This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json) Hash identifier: 3QyGbYjUDTqjbp6RRXc2SUphbBB4uxYLZzqycfT8JXE= Subject key identifier: 34:72:1A:5E:A8:EF:CC:FA:5F:C3:13:86:EF:ED:F1:A6:F0:77:42:A6 Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c Certificate serial: 019AF12D35FCCEF7F005EF332E7091F3B82A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft Manifest number: 1036 Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=) 2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: piaQLLKIfGZnrl2SsYC4WnoocxpGPTKlWU4uA4i1qks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:35:fc:ce:f7:f0:05:ef:33:2e:70:91:f3:b8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=34721a5ea8efccfa5fc31386efedf1a6f07742a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d0:5d:81:58:d0:06:6a:2d:af:0d:04:2b:4d: 78:68:cf:45:2b:83:4c:88:35:8d:0e:fd:38:5c:7c: 07:22:71:e3:8d:57:cc:a8:22:43:d5:fb:67:82:81: e0:2f:ef:fb:f0:f7:8d:e6:26:69:85:24:26:6e:14: 1e:bf:35:aa:56:36:7c:f7:67:42:6f:95:a2:d2:57: 18:9e:cf:86:0c:b8:10:5d:db:99:47:5d:9b:8c:17: d3:ed:57:38:ad:98:95:05:7d:c6:47:2a:64:f3:43: ee:ba:b2:68:33:d6:d9:49:a5:49:60:b0:1e:52:e1: 9b:63:c5:10:77:40:6e:59:53:ca:7d:02:98:96:cb: 3b:de:f4:58:3f:24:6c:d8:e7:13:47:aa:aa:17:e0: 00:70:6b:e9:f0:a0:16:d0:60:4b:82:bf:c1:39:8a: 72:de:cd:8c:0b:ed:a3:ef:d0:c1:3e:2f:5e:1b:eb: fb:ef:b4:9d:4a:ed:45:60:42:33:4d:25:f7:a6:28: 1d:6f:16:6e:18:bd:0d:5d:dc:51:73:04:7c:ed:d2: fe:3b:d0:73:47:39:8d:70:5d:0e:06:40:8e:4a:9d: 87:e6:c7:48:76:c5:c5:e9:1c:6c:e4:90:b8:aa:b8: 2f:75:f6:24:57:b6:c8:fa:cd:6a:61:14:0b:df:97: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:1A:5E:A8:EF:CC:FA:5F:C3:13:86:EF:ED:F1:A6:F0:77:42:A6 X509v3 Authority Key Identifier: keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e1:fc:f1:b3:b0:de:bb:06:6e:69:99:e5:c7:c6:26:2c:ae: 08:6f:ea:01:dc:27:5a:16:e5:1c:ee:72:a0:e8:df:26:26:05: 4f:90:9f:76:04:ef:c1:ab:0e:19:fa:c1:5d:75:f6:f9:32:fd: 7f:c2:79:f8:45:49:b3:3d:ae:39:ba:f2:d0:5e:a3:c1:d0:01: 86:17:f8:15:86:7d:1e:47:51:fa:05:2d:9a:c9:57:eb:c6:e0: 51:40:bc:69:ad:46:a8:c6:40:01:04:cb:a5:b1:33:fb:f6:e3: 5c:1e:2a:e5:d6:b1:61:7b:18:fc:b0:65:32:54:76:84:ed:7a: 58:2c:2d:e4:33:47:85:d1:33:2c:df:49:c8:14:cd:83:15:04: ff:47:5c:dd:02:7b:36:25:36:6a:01:ae:da:45:ae:78:eb:d1: 5b:12:fe:a5:22:02:c1:d6:3d:9b:b1:79:b2:17:de:d8:fc:2c: d0:d9:40:e6:bf:d5:e7:f9:80:6e:4a:35:3f:6e:8f:9c:7e:fe: 87:ff:ca:24:3f:a2:54:d6:00:bf:f9:02:02:53:1d:6b:c9:93: d1:14:a1:e6:b1:8e:11:ee:d6:cd:67:10:3d:60:46:75:3d:a4: b9:1e:93:9a:e3:e4:cb:e7:98:3a:0f:24:f7:f8:62:99:6a:ab: 87:69:88:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTX8zvfwBe8zLnCR87gqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2 MjUzNmMwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD EygzNDcyMWE1ZWE4ZWZjY2ZhNWZjMzEzODZlZmVkZjFhNmYwNzc0MmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9BdgVjQBmotrw0EK014aM9FK4NM iDWNDv04XHwHInHjjVfMqCJD1ftngoHgL+/78PeN5iZphSQmbhQevzWqVjZ892dC b5Wi0lcYns+GDLgQXduZR12bjBfT7Vc4rZiVBX3GRypk80PuurJoM9bZSaVJYLAe UuGbY8UQd0BuWVPKfQKYlss73vRYPyRs2OcTR6qqF+AAcGvp8KAW0GBLgr/BOYpy 3s2MC+2j79DBPi9eG+v777SdSu1FYEIzTSX3pigdbxZuGL0NXdxRcwR87dL+O9Bz RzmNcF0OBkCOSp2H5sdIdsXF6Rxs5JC4qrgvdfYkV7bI+s1qYRQL35cslwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRyGl6o78z6X8MThu/t8abwd0KmMB8GA1UdIwQY MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5 LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOH88bOw 3rsGbmmZ5cfGJiyuCG/qAdwnWhblHO5yoOjfJiYFT5CfdgTvwasOGfrBXXX2+TL9 f8J5+EVJsz2uObry0F6jwdABhhf4FYZ9HkdR+gUtmslX68bgUUC8aa1GqMZAAQTL pbEz+/bjXB4q5daxYXsY/LBlMlR2hO16WCwt5DNHhdEzLN9JyBTNgxUE/0dc3QJ7 NiU2agGu2kWueOvRWxL+pSICwdY9m7F5shfe2Pws0NlA5r/V5/mAbko1P26PnH7+ h//KJD+iVNYAv/kCAlMda8mT0RSh5rGOEe7WzWcQPWBGdT2kuR6TmuPky+eYOg8k 9/himWqrh2mIsA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:02 2025 by rpki-client