This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json) Hash identifier: ihr2ByDTRJAbzMZzwa9h7ymnG6NJLkliiA+M4sO/Vvw= Subject key identifier: E9:78:B5:D3:1D:35:D2:B3:3D:2D:02:9D:95:0D:DF:12:06:C4:99:9B Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42 Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142 Certificate serial: 019B258833CFE89977FDB33E75F2E1E69826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft Manifest number: 02F9 Signing time: Tue 16 Dec 2025 05:00:41 +0000 Manifest this update: Tue 16 Dec 2025 05:00:41 +0000 Manifest next update: Wed 17 Dec 2025 05:00:41 +0000 Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=) 2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: o0GYc3NOJxGhG/XNTGaXWuzp4VHmypLu+yhM1NvTvQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:33:cf:e8:99:77:fd:b3:3e:75:f2:e1:e6:98:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142 Validity Not Before: Dec 16 05:00:41 2025 GMT Not After : Dec 17 05:00:41 2025 GMT Subject: CN=e978b5d31d35d2b33d2d029d950ddf1206c4999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:57:b7:e7:b3:0a:b5:7a:ac:dd:57:c9:35: 55:29:2f:f3:bf:a9:bb:3a:eb:b5:42:85:c1:94:7e: 38:2c:d6:f1:f0:22:22:fa:e7:23:02:62:1a:39:66: b3:f9:51:1b:05:f5:ab:45:af:c2:2b:aa:fc:38:43: 96:2b:f7:28:c9:09:98:0f:2e:53:7a:5d:f2:6d:26: c0:c0:61:74:d4:0a:99:44:a9:75:1c:31:99:d5:b3: 9a:36:93:25:50:4f:6d:7d:ed:7f:04:da:65:24:3d: 21:d6:a8:fb:9e:58:22:8e:e7:31:9e:46:09:24:cc: 2f:91:b0:ac:65:4b:c4:0d:64:4c:44:73:93:b5:3c: 2f:77:8d:84:0c:39:a1:95:d8:ea:cc:b4:79:ca:7f: 2c:b8:f7:fd:e5:ec:2a:05:b5:27:1d:60:12:fd:68: 29:e6:37:99:f0:9b:17:c5:4d:97:82:78:aa:42:82: 98:68:64:b4:fb:0a:e5:6f:8b:01:a5:23:0a:f3:58: bd:0b:e2:a1:66:7a:6d:ca:98:0b:0b:4b:b9:98:d8: 36:25:a4:87:0b:df:e2:2e:72:89:98:60:24:8d:ed: fb:46:aa:8b:b9:ff:2d:f4:98:1c:f6:a8:03:52:e2: 21:8b:66:30:ea:e8:20:9c:84:67:4d:ea:54:a0:5c: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:78:B5:D3:1D:35:D2:B3:3D:2D:02:9D:95:0D:DF:12:06:C4:99:9B X509v3 Authority Key Identifier: keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3c:fa:e4:b0:f0:21:e1:fa:e6:1e:3d:0c:2e:25:0b:e6:2e: 3c:37:16:d0:fc:f0:49:6a:fd:d0:da:4c:b0:0e:6b:5c:60:35: c1:6a:f9:ee:24:cb:64:e7:14:be:4e:e1:c9:f9:ae:a9:84:ca: cd:9e:37:20:e0:cc:5e:91:d0:63:5b:03:a2:ea:ab:92:09:d1: 1f:63:0b:b1:81:8f:0f:0f:99:f2:3f:ce:a3:fe:46:aa:a2:dd: fa:6b:5a:15:42:6e:39:1d:3f:86:34:7b:40:b7:fd:5c:e4:f8: fc:76:45:0b:9a:41:56:9c:be:9f:c5:d9:8f:d2:ac:25:55:a2: 9b:9b:2e:ec:eb:38:1d:d4:15:c3:c7:f0:c8:f5:c4:e0:24:ad: 50:61:4a:ca:76:93:ad:46:f9:ac:ee:d2:51:6e:45:3e:3d:b5: b8:e2:11:86:a6:ba:e2:16:1c:37:16:58:bc:5d:12:00:5e:5b: 1f:e2:8f:ab:35:5b:3b:ff:3d:f9:99:77:65:c1:70:65:6a:13: 4d:eb:bb:a7:86:0d:ad:25:8c:26:b1:75:30:1c:7e:fd:4c:26: 3e:e4:d4:8e:39:1b:14:fd:c8:7d:bd:e4:61:4a:33:34:6f:60: 2f:aa:94:8d:cb:42:d9:cc:84:1e:96:52:25:d9:e9:15:a3:04: 2d:f3:ff:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliDPP6Jl3/bM+dfLh5pgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Njg4OWNlNGViNGZkNzQ3ODE4MjQ4Mzk1ZGU1ZmI5M2Qx ZmUxNDIwHhcNMjUxMjE2MDUwMDQxWhcNMjUxMjE3MDUwMDQxWjAzMTEwLwYDVQQD EyhlOTc4YjVkMzFkMzVkMmIzM2QyZDAyOWQ5NTBkZGYxMjA2YzQ5OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOVXt+ezCrV6rN1XyTVVKS/zv6m7 Ouu1QoXBlH44LNbx8CIi+ucjAmIaOWaz+VEbBfWrRa/CK6r8OEOWK/coyQmYDy5T el3ybSbAwGF01AqZRKl1HDGZ1bOaNpMlUE9tfe1/BNplJD0h1qj7nlgijucxnkYJ JMwvkbCsZUvEDWRMRHOTtTwvd42EDDmhldjqzLR5yn8suPf95ewqBbUnHWAS/Wgp 5jeZ8JsXxU2XgniqQoKYaGS0+wrlb4sBpSMK81i9C+KhZnptypgLC0u5mNg2JaSH C9/iLnKJmGAkje37RqqLuf8t9Jgc9qgDUuIhi2Yw6uggnIRnTepUoFxeHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl4tdMdNdKzPS0CnZUN3xIGxJmbMB8GA1UdIwQY MBaAFEhoic5OtP10eBgkg5XeX7k9H+FCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGIt YzEzNjQwNWI3YmI3LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGItYzEzNjQwNWI3YmI3 LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTz65LDw IeH65h49DC4lC+YuPDcW0PzwSWr90NpMsA5rXGA1wWr57iTLZOcUvk7hyfmuqYTK zZ43IODMXpHQY1sDouqrkgnRH2MLsYGPDw+Z8j/Oo/5GqqLd+mtaFUJuOR0/hjR7 QLf9XOT4/HZFC5pBVpy+n8XZj9KsJVWim5su7Os4HdQVw8fwyPXE4CStUGFKynaT rUb5rO7SUW5FPj21uOIRhqa64hYcNxZYvF0SAF5bH+KPqzVbO/89+Zl3ZcFwZWoT Teu7p4YNrSWMJrF1MBx+/UwmPuTUjjkbFP3Ifb3kYUozNG9gL6qUjctC2cyEHpZS JdnpFaMELfP/Mw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:44:49 2025 by rpki-client