This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json) Hash identifier: 9qrT6IUoynzg4OERtcHh1cQpzrA7WqX8XDaZYGX2KS8= Subject key identifier: 86:73:2B:B3:A8:3A:6D:D7:D8:A3:5B:B9:BB:AC:74:87:58:CC:01:8B Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Certificate serial: 019B6CC68C4D75DD21C93E74CC1B3EC6B18D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft Manifest number: 0B32 Signing time: Tue 30 Dec 2025 01:01:49 +0000 Manifest this update: Tue 30 Dec 2025 01:01:49 +0000 Manifest next update: Wed 31 Dec 2025 01:01:49 +0000 Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=) 2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: +CeGmPdZxmrqpDw+2fY8j0leep/aUztUAkAMsiIqgQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:8c:4d:75:dd:21:c9:3e:74:cc:1b:3e:c6:b1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Validity Not Before: Dec 30 01:01:49 2025 GMT Not After : Dec 31 01:01:49 2025 GMT Subject: CN=86732bb3a83a6dd7d8a35bb9bbac748758cc018b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:e0:05:31:b0:32:33:68:00:74:9c:e3:9e: 00:0c:ca:00:29:e5:3a:a0:dd:90:65:f6:43:85:d2: 38:ce:6b:42:b5:8c:7e:66:5f:c0:fe:6d:e4:06:99: b3:b5:50:4d:76:6c:f1:90:6d:73:8b:ba:2b:1f:a5: 09:4f:c8:62:d4:0e:de:ff:f0:75:c5:db:03:c0:53: b1:27:68:07:bc:ed:04:f7:5d:80:dc:a4:6e:1a:96: f8:3a:f2:0f:f7:6f:b2:ad:29:03:19:ea:6b:b4:4e: b9:31:1f:da:27:f8:46:1a:37:17:51:32:dc:fd:28: 1f:05:d3:7b:b8:a7:23:0f:80:48:36:d7:01:fa:7a: ee:a5:86:7e:81:bb:ad:52:70:a8:44:e3:09:e8:de: 06:c4:4b:7b:57:7e:2d:2b:e1:f6:1b:5c:21:a0:7f: f5:c3:c5:d2:7d:ec:0f:a0:f8:81:0e:6a:59:75:00: 81:ac:4b:28:8d:71:84:6f:d5:d1:14:bd:60:57:88: 80:d8:36:49:00:c0:d2:c0:33:13:22:ea:d0:26:d4: eb:67:5d:99:a7:64:2a:17:79:1b:6b:b8:62:28:7a: 7d:73:e1:87:62:5e:51:c5:88:96:49:60:03:18:3d: 59:4f:8b:58:18:e7:78:bb:66:4a:bc:de:81:43:e7: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:73:2B:B3:A8:3A:6D:D7:D8:A3:5B:B9:BB:AC:74:87:58:CC:01:8B X509v3 Authority Key Identifier: keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:35:df:59:51:2f:df:f0:d5:e8:0c:26:e3:4d:96:03:dd:3b: 58:23:22:91:e5:84:63:82:22:68:22:14:37:6a:2b:77:ca:2f: 92:a3:c9:bb:42:a1:96:3a:d2:fe:d2:e4:4d:17:a9:3f:05:73: d3:ef:4a:fb:dc:f7:24:87:f2:e6:00:12:5e:4f:82:8d:76:97: 64:d7:c9:b0:d6:5d:ea:8e:8e:5a:b6:fd:9f:74:38:79:47:1d: f9:fd:b1:d7:11:94:ba:64:72:0b:8c:7d:bc:4c:56:fa:09:f7: 24:8e:f2:49:22:04:4c:78:3a:1c:3c:50:59:97:52:50:ee:cd: 4a:85:8f:4d:e5:dc:f0:f4:18:1b:36:ef:87:24:e2:5b:ab:80: 9f:7b:f5:75:f1:b8:7d:19:a8:34:03:8a:8c:c7:7a:7f:17:df: bb:e3:94:75:27:53:62:f5:1f:ca:dd:e6:89:ce:28:59:d8:d8: 90:1d:72:01:36:52:ee:b0:34:df:01:ac:24:a2:b4:2c:23:e6: 0d:d1:5d:30:e4:14:e1:70:e6:b9:a4:c9:5b:87:c3:3a:f4:27: a7:15:25:eb:e0:f7:7a:b2:2c:14:9c:70:7c:06:ea:6b:96:d5: 46:ca:26:a6:f2:65:82:ad:fe:0c:93:8c:3c:ae:11:e1:ff:e3: ec:a6:7f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxoxNdd0hyT50zBs+xrGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl NDQ4NTcwHhcNMjUxMjMwMDEwMTQ5WhcNMjUxMjMxMDEwMTQ5WjAzMTEwLwYDVQQD Eyg4NjczMmJiM2E4M2E2ZGQ3ZDhhMzViYjliYmFjNzQ4NzU4Y2MwMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppTgBTGwMjNoAHSc454ADMoAKeU6 oN2QZfZDhdI4zmtCtYx+Zl/A/m3kBpmztVBNdmzxkG1zi7orH6UJT8hi1A7e//B1 xdsDwFOxJ2gHvO0E912A3KRuGpb4OvIP92+yrSkDGeprtE65MR/aJ/hGGjcXUTLc /SgfBdN7uKcjD4BINtcB+nrupYZ+gbutUnCoROMJ6N4GxEt7V34tK+H2G1whoH/1 w8XSfewPoPiBDmpZdQCBrEsojXGEb9XRFL1gV4iA2DZJAMDSwDMTIurQJtTrZ12Z p2QqF3kba7hiKHp9c+GHYl5RxYiWSWADGD1ZT4tYGOd4u2ZKvN6BQ+eEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZzK7OoOm3X2KNbubusdIdYzAGLMB8GA1UdIwQY MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjXfWVEv 3/DV6Awm402WA907WCMikeWEY4IiaCIUN2ord8ovkqPJu0KhljrS/tLkTRepPwVz 0+9K+9z3JIfy5gASXk+CjXaXZNfJsNZd6o6OWrb9n3Q4eUcd+f2x1xGUumRyC4x9 vExW+gn3JI7ySSIETHg6HDxQWZdSUO7NSoWPTeXc8PQYGzbvhyTiW6uAn3v1dfG4 fRmoNAOKjMd6fxffu+OUdSdTYvUfyt3mic4oWdjYkB1yATZS7rA03wGsJKK0LCPm DdFdMOQU4XDmuaTJW4fDOvQnpxUl6+D3erIsFJxwfAbqa5bVRsompvJlgq3+DJOM PK4R4f/j7KZ/wg== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:20 2025 by rpki-client