This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json) Hash identifier: INwMmzdZKJWi96B2z5mO4p+vSpIlgiyORe+UOZkuJ1g= Subject key identifier: 5E:8E:B6:E6:28:A5:92:4D:0D:23:10:26:31:6A:20:7B:58:C7:9C:AB Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c Certificate serial: 019B4DE0A54F8D3AF74ACC4059D2FA56016C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft Manifest number: 1066 Signing time: Wed 24 Dec 2025 01:02:06 +0000 Manifest this update: Wed 24 Dec 2025 01:02:06 +0000 Manifest next update: Thu 25 Dec 2025 01:02:06 +0000 Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=) 2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: WRd8US0M7p8LhByg++L5fE3+eWSoWRjVJa7RCoStk4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:a5:4f:8d:3a:f7:4a:cc:40:59:d2:fa:56:01:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c Validity Not Before: Dec 24 01:02:06 2025 GMT Not After : Dec 25 01:02:06 2025 GMT Subject: CN=5e8eb6e628a5924d0d231026316a207b58c79cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:08:d3:62:e1:7d:48:7e:27:9e:8d:6a:e1: 9e:f6:97:99:69:50:83:a5:25:77:63:b1:bf:98:08: ec:8f:b9:bc:6b:2d:28:4d:88:6a:fb:33:1c:de:4c: 5d:02:81:a0:89:18:30:a2:48:22:8d:f6:96:9b:3a: e7:86:a0:ac:75:26:ed:82:bf:80:d5:3d:c8:bf:f6: dc:23:da:d6:3d:e6:81:ed:7b:56:59:98:c5:20:f2: 8e:da:64:97:5a:34:f9:be:90:f4:97:01:5d:1c:e1: 13:ae:79:bc:4b:fd:e1:f1:04:20:3b:9a:5a:67:c6: 9b:54:2c:8b:12:f8:14:48:ad:27:34:42:ac:f8:38: 30:52:95:8a:25:8c:fd:26:33:68:9e:29:03:c9:ab: 84:6f:46:41:ac:ab:92:96:b4:58:45:f2:db:3c:06: da:e5:9f:5b:c1:3f:a2:62:aa:78:99:17:fd:3b:cf: 1d:9a:08:bd:27:95:47:35:07:a1:3f:83:39:d0:22: 32:00:aa:45:6f:d2:f6:2c:b4:ef:97:65:3a:49:4f: d4:a6:5c:be:6b:17:3b:e4:5d:a5:2f:37:c2:64:af: 0b:e5:cc:89:38:ff:eb:3b:d5:ba:8e:d0:e8:97:e8: ea:c8:30:f3:5f:40:97:3b:f1:7b:97:9c:05:f5:d1: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8E:B6:E6:28:A5:92:4D:0D:23:10:26:31:6A:20:7B:58:C7:9C:AB X509v3 Authority Key Identifier: keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:60:74:6e:2e:e7:80:71:8c:82:78:ff:4e:54:01:83:5f:42: f4:c2:95:0d:93:4f:a4:15:ef:c8:de:de:a3:36:9a:56:d9:11: 0a:07:52:35:3c:af:ec:6b:32:04:97:7e:56:53:2f:9f:f5:27: 0d:92:42:ed:91:f2:1c:ee:dd:3c:e4:c0:0e:ad:d9:41:24:c8: 41:d9:f4:91:35:77:a9:2b:dd:59:b8:14:ee:3a:2d:dc:59:ff: 86:67:eb:0f:d9:f0:dd:d6:b4:2a:8d:98:e3:c1:7e:83:c8:45: 57:58:8d:a2:e9:d1:e5:a1:09:d4:ff:ab:90:b6:ee:ae:01:40: af:02:02:d7:68:ae:ef:57:d7:d3:06:20:cc:c7:67:00:ea:fc: be:76:74:f1:5d:81:c9:ae:db:12:33:4d:8a:34:5f:f1:67:e5: 14:11:a3:34:8f:5b:05:3b:5f:d1:e3:62:c5:86:46:b2:15:fc: 31:f8:61:a9:c0:90:91:17:7b:a8:5f:e0:a0:11:a9:04:2f:b8: d6:74:f4:1c:e7:20:3c:ac:38:eb:98:21:dd:1c:d4:e1:48:b1: 83:c9:4b:0d:ab:5e:b0:02:f9:9a:c0:ce:fb:87:fd:03:08:ad: 52:dc:d9:f6:c8:74:d1:e5:fb:d2:3e:64:b2:0c:ec:1b:97:74: 7e:c8:7c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4KVPjTr3SsxAWdL6VgFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2 MjUzNmMwHhcNMjUxMjI0MDEwMjA2WhcNMjUxMjI1MDEwMjA2WjAzMTEwLwYDVQQD Eyg1ZThlYjZlNjI4YTU5MjRkMGQyMzEwMjYzMTZhMjA3YjU4Yzc5Y2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG8I02LhfUh+J56NauGe9peZaVCD pSV3Y7G/mAjsj7m8ay0oTYhq+zMc3kxdAoGgiRgwokgijfaWmzrnhqCsdSbtgr+A 1T3Iv/bcI9rWPeaB7XtWWZjFIPKO2mSXWjT5vpD0lwFdHOETrnm8S/3h8QQgO5pa Z8abVCyLEvgUSK0nNEKs+DgwUpWKJYz9JjNonikDyauEb0ZBrKuSlrRYRfLbPAba 5Z9bwT+iYqp4mRf9O88dmgi9J5VHNQehP4M50CIyAKpFb9L2LLTvl2U6SU/Uply+ axc75F2lLzfCZK8L5cyJOP/rO9W6jtDol+jqyDDzX0CXO/F7l5wF9dFpOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6OtuYopZJNDSMQJjFqIHtYx5yrMB8GA1UdIwQY MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5 LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWB0bi7n gHGMgnj/TlQBg19C9MKVDZNPpBXvyN7eozaaVtkRCgdSNTyv7GsyBJd+VlMvn/Un DZJC7ZHyHO7dPOTADq3ZQSTIQdn0kTV3qSvdWbgU7jot3Fn/hmfrD9nw3da0Ko2Y 48F+g8hFV1iNounR5aEJ1P+rkLburgFArwIC12iu71fX0wYgzMdnAOr8vnZ08V2B ya7bEjNNijRf8WflFBGjNI9bBTtf0eNixYZGshX8MfhhqcCQkRd7qF/goBGpBC+4 1nT0HOcgPKw465gh3RzU4Uixg8lLDatesAL5msDO+4f9AwitUtzZ9sh00eX70j5k sgzsG5d0fsh8yw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:40:53 2025 by rpki-client