This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json) Hash identifier: rxNSVuIn1GJ3VqRS35sA+FqNreOTueoVRlmgHX9gpwo= Subject key identifier: 06:05:0E:A8:1D:0C:B5:A0:D7:D6:A4:93:57:29:5B:77:B0:A3:0E:06 Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08 Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208 Certificate serial: 019B3B6B7AAF07D0CD4E59C9C373D39683C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 11:00:58 +0000 Manifest this update: Sat 20 Dec 2025 11:00:58 +0000 Manifest next update: Sun 21 Dec 2025 11:00:58 +0000 Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=) 2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=) 3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: LzIABzdDMPRYIWxxu9AIqlBatmwn1UCKYE2/OWXj10I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:7a:af:07:d0:cd:4e:59:c9:c3:73:d3:96:83:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208 Validity Not Before: Dec 20 11:00:58 2025 GMT Not After : Dec 21 11:00:58 2025 GMT Subject: CN=06050ea81d0cb5a0d7d6a49357295b77b0a30e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:02:7b:7a:b6:d6:5e:be:a2:10:fd:5e:aa: 30:0c:13:87:d1:5a:c5:21:05:43:6a:04:3b:68:5c: b5:23:d8:59:02:76:7c:a6:08:6a:c3:3d:12:07:47: 4f:5a:82:9d:a3:39:16:8f:83:37:0f:35:48:f2:7b: 5e:65:2e:b6:5d:29:c8:d9:c8:a6:29:03:7b:a7:32: f1:9e:49:e3:65:fa:ed:45:ed:6a:dd:63:39:42:55: 39:0c:fb:89:ea:17:53:9b:c0:99:ec:51:f3:dd:c2: 39:aa:81:a2:d3:f3:c2:37:5e:fd:6a:9d:0e:ac:a5: b3:dd:bf:10:0b:7c:bf:88:2e:ab:28:7d:97:69:74: a0:29:a1:81:82:c6:39:d3:99:db:0c:91:23:17:5f: e7:0f:d3:6a:25:d5:5f:f7:0d:fc:44:e7:0a:78:db: bb:43:d7:f9:87:c3:e0:88:9e:9a:26:4c:5d:0e:10: 25:f6:a5:fe:81:dd:14:fe:0a:8e:d9:25:24:61:32: d6:c3:e1:4c:f4:10:c3:13:16:33:cb:df:aa:1f:05: 86:41:f7:c4:03:69:da:26:fc:9a:f8:52:e8:e0:e7: a9:f9:3c:b5:63:47:e3:d1:fe:44:48:aa:24:dc:0f: 01:e6:6b:e2:2b:f3:bf:d7:f4:91:68:18:bb:0c:69: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:0E:A8:1D:0C:B5:A0:D7:D6:A4:93:57:29:5B:77:B0:A3:0E:06 X509v3 Authority Key Identifier: keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:2e:86:f5:ea:f9:a3:21:d7:88:57:77:e6:bf:9e:e0:ba:51: ad:ac:6b:42:64:e1:8a:e9:f5:1a:f7:da:d7:f1:9f:0f:a6:e8: 61:b4:1d:5f:cd:9b:20:f5:96:6b:f8:d3:28:a8:e9:8f:b8:a8: f7:7c:a6:82:e0:81:3c:63:59:27:52:25:46:ad:e6:ba:7d:49: 70:02:80:a4:b3:85:d1:c0:b5:9d:fe:c9:e5:1b:68:46:51:79: e9:ce:ec:b7:9b:98:b1:26:85:51:18:bd:0a:c5:b5:c2:7a:14: 51:6e:68:8f:90:4f:4b:61:e1:03:7c:f5:eb:60:8d:4a:61:6d: 3e:9c:df:95:5c:3a:14:6c:fd:cd:39:38:d2:63:de:45:50:ba: 61:e2:86:e1:8b:5c:43:47:69:c6:c8:19:1c:65:3f:9c:9b:3c: 3a:d9:7b:b7:b4:92:59:17:64:dc:30:86:51:00:9d:89:62:62: 27:3b:2e:a0:6c:49:ed:a2:77:20:ed:9b:fc:27:2d:8a:f3:f8: 2b:8e:81:2d:fb:25:79:2b:d6:a3:df:29:7c:83:37:b2:db:48: 5a:e2:1c:0e:0a:18:87:fa:83:ed:5b:b5:92:be:43:9c:9f:6e: 12:05:e8:49:c2:47:27:30:e9:2d:60:b5:a5:44:8f:ec:a7:bf: 9e:74:a0:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a3qvB9DNTlnJw3PTloPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi ZWIyMDgwHhcNMjUxMjIwMTEwMDU4WhcNMjUxMjIxMTEwMDU4WjAzMTEwLwYDVQQD EygwNjA1MGVhODFkMGNiNWEwZDdkNmE0OTM1NzI5NWI3N2IwYTMwZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj0Ce3q21l6+ohD9XqowDBOH0VrF IQVDagQ7aFy1I9hZAnZ8pghqwz0SB0dPWoKdozkWj4M3DzVI8nteZS62XSnI2cim KQN7pzLxnknjZfrtRe1q3WM5QlU5DPuJ6hdTm8CZ7FHz3cI5qoGi0/PCN179ap0O rKWz3b8QC3y/iC6rKH2XaXSgKaGBgsY505nbDJEjF1/nD9NqJdVf9w38ROcKeNu7 Q9f5h8PgiJ6aJkxdDhAl9qX+gd0U/gqO2SUkYTLWw+FM9BDDExYzy9+qHwWGQffE A2naJvya+FLo4Oep+Ty1Y0fj0f5ESKok3A8B5mviK/O/1/SRaBi7DGk4nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYFDqgdDLWg19akk1cpW3ewow4GMB8GA1UdIwQY MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt ODY2NjA3YWYyZmE1LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1 LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyy6G9er5 oyHXiFd35r+e4LpRraxrQmThiun1Gvfa1/GfD6boYbQdX82bIPWWa/jTKKjpj7io 93ymguCBPGNZJ1IlRq3mun1JcAKApLOF0cC1nf7J5RtoRlF56c7st5uYsSaFURi9 CsW1wnoUUW5oj5BPS2HhA3z162CNSmFtPpzflVw6FGz9zTk40mPeRVC6YeKG4Ytc Q0dpxsgZHGU/nJs8Otl7t7SSWRdk3DCGUQCdiWJiJzsuoGxJ7aJ3IO2b/CctivP4 K46BLfsleSvWo98pfIM3sttIWuIcDgoYh/qD7Vu1kr5DnJ9uEgXoScJHJzDpLWC1 pUSP7Ke/nnSg9w== -----END CERTIFICATE-----Generated at Sat Dec 20 15:28:19 2025 by rpki-client