This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json) Hash identifier: WaF0dtiar817xHHFKQYIjefp6Q1SIdriGCIykZ4+JSE= Subject key identifier: 37:0E:9A:C0:55:21:84:F4:48:25:51:7E:C3:13:E4:13:A4:7E:C3:4E Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Certificate serial: 019B3BD96709D365F1FA8A216B7C95BD827E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft Manifest number: 04AC Signing time: Sat 20 Dec 2025 13:01:01 +0000 Manifest this update: Sat 20 Dec 2025 13:01:01 +0000 Manifest next update: Sun 21 Dec 2025 13:01:01 +0000 Files and hashes: 1: WuP_ar5p0VQaYjgm5CdF94AIxBs.roa (hash: ydupRdA76pUpd82bhv9cS8ujQ+gdAK4Xhs2n/s0tNgc=) 2: m74VvsI6EdMo76uevvan59QpkqE.roa (hash: 1fe03vMMsl3oUUL4Se2ddc8JmIOlm8Qdn5iC5j3XfoY=) 3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: vU1d2O9I1x0a5FUZhg5H+L+K/LZvicpo130/yGYc4rA=) 4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:67:09:d3:65:f1:fa:8a:21:6b:7c:95:bd:82:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Validity Not Before: Dec 20 13:01:01 2025 GMT Not After : Dec 21 13:01:01 2025 GMT Subject: CN=370e9ac0552184f44825517ec313e413a47ec34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:72:d3:a8:7b:56:6a:6d:1a:54:12:73:0a:45: c1:b0:8d:0f:27:f5:9b:3c:cb:3c:75:1c:66:72:7c: 51:6a:5e:7f:9c:f3:cd:4f:31:8a:ba:10:5f:ca:14: ec:10:e6:c7:57:2c:5f:9e:4a:5d:b6:20:ff:6b:63: 10:f6:82:78:15:23:34:88:ed:64:0b:51:8c:b8:64: 5a:22:44:49:7c:1e:3f:d9:c5:1b:fd:d7:6d:ed:37: b5:1a:37:99:2d:3f:2b:20:03:38:8f:96:91:f0:4b: a0:d9:b1:08:0d:c8:70:68:3d:39:35:59:41:16:00: 80:f2:c3:e7:64:73:70:e8:b9:a6:59:51:bb:e4:22: f3:71:e9:d1:43:f0:8c:4a:23:5e:9d:61:08:a2:de: 06:65:b1:fe:37:96:52:ee:c7:ec:78:4a:1c:b1:46: 4c:55:ff:33:a0:b3:0a:72:8b:61:a2:8c:d6:06:8f: 13:20:12:9c:42:40:59:45:95:6c:10:3a:81:fd:14: 63:59:d7:00:5c:ca:0a:e2:24:07:43:96:fa:cd:f2: 4a:c4:5d:04:ce:bb:20:4e:f9:e3:6d:60:e9:01:f0: 2a:07:31:5e:ff:bc:1f:ad:f7:20:20:5c:1c:2f:81: b3:a4:9f:0a:a5:2c:da:cb:92:3d:4f:ab:94:af:16: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0E:9A:C0:55:21:84:F4:48:25:51:7E:C3:13:E4:13:A4:7E:C3:4E X509v3 Authority Key Identifier: keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:60:e7:a9:bd:26:7c:43:bb:86:2a:17:ce:ee:05:a1:68:90: d7:ff:41:e4:85:c7:2e:5f:a7:4f:a3:f4:db:c9:d1:81:8c:10: 89:0b:57:1d:c1:62:c5:94:86:9b:31:90:90:55:e1:78:07:9f: 13:40:28:e8:d9:b0:cf:2a:40:74:a4:3d:6d:8b:1c:e2:57:56: c0:f7:6e:6f:be:e1:4a:4c:02:cb:53:a5:b8:e7:37:36:16:3e: f7:57:a8:29:3e:02:d5:a8:c5:e6:f8:64:dc:ed:63:da:77:ff: ee:d5:7f:12:41:c8:c5:e0:23:b2:67:56:ea:68:11:18:84:87: e8:3c:ba:7f:02:59:9c:81:9d:83:f3:75:41:d9:3e:97:8b:3f: 9e:b0:04:4c:3f:ff:b5:74:d5:3f:29:ac:18:32:e1:ac:a9:e7: 49:e6:7b:75:7d:19:53:95:65:61:53:97:d6:52:96:d3:49:84: 8d:86:7e:1b:e9:58:48:47:83:b7:9f:68:0b:09:86:23:a5:d6: b8:05:53:73:c6:c0:28:a4:23:bf:93:d1:a7:d7:37:91:ff:ef: 41:0d:a7:aa:4d:18:47:d5:ef:47:24:57:e5:bc:b9:d2:d4:ba: 7e:e6:5e:42:78:ec:f2:39:36:d4:5b:1b:19:24:56:40:de:30: a7:06:66:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72WcJ02Xx+ooha3yVvYJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw ODA2OGMwHhcNMjUxMjIwMTMwMTAxWhcNMjUxMjIxMTMwMTAxWjAzMTEwLwYDVQQD EygzNzBlOWFjMDU1MjE4NGY0NDgyNTUxN2VjMzEzZTQxM2E0N2VjMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83LTqHtWam0aVBJzCkXBsI0PJ/Wb PMs8dRxmcnxRal5/nPPNTzGKuhBfyhTsEObHVyxfnkpdtiD/a2MQ9oJ4FSM0iO1k C1GMuGRaIkRJfB4/2cUb/ddt7Te1GjeZLT8rIAM4j5aR8Eug2bEIDchwaD05NVlB FgCA8sPnZHNw6LmmWVG75CLzcenRQ/CMSiNenWEIot4GZbH+N5ZS7sfseEocsUZM Vf8zoLMKcothoozWBo8TIBKcQkBZRZVsEDqB/RRjWdcAXMoK4iQHQ5b6zfJKxF0E zrsgTvnjbWDpAfAqBzFe/7wfrfcgIFwcL4GzpJ8KpSzay5I9T6uUrxZPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcOmsBVIYT0SCVRfsMT5BOkfsNOMB8GA1UdIwQY MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt NjQ4MGMzZDFmNGU0LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0 LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGDnqb0m fEO7hioXzu4FoWiQ1/9B5IXHLl+nT6P028nRgYwQiQtXHcFixZSGmzGQkFXheAef E0Ao6NmwzypAdKQ9bYsc4ldWwPdub77hSkwCy1OluOc3NhY+91eoKT4C1ajF5vhk 3O1j2nf/7tV/EkHIxeAjsmdW6mgRGISH6Dy6fwJZnIGdg/N1Qdk+l4s/nrAETD// tXTVPymsGDLhrKnnSeZ7dX0ZU5VlYVOX1lKW00mEjYZ+G+lYSEeDt59oCwmGI6XW uAVTc8bAKKQjv5PRp9c3kf/vQQ2nqk0YR9XvRyRX5by50tS6fuZeQnjs8jk21Fsb GSRWQN4wpwZmDw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:11:15 2025 by rpki-client