This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json) Hash identifier: ShtCQ/4huTh5UXNeiA+hU+rtBOUaKhCXRBW1YZkgCHI= Subject key identifier: 0E:EB:24:2B:13:42:45:0B:91:A8:12:14:04:85:21:05:45:78:63:79 Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6 Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6 Certificate serial: 019B435BBCABF34F76DB9ABEF7FD32AEF77D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 00:00:44 +0000 Manifest this update: Mon 22 Dec 2025 00:00:44 +0000 Manifest next update: Tue 23 Dec 2025 00:00:44 +0000 Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: LwIifVoWFO8dyUIoA3uS2lnaXH9s62F2w/NhGpg5OoE=) 2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:bc:ab:f3:4f:76:db:9a:be:f7:fd:32:ae:f7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6 Validity Not Before: Dec 22 00:00:44 2025 GMT Not After : Dec 23 00:00:44 2025 GMT Subject: CN=0eeb242b1342450b91a812140485210545786379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:60:40:17:20:49:aa:17:4b:99:1d:87:e0: ab:d2:3b:23:6c:9c:2d:d4:48:c3:0a:27:d0:73:09: 53:cf:3c:2e:66:19:17:20:2e:8d:eb:b1:fd:65:e8: 4e:b2:1e:f9:f7:44:35:24:f8:9d:1b:a5:89:6f:3f: cd:20:c6:c0:3e:07:67:f1:4d:72:4c:d2:ba:b1:68: 9b:ab:0a:ef:d7:d4:e2:6f:b1:16:08:97:cc:2a:e0: 93:fe:6a:3a:ec:d4:87:2a:2c:6b:ae:42:eb:a8:20: cf:ba:51:df:d4:33:5d:8f:e8:3b:65:2b:69:c2:96: 6e:cc:a8:fb:bb:c4:90:34:ed:d3:c0:dc:b2:37:b9: bb:f4:fb:61:2f:94:04:55:3c:5e:6f:c0:ac:4f:ae: 5f:29:89:27:fd:8e:a7:f4:fc:1f:3e:4b:ec:d4:12: e0:38:18:fa:d2:cb:c1:e6:ef:d4:b3:19:dc:a6:89: 35:2e:23:df:97:6c:f8:1f:38:1a:ad:74:c4:59:96: 34:78:2f:70:d7:b4:99:79:5c:77:ed:09:3e:c5:a7: 10:38:dd:a9:f1:87:48:a0:24:bb:d6:3a:e5:99:cd: 1b:7b:d6:d7:01:eb:c4:4a:f8:74:94:42:34:58:06: 67:6b:aa:a0:e8:0c:d7:66:f7:12:ff:22:6e:63:05: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EB:24:2B:13:42:45:0B:91:A8:12:14:04:85:21:05:45:78:63:79 X509v3 Authority Key Identifier: keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:c5:68:e0:ea:1f:96:23:d8:43:7b:da:8f:7a:70:c9:4c: bf:38:b5:41:13:a6:9e:94:9f:4d:fc:48:48:c8:f1:48:94:10: 5c:9e:f5:de:1c:11:fe:17:0c:63:cf:e6:b2:19:f0:c1:b7:9f: 03:2c:c7:a2:a2:04:26:0f:18:2f:b8:42:ba:fc:4c:c2:83:f6: 82:67:fe:8a:5f:ec:e7:2f:e2:97:cb:d3:41:f2:b0:e7:10:1d: af:b9:65:b3:cb:35:e4:f4:1c:44:07:f4:ae:6e:dd:ed:6d:71: b6:05:07:45:b0:05:52:90:77:61:88:35:5d:86:d4:eb:73:4f: 65:ff:d3:09:13:41:37:37:c9:60:5b:1f:45:bc:fd:b9:69:ce: 49:93:d5:53:9a:1d:d9:3e:9f:b3:7e:e8:7d:81:90:df:33:f2: 21:b6:76:57:20:ec:d5:37:9e:9d:a8:d5:31:1e:e5:4a:3b:f9: 9b:4f:d7:b9:64:22:0c:a2:e7:18:e1:58:4e:4c:48:84:87:b6: f9:e0:2f:c2:7a:e7:68:b8:c5:e7:83:ec:dc:97:e4:cd:5b:ab: 31:2d:1a:cb:97:45:49:1a:f2:3b:d3:a9:a4:95:aa:29:6b:0a: c8:6a:dd:6a:20:65:52:ea:8b:24:a2:0f:06:c8:55:9d:e1:6e: f5:49:78:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW7yr809225q+9/0yrvd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODhmM2FiOTRhMDc1ODcyMjBlM2Q3MTZmN2I3MTdkZjFk OWU2ZDYwHhcNMjUxMjIyMDAwMDQ0WhcNMjUxMjIzMDAwMDQ0WjAzMTEwLwYDVQQD EygwZWViMjQyYjEzNDI0NTBiOTFhODEyMTQwNDg1MjEwNTQ1Nzg2Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo51gQBcgSaoXS5kdh+Cr0jsjbJwt 1EjDCifQcwlTzzwuZhkXIC6N67H9ZehOsh7590Q1JPidG6WJbz/NIMbAPgdn8U1y TNK6sWibqwrv19Tib7EWCJfMKuCT/mo67NSHKixrrkLrqCDPulHf1DNdj+g7ZStp wpZuzKj7u8SQNO3TwNyyN7m79PthL5QEVTxeb8CsT65fKYkn/Y6n9PwfPkvs1BLg OBj60svB5u/Usxncpok1LiPfl2z4HzgarXTEWZY0eC9w17SZeVx37Qk+xacQON2p 8YdIoCS71jrlmc0be9bXAevESvh0lEI0WAZna6qg6AzXZvcS/yJuYwVvtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7rJCsTQkULkagSFASFIQVFeGN5MB8GA1UdIwQY MBaAFEqI86uUoHWHIg49cW97cX3x2ebWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEt ZDQ1MTljNTM5YzlhLzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEtZDQ1MTljNTM5Yzlh LzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS3FaODq H5Yj2EN72o96cMlMvzi1QROmnpSfTfxISMjxSJQQXJ713hwR/hcMY8/mshnwwbef AyzHoqIEJg8YL7hCuvxMwoP2gmf+il/s5y/il8vTQfKw5xAdr7lls8s15PQcRAf0 rm7d7W1xtgUHRbAFUpB3YYg1XYbU63NPZf/TCRNBNzfJYFsfRbz9uWnOSZPVU5od 2T6fs37ofYGQ3zPyIbZ2VyDs1TeenajVMR7lSjv5m0/XuWQiDKLnGOFYTkxIhIe2 +eAvwnrnaLjF54Ps3JfkzVurMS0ay5dFSRryO9OppJWqKWsKyGrdaiBlUuqLJKIP BshVneFu9Ul4Vw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:06:27 2025 by rpki-client