This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json) Hash identifier: 2b2/oXkV90YAVldnI6IxWIFc/EpJh7iK+Vbk5jR5QwE= Subject key identifier: 82:BE:6D:56:D9:15:0E:43:CB:5A:B5:CB:C4:37:28:71:55:B6:DA:6F Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0 Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0 Certificate serial: 019AF12D79916D7CD11D7D89C1AC2157A381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft Manifest number: 0821 Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: HfFJEDDUnETMgv_-tGTektHgOG0.roa (hash: n6Dq1dMrKgJPnJf8bwIr5DpzEFmjQ+eea+XVV9e+HTg=) 2: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: mkiD6xFnLxf5Hq4tAfUKDiAdB9BboQ09Zo0Jegsn13s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:79:91:6d:7c:d1:1d:7d:89:c1:ac:21:57:a3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0 Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=82be6d56d9150e43cb5ab5cbc437287155b6da6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:01:39:34:14:ae:36:18:e2:cd:e3:e5:00: 01:da:aa:22:2b:59:84:b6:e3:a1:5a:b8:69:d5:b9: 41:6a:12:22:87:0d:e6:ab:3a:d6:45:cc:79:cd:b0: 74:70:ca:c6:7a:bf:8d:b2:8a:fd:6b:72:31:b2:0e: 05:fe:b2:5d:12:01:34:1f:97:df:5c:e8:e7:ef:f0: d0:fb:21:a7:21:7b:c9:46:92:41:67:56:74:96:d0: 95:42:a4:64:f0:c6:d7:52:a6:d8:17:8b:db:9a:a2: e6:fc:13:42:b8:12:1a:c4:1b:91:17:67:0a:1f:7c: c2:3e:76:72:c2:f0:05:6a:21:51:13:0f:8e:61:b5: c6:4c:26:e8:aa:60:e9:63:5a:f0:26:85:67:a5:cd: 02:17:9d:5d:97:99:a4:a5:43:1a:79:71:3d:44:fc: c0:3d:e3:78:f4:7d:78:2f:66:52:8b:88:1f:0d:9a: 67:8c:38:fd:f0:90:91:40:52:db:53:e6:cc:83:4f: 12:8d:64:1a:b5:93:35:03:94:6d:5c:5f:55:c0:3b: 27:e2:c7:64:08:17:03:44:85:ae:d6:7e:49:c6:d0: 32:1e:ac:c4:45:08:89:ff:10:fb:d3:5f:b2:a9:99: d8:00:f0:31:4e:22:b9:a8:53:d7:72:c4:e2:18:86: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:6D:56:D9:15:0E:43:CB:5A:B5:CB:C4:37:28:71:55:B6:DA:6F X509v3 Authority Key Identifier: keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:dd:91:62:f0:62:9d:bb:67:ce:9e:5d:73:43:e2:df:82:c9: 99:ad:5b:5b:80:bf:aa:ec:80:c1:4e:64:14:51:6e:47:af:19: 20:88:f6:c6:1a:9a:ce:eb:ef:d1:32:80:f3:cb:dc:7a:8b:78: eb:e8:96:ec:47:e0:ba:7f:f2:d3:04:9a:71:5b:57:7c:e8:62: 86:33:1b:6a:e5:58:f0:9d:ea:19:6f:96:2f:ac:b1:f6:7d:bd: 3b:89:8c:01:d8:ad:95:9c:c0:c9:17:75:45:4b:83:45:4a:39: 0b:71:1d:5e:e8:fd:d2:b8:9e:85:88:6b:a9:d2:3c:65:2f:3a: cc:da:da:cb:44:57:48:0d:92:a7:d3:b9:78:2b:f3:a3:42:9a: 15:aa:1b:1e:71:dd:e8:e0:92:48:a4:9f:e5:5e:d3:c9:7b:2c: 9e:1a:08:60:d0:81:5f:e9:0d:5a:c0:95:3f:f5:8e:8d:e3:dd: 77:d7:5a:14:f1:ab:81:ec:bc:d2:72:1b:e0:9f:c8:ef:f9:10: 2c:de:c2:ec:ad:86:23:50:d5:7c:7d:61:8a:6e:15:28:8d:dd: 2f:63:47:d1:fd:56:d5:b6:e2:83:25:ac:9a:3c:27:e2:c3:f7: 4d:95:ef:10:0e:04:55:be:be:09:8c:a5:24:fe:ab:59:68:6f: 23:bc:30:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXmRbXzRHX2JwawhV6OBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NmMyZDhhZjRjZTUwY2U2ZjQzZTdkZjQ0ZTBiNTAzNzAw YTg2YzAwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD Eyg4MmJlNmQ1NmQ5MTUwZTQzY2I1YWI1Y2JjNDM3Mjg3MTU1YjZkYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L8BOTQUrjYY4s3j5QAB2qoiK1mE tuOhWrhp1blBahIihw3mqzrWRcx5zbB0cMrGer+Nsor9a3Ixsg4F/rJdEgE0H5ff XOjn7/DQ+yGnIXvJRpJBZ1Z0ltCVQqRk8MbXUqbYF4vbmqLm/BNCuBIaxBuRF2cK H3zCPnZywvAFaiFREw+OYbXGTCboqmDpY1rwJoVnpc0CF51dl5mkpUMaeXE9RPzA PeN49H14L2ZSi4gfDZpnjDj98JCRQFLbU+bMg08SjWQatZM1A5RtXF9VwDsn4sdk CBcDRIWu1n5JxtAyHqzERQiJ/xD701+yqZnYAPAxTiK5qFPXcsTiGIYVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK+bVbZFQ5Dy1q1y8Q3KHFVttpvMB8GA1UdIwQY MBaAFEhsLYr0zlDOb0Pn30TgtQNwCobAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0d3dGl2VE9VTTV2US1mZlJPQzFBM0FLaHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kODI3YzAtZDZkNS00OGY2LThmNDUt ZjFhNWRkZDc3OThiLzEvU0d3dGl2VE9VTTV2US1mZlJPQzFBM0FLaHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kODI3YzAtZDZkNS00OGY2LThmNDUtZjFhNWRkZDc3OThi LzEvU0d3dGl2VE9VTTV2US1mZlJPQzFBM0FLaHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqN2RYvBi nbtnzp5dc0Pi34LJma1bW4C/quyAwU5kFFFuR68ZIIj2xhqazuvv0TKA88vceot4 6+iW7Efgun/y0wSacVtXfOhihjMbauVY8J3qGW+WL6yx9n29O4mMAditlZzAyRd1 RUuDRUo5C3EdXuj90riehYhrqdI8ZS86zNray0RXSA2Sp9O5eCvzo0KaFaobHnHd 6OCSSKSf5V7TyXssnhoIYNCBX+kNWsCVP/WOjePdd9daFPGrgey80nIb4J/I7/kQ LN7C7K2GI1DVfH1him4VKI3dL2NH0f1W1bbigyWsmjwn4sP3TZXvEA4EVb6+CYyl JP6rWWhvI7wwag== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:42 2025 by rpki-client