This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json) Hash identifier: 9/i6f1+hcKEowYkZIB4gdJs4r0L4b1IieTs4VORPRVI= Subject key identifier: 5C:97:25:35:20:AF:41:94:B1:03:BC:13:C4:BD:5D:35:85:B0:92:8B Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75 Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975 Certificate serial: 019B51BD5F4C12E5EB7578BC9369DE934939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft Manifest number: 0B63 Signing time: Wed 24 Dec 2025 19:02:03 +0000 Manifest this update: Wed 24 Dec 2025 19:02:03 +0000 Manifest next update: Thu 25 Dec 2025 19:02:03 +0000 Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: Ai3JdX35QbFKnUchzKO7u+3WmX4gdSwesjafml0r4mQ=) 2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:5f:4c:12:e5:eb:75:78:bc:93:69:de:93:49:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975 Validity Not Before: Dec 24 19:02:03 2025 GMT Not After : Dec 25 19:02:03 2025 GMT Subject: CN=5c97253520af4194b103bc13c4bd5d3585b0928b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:ea:da:a6:44:63:e5:4d:ce:c3:92:be:c4: 42:e2:76:73:03:a9:70:b4:1c:1e:bb:f3:64:37:57: 38:54:43:22:da:44:cf:17:8e:d9:5f:98:b2:80:f4: 77:94:eb:b8:e2:f2:b7:96:9c:df:f1:ef:a8:71:e4: db:af:b0:10:4f:46:d5:31:a8:b0:a4:1a:d9:6a:39: 98:84:08:78:f4:d9:23:4c:34:1e:c1:e5:69:cf:13: f4:50:e9:af:1b:7c:5f:6f:fd:5e:99:d9:73:e1:49: ae:10:40:1e:5c:15:e5:9b:ca:7c:f8:11:9b:2e:88: 17:cd:ce:66:cf:7c:3c:65:98:42:ff:94:3c:e0:4d: b0:fa:d0:4e:36:1b:3b:28:cb:25:e7:fa:cb:7b:99: 6d:d7:d3:c8:8f:b7:d0:94:4d:41:26:57:bb:db:9c: 5e:53:09:0d:cd:96:3b:71:6d:d4:7a:85:2d:36:83: 16:36:27:56:24:b9:02:c5:5d:77:7c:c3:6e:0b:12: 09:19:ca:76:14:d5:d7:8f:51:aa:ea:34:4b:48:56: 4f:6a:d6:96:97:c6:1a:2f:71:98:a2:69:34:bb:37: 08:ce:d5:46:4b:9b:fb:45:91:68:e5:41:94:4a:54: 87:0c:6a:b5:ef:21:95:17:97:0c:44:96:18:5e:2d: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:25:35:20:AF:41:94:B1:03:BC:13:C4:BD:5D:35:85:B0:92:8B X509v3 Authority Key Identifier: keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:67:14:2d:5f:d4:56:5e:7b:35:af:8c:81:30:c5:13:2e:bc: 7b:9a:18:d9:26:9e:b7:7f:4d:45:cd:c3:6b:1e:bb:38:7d:7d: 57:3d:e9:ac:e6:db:84:e1:25:d6:74:ff:82:00:b5:1e:c4:50: a2:5d:bb:df:86:fb:69:94:71:c8:18:11:18:3b:ea:8d:03:92: ab:d8:be:4f:47:d2:8a:f9:d5:92:17:40:86:d3:33:10:4a:62: c9:ec:fd:ee:27:ec:4c:f7:46:f5:ca:77:63:03:99:d8:60:9f: d6:5c:78:fb:1d:d6:41:82:10:6c:f9:2b:41:ba:cd:37:69:3a: e6:d0:52:53:fb:30:d9:aa:77:1e:fa:37:4a:70:7e:b5:22:22: 6e:bd:56:9c:64:27:e6:2f:b7:25:64:41:12:93:65:91:55:cf: 86:4a:1c:fe:26:13:b9:81:b1:6b:e4:fb:49:1a:55:af:8e:7d: cc:30:75:7e:e7:3c:21:ee:9d:8f:f2:56:e7:d6:21:52:d7:49: f5:03:92:e6:c1:07:00:3b:fe:1a:2c:18:e0:88:97:11:30:f9: a4:32:32:21:57:78:93:9f:bd:2d:e5:4e:af:43:b9:27:37:e9: d2:de:00:1c:e2:a8:eb:63:f5:e3:86:82:09:02:82:3c:e9:ed: 56:0d:7c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvV9MEuXrdXi8k2nek0k5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2EwNDU4NmE4NWVkMTJlOWNkYTgzNGRmZGZhMTE5YzFh NTg5NzUwHhcNMjUxMjI0MTkwMjAzWhcNMjUxMjI1MTkwMjAzWjAzMTEwLwYDVQQD Eyg1Yzk3MjUzNTIwYWY0MTk0YjEwM2JjMTNjNGJkNWQzNTg1YjA5MjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi/q2qZEY+VNzsOSvsRC4nZzA6lw tBweu/NkN1c4VEMi2kTPF47ZX5iygPR3lOu44vK3lpzf8e+oceTbr7AQT0bVMaiw pBrZajmYhAh49NkjTDQeweVpzxP0UOmvG3xfb/1emdlz4UmuEEAeXBXlm8p8+BGb LogXzc5mz3w8ZZhC/5Q84E2w+tBONhs7KMsl5/rLe5lt19PIj7fQlE1BJle725xe UwkNzZY7cW3UeoUtNoMWNidWJLkCxV13fMNuCxIJGcp2FNXXj1Gq6jRLSFZPataW l8YaL3GYomk0uzcIztVGS5v7RZFo5UGUSlSHDGq17yGVF5cMRJYYXi07qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyXJTUgr0GUsQO8E8S9XTWFsJKLMB8GA1UdIwQY MBaAFErKBFhqhe0S6c2oNN/foRnBpYl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2Ut MWI1ZGU1Yjc2MDYyLzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2UtMWI1ZGU1Yjc2MDYy LzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamcULV/U Vl57Na+MgTDFEy68e5oY2Saet39NRc3Dax67OH19Vz3prObbhOEl1nT/ggC1HsRQ ol2734b7aZRxyBgRGDvqjQOSq9i+T0fSivnVkhdAhtMzEEpiyez97ifsTPdG9cp3 YwOZ2GCf1lx4+x3WQYIQbPkrQbrNN2k65tBSU/sw2ap3Hvo3SnB+tSIibr1WnGQn 5i+3JWRBEpNlkVXPhkoc/iYTuYGxa+T7SRpVr459zDB1fuc8Ie6dj/JW59YhUtdJ 9QOS5sEHADv+GiwY4IiXETD5pDIyIVd4k5+9LeVOr0O5Jzfp0t4AHOKo62P144aC CQKCPOntVg188A== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:35 2025 by rpki-client