This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json) Hash identifier: sVJ9OLN1XbkIJ3HEXTvefpxKRD53Pn3JMfPtPxCyEP8= Subject key identifier: 68:7C:C6:6A:5E:48:00:69:65:D4:BD:AD:FF:10:CE:FC:4C:4F:A1:03 Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61 Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361 Certificate serial: 019B424B0FB16F8242372F10ED7939E46A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft Manifest number: 08E9 Signing time: Sun 21 Dec 2025 19:02:53 +0000 Manifest this update: Sun 21 Dec 2025 19:02:53 +0000 Manifest next update: Mon 22 Dec 2025 19:02:53 +0000 Files and hashes: 1: 1-Sq9N9tDpqPpCxfnJu3FOlWH6ZA.roa (hash: Tpyvvdu3VZJ5oo8JL4qWFUonGAY9eL3r/UHvnFRq5cY=) 2: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: 637B3hF1gA8LNpB0TcvQJZhy4qJDFwy9xdA96tJBfHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4b:0f:b1:6f:82:42:37:2f:10:ed:79:39:e4:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361 Validity Not Before: Dec 21 19:02:53 2025 GMT Not After : Dec 22 19:02:53 2025 GMT Subject: CN=687cc66a5e48006965d4bdadff10cefc4c4fa103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:2c:63:23:79:d7:d8:c3:97:3c:bc:da:47: 70:17:3b:ca:de:28:24:f4:92:d0:bf:b3:d9:1c:f1: 5b:cc:5e:4d:66:d6:da:f8:0f:20:01:ad:59:3d:b6: 81:19:2f:c1:8c:fb:20:f6:50:b8:29:72:01:15:ad: 42:8f:08:06:d4:ab:9f:03:54:05:7c:48:9f:0b:b8: 40:97:d8:f3:bb:8f:43:e4:50:55:06:a9:2a:ca:03: 4c:9e:5d:88:3e:b8:08:e2:9e:5f:c8:66:66:29:0b: d4:82:65:fc:2d:03:50:3c:dd:58:d4:54:60:b6:6d: 97:9d:63:7d:7f:7f:d3:fc:b0:d3:f6:73:c3:6c:02: 56:1b:a9:63:8b:53:8c:7e:1d:79:29:9f:7a:46:ee: 8c:15:a3:9e:96:41:f8:99:da:aa:1a:5f:a5:ee:33: da:92:10:ed:83:0e:05:78:3d:d7:39:c2:f8:84:92: cc:42:61:f1:dd:3b:84:60:08:77:d2:3f:c9:bf:79: 98:36:e6:65:7f:09:24:d7:e6:0f:38:7d:e3:c2:2b: 4e:af:4e:df:86:d0:2b:62:db:7b:6b:24:f1:3a:b4: 58:37:0d:07:6e:e8:74:9d:60:6a:a6:14:d0:93:80: b7:5a:ab:1c:5a:da:06:4f:2b:80:85:bc:af:bc:ee: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:C6:6A:5E:48:00:69:65:D4:BD:AD:FF:10:CE:FC:4C:4F:A1:03 X509v3 Authority Key Identifier: keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b4:59:39:94:3c:ff:36:3a:46:ea:72:5f:ed:0d:c6:55:37: 2f:49:98:18:4d:3e:4c:77:b2:c5:70:8c:9f:34:e9:e5:cd:19: 9a:ce:1d:8b:f2:dd:7c:98:1d:b6:5d:92:67:7e:8f:8b:16:05: 6a:75:58:da:14:b7:31:74:78:bf:28:68:51:17:f7:68:a1:3b: 60:87:4d:59:14:f9:25:a5:45:30:9f:3b:fb:4e:3d:6c:09:a5: 49:fb:95:16:c0:51:bf:be:e6:32:92:0d:e2:ad:31:22:72:df: ad:54:92:7a:94:ea:d9:e3:df:5a:18:39:a2:b2:23:e9:0e:ed: ac:c9:81:8b:4a:c9:af:47:9d:18:80:a6:08:ed:31:48:1c:75: 34:ce:3b:99:8c:4f:d8:e6:c4:fb:8d:d7:b2:4b:6c:76:de:e5: ea:16:00:87:3d:94:b5:b6:86:f0:88:45:e1:1b:57:50:a7:82: 40:80:bb:f8:fa:88:ad:20:b8:a3:34:57:56:4b:70:89:3c:9d: e2:3e:23:00:73:18:ea:9a:6e:c2:7b:6a:53:dd:fa:76:70:00: c2:f0:2a:8b:4e:6c:19:1d:89:31:ae:1d:cb:8f:02:ff:b5:5d: 5b:7b:59:5b:cc:55:c7:f2:95:60:cc:94:52:e3:f4:ec:6e:e5: 45:8a:57:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSw+xb4JCNy8Q7Xk55GpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDg2NjNkM2I5NjllMDI1M2EyNmQ1NDI1YmVlMWM1ZDQ0 M2IzNjEwHhcNMjUxMjIxMTkwMjUzWhcNMjUxMjIyMTkwMjUzWjAzMTEwLwYDVQQD Eyg2ODdjYzY2YTVlNDgwMDY5NjVkNGJkYWRmZjEwY2VmYzRjNGZhMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtgsYyN519jDlzy82kdwFzvK3igk 9JLQv7PZHPFbzF5NZtba+A8gAa1ZPbaBGS/BjPsg9lC4KXIBFa1CjwgG1KufA1QF fEifC7hAl9jzu49D5FBVBqkqygNMnl2IPrgI4p5fyGZmKQvUgmX8LQNQPN1Y1FRg tm2XnWN9f3/T/LDT9nPDbAJWG6lji1OMfh15KZ96Ru6MFaOelkH4mdqqGl+l7jPa khDtgw4FeD3XOcL4hJLMQmHx3TuEYAh30j/Jv3mYNuZlfwkk1+YPOH3jwitOr07f htArYtt7ayTxOrRYNw0Hbuh0nWBqphTQk4C3WqscWtoGTyuAhbyvvO5piwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh8xmpeSABpZdS9rf8QzvxMT6EDMB8GA1UdIwQY MBaAFEnYZj07lp4CU6JtVCW+4cXUQ7NhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNWQwMGQtNjI2Ni00NmVhLWJjOGMt NDE4MmJlZGI5OGExLzEvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNWQwMGQtNjI2Ni00NmVhLWJjOGMtNDE4MmJlZGI5OGEx LzEvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7RZOZQ8 /zY6RupyX+0NxlU3L0mYGE0+THeyxXCMnzTp5c0Zms4di/LdfJgdtl2SZ36PixYF anVY2hS3MXR4vyhoURf3aKE7YIdNWRT5JaVFMJ87+049bAmlSfuVFsBRv77mMpIN 4q0xInLfrVSSepTq2ePfWhg5orIj6Q7trMmBi0rJr0edGICmCO0xSBx1NM47mYxP 2ObE+43Xsktsdt7l6hYAhz2UtbaG8IhF4RtXUKeCQIC7+PqIrSC4ozRXVktwiTyd 4j4jAHMY6ppuwntqU936dnAAwvAqi05sGR2JMa4dy48C/7VdW3tZW8xVx/KVYMyU UuP07G7lRYpXvg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:18:57 2025 by rpki-client