This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft File: SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json) Hash identifier: CdnSQcAdtHHdwIInTRex1W1ZJQomQdsJHJ55gylOGmg= Subject key identifier: 48:3C:5B:02:87:AA:9A:09:D2:67:68:97:50:0D:E4:2C:23:65:43:10 Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2 Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2 Certificate serial: 019B255273CAEBB733CC971A4439009AF35A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft Manifest number: 1783 Signing time: Tue 16 Dec 2025 04:01:59 +0000 Manifest this update: Tue 16 Dec 2025 04:01:59 +0000 Manifest next update: Wed 17 Dec 2025 04:01:59 +0000 Files and hashes: 1: MXST_7VxoAANhfz5HopBnTAfZfE.roa (hash: WwAleikgSWf+4k301L6Hz+MXSbtdCoBSAXsJKdsGXBk=) 2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: JyFMHVnCDuByEy3wTBqHr/t4fkqbGP/jBu7mZ77kh9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:73:ca:eb:b7:33:cc:97:1a:44:39:00:9a:f3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2 Validity Not Before: Dec 16 04:01:59 2025 GMT Not After : Dec 17 04:01:59 2025 GMT Subject: CN=483c5b0287aa9a09d2676897500de42c23654310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:ee:92:ad:61:6f:30:12:5d:3a:f5:04:5d: 1c:68:71:a1:33:32:3e:c7:21:b8:f0:ba:a2:1f:47: b2:f2:aa:40:df:bc:9f:95:00:b5:e3:88:f0:15:a1: 0b:ea:de:bf:b7:6d:b5:d0:04:75:13:4a:a0:68:e2: 78:c1:73:36:30:0b:a0:cf:e1:c8:06:e8:9d:14:5a: e3:48:b3:26:88:d1:3f:07:a0:fd:f0:b1:96:71:fb: 51:ba:32:95:53:03:d5:87:d3:86:ed:ea:b0:73:33: e2:87:73:94:92:25:a2:26:9b:85:92:29:72:30:ba: 83:53:8d:c9:5b:ea:4d:f9:d3:9f:67:8f:34:fb:89: d5:21:8d:d3:21:93:fc:e2:90:f1:33:f9:d9:2c:5f: f3:50:75:09:43:e3:ee:dc:63:cc:bb:c0:87:d9:59: ff:84:0a:ff:d7:bb:b7:d5:de:06:28:ba:f9:e0:11: ae:e1:07:fc:78:88:03:8a:95:fd:0b:91:14:b2:bb: d7:0f:36:99:2d:03:72:91:9d:aa:9d:fa:8f:cb:a8: b5:79:b5:91:c6:df:99:68:e3:89:7f:73:87:ff:ea: b9:cc:12:89:62:d8:20:52:24:57:3e:b7:16:b9:66: d1:25:14:91:ba:9a:07:80:78:29:93:29:ed:5f:fb: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3C:5B:02:87:AA:9A:09:D2:67:68:97:50:0D:E4:2C:23:65:43:10 X509v3 Authority Key Identifier: keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:35:6f:d5:96:5b:d8:68:35:ef:70:dc:e8:37:7d:9f:a1:1d: df:c6:00:f7:05:81:67:dc:fc:0c:3b:fb:e8:2c:fb:76:75:85: 29:18:35:3d:2f:6f:69:07:08:c2:04:c6:df:62:2a:de:6b:05: 77:d3:e9:80:76:6c:aa:40:dc:ec:e0:94:0c:8c:18:3b:9c:d2: 14:45:cb:01:a3:f3:95:5a:96:26:b2:37:45:1e:d1:fe:e4:cb: 17:ec:6b:33:dd:83:2a:72:62:30:45:b3:98:24:dc:b8:b3:37: 20:eb:7d:c8:e0:73:5d:c8:cd:4d:71:48:3f:b8:ed:1c:6a:46: e9:32:99:be:5a:37:2d:f5:0f:92:dd:29:5e:ae:8e:72:40:22: ef:2a:2a:d9:da:1d:09:03:d7:69:f0:0f:4a:8b:7d:7b:25:b9: 81:66:a2:fc:14:da:43:01:b6:b3:9a:d9:f1:f4:1f:1c:f2:78: c0:be:a6:88:1f:c2:ce:56:55:ea:14:7b:09:b6:c6:cf:58:38: 8e:0d:3a:51:c0:0e:40:18:81:f5:35:a2:79:6c:79:7f:32:60: d8:99:cc:b4:0b:bb:73:bc:48:76:03:78:da:00:e7:28:96:59: 89:39:6c:cf:49:4c:88:24:d2:e0:27:45:d0:d7:f2:a1:7a:c0: 62:a4:c2:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUnPK67czzJcaRDkAmvNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjZkNDAyN2RlM2MyN2U4OTdkNzJhZGIyYzg2ZDg3YWI3 ZTVhYzIwHhcNMjUxMjE2MDQwMTU5WhcNMjUxMjE3MDQwMTU5WjAzMTEwLwYDVQQD Eyg0ODNjNWIwMjg3YWE5YTA5ZDI2NzY4OTc1MDBkZTQyYzIzNjU0MzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmDukq1hbzASXTr1BF0caHGhMzI+ xyG48LqiH0ey8qpA37yflQC144jwFaEL6t6/t2210AR1E0qgaOJ4wXM2MAugz+HI BuidFFrjSLMmiNE/B6D98LGWcftRujKVUwPVh9OG7eqwczPih3OUkiWiJpuFkily MLqDU43JW+pN+dOfZ480+4nVIY3TIZP84pDxM/nZLF/zUHUJQ+Pu3GPMu8CH2Vn/ hAr/17u31d4GKLr54BGu4Qf8eIgDipX9C5EUsrvXDzaZLQNykZ2qnfqPy6i1ebWR xt+ZaOOJf3OH/+q5zBKJYtggUiRXPrcWuWbRJRSRupoHgHgpkyntX/tyJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg8WwKHqpoJ0mdol1AN5CwjZUMQMB8GA1UdIwQY MBaAFEhm1AJ948J+iX1yrbLIbYerflrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0diVUFuM2p3bjZKZlhLdHNzaHRoNnQtV3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NTZhZDUtMmU2Yi00ZDUxLTg1NmMt NjFjOWMyOWMyNzVkLzEvU0diVUFuM2p3bjZKZlhLdHNzaHRoNnQtV3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81NTZhZDUtMmU2Yi00ZDUxLTg1NmMtNjFjOWMyOWMyNzVk LzEvU0diVUFuM2p3bjZKZlhLdHNzaHRoNnQtV3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTVv1ZZb 2Gg173Dc6Dd9n6Ed38YA9wWBZ9z8DDv76Cz7dnWFKRg1PS9vaQcIwgTG32Iq3msF d9PpgHZsqkDc7OCUDIwYO5zSFEXLAaPzlVqWJrI3RR7R/uTLF+xrM92DKnJiMEWz mCTcuLM3IOt9yOBzXcjNTXFIP7jtHGpG6TKZvlo3LfUPkt0pXq6OckAi7yoq2dod CQPXafAPSot9eyW5gWai/BTaQwG2s5rZ8fQfHPJ4wL6miB/CzlZV6hR7CbbGz1g4 jg06UcAOQBiB9TWieWx5fzJg2JnMtAu7c7xIdgN42gDnKJZZiTlsz0lMiCTS4CdF 0NfyoXrAYqTCwQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:51 2025 by rpki-client