This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json) Hash identifier: eI/1Myx1oUKAJ7L7+zFuOJhEYsc15cBDYmlVg/5lCLo= Subject key identifier: B5:30:13:85:0E:3F:9E:72:FB:13:57:A0:EA:CA:E0:75:47:55:B2:67 Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Certificate serial: 019AF27732830305E596B73C62BFD4CF0D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: YUemU1FYKXSmY+9As7iXSYLgDEMcvk2CPxpC+dLEqoA=) 2: Yrt_BouTpfD_-Lptb2QjKUeabDQ.roa (hash: RVwFt2z75ZWHxQq8Pa0dw4qlC4U1TJ+Gtxhhest4JkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:32:83:03:05:e5:96:b7:3c:62:bf:d4:cf:0d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=b53013850e3f9e72fb1357a0eacae0754755b267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:3c:14:7b:05:d3:00:b4:7f:2e:20:5b:f7: a1:e4:60:49:39:78:5d:f3:4b:1e:a3:c3:14:85:99: 14:64:15:d5:de:9d:c3:5b:4b:71:e2:25:a5:07:13: 5c:3c:43:c6:56:95:2c:0f:d0:bf:5a:2b:b4:c8:30: 26:3c:fc:49:d6:a2:29:85:e9:46:37:4c:89:04:c0: b8:d1:e2:fe:31:5e:c4:9d:51:cc:ce:92:e6:89:21: ac:03:6f:4a:60:67:ad:42:c1:49:7a:73:9b:4f:f1: 05:41:97:27:10:8a:65:32:b6:35:3c:9f:29:01:7d: 0f:c5:23:52:df:58:ff:df:d1:9a:aa:1a:d2:2c:9e: 4c:81:06:cd:43:21:56:2a:a2:f9:b6:59:4a:7d:fc: 16:0e:08:be:29:98:c0:33:3f:bd:58:cb:68:40:12: b5:ec:ce:30:98:64:5d:64:73:ca:a0:8d:b1:1b:cf: c3:b5:34:2f:13:ee:61:77:c2:0d:09:36:42:8f:1a: e1:ec:a6:9f:9f:aa:e6:56:99:8a:af:af:4c:16:00: ea:d7:ea:6b:ef:55:05:b9:ea:d9:96:a7:f5:77:18: e3:e6:04:e4:07:84:2f:5f:cf:a6:51:e9:d1:48:18: a6:77:ea:c3:00:3c:f1:0d:af:33:02:b7:df:af:f4: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:30:13:85:0E:3F:9E:72:FB:13:57:A0:EA:CA:E0:75:47:55:B2:67 X509v3 Authority Key Identifier: keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:14:db:6f:63:b3:06:91:f4:29:98:21:46:57:57:14:3c:cd: a0:1f:0c:b7:05:12:fb:6b:0f:a9:05:de:0b:9b:e9:eb:03:8b: 38:59:83:a0:be:c1:05:77:9f:ed:90:65:a4:1c:e7:13:63:dd: ce:ca:d5:4f:76:bb:d7:32:10:5e:07:8d:b0:24:19:f3:e1:35: a0:3c:1e:a7:6d:03:77:ea:83:a4:b1:50:66:3f:e4:84:e8:b1: ea:4c:f5:e1:c0:bb:04:b0:16:d7:76:88:60:a3:d5:17:5c:6a: 90:e6:84:cf:be:e9:bf:bc:3b:22:a6:a8:e4:fb:f0:a8:bb:1c: c9:46:59:0d:e5:77:4c:3a:e8:17:ab:ac:1a:67:ba:ea:1e:e7: 93:62:1c:e8:c9:49:a9:aa:62:b7:3a:0f:17:21:e3:99:b3:e6: 2a:ca:56:a3:5d:3c:38:2c:35:ec:9a:72:26:4b:35:cf:34:a0: 00:2d:c6:6c:16:11:2b:1f:3d:cc:bc:d9:07:3a:36:2c:3e:a8: ae:f7:10:1e:c1:5a:ff:3f:81:04:a7:8c:0e:c1:b4:a9:49:06: 13:84:f3:f8:d5:e4:86:8f:75:74:b4:01:15:f1:35:90:32:7b: 4a:20:a1:32:2c:e1:76:e5:b0:12:03:a1:a4:09:63:d2:ec:1b: 2d:55:fc:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzKDAwXllrc8Yr/Uzw1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMDk3M2MxZjQ0M2VjNGE4Mzg3YWFkN2FjYTc1ZDA3YjZm YWE5ZGEwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhiNTMwMTM4NTBlM2Y5ZTcyZmIxMzU3YTBlYWNhZTA3NTQ3NTViMjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPk8FHsF0wC0fy4gW/eh5GBJOXhd 80seo8MUhZkUZBXV3p3DW0tx4iWlBxNcPEPGVpUsD9C/Wiu0yDAmPPxJ1qIphelG N0yJBMC40eL+MV7EnVHMzpLmiSGsA29KYGetQsFJenObT/EFQZcnEIplMrY1PJ8p AX0PxSNS31j/39GaqhrSLJ5MgQbNQyFWKqL5tllKffwWDgi+KZjAMz+9WMtoQBK1 7M4wmGRdZHPKoI2xG8/DtTQvE+5hd8INCTZCjxrh7Kafn6rmVpmKr69MFgDq1+pr 71UFuerZlqf1dxjj5gTkB4QvX8+mUenRSBimd+rDADzxDa8zArffr/RSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUwE4UOP55y+xNXoOrK4HVHVbJnMB8GA1UdIwQY MBaAFEoJc8H0Q+xKg4eq16ynXQe2+qnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMt MTIxNzcyOWFmMWM4LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMtMTIxNzcyOWFmMWM4 LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxTbb2Oz BpH0KZghRldXFDzNoB8MtwUS+2sPqQXeC5vp6wOLOFmDoL7BBXef7ZBlpBznE2Pd zsrVT3a71zIQXgeNsCQZ8+E1oDwep20Dd+qDpLFQZj/khOix6kz14cC7BLAW13aI YKPVF1xqkOaEz77pv7w7Iqao5PvwqLscyUZZDeV3TDroF6usGme66h7nk2Ic6MlJ qapitzoPFyHjmbPmKspWo108OCw17JpyJks1zzSgAC3GbBYRKx89zLzZBzo2LD6o rvcQHsFa/z+BBKeMDsG0qUkGE4Tz+NXkho91dLQBFfE1kDJ7SiChMizhduWwEgOh pAlj0uwbLVX85A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:17 2025 by rpki-client