This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft File: sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json) Hash identifier: Mk6JqU2WW19Wp1tRHbsmuNvbsdfaXLtyavAJYVrwvL4= Subject key identifier: 27:F1:E2:3B:3B:53:99:50:6C:26:F0:62:B4:95:89:09:87:32:C0:D4 Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c Certificate serial: 019B3C102CB5B485F45AE8C54F3861BA0332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 14:00:51 +0000 Manifest this update: Sat 20 Dec 2025 14:00:51 +0000 Manifest next update: Sun 21 Dec 2025 14:00:51 +0000 Files and hashes: 1: Llrtrof0_CXG6g_18Oyw968ZWEI.roa (hash: X1zaGRl51EQ/u9kK0U1WmdFcDajifODFmk55LESlUmM=) 2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: m3cOWOqPGIrwCZSoPXJtAeSYVljzL3u3nARA7FXoyR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:2c:b5:b4:85:f4:5a:e8:c5:4f:38:61:ba:03:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c Validity Not Before: Dec 20 14:00:51 2025 GMT Not After : Dec 21 14:00:51 2025 GMT Subject: CN=27f1e23b3b5399506c26f062b49589098732c0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:91:b3:25:98:19:f4:59:9b:c7:df:d2:50: b5:2c:6d:f5:3c:1c:7f:ed:07:06:94:62:26:2e:af: 90:00:2a:18:6b:91:bb:d0:00:0a:50:d9:a2:c4:9f: 1d:60:40:24:13:20:c9:2a:11:13:d3:4b:8c:40:23: 40:c9:da:97:8e:07:43:19:0a:dc:29:3d:ee:38:7f: 7a:2c:6c:e2:3e:2c:88:63:8c:41:f6:4f:19:1c:c0: 08:56:a6:0e:38:3a:5a:8e:14:1e:b9:91:11:81:59: 21:58:17:2b:4c:89:37:53:41:83:42:59:52:57:79: bc:b4:ed:49:9e:82:cf:44:4e:ac:cc:f3:9c:09:6c: 17:2d:93:46:d7:14:c6:ae:f0:52:67:38:66:44:5a: f0:f2:45:4e:ae:7f:75:19:76:f6:2a:71:51:a3:df: d2:46:f6:83:29:88:2d:f3:89:c2:45:e6:be:e8:69: 7f:38:2e:58:a6:5a:d5:96:ad:84:94:07:73:0d:23: 7e:c8:70:1b:e8:98:18:c4:9d:3d:11:56:38:5c:fb: 2b:d2:5f:e9:dd:72:eb:b6:da:41:2a:9a:70:25:23: 35:f6:77:ee:aa:f5:d7:7c:f0:1b:61:a3:1d:97:df: ab:05:94:f1:45:b9:00:96:a0:c3:42:88:e8:94:77: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F1:E2:3B:3B:53:99:50:6C:26:F0:62:B4:95:89:09:87:32:C0:D4 X509v3 Authority Key Identifier: keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f6:6e:39:b7:1d:8b:9f:96:ae:80:6b:2d:bb:4e:6c:2c:17: bd:00:16:56:3b:ec:33:83:c5:38:55:60:cd:f6:1a:5e:4c:e2: a7:94:bd:c1:ef:e8:97:c4:0e:45:0a:7d:b1:29:bb:9b:f9:f0: df:e4:5e:f8:33:b9:28:1c:de:3c:59:a7:93:99:2a:f2:a3:e1: 56:1d:d4:38:f9:bf:cd:46:08:bd:c6:8d:a6:43:4a:7f:2d:46: b6:d3:b5:b3:68:c3:53:e5:14:e6:2d:71:e3:40:49:28:ec:b7: f3:ea:91:99:95:16:68:9f:fb:cf:0c:e4:32:40:e7:5e:53:bd: 73:9e:94:5b:f3:c0:68:a9:4f:76:1f:cc:a6:65:74:32:f7:75: 81:00:40:43:3c:03:7f:1d:6f:3f:b9:59:5b:ad:11:be:4e:ff: 05:ff:8a:62:65:1c:b9:10:81:1e:b3:58:d6:a4:9f:ef:d0:f1: 19:67:f7:6b:50:db:18:f6:eb:35:3c:e2:d3:61:a7:46:9d:1d: c2:15:f8:1c:22:4e:d4:b5:ee:c1:db:66:81:4e:5e:ed:2c:19: d0:db:8a:32:cd:70:08:03:f3:42:d9:4b:4a:5b:f6:ca:24:8a: 23:66:e6:a3:c2:3b:51:e5:76:7f:40:3b:c6:28:a6:11:bf:e4: 26:ed:d3:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ECy1tIX0WujFTzhhugMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNmY0MDQwNDkxYTY1NmZmNzUyNmQyZjE3NjExYjBkNjhh Y2JkMGMwHhcNMjUxMjIwMTQwMDUxWhcNMjUxMjIxMTQwMDUxWjAzMTEwLwYDVQQD EygyN2YxZTIzYjNiNTM5OTUwNmMyNmYwNjJiNDk1ODkwOTg3MzJjMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMGRsyWYGfRZm8ff0lC1LG31PBx/ 7QcGlGImLq+QACoYa5G70AAKUNmixJ8dYEAkEyDJKhET00uMQCNAydqXjgdDGQrc KT3uOH96LGziPiyIY4xB9k8ZHMAIVqYOODpajhQeuZERgVkhWBcrTIk3U0GDQllS V3m8tO1JnoLPRE6szPOcCWwXLZNG1xTGrvBSZzhmRFrw8kVOrn91GXb2KnFRo9/S RvaDKYgt84nCRea+6Gl/OC5YplrVlq2ElAdzDSN+yHAb6JgYxJ09EVY4XPsr0l/p 3XLrttpBKppwJSM19nfuqvXXfPAbYaMdl9+rBZTxRbkAlqDDQojolHeaxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfx4js7U5lQbCbwYrSViQmHMsDUMB8GA1UdIwQY MBaAFLBvQEBJGmVv91JtLxdhGw1orL0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZTBiMjEtZDY1Yy00MmU2LTg3NGIt ZjRjYjg2N2Y5MGQ4LzEvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jZTBiMjEtZDY1Yy00MmU2LTg3NGItZjRjYjg2N2Y5MGQ4 LzEvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/ZuObcd i5+WroBrLbtObCwXvQAWVjvsM4PFOFVgzfYaXkzip5S9we/ol8QORQp9sSm7m/nw 3+Re+DO5KBzePFmnk5kq8qPhVh3UOPm/zUYIvcaNpkNKfy1GttO1s2jDU+UU5i1x 40BJKOy38+qRmZUWaJ/7zwzkMkDnXlO9c56UW/PAaKlPdh/MpmV0Mvd1gQBAQzwD fx1vP7lZW60Rvk7/Bf+KYmUcuRCBHrNY1qSf79DxGWf3a1DbGPbrNTzi02GnRp0d whX4HCJO1LXuwdtmgU5e7SwZ0NuKMs1wCAPzQtlLSlv2yiSKI2bmo8I7UeV2f0A7 xiimEb/kJu3TFw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:42:42 2025 by rpki-client