This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json) Hash identifier: I6RzKkvYfda4qB/4Kwv/LZiRzHO1QDareNzS920iUaM= Subject key identifier: 09:88:B4:8D:58:66:E2:B2:5F:E8:08:40:FB:4D:D6:08:A8:17:AF:6B Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Certificate serial: 019B54F44C11EA43A050F4CEFE85B91D2E59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft Manifest number: 04B9 Signing time: Thu 25 Dec 2025 10:00:54 +0000 Manifest this update: Thu 25 Dec 2025 10:00:54 +0000 Manifest next update: Fri 26 Dec 2025 10:00:54 +0000 Files and hashes: 1: WuP_ar5p0VQaYjgm5CdF94AIxBs.roa (hash: ydupRdA76pUpd82bhv9cS8ujQ+gdAK4Xhs2n/s0tNgc=) 2: m74VvsI6EdMo76uevvan59QpkqE.roa (hash: 1fe03vMMsl3oUUL4Se2ddc8JmIOlm8Qdn5iC5j3XfoY=) 3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: YaR9y42VZyEX1azJIpP22PtP73RP/tGK6nvCfLEhB0k=) 4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:4c:11:ea:43:a0:50:f4:ce:fe:85:b9:1d:2e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Validity Not Before: Dec 25 10:00:54 2025 GMT Not After : Dec 26 10:00:54 2025 GMT Subject: CN=0988b48d5866e2b25fe80840fb4dd608a817af6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:dd:59:70:03:04:22:2d:da:a7:ba:60:52: 44:07:99:a9:23:59:d5:6e:67:94:72:5a:0a:e7:2d: 8c:d5:f2:8d:46:2e:f6:7e:1a:81:a8:40:5d:5c:58: 43:a9:bd:c7:9b:ce:db:67:cc:0c:c7:e3:ad:a7:73: cf:3e:6f:e9:57:92:67:1a:4b:90:85:95:79:cc:d7: a4:36:f1:f8:1e:37:18:42:fb:96:b5:f5:57:93:b0: ba:96:4d:5a:b9:f9:3e:5b:37:ee:19:72:3e:62:49: 42:31:37:99:18:fb:eb:74:3f:e3:de:67:98:ff:38: af:51:2d:db:f1:29:c9:57:03:33:56:a4:35:ca:8a: 08:80:c7:c7:1a:bd:c9:84:75:b8:bb:af:01:f7:f1: 93:e6:3d:9e:88:9b:07:b7:a0:4f:c4:aa:60:4b:66: 3f:79:39:92:df:fa:52:d7:d1:35:5d:f1:c7:61:1b: f1:8d:31:1e:38:3f:e9:6e:7d:fa:25:ac:a6:f1:55: e0:b1:a7:48:1b:b3:b8:e4:d7:79:09:9b:bd:2f:62: e4:0b:d2:83:bd:74:0e:0b:1b:7b:28:e0:af:53:10: 01:44:49:a6:e2:5f:cb:fc:03:8c:2a:64:a4:31:a9: 41:44:ea:17:1d:f5:55:9b:98:63:d5:c8:61:ea:1f: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:88:B4:8D:58:66:E2:B2:5F:E8:08:40:FB:4D:D6:08:A8:17:AF:6B X509v3 Authority Key Identifier: keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:be:b8:87:d5:70:7a:8a:1e:3a:ce:05:09:b0:4a:95:7a:f7: 4a:9f:c3:99:25:31:11:48:12:0e:25:c5:3a:af:71:6c:99:19: d0:a8:a3:ec:1c:99:06:b3:59:86:08:54:03:00:3d:a5:dd:ce: 66:74:65:74:49:70:a0:5b:dd:ac:5e:2b:a7:53:d2:38:1d:e3: aa:c2:22:c8:ce:b0:ea:b7:62:9e:39:c9:54:06:fb:84:7c:82: 96:85:01:ae:98:f4:a3:85:30:be:11:c2:8a:bd:ff:97:0d:c2: 00:e7:10:d4:fc:69:d8:b0:ec:84:7f:e1:a4:2f:98:d8:f1:c5: 23:3f:a2:81:30:57:77:99:a1:72:54:fa:9f:c4:c5:e7:f7:45: 2a:b6:d4:43:10:5e:e5:4c:91:22:64:c5:e9:67:41:87:ea:06: b3:a6:09:02:f0:c7:a1:3f:75:44:e1:d1:f5:66:87:b3:72:b3: 82:ca:db:61:14:b8:f7:4d:f2:6a:39:fd:b2:f7:f6:d0:68:d3: f5:db:91:ca:62:ea:54:df:7f:f1:ca:e6:88:9d:8d:88:db:e9: 6d:c5:b2:74:81:18:94:9e:32:fd:a0:eb:06:e2:c7:83:85:dc: ac:bc:41:e2:6b:75:9b:27:6b:cd:f3:18:25:e2:ea:07:6f:45: 1a:75:b6:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9EwR6kOgUPTO/oW5HS5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw ODA2OGMwHhcNMjUxMjI1MTAwMDU0WhcNMjUxMjI2MTAwMDU0WjAzMTEwLwYDVQQD EygwOTg4YjQ4ZDU4NjZlMmIyNWZlODA4NDBmYjRkZDYwOGE4MTdhZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12vdWXADBCIt2qe6YFJEB5mpI1nV bmeUcloK5y2M1fKNRi72fhqBqEBdXFhDqb3Hm87bZ8wMx+Otp3PPPm/pV5JnGkuQ hZV5zNekNvH4HjcYQvuWtfVXk7C6lk1aufk+WzfuGXI+YklCMTeZGPvrdD/j3meY /zivUS3b8SnJVwMzVqQ1yooIgMfHGr3JhHW4u68B9/GT5j2eiJsHt6BPxKpgS2Y/ eTmS3/pS19E1XfHHYRvxjTEeOD/pbn36Jaym8VXgsadIG7O45Nd5CZu9L2LkC9KD vXQOCxt7KOCvUxABREmm4l/L/AOMKmSkMalBROoXHfVVm5hj1chh6h/aZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmItI1YZuKyX+gIQPtN1gioF69rMB8GA1UdIwQY MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt NjQ4MGMzZDFmNGU0LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0 LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb64h9Vw eooeOs4FCbBKlXr3Sp/DmSUxEUgSDiXFOq9xbJkZ0Kij7ByZBrNZhghUAwA9pd3O ZnRldElwoFvdrF4rp1PSOB3jqsIiyM6w6rdinjnJVAb7hHyCloUBrpj0o4UwvhHC ir3/lw3CAOcQ1Pxp2LDshH/hpC+Y2PHFIz+igTBXd5mhclT6n8TF5/dFKrbUQxBe 5UyRImTF6WdBh+oGs6YJAvDHoT91ROHR9WaHs3KzgsrbYRS4903yajn9svf20GjT 9duRymLqVN9/8crmiJ2NiNvpbcWydIEYlJ4y/aDrBuLHg4XcrLxB4mt1mydrzfMY JeLqB29FGnW24w== -----END CERTIFICATE-----Generated at Thu Dec 25 13:04:06 2025 by rpki-client