This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json) Hash identifier: 1QwTm/bk5pUpN375lw4bEuzNIgCnWkW9IxqkYi0EZpY= Subject key identifier: A0:26:B8:CB:C1:25:D7:B9:01:0E:62:70:E4:A2:2D:A1:2C:CB:02:F7 Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61 Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361 Certificate serial: 019AF31D75F6FA1D2A6E8310B826A4A2EF54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft Manifest number: 08C0 Signing time: Sat 06 Dec 2025 10:03:05 +0000 Manifest this update: Sat 06 Dec 2025 10:03:05 +0000 Manifest next update: Sun 07 Dec 2025 10:03:05 +0000 Files and hashes: 1: 1-Sq9N9tDpqPpCxfnJu3FOlWH6ZA.roa (hash: Tpyvvdu3VZJ5oo8JL4qWFUonGAY9eL3r/UHvnFRq5cY=) 2: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: MtTojF+U9iIL6K1j/ftyG/ddifoPMbgOcUke27YLXWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:75:f6:fa:1d:2a:6e:83:10:b8:26:a4:a2:ef:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361 Validity Not Before: Dec 6 10:03:05 2025 GMT Not After : Dec 7 10:03:05 2025 GMT Subject: CN=a026b8cbc125d7b9010e6270e4a22da12ccb02f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:26:53:7c:e9:fe:92:08:72:b3:c8:2d:28: 18:4c:bb:ef:5a:3c:fb:02:4d:d5:3c:ea:1a:c1:bf: 26:41:1f:18:43:8d:04:f0:86:d4:b6:9e:64:c4:a1: c8:5f:98:25:29:10:e5:2e:c2:a4:15:8d:15:8f:89: e8:4a:da:72:12:7a:0b:46:83:c4:a0:22:72:ee:6d: c0:6b:ec:60:bd:08:c2:7a:ac:cf:0c:e6:94:88:b0: fe:18:25:44:4f:6a:a4:cb:76:3a:68:68:87:0a:4d: 1b:a7:a8:2e:6f:f9:08:b2:ec:eb:0e:bb:77:b7:9a: 0a:a0:9b:b3:55:41:f4:50:ae:9f:9a:ba:73:8a:34: d3:7f:dc:e3:51:31:c4:ec:a0:6a:ba:02:4a:8a:2c: 43:54:9e:5d:ba:f7:6f:15:79:9e:31:47:3c:8e:be: 1d:a8:b6:af:fb:54:72:f0:5f:6a:c4:ac:7d:01:94: 1b:14:94:32:f2:22:a2:12:78:4b:de:37:ff:28:6c: 7e:1c:00:c9:11:46:54:a8:b7:26:1b:4b:0b:ba:e0: 5a:fe:42:1d:f8:a6:c9:e6:a4:02:14:5d:af:bd:03: a0:64:b5:cd:9c:1b:74:73:fe:e1:6a:81:d2:b2:06: 5b:0e:29:f4:b8:f0:67:da:81:9d:8b:81:b2:12:f3: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:26:B8:CB:C1:25:D7:B9:01:0E:62:70:E4:A2:2D:A1:2C:CB:02:F7 X509v3 Authority Key Identifier: keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:30:d2:6c:94:d6:f7:82:50:eb:d9:e7:38:4e:eb:b6:70:50: 05:c4:ef:99:f7:32:a1:6a:78:c6:14:c4:b4:48:2b:46:36:bb: 14:91:4d:5c:81:dc:00:ca:c9:68:38:fe:e4:c4:97:55:ee:02: 5e:52:db:eb:c8:cc:6c:cc:d1:4f:b5:3f:28:ce:7e:7e:4a:43: 84:fa:99:c2:63:fa:55:d7:3f:5a:9c:ca:47:db:68:44:24:6c: 9b:0f:03:e5:fd:7e:0e:61:62:8a:fb:8c:42:32:1e:6e:fd:c3: bb:62:75:20:c8:ae:a1:29:ce:ed:ff:4f:51:7d:95:50:8d:ed: d1:3e:63:45:be:37:57:0a:53:06:ab:39:3f:28:e8:9d:d2:59: 6d:93:2f:fd:25:f8:a0:36:5b:12:38:9f:fb:d6:18:db:66:13: 2c:9a:09:07:c3:e2:9e:22:da:82:66:b2:4f:c4:ad:6d:14:6a: d0:90:9e:96:a1:f1:72:40:ce:e0:8b:d6:a5:fa:47:80:50:52: 02:c2:fe:aa:f2:bb:75:d9:1d:b5:f3:25:4f:09:8a:84:6d:ee: ca:37:16:95:8d:8c:f7:6d:40:c7:f3:3a:2b:f0:f9:5d:f3:f2: e9:f9:83:c0:f5:1d:62:5c:7e:6d:b8:6b:10:b0:19:a6:ce:d5: df:83:71:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHXX2+h0qboMQuCakou9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDg2NjNkM2I5NjllMDI1M2EyNmQ1NDI1YmVlMWM1ZDQ0 M2IzNjEwHhcNMjUxMjA2MTAwMzA1WhcNMjUxMjA3MTAwMzA1WjAzMTEwLwYDVQQD EyhhMDI2YjhjYmMxMjVkN2I5MDEwZTYyNzBlNGEyMmRhMTJjY2IwMmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtukmU3zp/pIIcrPILSgYTLvvWjz7 Ak3VPOoawb8mQR8YQ40E8IbUtp5kxKHIX5glKRDlLsKkFY0Vj4noStpyEnoLRoPE oCJy7m3Aa+xgvQjCeqzPDOaUiLD+GCVET2qky3Y6aGiHCk0bp6gub/kIsuzrDrt3 t5oKoJuzVUH0UK6fmrpzijTTf9zjUTHE7KBqugJKiixDVJ5duvdvFXmeMUc8jr4d qLav+1Ry8F9qxKx9AZQbFJQy8iKiEnhL3jf/KGx+HADJEUZUqLcmG0sLuuBa/kId +KbJ5qQCFF2vvQOgZLXNnBt0c/7haoHSsgZbDin0uPBn2oGdi4GyEvNNvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAmuMvBJde5AQ5icOSiLaEsywL3MB8GA1UdIwQY MBaAFEnYZj07lp4CU6JtVCW+4cXUQ7NhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNWQwMGQtNjI2Ni00NmVhLWJjOGMt NDE4MmJlZGI5OGExLzEvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNWQwMGQtNjI2Ni00NmVhLWJjOGMtNDE4MmJlZGI5OGEx LzEvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTDSbJTW 94JQ69nnOE7rtnBQBcTvmfcyoWp4xhTEtEgrRja7FJFNXIHcAMrJaDj+5MSXVe4C XlLb68jMbMzRT7U/KM5+fkpDhPqZwmP6Vdc/WpzKR9toRCRsmw8D5f1+DmFiivuM QjIebv3Du2J1IMiuoSnO7f9PUX2VUI3t0T5jRb43VwpTBqs5PyjondJZbZMv/SX4 oDZbEjif+9YY22YTLJoJB8PiniLagmayT8StbRRq0JCelqHxckDO4IvWpfpHgFBS AsL+qvK7ddkdtfMlTwmKhG3uyjcWlY2M921Ax/M6K/D5XfPy6fmDwPUdYlx+bbhr ELAZps7V34Nxmw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:22:17 2025 by rpki-client