This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json) Hash identifier: /Ryj7PS+3ePgl9deJ+hRxBNjTzXPhy8rQrjEH8hvp5Y= Subject key identifier: ED:7B:40:DB:2E:1B:37:49:F0:02:78:12:97:BC:1F:D9:A3:23:D0:BF Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Certificate serial: 019B3A916B14C68CA59282C5EF04C205129C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 07:02:47 +0000 Manifest this update: Sat 20 Dec 2025 07:02:47 +0000 Manifest next update: Sun 21 Dec 2025 07:02:47 +0000 Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: EWf/0j2GOubRlpQaMAiOYW2jRThIejfLhoYt0ACB+1c=) 2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=) 3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:6b:14:c6:8c:a5:92:82:c5:ef:04:c2:05:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Validity Not Before: Dec 20 07:02:47 2025 GMT Not After : Dec 21 07:02:47 2025 GMT Subject: CN=ed7b40db2e1b3749f002781297bc1fd9a323d0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:5a:98:f9:45:de:2f:c6:a3:fd:09:1d:65: 5f:2a:8a:a3:42:22:0d:64:b5:6d:59:0f:14:70:16: 43:c6:22:25:68:af:59:2a:81:97:d1:b2:37:5c:77: e9:1c:3d:6d:84:c4:e8:66:bd:67:a7:85:dd:d5:4a: 14:44:34:c0:92:69:72:b9:9b:d8:b9:e6:10:e3:98: 0e:50:f4:d4:0e:0c:d2:4f:65:dd:38:fc:2a:d7:cd: dd:91:b7:9c:8d:3d:03:b6:42:c3:24:0f:f0:eb:89: 16:06:2c:49:9a:03:d8:17:8d:c1:d9:95:ac:47:11: 07:1d:3a:1f:71:98:80:74:b7:ae:b0:39:a4:e8:32: 51:d1:ca:bb:00:b5:b7:91:79:01:76:57:8b:9e:21: f2:ec:d2:8f:c1:64:71:f6:43:49:d0:af:21:82:19: f2:f7:69:47:f7:d2:57:b0:50:51:c2:9b:68:d3:d0: be:a9:02:fe:d1:dc:78:53:4a:c7:d6:8a:1f:0b:37: 01:dd:92:96:5e:0c:5d:f6:54:f4:95:1d:99:76:b1: e3:fd:95:80:aa:d6:f0:ae:d6:c7:0d:f3:90:62:46: 7c:ef:e1:4d:7a:56:02:26:ac:36:93:f2:55:27:8f: e8:1f:a2:8d:f0:53:3a:bf:ce:c5:3a:11:11:f4:09: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:40:DB:2E:1B:37:49:F0:02:78:12:97:BC:1F:D9:A3:23:D0:BF X509v3 Authority Key Identifier: keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7c:5b:ca:e7:06:44:e7:7e:91:38:f4:09:aa:d0:32:5a:6d: 21:60:bc:5a:64:ed:17:90:48:62:eb:29:46:9c:63:72:53:cb: e0:2b:bc:94:c4:a9:66:27:1d:cd:2b:54:83:fc:1b:c2:c8:84: f0:c3:32:e0:16:db:3f:0d:68:3c:af:9a:a6:01:3d:0c:18:b8: a5:dd:c3:4e:14:60:ff:26:a3:2f:7b:31:7b:77:c8:fc:e2:36: a9:f7:40:51:83:78:94:57:b0:d8:a3:89:9f:4f:47:3b:74:ba: 09:35:30:3d:5e:fa:72:ae:9a:30:e1:6e:d8:05:f8:12:48:d6: 42:71:32:2a:a6:80:ec:51:fa:b5:8b:5d:5f:ff:37:07:f4:73: d3:ed:63:37:a0:62:b4:e2:88:ab:15:44:72:6c:08:4e:b4:13: 7f:ff:18:ab:96:3d:9d:d3:0d:d1:5d:73:7e:8e:7e:37:41:17: d8:b5:d8:bc:39:dd:2a:23:8a:d1:d4:83:96:a1:69:09:19:05: 2b:9e:31:ee:69:77:73:77:53:7b:c9:c2:4f:5c:43:44:ba:a7: 06:6e:71:1f:88:f6:82:2d:d6:0a:ad:3b:5c:7a:de:d0:c4:70: 87:95:16:e8:b4:8d:fe:4a:7f:57:fb:30:99:a4:64:26:89:4d: 58:fb:d4:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kWsUxoylkoLF7wTCBRKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx MWUyMmEwHhcNMjUxMjIwMDcwMjQ3WhcNMjUxMjIxMDcwMjQ3WjAzMTEwLwYDVQQD EyhlZDdiNDBkYjJlMWIzNzQ5ZjAwMjc4MTI5N2JjMWZkOWEzMjNkMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXtamPlF3i/Go/0JHWVfKoqjQiIN ZLVtWQ8UcBZDxiIlaK9ZKoGX0bI3XHfpHD1thMToZr1np4Xd1UoURDTAkmlyuZvY ueYQ45gOUPTUDgzST2XdOPwq183dkbecjT0DtkLDJA/w64kWBixJmgPYF43B2ZWs RxEHHTofcZiAdLeusDmk6DJR0cq7ALW3kXkBdleLniHy7NKPwWRx9kNJ0K8hghny 92lH99JXsFBRwpto09C+qQL+0dx4U0rH1oofCzcB3ZKWXgxd9lT0lR2ZdrHj/ZWA qtbwrtbHDfOQYkZ87+FNelYCJqw2k/JVJ4/oH6KN8FM6v87FOhER9AnN8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO17QNsuGzdJ8AJ4Epe8H9mjI9C/MB8GA1UdIwQY MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0 LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXxbyucG ROd+kTj0CarQMlptIWC8WmTtF5BIYuspRpxjclPL4Cu8lMSpZicdzStUg/wbwsiE 8MMy4BbbPw1oPK+apgE9DBi4pd3DThRg/yajL3sxe3fI/OI2qfdAUYN4lFew2KOJ n09HO3S6CTUwPV76cq6aMOFu2AX4EkjWQnEyKqaA7FH6tYtdX/83B/Rz0+1jN6Bi tOKIqxVEcmwITrQTf/8Yq5Y9ndMN0V1zfo5+N0EX2LXYvDndKiOK0dSDlqFpCRkF K54x7ml3c3dTe8nCT1xDRLqnBm5xH4j2gi3WCq07XHre0MRwh5UW6LSN/kp/V/sw maRkJolNWPvU4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 11:41:55 2025 by rpki-client