This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json) Hash identifier: ary0ogWmLxIiwHa/v4ELc5LEF8MYQ6/a/troMoRwAtM= Subject key identifier: CA:CF:00:04:AE:79:F8:CC:E5:1B:BC:86:92:8A:DB:96:DF:93:99:B2 Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb Certificate serial: 019B3A220FD591E8ABA00BAB6F40C2983676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 05:01:09 +0000 Manifest this update: Sat 20 Dec 2025 05:01:09 +0000 Manifest next update: Sun 21 Dec 2025 05:01:09 +0000 Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=) 2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=) 3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: MFHzTkqfsBYodJ3ee+yyCpvhua+eKgtCxSphea0K3K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:0f:d5:91:e8:ab:a0:0b:ab:6f:40:c2:98:36:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb Validity Not Before: Dec 20 05:01:09 2025 GMT Not After : Dec 21 05:01:09 2025 GMT Subject: CN=cacf0004ae79f8cce51bbc86928adb96df9399b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:e6:0d:aa:2d:91:f1:c4:f0:50:8e:93:67: 0a:af:32:19:16:dd:eb:26:db:d8:e0:d2:83:a6:7a: 30:c0:27:a5:92:a4:b6:ce:3e:59:3f:70:70:68:1e: 47:7c:b6:26:ab:47:70:50:ca:63:f8:d7:ea:39:b6: 60:bc:1d:55:47:ad:6c:96:98:20:99:5c:3a:71:f7: eb:da:01:c2:1d:7f:cb:bd:d9:21:23:8b:5d:7c:21: 7a:9c:77:f9:f9:25:ad:57:25:23:c9:c8:6d:18:ad: a3:f8:ec:95:49:10:f5:05:f2:14:67:13:67:45:7b: 5f:fb:eb:e5:58:4d:dc:5f:9e:07:41:f3:6e:a6:08: 9a:9c:e2:30:31:41:3c:89:95:fe:b0:64:9e:ca:20: 57:ce:76:af:6e:16:42:a8:10:08:53:ef:bc:93:81: 9b:10:84:67:83:66:da:12:06:cf:d3:4b:30:e6:95: ba:8d:cd:66:a4:c5:a7:0f:63:77:99:ae:82:97:f6: 39:2f:f4:8b:02:f3:7f:36:4d:d5:8a:a6:1d:55:0b: da:be:03:e5:ab:d1:e3:8a:9f:33:f0:b7:02:2d:a1: 7f:f1:d5:ab:49:fa:9f:84:65:5d:d8:ca:33:7a:44: 41:89:40:48:38:51:de:4a:68:c4:32:06:61:97:96: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CF:00:04:AE:79:F8:CC:E5:1B:BC:86:92:8A:DB:96:DF:93:99:B2 X509v3 Authority Key Identifier: keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:db:f2:69:55:f6:48:91:3d:04:69:4c:63:11:c4:86:da:83: fd:51:b1:47:a0:73:8b:42:8c:05:f8:3c:57:a4:9a:00:62:a2: cb:24:d1:1b:b5:33:35:4d:65:f3:1b:a6:18:ac:ca:bd:15:87: 54:8f:4b:f2:8a:82:7e:2d:98:f0:50:65:0b:cb:e6:03:57:3d: ee:a9:50:c1:29:46:7b:43:ac:0a:4a:67:c9:8b:46:6a:67:4a: 7c:7e:c7:b7:9e:8e:a9:91:5a:5e:ce:22:88:1b:f2:a6:c9:43: 48:e4:7f:b8:c9:e1:0f:68:23:ad:10:56:e5:f7:14:5c:01:2a: ec:85:3c:e3:ff:16:5f:6c:f2:79:64:d9:fe:a1:29:12:cb:1a: 68:2a:2d:94:0c:92:4d:46:2a:52:2a:96:ff:86:3b:5e:41:62: e8:8b:63:14:fb:63:0a:3d:c2:df:2b:57:33:ae:61:9b:3b:bb: 6e:c1:ad:a1:64:88:2d:2b:da:c4:a9:a4:b5:93:7b:99:42:48: d2:dc:e0:9a:f6:6f:c5:cd:7c:d8:4c:c3:cc:61:d8:ee:a5:2d: 1b:27:80:56:ca:3c:79:8f:77:95:a8:11:9d:63:14:81:57:a1: 1a:20:16:ba:7f:b9:aa:8b:7f:aa:cc:b4:b6:f2:37:19:f3:44: b7:a3:9d:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ig/VkeiroAurb0DCmDZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjU1MTkzN2VmYzk2ZTE0NWUzM2ExZWJjYTI0NDkyZGMx MjBlY2IwHhcNMjUxMjIwMDUwMTA5WhcNMjUxMjIxMDUwMTA5WjAzMTEwLwYDVQQD EyhjYWNmMDAwNGFlNzlmOGNjZTUxYmJjODY5MjhhZGI5NmRmOTM5OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreLmDaotkfHE8FCOk2cKrzIZFt3r JtvY4NKDpnowwCelkqS2zj5ZP3BwaB5HfLYmq0dwUMpj+NfqObZgvB1VR61slpgg mVw6cffr2gHCHX/LvdkhI4tdfCF6nHf5+SWtVyUjychtGK2j+OyVSRD1BfIUZxNn RXtf++vlWE3cX54HQfNupgianOIwMUE8iZX+sGSeyiBXznavbhZCqBAIU++8k4Gb EIRng2baEgbP00sw5pW6jc1mpMWnD2N3ma6Cl/Y5L/SLAvN/Nk3ViqYdVQvavgPl q9Hjip8z8LcCLaF/8dWrSfqfhGVd2MozekRBiUBIOFHeSmjEMgZhl5YUNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrPAASuefjM5Ru8hpKK25bfk5myMB8GA1UdIwQY MBaAFLBlUZN+/JbhReM6HryiRJLcEg7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEt YmYwOWFkMzJjODg4LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8yYzQ3MzEtODlkNS00ZTliLWI0YWEtYmYwOWFkMzJjODg4 LzEvc0dWUmszNzhsdUZGNHpvZXZLSkVrdHdTRHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA09vyaVX2 SJE9BGlMYxHEhtqD/VGxR6Bzi0KMBfg8V6SaAGKiyyTRG7UzNU1l8xumGKzKvRWH VI9L8oqCfi2Y8FBlC8vmA1c97qlQwSlGe0OsCkpnyYtGamdKfH7Ht56OqZFaXs4i iBvypslDSOR/uMnhD2gjrRBW5fcUXAEq7IU84/8WX2zyeWTZ/qEpEssaaCotlAyS TUYqUiqW/4Y7XkFi6ItjFPtjCj3C3ytXM65hmzu7bsGtoWSILSvaxKmktZN7mUJI 0tzgmvZvxc182EzDzGHY7qUtGyeAVso8eY93lagRnWMUgVehGiAWun+5qot/qsy0 tvI3GfNEt6OdGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:06:00 2025 by rpki-client