This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json) Hash identifier: zf+HqjDsCCFEhoPcl/yxVmH/FQCRAz7e+MY+EOI4FaM= Subject key identifier: C7:0C:6B:74:FB:E0:C2:BD:71:D6:4B:23:64:52:44:DE:A6:86:25:E2 Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Certificate serial: 019B766D6BC7C04C0CC4FA6660FF8D6EB65B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft Manifest number: 0B37 Signing time: Wed 31 Dec 2025 22:00:41 +0000 Manifest this update: Wed 31 Dec 2025 22:00:41 +0000 Manifest next update: Thu 01 Jan 2026 22:00:41 +0000 Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=) 2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: tLPPjRhL/faIpA0Zh4BnxPGL6Q5RHBBYvr0zLx5VBzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:6b:c7:c0:4c:0c:c4:fa:66:60:ff:8d:6e:b6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Validity Not Before: Dec 31 22:00:41 2025 GMT Not After : Jan 1 22:00:41 2026 GMT Subject: CN=c70c6b74fbe0c2bd71d64b23645244dea68625e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:61:97:7a:1c:4a:ab:9b:a6:3c:7a:13:92: 82:26:67:58:4b:a0:50:f2:5e:b7:ea:ff:d8:35:c7: ad:06:7f:ee:66:9a:8c:f4:53:46:6f:cf:fa:2e:ae: 57:47:b1:ed:dd:5d:36:a1:35:ed:04:34:26:ac:15: 0b:13:57:15:ba:1a:03:fd:67:d9:9f:e1:f5:13:d6: 30:b1:83:a6:8f:68:50:e7:f4:49:16:e6:c9:a6:33: 80:76:12:20:dd:7e:71:4e:6d:53:bb:cf:47:07:89: 57:df:c4:7e:68:47:13:7c:4f:69:26:ee:98:5c:7f: 96:ef:9b:64:29:a8:e8:f6:25:14:04:9b:e2:f8:43: d7:4f:d3:07:f5:7f:95:73:cf:00:ed:07:c0:f3:84: a0:6a:0c:0d:f0:23:fb:dd:3e:6d:4b:dc:31:aa:80: 6f:8f:c5:b7:41:0b:68:ea:6e:c6:07:2f:90:7a:ac: d5:e3:ea:2c:c5:16:6e:0e:d1:41:a9:22:5b:3a:cb: 16:ee:8b:a6:83:df:32:42:5a:7e:c7:69:6c:e2:5f: 5c:47:d8:e5:ea:38:8a:65:43:d7:97:ab:2e:6b:4f: 79:7e:90:fa:a0:ac:f9:ac:72:eb:35:12:0f:a3:5f: 8a:ad:39:1d:4a:b4:d6:73:76:9a:4b:ce:8d:fa:87: 86:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:6B:74:FB:E0:C2:BD:71:D6:4B:23:64:52:44:DE:A6:86:25:E2 X509v3 Authority Key Identifier: keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d1:5a:7a:74:52:65:6b:2d:25:6b:a9:1c:95:a3:ff:de:64: c0:1c:8b:72:c8:e2:af:89:c2:f0:bc:99:11:b3:41:70:d2:2a: 4a:57:4e:e9:6f:61:62:4a:56:eb:69:4f:a1:cb:0c:4b:71:71: e0:c2:ce:22:60:3a:17:81:7e:15:96:74:47:5a:78:15:f7:88: b7:ed:d6:dc:80:f0:e3:87:37:59:ea:ce:36:9d:d3:08:b0:6d: f1:74:44:1e:66:5a:39:dc:fa:83:bb:61:b5:a8:21:61:16:4a: 7b:68:e9:6d:a7:e9:ae:f9:ac:e0:92:21:20:d7:74:ba:7d:b3: 71:17:2a:c3:b9:6e:a6:f9:f9:61:5a:42:63:a9:0a:42:75:c3: e7:aa:25:0d:5a:f5:67:60:ce:18:15:82:aa:5d:78:d9:a6:05: f9:fa:3f:da:69:fc:8d:db:64:1f:4e:c4:f3:1b:b9:e0:57:b4: 12:9c:6e:7d:8b:6b:da:f5:f9:a1:08:0a:f7:c9:75:0b:e4:9c: ac:f2:a9:cc:68:29:ff:71:fa:81:56:9a:1e:d9:0a:e1:2b:fc: c2:32:04:cf:bd:a0:0c:62:cb:ab:d8:52:8a:72:75:dd:20:8a: 4f:92:05:a8:29:2c:d3:4b:ef:f4:c0:20:2b:9f:60:41:11:84: 7d:be:24:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bWvHwEwMxPpmYP+NbrZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl NDQ4NTcwHhcNMjUxMjMxMjIwMDQxWhcNMjYwMTAxMjIwMDQxWjAzMTEwLwYDVQQD EyhjNzBjNmI3NGZiZTBjMmJkNzFkNjRiMjM2NDUyNDRkZWE2ODYyNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEJhl3ocSqubpjx6E5KCJmdYS6BQ 8l636v/YNcetBn/uZpqM9FNGb8/6Lq5XR7Ht3V02oTXtBDQmrBULE1cVuhoD/WfZ n+H1E9YwsYOmj2hQ5/RJFubJpjOAdhIg3X5xTm1Tu89HB4lX38R+aEcTfE9pJu6Y XH+W75tkKajo9iUUBJvi+EPXT9MH9X+Vc88A7QfA84SgagwN8CP73T5tS9wxqoBv j8W3QQto6m7GBy+QeqzV4+osxRZuDtFBqSJbOssW7oumg98yQlp+x2ls4l9cR9jl 6jiKZUPXl6sua095fpD6oKz5rHLrNRIPo1+KrTkdSrTWc3aaS86N+oeG1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcMa3T74MK9cdZLI2RSRN6mhiXiMB8GA1UdIwQY MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9FaenRS ZWstJWupHJWj/95kwByLcsjir4nC8LyZEbNBcNIqSldO6W9hYkpW62lPocsMS3Fx 4MLOImA6F4F+FZZ0R1p4FfeIt+3W3IDw44c3WerONp3TCLBt8XREHmZaOdz6g7th taghYRZKe2jpbafprvms4JIhINd0un2zcRcqw7lupvn5YVpCY6kKQnXD56olDVr1 Z2DOGBWCql142aYF+fo/2mn8jdtkH07E8xu54Fe0EpxufYtr2vX5oQgK98l1C+Sc rPKpzGgp/3H6gVaaHtkK4Sv8wjIEz72gDGLLq9hSinJ13SCKT5IFqCks00vv9MAg K59gQRGEfb4kkA== -----END CERTIFICATE-----Generated at Thu Jan 1 02:42:59 2026 by rpki-client