This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json) Hash identifier: qNQvsEAf2sXSXGOOxmJ+vYC6NEZU6AO/bSUiRy27ptM= Subject key identifier: 26:BE:8E:FA:55:A6:DF:F9:B1:15:42:C5:D3:39:BE:0E:7E:91:EA:42 Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Certificate serial: 019AF31B1549CAACCFA31E45C649D1F7169A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 10:00:29 +0000 Manifest this update: Sat 06 Dec 2025 10:00:29 +0000 Manifest next update: Sun 07 Dec 2025 10:00:29 +0000 Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: nij7GzatOILqsO1jAb6CtFsRs/m79s612oW3OrZsTxU=) 2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=) 3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:15:49:ca:ac:cf:a3:1e:45:c6:49:d1:f7:16:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Validity Not Before: Dec 6 10:00:29 2025 GMT Not After : Dec 7 10:00:29 2025 GMT Subject: CN=26be8efa55a6dff9b11542c5d339be0e7e91ea42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:cb:0c:89:24:77:4b:ed:cf:f5:93:cd:87: fe:ea:ab:66:e6:40:5b:b0:ed:78:17:c7:89:18:d7: ce:0f:2b:62:38:a6:fe:c0:5d:04:1f:dc:9d:99:b8: a2:14:bc:80:f4:db:d0:96:9a:a6:25:38:4c:65:e3: 28:cc:93:36:e1:06:57:ce:b1:ea:e8:c0:15:4a:f2: e3:32:45:0b:19:17:d3:d6:9f:fa:0e:8d:3d:e6:43: ae:0c:4a:8a:57:c9:95:d7:c6:d2:e1:18:1e:4d:39: 35:51:c3:e6:27:ff:52:eb:d0:f0:05:a9:57:e3:28: 89:17:5e:10:ca:3a:dd:c9:7d:14:7a:8b:5f:a4:e5: 67:a1:5a:56:81:aa:04:5e:8c:66:46:60:3c:99:88: 2a:82:3c:df:50:fe:de:67:c7:a7:67:4b:99:b1:0e: 2d:ec:1d:28:6d:16:8f:90:9b:f1:21:dd:5a:57:b0: 33:27:c8:17:5e:24:2b:76:1b:0d:2f:94:b2:10:cc: 77:f3:df:55:6b:8e:54:fd:35:cc:0e:4a:47:7b:83: bf:88:40:4e:5d:fc:ed:27:0c:e9:bd:80:ca:ac:f9: 1a:00:52:a1:4d:4a:5a:e7:64:7f:a1:eb:9f:26:14: 2b:da:b5:cf:55:e0:cb:39:1e:5c:d2:3f:8b:6b:45: 5f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BE:8E:FA:55:A6:DF:F9:B1:15:42:C5:D3:39:BE:0E:7E:91:EA:42 X509v3 Authority Key Identifier: keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1d:47:ca:e4:be:58:14:20:36:be:97:2c:bb:72:36:3f:e0: 18:11:8a:4c:d2:16:12:73:14:2a:b2:fc:56:0f:fc:9b:86:d6: 6b:c4:1e:47:d5:a3:ef:05:5f:c7:ac:82:b9:b4:e8:63:44:6c: 3b:a0:27:07:cd:da:5a:99:0e:48:db:53:79:87:01:03:af:40: 75:e5:a8:4e:b9:52:48:e9:45:53:b8:ff:cc:d7:e0:75:7f:2a: a1:b7:d1:2f:08:b3:3f:7f:64:5d:2d:36:2a:e9:65:f3:36:19: 62:b2:8c:88:e6:92:d8:7d:5a:aa:a8:44:7a:8d:57:79:88:da: 32:da:d8:c5:7c:e6:07:60:7d:d7:8e:64:24:be:b5:8e:1a:07: 3a:53:ec:66:91:78:9f:89:dd:d8:c5:f2:53:96:c3:71:2a:e7: 4e:48:46:a1:a6:df:39:c0:32:7b:6f:ff:6b:7b:fa:a5:77:b4: 02:58:b6:f6:46:f2:33:1c:2b:0e:6c:6b:0f:39:a3:6b:f9:96: 87:59:00:8f:03:1c:8c:45:ed:49:4a:a5:53:9e:be:b3:33:e7: 65:da:82:95:b9:b6:cb:81:24:ad:72:81:3e:41:64:45:e0:03: ff:ad:e8:f3:f7:eb:1e:f3:68:ee:55:46:c2:88:b7:d1:1c:09: 77:64:a4:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxVJyqzPox5FxknR9xaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx MWUyMmEwHhcNMjUxMjA2MTAwMDI5WhcNMjUxMjA3MTAwMDI5WjAzMTEwLwYDVQQD EygyNmJlOGVmYTU1YTZkZmY5YjExNTQyYzVkMzM5YmUwZTdlOTFlYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WTLDIkkd0vtz/WTzYf+6qtm5kBb sO14F8eJGNfODytiOKb+wF0EH9ydmbiiFLyA9NvQlpqmJThMZeMozJM24QZXzrHq 6MAVSvLjMkULGRfT1p/6Do095kOuDEqKV8mV18bS4RgeTTk1UcPmJ/9S69DwBalX 4yiJF14QyjrdyX0UeotfpOVnoVpWgaoEXoxmRmA8mYgqgjzfUP7eZ8enZ0uZsQ4t 7B0obRaPkJvxId1aV7AzJ8gXXiQrdhsNL5SyEMx3899Va45U/TXMDkpHe4O/iEBO XfztJwzpvYDKrPkaAFKhTUpa52R/oeufJhQr2rXPVeDLOR5c0j+La0VfBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa+jvpVpt/5sRVCxdM5vg5+kepCMB8GA1UdIwQY MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0 LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqB1HyuS+ WBQgNr6XLLtyNj/gGBGKTNIWEnMUKrL8Vg/8m4bWa8QeR9Wj7wVfx6yCubToY0Rs O6AnB83aWpkOSNtTeYcBA69AdeWoTrlSSOlFU7j/zNfgdX8qobfRLwizP39kXS02 Kull8zYZYrKMiOaS2H1aqqhEeo1XeYjaMtrYxXzmB2B9145kJL61jhoHOlPsZpF4 n4nd2MXyU5bDcSrnTkhGoabfOcAye2//a3v6pXe0Ali29kbyMxwrDmxrDzmja/mW h1kAjwMcjEXtSUqlU56+szPnZdqClbm2y4EkrXKBPkFkReAD/63o8/frHvNo7lVG woi30RwJd2SkcA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:21 2025 by rpki-client