This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json) Hash identifier: q1cvK3J1aACTmhXAcQIhW672CycwfL5GfCHS//uOhrg= Subject key identifier: B3:1C:B0:AB:9F:F3:2B:4F:D7:A5:F5:25:BD:CD:BF:47:66:FC:B3:59 Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb Certificate serial: 019B3C7DFABFB7DDB47C1C030B97AC613FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft Manifest number: 06B3 Signing time: Sat 20 Dec 2025 16:00:47 +0000 Manifest this update: Sat 20 Dec 2025 16:00:47 +0000 Manifest next update: Sun 21 Dec 2025 16:00:47 +0000 Files and hashes: 1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: aenmZHaaTssaEF5zOYg4yc2/il93yI1Y6ilZhuhu9EM=) 2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:fa:bf:b7:dd:b4:7c:1c:03:0b:97:ac:61:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb Validity Not Before: Dec 20 16:00:47 2025 GMT Not After : Dec 21 16:00:47 2025 GMT Subject: CN=b31cb0ab9ff32b4fd7a5f525bdcdbf4766fcb359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:e6:c6:ff:f6:22:48:92:49:9d:01:50:7d: 26:1a:ef:dc:7a:5f:8d:e4:64:db:97:55:a2:e4:07: 86:c8:71:c1:f5:bb:36:ba:ca:a4:97:f3:34:04:10: 0b:cf:81:92:68:67:40:fc:a3:d3:d6:04:52:93:b8: 1e:3d:65:4b:68:3d:fc:b3:56:83:bb:b6:2a:03:e8: 28:ca:61:60:56:4f:a3:16:64:68:e2:32:76:91:df: 18:40:d8:18:93:35:5c:bd:4d:1e:b6:c0:14:55:c9: d6:bb:bb:b3:b7:e1:26:d3:b9:01:7c:a0:0e:11:33: e6:7f:7d:5b:58:fa:56:2b:13:00:8d:3e:04:73:e2: e2:04:0e:dd:dd:8b:3d:61:1e:69:2e:46:98:ae:a8: 66:30:9c:4c:f7:c4:fd:65:bc:53:42:6a:a3:53:ec: 0b:61:0c:47:bc:82:49:e1:fa:f8:34:2f:1c:2c:65: 01:87:12:13:1c:88:74:aa:9b:0a:4c:87:26:83:10: b4:56:03:06:82:0d:01:7a:ff:45:f0:84:72:83:bf: a0:e4:7b:dd:29:9f:38:f2:47:d9:42:4b:ea:34:72: db:b7:68:0c:fe:f5:c5:7c:23:1d:de:86:06:3e:b6: f7:d8:67:76:22:e9:1f:42:ed:b8:4a:1b:d9:68:a9: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:B0:AB:9F:F3:2B:4F:D7:A5:F5:25:BD:CD:BF:47:66:FC:B3:59 X509v3 Authority Key Identifier: keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:50:66:37:47:7d:a0:7d:df:28:a2:9a:64:57:12:c2:a1:bb: 2c:18:33:48:17:00:77:ba:c4:ad:05:2f:1a:b3:a1:58:14:64: f3:ab:02:15:e2:47:30:5a:37:c6:d7:d5:6b:5e:68:09:a8:f1: e0:55:0d:0a:92:67:de:02:74:52:77:50:e9:e4:5f:2b:62:7b: 81:8d:3d:9d:af:5f:77:9c:78:1f:79:8b:b2:0c:04:e5:45:95: 10:ea:6f:0e:6d:11:b3:52:d2:65:c2:0b:41:4f:34:b6:47:97: cf:a9:f0:fd:7a:eb:67:f8:36:96:af:02:65:f1:9f:f8:f0:da: a2:18:90:c6:a0:fb:68:82:a1:84:42:84:56:46:66:b2:c0:b6: ee:cb:0d:11:4a:c0:4a:2b:98:8d:c5:f6:7f:bf:2a:20:19:29: b6:63:ec:eb:bb:a7:cd:d4:9b:59:55:be:42:5b:e8:13:b2:5e: f5:3a:e6:7b:f9:18:eb:c9:51:15:f2:11:cc:0b:16:ce:21:ba: 89:7c:93:8f:83:49:76:f6:eb:01:2f:59:90:98:05:be:9e:f9: 4a:80:1d:ec:1a:32:5c:44:c0:10:aa:ff:88:bb:f9:f0:65:d9: 83:70:cf:06:6b:5e:cf:1a:73:51:4c:51:a5:d5:a9:36:80:ea: 32:aa:a6:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffq/t920fBwDC5esYT/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0 YWZjZWIwHhcNMjUxMjIwMTYwMDQ3WhcNMjUxMjIxMTYwMDQ3WjAzMTEwLwYDVQQD EyhiMzFjYjBhYjlmZjMyYjRmZDdhNWY1MjViZGNkYmY0NzY2ZmNiMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjfmxv/2IkiSSZ0BUH0mGu/cel+N 5GTbl1Wi5AeGyHHB9bs2usqkl/M0BBALz4GSaGdA/KPT1gRSk7gePWVLaD38s1aD u7YqA+goymFgVk+jFmRo4jJ2kd8YQNgYkzVcvU0etsAUVcnWu7uzt+Em07kBfKAO ETPmf31bWPpWKxMAjT4Ec+LiBA7d3Ys9YR5pLkaYrqhmMJxM98T9ZbxTQmqjU+wL YQxHvIJJ4fr4NC8cLGUBhxITHIh0qpsKTIcmgxC0VgMGgg0Bev9F8IRyg7+g5Hvd KZ848kfZQkvqNHLbt2gM/vXFfCMd3oYGPrb32Gd2IukfQu24ShvZaKkM1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMcsKuf8ytP16X1Jb3Nv0dm/LNZMB8GA1UdIwQY MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1BmN0d9 oH3fKKKaZFcSwqG7LBgzSBcAd7rErQUvGrOhWBRk86sCFeJHMFo3xtfVa15oCajx 4FUNCpJn3gJ0UndQ6eRfK2J7gY09na9fd5x4H3mLsgwE5UWVEOpvDm0Rs1LSZcIL QU80tkeXz6nw/XrrZ/g2lq8CZfGf+PDaohiQxqD7aIKhhEKEVkZmssC27ssNEUrA SiuYjcX2f78qIBkptmPs67unzdSbWVW+QlvoE7Je9Trme/kY68lRFfIRzAsWziG6 iXyTj4NJdvbrAS9ZkJgFvp75SoAd7BoyXETAEKr/iLv58GXZg3DPBmtezxpzUUxR pdWpNoDqMqqmZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:14:03 2025 by rpki-client