This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json) Hash identifier: VywTObYqDmY21HAl8ZL/hA3CMoPJklgIXveSmVq7SZU= Subject key identifier: 72:16:4D:B1:4B:1F:24:A8:DA:EF:CB:C8:E9:F1:B1:A4:88:A1:33:63 Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db Certificate serial: 019AF23F9BF46B07C47BF1DC97FAF7694922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft Manifest number: 0BE1 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: YgY0NLKFN6oNO1SDS3bnzmk0M3p+WW8iqilniYpJe2E=) 2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9b:f4:6b:07:c4:7b:f1:dc:97:fa:f7:69:49:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=72164db14b1f24a8daefcbc8e9f1b1a488a13363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:17:3a:83:79:8f:27:48:96:80:b9:f9:78:6e: 58:e5:14:7f:08:fe:d1:46:73:0c:63:7b:da:45:8b: a3:46:05:55:a5:9f:a8:7c:19:4f:d5:78:40:91:76: 2e:f9:42:97:ab:2d:88:cc:90:0c:60:bd:ae:34:92: d5:3b:06:74:d2:7f:5e:b7:82:fc:dd:8c:56:f7:cc: 12:09:ee:d6:d7:6f:f2:45:cf:51:97:63:a0:62:6a: bf:f4:19:74:3a:7e:16:31:f3:e5:18:d1:a3:a7:73: 8d:d3:9a:30:8c:43:61:5f:3d:04:60:b2:d5:75:d9: 5b:e3:9a:31:74:eb:67:75:70:3c:ea:70:3b:f1:a0: cc:83:7a:f2:05:65:a7:b2:0f:3f:2b:35:7f:0a:e1: 0b:ff:f6:c3:1c:12:ad:27:24:21:de:51:ba:48:85: e5:5d:30:e8:b4:76:a0:1c:31:b3:e8:0d:7e:02:d8: 7f:a6:9d:58:28:30:d8:8b:a0:2b:b8:cf:f5:91:00: b0:b6:d1:47:0c:3b:e3:b5:72:09:d0:8c:60:15:5a: fd:0f:20:ec:81:f7:16:e8:23:fd:13:43:b4:03:1d: 23:ab:84:6f:a0:58:40:58:5d:5c:5c:a9:ba:93:2d: 62:f5:c9:49:02:b1:39:9d:8c:bd:30:78:39:fb:39: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:16:4D:B1:4B:1F:24:A8:DA:EF:CB:C8:E9:F1:B1:A4:88:A1:33:63 X509v3 Authority Key Identifier: keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:57:02:b3:5f:d0:b4:17:47:9c:b8:44:68:2a:9c:b8:c7:a5: d1:1b:a7:da:09:26:5d:15:8a:48:a2:4a:de:02:00:cc:c0:69: b8:09:bc:8e:ec:48:f1:bd:45:60:5d:42:a0:5c:a1:11:d2:19: fb:3d:7b:57:bf:f7:c9:a3:59:ec:d3:95:d8:f0:62:f2:29:f6: 2f:1b:ce:05:d2:d8:1d:75:09:8c:d7:9e:85:27:d4:fe:e0:a7: a1:3e:19:aa:13:1b:a8:66:22:c9:c7:6a:81:e6:76:96:07:66: 08:1c:76:8f:fa:af:24:2a:b9:b4:d2:cc:21:8e:03:0f:d4:36: 4b:bf:e3:35:86:10:78:e0:ff:b8:ad:a5:cf:e5:78:13:e0:5f: a3:79:1a:58:0a:0a:82:64:c0:a1:84:c5:0a:fb:10:52:ed:83: fa:4f:ff:52:e7:b4:81:98:c1:33:26:5b:5d:3f:d0:6a:14:00: 13:63:b9:b5:55:1a:0c:b2:3e:b8:14:03:19:0b:90:fe:0b:05: d3:a1:8d:9d:45:a5:d5:1f:25:1d:7b:e8:25:c9:f1:05:3c:b5: 4a:62:b0:92:38:2c:7f:1f:42:01:18:cc:00:01:0a:70:6f:5f: e6:47:5a:f8:24:85:c5:bb:c9:a8:18:31:76:b5:be:98:f8:c1: 8f:b9:1f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5v0awfEe/Hcl/r3aUkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjgwYmRlNTZiZDNiZjU2MTU3OGEwZmUxMDhjYmMxYzZh NzU5ZGIwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg3MjE2NGRiMTRiMWYyNGE4ZGFlZmNiYzhlOWYxYjFhNDg4YTEzMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bc6g3mPJ0iWgLn5eG5Y5RR/CP7R RnMMY3vaRYujRgVVpZ+ofBlP1XhAkXYu+UKXqy2IzJAMYL2uNJLVOwZ00n9et4L8 3YxW98wSCe7W12/yRc9Rl2OgYmq/9Bl0On4WMfPlGNGjp3ON05owjENhXz0EYLLV ddlb45oxdOtndXA86nA78aDMg3ryBWWnsg8/KzV/CuEL//bDHBKtJyQh3lG6SIXl XTDotHagHDGz6A1+Ath/pp1YKDDYi6AruM/1kQCwttFHDDvjtXIJ0IxgFVr9DyDs gfcW6CP9E0O0Ax0jq4RvoFhAWF1cXKm6ky1i9clJArE5nYy9MHg5+znsjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIWTbFLHySo2u/LyOnxsaSIoTNjMB8GA1UdIwQY MBaAFEhoC95WvTv1YVeKD+EIy8HGp1nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQt OWE2YjZlYWFlZDM4LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQtOWE2YjZlYWFlZDM4 LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlcCs1/Q tBdHnLhEaCqcuMel0Run2gkmXRWKSKJK3gIAzMBpuAm8juxI8b1FYF1CoFyhEdIZ +z17V7/3yaNZ7NOV2PBi8in2LxvOBdLYHXUJjNeehSfU/uCnoT4ZqhMbqGYiycdq geZ2lgdmCBx2j/qvJCq5tNLMIY4DD9Q2S7/jNYYQeOD/uK2lz+V4E+Bfo3kaWAoK gmTAoYTFCvsQUu2D+k//Uue0gZjBMyZbXT/QahQAE2O5tVUaDLI+uBQDGQuQ/gsF 06GNnUWl1R8lHXvoJcnxBTy1SmKwkjgsfx9CARjMAAEKcG9f5kda+CSFxbvJqBgx drW+mPjBj7kfmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:42 2025 by rpki-client