This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json) Hash identifier: n5CY36WKpFYq/wuE4morVV0TM1hi+mBZ9zTz7pm1FAk= Subject key identifier: CE:87:F2:27:9A:2C:C6:F4:07:8E:AF:61:F1:E2:1F:36:65:59:45:D5 Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Certificate serial: 019B330CF7523ED27BDF633E9F1396FB6568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft Manifest number: 07BC Signing time: Thu 18 Dec 2025 20:00:46 +0000 Manifest this update: Thu 18 Dec 2025 20:00:46 +0000 Manifest next update: Fri 19 Dec 2025 20:00:46 +0000 Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=) 2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: KvMsaqbz5JEDJ60wje1+saGjKonSi0g3j+Pg0ZSBjS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:f7:52:3e:d2:7b:df:63:3e:9f:13:96:fb:65:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11 Validity Not Before: Dec 18 20:00:46 2025 GMT Not After : Dec 19 20:00:46 2025 GMT Subject: CN=ce87f2279a2cc6f4078eaf61f1e21f36655945d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:c3:06:47:81:e9:3d:1b:4a:f4:31:32:b5: 01:56:20:b1:d9:1d:19:ab:5a:69:1a:21:1e:8e:99: 23:f2:7f:79:8f:9a:1c:e7:e0:85:30:0f:c7:ad:0a: af:fc:76:35:73:28:81:9b:e5:81:7e:1b:d2:fe:99: dd:74:7e:99:3c:27:bb:46:98:c1:48:85:c2:1c:e4: 59:dc:ae:07:58:a0:2b:ad:57:c5:f5:e3:b6:ce:6c: c5:69:8e:c5:82:d6:d8:ce:b8:24:9d:1e:f9:ff:88: 79:a5:83:be:07:47:f4:dc:d8:ea:51:2a:0c:d3:b2: 57:4e:66:04:60:e5:17:b2:d3:56:8c:f2:4b:95:58: fd:a4:c0:30:b4:14:ca:35:f6:f3:01:ea:c1:11:44: 8c:33:5e:56:18:21:8f:cb:55:5d:a6:80:41:d8:36: 7e:d6:76:35:13:2f:dc:b6:ed:33:40:6e:7a:b5:78: 45:42:b7:5e:fc:da:23:4f:68:9d:96:75:3b:de:5a: ba:3d:4a:c6:07:da:a3:2d:f3:57:f1:96:2a:29:ee: 38:65:90:0c:02:f4:4e:f0:a9:dc:d4:46:9f:c9:52: 57:6c:86:07:1e:5c:47:97:11:94:f4:a4:5c:0f:6c: d5:cc:1f:7a:48:ed:cb:93:67:d8:9a:68:49:58:47: 88:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:87:F2:27:9A:2C:C6:F4:07:8E:AF:61:F1:E2:1F:36:65:59:45:D5 X509v3 Authority Key Identifier: keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:75:05:30:cd:89:da:13:1f:62:81:6c:fd:53:59:d6:97:20: 12:a2:1c:f0:c8:a5:70:dd:a5:6e:42:5c:23:81:3b:4d:5c:60: a1:2a:89:31:42:bc:b7:9f:2c:db:48:68:30:f7:1b:8d:36:c9: 8a:7f:7d:ec:7a:e0:d5:2a:f8:b1:66:9b:9b:25:41:ec:ba:03: 52:c3:50:35:6e:1d:7f:c9:5b:ef:0d:7f:b0:59:a4:aa:c6:db: fd:e0:20:56:db:be:0f:29:97:db:72:0b:77:bf:c7:5a:a9:0b: 52:06:9b:42:89:97:e5:fe:a2:ea:24:75:83:66:81:b7:29:69: ca:71:75:dc:b2:64:1d:04:31:26:e3:d4:de:aa:7c:e6:8d:27: 7e:e6:47:db:cb:db:43:db:cf:11:c6:73:fb:b2:1e:b3:fd:0b: 94:64:4a:27:63:2a:32:05:25:5b:0b:11:01:11:4d:81:e8:e1: 25:85:56:02:55:e3:ca:c0:cc:78:4a:24:d7:eb:d8:e3:c6:73: 26:a1:6b:2e:05:c4:e5:40:09:24:f9:4d:72:be:f8:11:bd:09: 0b:7a:aa:ac:5f:87:fd:7a:5e:8b:14:04:a2:f8:95:bf:69:54: ba:96:71:53:60:e7:48:15:99:38:65:a5:b5:c7:b9:75:e4:85: dd:ff:22:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDPdSPtJ732M+nxOW+2VoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw YThkMTEwHhcNMjUxMjE4MjAwMDQ2WhcNMjUxMjE5MjAwMDQ2WjAzMTEwLwYDVQQD EyhjZTg3ZjIyNzlhMmNjNmY0MDc4ZWFmNjFmMWUyMWYzNjY1NTk0NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt73DBkeB6T0bSvQxMrUBViCx2R0Z q1ppGiEejpkj8n95j5oc5+CFMA/HrQqv/HY1cyiBm+WBfhvS/pnddH6ZPCe7RpjB SIXCHORZ3K4HWKArrVfF9eO2zmzFaY7FgtbYzrgknR75/4h5pYO+B0f03NjqUSoM 07JXTmYEYOUXstNWjPJLlVj9pMAwtBTKNfbzAerBEUSMM15WGCGPy1VdpoBB2DZ+ 1nY1Ey/ctu0zQG56tXhFQrde/NojT2idlnU73lq6PUrGB9qjLfNX8ZYqKe44ZZAM AvRO8Knc1EafyVJXbIYHHlxHlxGU9KRcD2zVzB96SO3Lk2fYmmhJWEeIwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6H8ieaLMb0B46vYfHiHzZlWUXVMB8GA1UdIwQY MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt Y2JlYzQzZmQ5MmExLzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3UFMM2J 2hMfYoFs/VNZ1pcgEqIc8MilcN2lbkJcI4E7TVxgoSqJMUK8t58s20hoMPcbjTbJ in997Hrg1Sr4sWabmyVB7LoDUsNQNW4df8lb7w1/sFmkqsbb/eAgVtu+DymX23IL d7/HWqkLUgabQomX5f6i6iR1g2aBtylpynF13LJkHQQxJuPU3qp85o0nfuZH28vb Q9vPEcZz+7Ies/0LlGRKJ2MqMgUlWwsRARFNgejhJYVWAlXjysDMeEok1+vY48Zz JqFrLgXE5UAJJPlNcr74Eb0JC3qqrF+H/XpeixQEoviVv2lUupZxU2DnSBWZOGWl tce5deSF3f8i+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:53 2025 by rpki-client