This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json) Hash identifier: viwB/IHfLfQ8aVPfppN4ai+kvtQitX7pcJFLWn03ZXg= Subject key identifier: BD:42:92:86:92:DB:54:10:21:6C:66:07:CA:2E:5E:92:A8:BB:0A:08 Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7 Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7 Certificate serial: 019B3532E4713A5BED4DD7F782055A03DC1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 06:01:26 +0000 Manifest this update: Fri 19 Dec 2025 06:01:26 +0000 Manifest next update: Sat 20 Dec 2025 06:01:26 +0000 Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=) 2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: a/1UR2I1fPF6BNMSzZ3W8XVQVJvqDUedulfa9i53HB4=) 3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e4:71:3a:5b:ed:4d:d7:f7:82:05:5a:03:dc:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7 Validity Not Before: Dec 19 06:01:26 2025 GMT Not After : Dec 20 06:01:26 2025 GMT Subject: CN=bd42928692db5410216c6607ca2e5e92a8bb0a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:79:93:bf:2e:c7:db:28:eb:58:51:9d:45: ca:cb:a3:2d:a6:e4:b6:6f:66:ee:b8:64:e1:9c:0f: a9:d1:2c:dc:4e:67:c6:8b:7c:a0:1e:91:f6:a1:43: 56:f0:0b:43:b8:55:98:62:e2:4f:ec:91:64:08:a0: 89:38:d2:d8:8e:d4:e4:0f:57:f3:34:56:b3:af:3a: 79:28:b3:7c:ae:46:68:c4:07:15:a9:fe:89:f3:53: 58:eb:32:d6:d9:39:5e:09:1e:cf:47:a2:76:92:58: 67:2a:ab:7a:ae:5d:27:cd:8f:0b:e8:02:ce:96:59: a4:ef:cd:27:0a:56:d4:48:43:8d:99:3d:d8:07:d6: 9c:12:7d:9c:3c:78:65:d6:73:e6:3d:63:83:ef:8b: f4:3f:15:58:a6:5e:f2:c8:ae:de:1c:95:6c:13:77: 99:a3:df:80:a1:80:c3:55:95:a1:03:21:c8:5e:67: 08:3b:2d:df:f5:a0:50:de:f5:f0:72:37:a0:8a:d8: 4a:bc:53:44:a2:11:05:e0:a5:84:90:7b:91:bf:90: 4a:fe:1e:c2:b1:04:66:c4:02:d5:88:59:90:3c:da: e9:93:90:d0:b2:18:70:37:5c:bc:9f:10:e4:5c:19: 31:c2:c0:66:e1:22:ed:a9:87:b1:c1:18:2c:3a:49: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:42:92:86:92:DB:54:10:21:6C:66:07:CA:2E:5E:92:A8:BB:0A:08 X509v3 Authority Key Identifier: keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:66:1f:57:f9:ca:5b:29:e7:87:07:1f:00:99:45:45:0e:a5: 32:05:95:22:17:52:fd:23:26:11:33:4f:b5:88:da:56:74:76: 1e:82:ca:8d:d6:a7:51:1d:f2:49:10:5a:70:f7:02:d5:f0:9d: a9:f6:2a:4b:f4:9c:f4:1a:65:6d:5e:73:5d:0e:78:14:4c:35: ad:d9:16:57:91:54:a6:4a:bf:8c:72:10:14:e5:07:d4:a7:32: 08:b4:bc:d5:db:44:55:c4:5c:73:71:1f:01:70:80:b9:cf:ec: 43:a0:cb:68:08:0b:b6:ac:92:15:6e:1d:e5:de:55:ac:53:24: 60:8a:5a:19:39:c6:49:1b:37:db:b6:b4:25:e3:e8:f3:43:ac: a3:23:f3:15:50:15:b2:26:f1:e3:14:e0:7e:e2:17:4a:83:4a: 3f:1e:5e:1b:27:76:ef:df:4c:3e:6a:95:a5:bc:fb:26:fd:06: c2:a6:a5:f0:53:25:64:9b:56:64:05:73:d5:ed:cb:63:7d:89: 07:14:1d:8c:64:8d:bc:b6:54:f9:dd:e7:ad:20:2a:e9:a3:14: 66:39:d4:eb:c3:83:c1:43:2c:c1:46:7b:5b:37:58:5c:11:3b: b4:6b:1f:39:e3:50:2f:47:87:8d:79:74:9a:f9:25:c2:e3:18: 7b:0a:ad:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuRxOlvtTdf3ggVaA9weMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1 MWI0ZDcwHhcNMjUxMjE5MDYwMTI2WhcNMjUxMjIwMDYwMTI2WjAzMTEwLwYDVQQD EyhiZDQyOTI4NjkyZGI1NDEwMjE2YzY2MDdjYTJlNWU5MmE4YmIwYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhx5k78ux9so61hRnUXKy6MtpuS2 b2buuGThnA+p0SzcTmfGi3ygHpH2oUNW8AtDuFWYYuJP7JFkCKCJONLYjtTkD1fz NFazrzp5KLN8rkZoxAcVqf6J81NY6zLW2TleCR7PR6J2klhnKqt6rl0nzY8L6ALO llmk780nClbUSEONmT3YB9acEn2cPHhl1nPmPWOD74v0PxVYpl7yyK7eHJVsE3eZ o9+AoYDDVZWhAyHIXmcIOy3f9aBQ3vXwcjegithKvFNEohEF4KWEkHuRv5BK/h7C sQRmxALViFmQPNrpk5DQshhwN1y8nxDkXBkxwsBm4SLtqYexwRgsOkkmDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1CkoaS21QQIWxmB8ouXpKouwoIMB8GA1UdIwQY MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt ZTEwN2Q5ZjE2YzJkLzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWYfV/nK WynnhwcfAJlFRQ6lMgWVIhdS/SMmETNPtYjaVnR2HoLKjdanUR3ySRBacPcC1fCd qfYqS/Sc9BplbV5zXQ54FEw1rdkWV5FUpkq/jHIQFOUH1KcyCLS81dtEVcRcc3Ef AXCAuc/sQ6DLaAgLtqySFW4d5d5VrFMkYIpaGTnGSRs327a0JePo80OsoyPzFVAV sibx4xTgfuIXSoNKPx5eGyd2799MPmqVpbz7Jv0Gwqal8FMlZJtWZAVz1e3LY32J BxQdjGSNvLZU+d3nrSAq6aMUZjnU68ODwUMswUZ7WzdYXBE7tGsfOeNQL0eHjXl0 mvklwuMYewqt+A== -----END CERTIFICATE-----Generated at Fri Dec 19 08:24:15 2025 by rpki-client