This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json) Hash identifier: wwzqR5zodH+nVLh/zj4lPNqg65rapa8vrfJXw0BJKNY= Subject key identifier: 53:3B:89:AF:6F:45:B2:A9:8D:45:A6:6F:B7:7A:3B:3A:A9:DD:0B:A4 Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7 Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7 Certificate serial: 019B23D0EFD5520342E1611F43E929E40DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 21:00:53 +0000 Manifest this update: Mon 15 Dec 2025 21:00:53 +0000 Manifest next update: Tue 16 Dec 2025 21:00:53 +0000 Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=) 2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: bgkyI76dvGLQL2erIEXV3QgimJN+5IhjjWJ5J/ctKgE=) 3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:ef:d5:52:03:42:e1:61:1f:43:e9:29:e4:0d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7 Validity Not Before: Dec 15 21:00:53 2025 GMT Not After : Dec 16 21:00:53 2025 GMT Subject: CN=533b89af6f45b2a98d45a66fb77a3b3aa9dd0ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cd:79:90:61:55:4b:a8:2b:d6:f3:52:d0:30: 03:72:40:3e:ac:8e:bf:50:ae:d8:cf:53:25:e0:09: 7d:20:a4:5a:2b:3d:a0:a0:8f:bf:6c:91:c1:7f:e9: 52:fb:4d:ca:fa:e7:52:dc:d5:b9:a6:9c:a5:d1:c2: ca:97:c1:95:f0:ea:7e:e4:9d:bf:62:b5:87:bd:82: b4:91:4b:29:b7:b1:98:af:e6:d5:31:4c:a9:b7:13: 35:71:59:9b:8c:1c:4e:5e:39:00:8d:2e:4e:a6:bf: 46:8b:59:e7:35:81:03:b2:91:33:de:9c:b2:65:29: 23:0a:37:be:c5:b0:a4:f8:23:18:0b:0b:a2:97:ea: 00:80:d0:d7:ab:38:3e:5e:00:72:b9:35:2e:da:99: 6c:04:c7:58:40:fa:b7:9e:b9:8b:83:65:ea:9e:38: e9:6b:ad:13:1d:e7:e0:9e:48:b3:82:3e:70:b3:e1: 74:58:5c:f2:c1:c0:a9:b2:c1:23:b6:c9:e0:86:b3: 09:51:6f:d3:16:02:6d:cd:78:00:bc:c6:d7:46:9f: 38:25:14:50:67:71:d0:96:4d:2c:5c:80:71:7b:30: b9:c9:98:18:e1:49:46:79:9d:c6:b1:5e:30:97:86: 1e:33:cc:64:a4:de:20:62:de:ba:99:2e:6c:ef:2f: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3B:89:AF:6F:45:B2:A9:8D:45:A6:6F:B7:7A:3B:3A:A9:DD:0B:A4 X509v3 Authority Key Identifier: keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f2:c6:59:52:91:04:2d:9c:3a:ee:e2:81:55:ec:9c:55:12: 05:c3:f4:7e:15:e0:02:27:c7:e9:45:c3:b8:e9:bd:59:9b:bd: af:06:79:18:5c:1e:25:9f:90:34:85:96:2c:01:49:35:47:f3: 84:f6:77:da:dc:7f:b4:b6:16:8d:4c:7b:71:9f:6a:80:23:d4: e8:94:a9:9d:31:da:56:ba:8d:17:38:77:7b:82:11:d7:ee:9f: c2:7c:45:44:fa:78:5c:9a:c3:0b:16:23:a3:5d:86:c8:a3:75: 75:4d:7e:ae:e4:90:5d:14:0b:1d:64:87:ff:82:9b:9b:03:6d: b1:a5:53:f9:d5:5c:d4:bf:98:2f:90:16:bd:ba:d5:4f:48:56: 9d:6b:3c:10:12:c8:1e:72:d1:35:4b:43:1d:ca:f9:c8:b7:41: 5b:4f:f2:5c:21:1e:86:5b:fe:e5:87:78:96:31:b1:1e:dc:c9: 8d:5f:ca:c4:2e:52:8f:d5:1f:ba:0e:df:95:b9:4a:15:1d:2d: ce:e4:3f:bf:27:5b:37:f8:d9:1a:b8:5c:64:ec:26:13:5f:e1: 19:a9:68:de:40:ea:b2:a8:23:f9:d2:91:11:c7:2e:06:8e:cd: 26:bb:07:63:45:55:e6:82:9a:32:70:35:ab:d1:0c:11:26:7e: 12:c2:77:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0O/VUgNC4WEfQ+kp5A3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1 MWI0ZDcwHhcNMjUxMjE1MjEwMDUzWhcNMjUxMjE2MjEwMDUzWjAzMTEwLwYDVQQD Eyg1MzNiODlhZjZmNDViMmE5OGQ0NWE2NmZiNzdhM2IzYWE5ZGQwYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4815kGFVS6gr1vNS0DADckA+rI6/ UK7Yz1Ml4Al9IKRaKz2goI+/bJHBf+lS+03K+udS3NW5ppyl0cLKl8GV8Op+5J2/ YrWHvYK0kUspt7GYr+bVMUyptxM1cVmbjBxOXjkAjS5Opr9Gi1nnNYEDspEz3pyy ZSkjCje+xbCk+CMYCwuil+oAgNDXqzg+XgByuTUu2plsBMdYQPq3nrmLg2Xqnjjp a60THefgnkizgj5ws+F0WFzywcCpssEjtsnghrMJUW/TFgJtzXgAvMbXRp84JRRQ Z3HQlk0sXIBxezC5yZgY4UlGeZ3GsV4wl4YeM8xkpN4gYt66mS5s7y/gcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFM7ia9vRbKpjUWmb7d6Ozqp3QukMB8GA1UdIwQY MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt ZTEwN2Q5ZjE2YzJkLzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePLGWVKR BC2cOu7igVXsnFUSBcP0fhXgAifH6UXDuOm9WZu9rwZ5GFweJZ+QNIWWLAFJNUfz hPZ32tx/tLYWjUx7cZ9qgCPU6JSpnTHaVrqNFzh3e4IR1+6fwnxFRPp4XJrDCxYj o12GyKN1dU1+ruSQXRQLHWSH/4KbmwNtsaVT+dVc1L+YL5AWvbrVT0hWnWs8EBLI HnLRNUtDHcr5yLdBW0/yXCEehlv+5Yd4ljGxHtzJjV/KxC5Sj9Ufug7flblKFR0t zuQ/vydbN/jZGrhcZOwmE1/hGalo3kDqsqgj+dKREccuBo7NJrsHY0VV5oKaMnA1 q9EMESZ+EsJ39A== -----END CERTIFICATE-----Generated at Tue Dec 16 04:46:07 2025 by rpki-client