This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json) Hash identifier: 0E3SBIF+U8CIg8iFv0jRUbjq2dB76Lmb2pqh4sgPmu0= Subject key identifier: DD:ED:59:E4:94:45:10:FF:E4:D9:D8:A2:22:29:DE:84:8E:DE:5D:FB Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3 Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3 Certificate serial: 019B3BA2A6C3E67F861F70E071D03453FBE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft Manifest number: 0441 Signing time: Sat 20 Dec 2025 12:01:13 +0000 Manifest this update: Sat 20 Dec 2025 12:01:13 +0000 Manifest next update: Sun 21 Dec 2025 12:01:13 +0000 Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=) 2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: HZBo3yoPxnbNXFaXAANQhxVGmIWcwgnKOXYE7usU6JM=) 3: s4XNe0m5JYFtPI85hv2GLzYIY68.roa (hash: pE7eHdiD/UhztagcGqo6QdniDLwOOKzreXSfWjlvBJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:a6:c3:e6:7f:86:1f:70:e0:71:d0:34:53:fb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3 Validity Not Before: Dec 20 12:01:13 2025 GMT Not After : Dec 21 12:01:13 2025 GMT Subject: CN=dded59e4944510ffe4d9d8a22229de848ede5dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:2d:a4:e1:3c:67:47:61:e2:0f:ec:35:d7: a0:05:35:54:c8:6f:66:aa:f2:4d:59:0e:f8:03:cc: 38:e3:0d:21:19:d4:85:1e:a4:de:8c:d3:b6:9d:b2: f7:85:87:01:aa:92:87:be:73:e5:80:75:70:1c:d4: 75:b2:8b:b5:d3:17:d1:49:e3:64:c0:48:06:23:62: 4a:31:88:60:27:1e:6d:b3:fb:94:0f:9b:ce:1b:ea: 3e:96:50:b7:1e:90:e1:c0:d2:c9:d1:53:89:19:ae: 04:f1:69:05:a8:bb:9f:23:9b:1f:e9:59:1e:91:51: 08:4a:17:4c:58:48:d8:6a:5b:ab:d8:9c:33:e3:5e: 47:59:74:02:d9:10:41:2d:21:12:d0:f7:48:93:fd: 0e:0a:61:21:72:1c:59:c0:dd:68:73:dc:e5:8d:53: 1a:af:0a:45:bd:bd:c9:d3:e7:2d:3a:77:ce:4b:b2: 7d:77:c7:f1:b7:34:d8:38:2f:e9:71:77:b8:34:02: 18:f9:9b:1e:01:7a:2b:e1:65:b3:7c:ac:d1:46:d0: e2:ad:4a:3e:f5:38:78:39:c3:f0:fa:4a:0f:b8:a1: 09:62:6e:1f:1d:b3:6c:42:00:b4:a6:dd:b1:90:73: e5:91:df:e1:43:6e:85:3f:4d:b0:ae:f2:57:b2:3f: 28:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:59:E4:94:45:10:FF:E4:D9:D8:A2:22:29:DE:84:8E:DE:5D:FB X509v3 Authority Key Identifier: keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b8:93:47:66:b4:53:20:e5:ba:71:ca:75:c6:4d:e3:8f:fc: 4c:fc:ed:18:a3:74:e9:52:91:f1:48:1b:13:9e:cb:01:eb:73: 18:2b:3d:83:d7:fc:a5:64:50:e3:72:b0:f4:90:00:26:3f:36: 2c:c9:7d:00:dd:fc:a1:d6:a3:90:5e:09:bf:ee:ba:ab:7d:de: 48:1d:74:7f:6a:0a:9c:e0:44:51:f0:64:bf:40:f5:15:9a:b4: ae:9e:ba:86:71:e2:55:02:d5:9d:98:a0:0c:8a:05:93:f6:32: cb:6e:0e:5e:6a:30:f3:87:29:d3:dd:89:60:83:f5:ae:4f:c4: 11:58:e4:1e:1c:c3:fd:9a:c6:28:a1:39:a6:8d:dc:23:21:08: fd:f0:a5:c7:6e:78:44:38:8e:c5:4e:50:29:4e:a8:f5:16:86: 4a:1a:be:30:77:2c:5a:e4:39:1c:07:3d:e6:78:81:01:82:32: 67:89:7a:3b:94:ee:4b:14:39:62:71:fd:69:39:8e:97:f8:21: 09:7d:9e:27:84:63:7c:78:f7:a4:d4:85:0b:ed:09:e4:e9:29: 27:27:c8:ce:bb:76:3e:09:b3:ea:0b:89:c0:9e:e5:ba:7f:9c: dd:f0:99:a7:5e:d8:23:3a:7f:e6:5d:e5:a1:ca:c2:16:7e:d1: ec:1b:f6:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqbD5n+GH3DgcdA0U/vmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl NzAxZjMwHhcNMjUxMjIwMTIwMTEzWhcNMjUxMjIxMTIwMTEzWjAzMTEwLwYDVQQD EyhkZGVkNTllNDk0NDUxMGZmZTRkOWQ4YTIyMjI5ZGU4NDhlZGU1ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEMtpOE8Z0dh4g/sNdegBTVUyG9m qvJNWQ74A8w44w0hGdSFHqTejNO2nbL3hYcBqpKHvnPlgHVwHNR1sou10xfRSeNk wEgGI2JKMYhgJx5ts/uUD5vOG+o+llC3HpDhwNLJ0VOJGa4E8WkFqLufI5sf6Vke kVEIShdMWEjYalur2Jwz415HWXQC2RBBLSES0PdIk/0OCmEhchxZwN1oc9zljVMa rwpFvb3J0+ctOnfOS7J9d8fxtzTYOC/pcXe4NAIY+ZseAXor4WWzfKzRRtDirUo+ 9Th4OcPw+koPuKEJYm4fHbNsQgC0pt2xkHPlkd/hQ26FP02wrvJXsj8oKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3tWeSURRD/5NnYoiIp3oSO3l37MB8GA1UdIwQY MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt NjNmMTk3ZmIxYzk2LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2 LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArriTR2a0 UyDlunHKdcZN44/8TPztGKN06VKR8UgbE57LAetzGCs9g9f8pWRQ43Kw9JAAJj82 LMl9AN38odajkF4Jv+66q33eSB10f2oKnOBEUfBkv0D1FZq0rp66hnHiVQLVnZig DIoFk/Yyy24OXmow84cp092JYIP1rk/EEVjkHhzD/ZrGKKE5po3cIyEI/fClx254 RDiOxU5QKU6o9RaGShq+MHcsWuQ5HAc95niBAYIyZ4l6O5TuSxQ5YnH9aTmOl/gh CX2eJ4RjfHj3pNSFC+0J5OkpJyfIzrt2Pgmz6guJwJ7lun+c3fCZp17YIzp/5l3l ocrCFn7R7Bv2dA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:54:52 2025 by rpki-client