This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json) Hash identifier: FTfQ5bPmibE/2iJwyHXtaUMk0kDnYjFjaq8fn7Dt5TE= Subject key identifier: C8:68:58:5C:B1:2B:82:5A:0E:E4:FB:B6:A6:AC:00:E4:78:D7:52:9F Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c Certificate serial: 019B32D75D18D820E19E33E7BFEF8CE3491B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft Manifest number: 1058 Signing time: Thu 18 Dec 2025 19:02:13 +0000 Manifest this update: Thu 18 Dec 2025 19:02:13 +0000 Manifest next update: Fri 19 Dec 2025 19:02:13 +0000 Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=) 2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: qtQ/Q52AIAb49krn8C5SAX2n5v7NfYMx7QvZKzOba0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:5d:18:d8:20:e1:9e:33:e7:bf:ef:8c:e3:49:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c Validity Not Before: Dec 18 19:02:13 2025 GMT Not After : Dec 19 19:02:13 2025 GMT Subject: CN=c868585cb12b825a0ee4fbb6a6ac00e478d7529f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:32:c1:4b:cb:52:bf:82:41:5a:34:a3:1b: ea:8d:5b:93:7a:de:5e:97:04:c3:cb:ab:fd:80:34: 72:4c:7a:14:9a:4d:b2:67:b2:f7:b0:7b:36:bb:ec: 10:e2:85:88:ab:00:fc:e5:fd:34:85:b6:05:57:0b: 98:c0:75:9e:17:e8:d7:44:18:78:d7:27:51:ef:04: c7:fd:ec:f5:40:62:ef:6e:3c:76:bd:03:4a:0b:e8: e5:b6:a2:b4:4e:52:68:13:6c:5f:e3:ce:f6:5a:0b: c7:7a:a2:46:64:b8:60:2c:1f:7f:6f:ca:28:fc:21: 61:ea:f3:97:dc:2e:05:70:f1:2c:3f:0f:4e:64:7c: 4c:7c:66:ff:e4:12:a4:89:e3:87:2d:36:0c:50:33: 65:ea:16:9b:bb:9d:ca:d1:5e:db:82:9c:fe:a7:52: bc:67:76:79:33:13:43:86:97:3c:6e:f5:c2:cd:a4: 78:87:4f:d1:67:63:e2:be:6d:db:2a:d2:f4:97:dc: 5b:3f:c9:2e:03:47:27:d4:e7:28:b4:6d:e3:56:0e: 8d:14:9e:e4:80:c5:a7:66:b6:d6:ac:a6:c4:d8:68: 4c:74:3d:5c:79:c7:00:26:38:23:fd:87:5e:66:b4: ef:75:e5:6b:6c:9f:34:81:a3:62:69:13:1a:ed:4a: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:68:58:5C:B1:2B:82:5A:0E:E4:FB:B6:A6:AC:00:E4:78:D7:52:9F X509v3 Authority Key Identifier: keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:34:3e:13:08:42:dc:d8:4b:80:fe:9c:4f:e6:16:c7:de:6f: 2d:63:ab:38:f6:97:ec:8e:79:df:c3:4f:d1:4f:62:3b:f9:f7: ae:41:51:02:67:a0:e1:35:50:09:0f:8e:ec:66:bc:9f:82:49: 75:24:8a:bd:a5:cd:db:7f:d1:49:92:6d:3f:73:4f:cf:13:a8: 94:3e:29:cc:5a:96:c3:75:c5:a3:71:af:bc:48:2d:b0:cd:74: b9:1a:dc:22:d3:74:36:43:69:fe:53:d1:d1:d2:6d:93:08:d6: ca:24:ae:fb:f7:0a:1f:96:99:b7:7e:fb:8d:2c:89:f1:13:94: 7d:db:36:08:4d:ab:6f:e1:c6:a2:90:74:80:39:76:9e:5e:59: c5:f9:75:3a:d3:2e:f0:95:2a:0f:d1:3b:85:da:43:66:10:85: 37:ae:36:99:df:19:19:64:de:9e:8f:6d:dd:38:8e:fd:d3:2c: da:89:97:49:99:e5:c4:62:c0:62:98:3f:cc:78:ee:4f:3c:c0: 36:6a:2b:82:b3:35:b9:2f:d2:ae:e8:a0:0c:48:76:a8:58:ac: 30:18:9d:30:3b:19:df:70:1d:df:c6:32:db:0b:13:40:6e:20: 71:3e:e6:a9:fe:4d:a4:bb:21:17:38:84:2a:f7:4d:ca:83:59: 35:e8:b6:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy110Y2CDhnjPnv++M40kbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2 MjUzNmMwHhcNMjUxMjE4MTkwMjEzWhcNMjUxMjE5MTkwMjEzWjAzMTEwLwYDVQQD EyhjODY4NTg1Y2IxMmI4MjVhMGVlNGZiYjZhNmFjMDBlNDc4ZDc1MjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteIywUvLUr+CQVo0oxvqjVuTet5e lwTDy6v9gDRyTHoUmk2yZ7L3sHs2u+wQ4oWIqwD85f00hbYFVwuYwHWeF+jXRBh4 1ydR7wTH/ez1QGLvbjx2vQNKC+jltqK0TlJoE2xf4872WgvHeqJGZLhgLB9/b8oo /CFh6vOX3C4FcPEsPw9OZHxMfGb/5BKkieOHLTYMUDNl6habu53K0V7bgpz+p1K8 Z3Z5MxNDhpc8bvXCzaR4h0/RZ2Pivm3bKtL0l9xbP8kuA0cn1OcotG3jVg6NFJ7k gMWnZrbWrKbE2GhMdD1ceccAJjgj/YdeZrTvdeVrbJ80gaNiaRMa7UpguwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhoWFyxK4JaDuT7tqasAOR411KfMB8GA1UdIwQY MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5 LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjQ+EwhC 3NhLgP6cT+YWx95vLWOrOPaX7I5538NP0U9iO/n3rkFRAmeg4TVQCQ+O7Ga8n4JJ dSSKvaXN23/RSZJtP3NPzxOolD4pzFqWw3XFo3GvvEgtsM10uRrcItN0NkNp/lPR 0dJtkwjWyiSu+/cKH5aZt377jSyJ8ROUfds2CE2rb+HGopB0gDl2nl5Zxfl1OtMu 8JUqD9E7hdpDZhCFN642md8ZGWTeno9t3TiO/dMs2omXSZnlxGLAYpg/zHjuTzzA NmorgrM1uS/SruigDEh2qFisMBidMDsZ33Ad38Yy2wsTQG4gcT7mqf5NpLshFziE KvdNyoNZNei22w== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:02 2025 by rpki-client