This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json) Hash identifier: gdtlaGlc/9kI6WYOBNVfQFTo9xGxSF4Yz03VjYDWu+Q= Subject key identifier: DE:94:0F:39:D6:3F:14:71:12:E9:BD:B4:B4:71:8C:AA:68:46:C4:EB Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5 Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5 Certificate serial: 019AF3F796675A91BBA37485AA947800C193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft Manifest number: 136A Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: yxLC6r5iUKcqKSwEjJN9ILabatB8H7wvUetVu0t9vzw=) 2: ZyzamFxx31MI8DWtNOW9NjiSAdw.roa (hash: k0oTub67+XpNNg/oLxWWVGf2ml63S+4IV7J2xSqjNvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:96:67:5a:91:bb:a3:74:85:aa:94:78:00:c1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=de940f39d63f147112e9bdb4b4718caa6846c4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:96:39:de:a5:4a:b2:4c:3d:13:94:fe:58: 25:e6:0a:d0:97:99:b3:fc:0b:e9:89:c2:8f:3c:a3: e2:f1:9a:fb:78:67:d3:ab:04:e3:1f:ad:b7:ee:d4: f1:ac:2d:55:8a:48:77:aa:07:70:21:1a:28:3e:9a: d8:86:71:e7:b4:95:b6:24:41:c7:ed:3c:33:1d:b5: 64:6b:8a:2f:84:3f:5d:3f:5d:2c:db:a5:c4:2c:80: 5d:b5:1a:d4:ec:78:ac:06:f1:be:93:02:7f:68:ef: 14:97:a5:80:79:f8:d7:5d:c7:76:54:85:a9:88:c7: b6:b6:ea:80:64:e5:64:89:33:95:b4:c4:5d:9a:2e: 3b:be:05:42:d4:4c:02:d2:f7:79:7e:28:df:99:88: 7e:b2:06:9d:7e:6b:2c:14:15:b7:2f:4f:27:1e:4c: 10:4c:41:a2:6e:0e:1b:4b:10:f2:d1:bb:f1:85:cb: 13:0b:12:b6:08:19:04:0d:f7:20:84:87:1f:20:e9: c1:bd:86:88:10:51:97:4a:2c:e3:80:7f:76:a8:53: 42:b0:93:4c:9c:39:91:32:91:d2:e3:f8:2d:5e:48: 8d:ca:76:74:de:5d:52:85:ab:53:19:84:fd:e2:cb: f0:ae:0e:64:c0:02:38:fc:0f:a3:a1:b0:04:b5:09: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:94:0F:39:D6:3F:14:71:12:E9:BD:B4:B4:71:8C:AA:68:46:C4:EB X509v3 Authority Key Identifier: keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ad:52:93:c8:80:85:67:45:98:44:32:2f:3d:2a:c7:71:28: 15:ce:68:97:49:7c:17:da:a8:97:55:0f:ac:b5:2a:1a:9a:76: 4c:0b:2b:76:8e:c6:0a:de:b6:a4:92:b3:c3:df:64:ff:a5:5d: 15:28:ed:b6:d5:50:28:2f:9f:ad:28:7f:13:8a:b4:cb:4c:9f: af:a9:31:11:69:bc:eb:72:06:aa:a1:fc:dd:41:cc:3f:9e:25: fa:9b:e7:98:a7:16:bd:86:1e:d2:e6:a7:78:cb:03:bc:c3:20: ab:cf:00:47:36:8c:c0:2f:e1:24:14:16:67:49:14:fa:22:a6: 3e:ad:41:8e:2d:33:95:9b:16:9f:ed:db:9d:ab:48:93:d1:68: c4:a4:3d:c5:ce:48:f0:86:6a:82:ea:6c:98:7e:28:b6:53:a7: e6:28:1f:00:84:15:b5:fb:79:97:7e:a1:54:64:8b:17:c4:c3: 60:3b:92:e0:83:bf:79:8a:a4:88:3d:f3:a2:4f:a4:9c:23:1e: f9:4e:d7:e2:a5:c9:9e:aa:d6:5c:f7:74:f5:78:1a:92:cd:b6: bf:42:c7:e0:e3:27:8e:cc:7f:94:c1:33:bb:91:53:26:24:48: 0b:50:c9:b9:37:d8:7b:12:5e:69:e1:7c:98:96:56:97:a7:c3: e1:11:90:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95ZnWpG7o3SFqpR4AMGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZWEzMGMwZjI4ZTAyMjY5YzU3NjViZjRhMDQ1Njc3Y2Ey Nzk0YTUwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EyhkZTk0MGYzOWQ2M2YxNDcxMTJlOWJkYjRiNDcxOGNhYTY4NDZjNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EyWOd6lSrJMPROU/lgl5grQl5mz /AvpicKPPKPi8Zr7eGfTqwTjH6237tTxrC1Vikh3qgdwIRooPprYhnHntJW2JEHH 7TwzHbVka4ovhD9dP10s26XELIBdtRrU7HisBvG+kwJ/aO8Ul6WAefjXXcd2VIWp iMe2tuqAZOVkiTOVtMRdmi47vgVC1EwC0vd5fijfmYh+sgadfmssFBW3L08nHkwQ TEGibg4bSxDy0bvxhcsTCxK2CBkEDfcghIcfIOnBvYaIEFGXSizjgH92qFNCsJNM nDmRMpHS4/gtXkiNynZ03l1ShatTGYT94svwrg5kwAI4/A+jobAEtQnwrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6UDznWPxRxEum9tLRxjKpoRsTrMB8GA1UdIwQY MBaAFEjqMMDyjgImnFdlv0oEVnfKJ5SlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUt ZjI4YjRkNjQwYTQ5LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUtZjI4YjRkNjQwYTQ5 LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAua1Sk8iA hWdFmEQyLz0qx3EoFc5ol0l8F9qol1UPrLUqGpp2TAsrdo7GCt62pJKzw99k/6Vd FSjtttVQKC+frSh/E4q0y0yfr6kxEWm863IGqqH83UHMP54l+pvnmKcWvYYe0uan eMsDvMMgq88ARzaMwC/hJBQWZ0kU+iKmPq1Bji0zlZsWn+3bnatIk9FoxKQ9xc5I 8IZqgupsmH4otlOn5igfAIQVtft5l36hVGSLF8TDYDuS4IO/eYqkiD3zok+knCMe +U7X4qXJnqrWXPd09Xgaks22v0LH4OMnjsx/lMEzu5FTJiRIC1DJuTfYexJeaeF8 mJZWl6fD4RGQyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:49 2025 by rpki-client