This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft File: Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft (raw, json) Hash identifier: JSO4cP/aqnvznKiWuW6bh6YE9jn51GyoN9Kof0rLu/A= Subject key identifier: 0D:97:6C:DD:04:B9:3E:3B:35:F0:82:03:87:41:D5:6A:C9:A3:C2:8A Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61 Certificate issuer: /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661 Certificate serial: 019B311F321A29EB21199AC25712AEA2215C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft Manifest number: 02B2 Signing time: Thu 18 Dec 2025 11:01:26 +0000 Manifest this update: Thu 18 Dec 2025 11:01:26 +0000 Manifest next update: Fri 19 Dec 2025 11:01:26 +0000 Files and hashes: 1: Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl (hash: L2cYgLLNt8g1bq08x6iF0YZXaDQ3M2e5WtjFc5XsM3U=) 2: jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa (hash: CgAcBMHOHIF/zsicGTopucDznqKVIIzdoQQgNx76Mfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:32:1a:29:eb:21:19:9a:c2:57:12:ae:a2:21:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661 Validity Not Before: Dec 18 11:01:26 2025 GMT Not After : Dec 19 11:01:26 2025 GMT Subject: CN=0d976cdd04b93e3b35f082038741d56ac9a3c28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:bf:d5:73:38:fb:0e:50:08:5c:04:6d:89: ee:48:16:58:87:f6:44:ea:c4:aa:e1:79:0a:29:74: 71:62:60:64:73:48:b1:fc:4a:90:7c:02:e1:1b:cb: 9f:22:ff:8c:b3:af:29:33:b8:bd:1f:85:28:b9:4b: d9:ca:d6:91:62:73:1d:74:f1:cb:13:ae:4c:42:07: 12:10:cb:76:32:24:9c:ea:4e:4c:b3:93:26:b0:f3: 4c:1d:3d:54:13:69:78:03:4b:d4:7e:cf:d6:ee:6b: ef:d4:2c:2f:1f:ea:50:d7:51:a5:b4:60:07:59:f9: cf:cf:b9:f1:46:57:dc:4d:5c:81:ce:d5:34:87:39: 4f:28:29:77:db:8b:91:0e:04:c9:61:95:74:fc:35: 8b:cb:68:16:9e:55:ba:f0:cf:28:33:4f:87:c8:58: 43:73:76:a4:4d:34:1f:36:3f:d3:e5:db:72:02:12: ca:b7:47:4b:3e:5b:9f:65:ab:e3:39:c4:14:4e:84: 0c:74:12:46:73:28:41:7e:29:23:66:55:84:78:bc: 13:dc:48:dc:89:b7:f0:77:90:de:a3:e5:8c:68:ab: f1:c0:72:06:a1:97:13:b7:82:d1:a7:85:f5:bf:dc: 2b:b4:57:d3:7b:f6:3c:ed:32:0d:e7:2e:f0:dd:f3: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:97:6C:DD:04:B9:3E:3B:35:F0:82:03:87:41:D5:6A:C9:A3:C2:8A X509v3 Authority Key Identifier: keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:55:ca:ed:9f:10:06:e4:97:b2:87:63:dd:a9:5a:66:9f:7a: 50:ed:e2:b8:50:d2:53:4d:7c:82:81:0e:42:1e:a4:5a:83:92: d8:64:b1:7b:22:a3:ec:b7:46:d4:92:ec:8f:eb:ca:4b:d3:f4: 32:0a:29:98:a9:20:b4:8e:56:59:22:98:ce:8c:f0:60:98:70: 56:63:ed:3d:3f:9a:0a:8a:55:d8:31:d5:94:e8:d6:ab:ed:25: 02:83:bb:1a:ce:33:cd:93:2d:dc:95:49:ec:e5:16:4f:b1:44: c4:c3:bb:62:12:25:1a:cb:89:23:68:a0:42:f1:b4:13:6e:b0: f7:8c:d0:f3:bb:9b:86:b3:6c:87:d4:3d:e9:8f:ee:78:5d:c4: 9a:da:39:ce:38:ad:d3:2e:b6:3c:47:86:fa:39:94:14:50:82: 1c:1e:ee:97:62:19:85:e3:46:12:42:0f:f9:f4:ac:54:aa:cf: 5f:8c:49:ee:0c:97:df:96:4c:0f:bc:1b:d4:66:67:75:64:f6: 13:da:f3:45:b0:c4:50:ef:6c:c5:92:4f:50:1b:8c:51:12:52: 9d:f4:66:52:10:a4:16:d1:d0:66:98:8a:79:61:ab:e9:6d:47: 4c:01:f3:e0:a7:3a:8a:ad:23:47:78:f9:02:83:fc:99:23:ba: 4c:7f:f1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHzIaKeshGZrCVxKuoiFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODgzZTk0YWExNDUxYmE3NDhkNmE1YmYxNzVhNDNmZTgx NmU2NjEwHhcNMjUxMjE4MTEwMTI2WhcNMjUxMjE5MTEwMTI2WjAzMTEwLwYDVQQD EygwZDk3NmNkZDA0YjkzZTNiMzVmMDgyMDM4NzQxZDU2YWM5YTNjMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL6/1XM4+w5QCFwEbYnuSBZYh/ZE 6sSq4XkKKXRxYmBkc0ix/EqQfALhG8ufIv+Ms68pM7i9H4UouUvZytaRYnMddPHL E65MQgcSEMt2MiSc6k5Ms5MmsPNMHT1UE2l4A0vUfs/W7mvv1CwvH+pQ11GltGAH WfnPz7nxRlfcTVyBztU0hzlPKCl324uRDgTJYZV0/DWLy2gWnlW68M8oM0+HyFhD c3akTTQfNj/T5dtyAhLKt0dLPlufZavjOcQUToQMdBJGcyhBfikjZlWEeLwT3Ejc ibfwd5Deo+WMaKvxwHIGoZcTt4LRp4X1v9wrtFfTe/Y87TIN5y7w3fPWDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2XbN0EuT47NfCCA4dB1WrJo8KKMB8GA1UdIwQY MBaAFEqIPpSqFFG6dI1qW/F1pD/oFuZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMt OWQzNzAyNmY1MWI0LzEvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMtOWQzNzAyNmY1MWI0 LzEvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1XK7Z8Q BuSXsodj3alaZp96UO3iuFDSU018goEOQh6kWoOS2GSxeyKj7LdG1JLsj+vKS9P0 MgopmKkgtI5WWSKYzozwYJhwVmPtPT+aCopV2DHVlOjWq+0lAoO7Gs4zzZMt3JVJ 7OUWT7FExMO7YhIlGsuJI2igQvG0E26w94zQ87ubhrNsh9Q96Y/ueF3Emto5zjit 0y62PEeG+jmUFFCCHB7ul2IZheNGEkIP+fSsVKrPX4xJ7gyX35ZMD7wb1GZndWT2 E9rzRbDEUO9sxZJPUBuMURJSnfRmUhCkFtHQZpiKeWGr6W1HTAHz4Kc6iq0jR3j5 AoP8mSO6TH/xJA== -----END CERTIFICATE-----Generated at Thu Dec 18 17:19:26 2025 by rpki-client