjA0YmMyLzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDItZDhjNDRkNjA0YmMy LzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfotiz+ex sAlYxDv4F/xRfFDcavIGC6+mS2rXCmP9ZtPekL3hR7kAHjBDXXJtZ+INxF5eBlMP FgqNOXq9EcRqLSNtdYnlYMWn9d4LlzzM+inj1DxaGjRQ/aGXJKkczpQiIv+ewWDK WYtW3KeCL2omnABn4RLDf9Oq1CYO8QMNJG6JdcnCh0IfHkWCJF/inZmpbTdu+9Uz o4RZwP1//6GxNpwPJJFVzsoZg2EmfZSNstBn6aQjPcpLBMj9piKPFavaccRGQNlo s2MD3pEsZEFIJ8aKtniNQsS/kNUTfIH8wyZk8BfrJfqCVbUt2OhjBVi3n6xJEtBr 1njo9Rt+56YxHg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:24:39 2025 by rpki-client