This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json) Hash identifier: QR8xO+m/U0JyzBZrcYzsgYcWBU48r68xixb/DqSn+8k= Subject key identifier: ED:B8:0B:BA:8C:C6:29:27:9A:C0:4A:5A:27:E3:64:40:75:B5:BA:3B Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Certificate serial: 019B2B8A5648808AA33816DA47216A2B6A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft Manifest number: 0EF2 Signing time: Wed 17 Dec 2025 09:00:44 +0000 Manifest this update: Wed 17 Dec 2025 09:00:44 +0000 Manifest next update: Thu 18 Dec 2025 09:00:44 +0000 Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=) 2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=) 3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: GHJgURhJwpccU4q9gMnk4YFOjODJ1PQvKBy9ODWTENY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:56:48:80:8a:a3:38:16:da:47:21:6a:2b:6a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Validity Not Before: Dec 17 09:00:44 2025 GMT Not After : Dec 18 09:00:44 2025 GMT Subject: CN=edb80bba8cc629279ac04a5a27e3644075b5ba3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d3:4a:1c:18:6f:3c:51:dd:79:3d:ae:c1:bb: c5:57:c8:65:a1:c8:e1:f4:79:04:49:d0:de:0a:06: 6d:18:c6:48:92:a5:22:2e:5e:c4:6a:3f:54:46:88: 1c:01:da:72:16:db:f4:35:64:e9:ac:41:76:61:b2: 40:83:ed:52:26:85:bb:08:30:86:33:1f:fd:50:96: fc:f0:9a:82:95:15:ef:8e:42:ed:bd:83:58:a8:6b: ec:56:53:d9:94:d5:a6:a1:15:04:71:c8:f8:3f:dc: f7:17:87:88:5f:ff:6c:cf:50:8e:00:a9:18:69:92: 57:38:b6:82:ea:0e:23:7e:7f:bb:96:3c:ea:d5:09: 5a:10:2f:bd:19:e2:5a:f1:a6:dd:fa:7b:5d:da:42: c8:91:c2:b4:47:38:59:7a:46:85:6f:2f:e0:26:89: dc:78:82:e5:bb:c1:2a:85:dc:39:4d:8b:04:6e:bf: 86:b1:44:bc:0d:74:ca:a7:0f:64:98:af:6f:24:9c: d5:22:23:17:3c:be:a1:29:4c:a2:e9:fa:db:ec:50: 06:12:19:b4:15:d4:d6:6e:2e:45:0b:ac:94:fc:8c: 1f:df:1a:00:dc:6f:8a:04:50:dc:83:b4:b1:03:5d: 9e:05:ad:ad:c5:cf:bf:2b:a5:d4:5a:0d:ad:13:13: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B8:0B:BA:8C:C6:29:27:9A:C0:4A:5A:27:E3:64:40:75:B5:BA:3B X509v3 Authority Key Identifier: keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:85:74:57:20:3a:e7:d3:ca:47:ef:4a:18:ec:f2:4f:ee:5c: cd:7b:1a:c1:15:0d:6d:a2:33:a0:25:2d:f9:84:bb:c6:fc:2e: f4:38:46:76:8e:f9:e8:b1:02:d0:64:03:b0:06:2c:33:2f:47: 63:f0:d5:df:f7:f0:0e:e6:73:54:56:71:c0:22:f4:4a:74:d3: 24:aa:6d:c1:b4:44:44:33:25:98:e0:a7:e2:a2:a8:1a:cd:44: 8a:3d:dc:ea:b5:90:2c:cf:b5:08:40:48:18:29:23:a3:b1:7f: 8c:a5:23:3e:84:f0:fb:ff:18:62:04:24:22:0f:a0:1b:cc:1e: 7b:4a:27:f7:b4:e1:b7:ba:1f:b7:46:0b:11:c5:93:65:83:f0: af:77:3e:bb:bd:cb:99:ae:2c:c6:df:55:36:83:f4:0e:91:f2: 64:90:7f:0f:d0:3e:99:70:76:ac:3f:ee:16:2f:93:7e:f3:7c: 37:4b:a6:b9:de:2a:9d:8c:b4:38:99:67:73:bb:99:8a:e9:1a: fb:68:d0:ee:0a:37:af:26:93:89:51:41:69:a3:26:fb:3d:1b: 1c:cf:7c:b8:7a:0b:68:02:95:dc:5f:1f:fd:56:69:52:ef:c9: a2:14:cf:21:70:37:3f:e8:8b:ad:b9:ab:16:58:6e:89:2e:07: f1:39:b5:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrilZIgIqjOBbaRyFqK2pNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4 NjU0ZDAwHhcNMjUxMjE3MDkwMDQ0WhcNMjUxMjE4MDkwMDQ0WjAzMTEwLwYDVQQD EyhlZGI4MGJiYThjYzYyOTI3OWFjMDRhNWEyN2UzNjQ0MDc1YjViYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNNKHBhvPFHdeT2uwbvFV8hlocjh 9HkESdDeCgZtGMZIkqUiLl7Eaj9URogcAdpyFtv0NWTprEF2YbJAg+1SJoW7CDCG Mx/9UJb88JqClRXvjkLtvYNYqGvsVlPZlNWmoRUEccj4P9z3F4eIX/9sz1COAKkY aZJXOLaC6g4jfn+7ljzq1QlaEC+9GeJa8abd+ntd2kLIkcK0RzhZekaFby/gJonc eILlu8Eqhdw5TYsEbr+GsUS8DXTKpw9kmK9vJJzVIiMXPL6hKUyi6frb7FAGEhm0 FdTWbi5FC6yU/Iwf3xoA3G+KBFDcg7SxA12eBa2txc+/K6XUWg2tExO8PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO24C7qMxiknmsBKWifjZEB1tbo7MB8GA1UdIwQY MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYV0VyA6 59PKR+9KGOzyT+5czXsawRUNbaIzoCUt+YS7xvwu9DhGdo756LEC0GQDsAYsMy9H Y/DV3/fwDuZzVFZxwCL0SnTTJKptwbRERDMlmOCn4qKoGs1Eij3c6rWQLM+1CEBI GCkjo7F/jKUjPoTw+/8YYgQkIg+gG8wee0on97Tht7oft0YLEcWTZYPwr3c+u73L ma4sxt9VNoP0DpHyZJB/D9A+mXB2rD/uFi+TfvN8N0umud4qnYy0OJlnc7uZiuka +2jQ7go3ryaTiVFBaaMm+z0bHM98uHoLaAKV3F8f/VZpUu/JohTPIXA3P+iLrbmr FlhuiS4H8Tm1PQ== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:10 2025 by rpki-client