This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json) Hash identifier: DBC8kb5RZCqr/Tu+fUR+Qcxs0PS9kVco7PExAvs7dIM= Subject key identifier: 22:2B:45:97:0A:8B:DC:87:27:53:8C:81:0D:D9:49:EA:74:02:09:1E Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db Certificate serial: 019B52CEC8DA6126D442EE6BF7EEFCB05778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft Manifest number: 0C13 Signing time: Thu 25 Dec 2025 00:00:42 +0000 Manifest this update: Thu 25 Dec 2025 00:00:42 +0000 Manifest next update: Fri 26 Dec 2025 00:00:42 +0000 Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: UoRQ0sa3WE1W0uOTexMx6G7cWlIHaYFfHOnTgO0+pfs=) 2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:c8:da:61:26:d4:42:ee:6b:f7:ee:fc:b0:57:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db Validity Not Before: Dec 25 00:00:42 2025 GMT Not After : Dec 26 00:00:42 2025 GMT Subject: CN=222b45970a8bdc8727538c810dd949ea7402091e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:6c:45:9c:64:c0:42:c3:f1:b1:d2:e4:b2: 40:20:a8:a0:dc:1d:20:80:76:9a:94:58:a9:9f:bf: 4f:54:27:49:95:5c:ab:22:0c:a3:a0:7a:81:83:7c: 0c:3a:b0:72:3a:d6:a9:fe:36:9b:0e:00:e4:85:8f: d3:b2:2b:b6:39:17:fd:33:dd:7f:88:e8:5d:c8:ae: 88:57:85:71:c8:9b:79:ba:1f:bc:5d:2c:04:b1:b7: e3:b5:6a:1c:8a:f6:8f:8b:2a:54:75:8a:47:14:40: 70:83:dd:f7:47:f5:cc:3c:64:fb:0f:6a:0a:95:2d: a3:5f:17:2a:ac:0c:f6:60:51:36:85:19:b4:40:5e: 27:e0:86:45:16:2c:d3:84:78:01:6e:36:43:f1:c5: 62:d4:80:74:14:ff:dc:29:52:ab:e6:02:b4:cc:37: b3:a5:c3:47:cd:88:b6:13:b3:4c:5e:31:d4:54:30: 75:1f:86:ff:c3:54:de:e4:09:a1:5f:0d:6c:b1:5f: fb:ea:b8:a4:89:0a:c8:b7:f0:80:0b:15:c3:7c:22: c3:8a:d0:9f:f8:73:04:0c:d7:be:73:ae:67:d9:e5: 20:31:16:58:6b:eb:fa:e3:a2:12:ed:50:53:d5:db: 1e:ee:a2:21:f5:ad:6d:a7:e9:8d:23:3c:92:c1:4f: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:45:97:0A:8B:DC:87:27:53:8C:81:0D:D9:49:EA:74:02:09:1E X509v3 Authority Key Identifier: keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:63:ba:d7:09:c4:79:ff:30:2a:87:9f:29:ee:b6:21:65:04: 92:f6:a5:2c:4f:78:13:2f:26:5e:13:aa:0a:33:15:1a:b2:91: 4f:d3:dc:42:58:8f:5e:e4:cf:d8:7e:1a:1c:43:ee:ed:39:44: 03:ec:c6:82:53:13:6f:2a:8a:56:da:58:f9:c2:b7:17:7f:9a: 8d:8f:69:45:b9:7d:04:cc:c7:77:fd:a3:ea:64:c1:b0:18:5f: e4:6b:67:11:38:8c:f3:cb:95:f1:85:c0:83:46:93:5b:b7:12: 73:e5:02:43:de:f9:18:44:f9:35:e1:7b:76:be:84:a6:b2:42: 7a:1b:9a:ec:52:21:17:0c:c7:6a:27:20:9e:f4:76:ad:f4:15: 74:a5:4d:dc:c2:d1:34:e3:9b:7c:b7:14:84:d6:8b:5e:7b:9a: 20:78:67:0e:01:7c:cf:79:42:b7:4f:75:7d:5c:4a:9a:33:ab: 4c:0a:5e:46:9a:46:a8:1e:96:46:c2:a8:bb:7f:9f:d3:50:2e: 38:38:5d:7c:3f:3b:09:49:4a:8a:68:20:f6:f1:9f:ce:ba:af: ed:87:47:e9:8a:fd:f7:01:e5:65:b4:ab:3b:f2:ad:61:f5:fe: 70:5a:2c:18:b5:bb:ed:94:7f:76:25:57:45:c2:27:8a:7f:73: 39:0f:38:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzsjaYSbUQu5r9+78sFd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjgwYmRlNTZiZDNiZjU2MTU3OGEwZmUxMDhjYmMxYzZh NzU5ZGIwHhcNMjUxMjI1MDAwMDQyWhcNMjUxMjI2MDAwMDQyWjAzMTEwLwYDVQQD EygyMjJiNDU5NzBhOGJkYzg3Mjc1MzhjODEwZGQ5NDllYTc0MDIwOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nxsRZxkwELD8bHS5LJAIKig3B0g gHaalFipn79PVCdJlVyrIgyjoHqBg3wMOrByOtap/jabDgDkhY/Tsiu2ORf9M91/ iOhdyK6IV4VxyJt5uh+8XSwEsbfjtWocivaPiypUdYpHFEBwg933R/XMPGT7D2oK lS2jXxcqrAz2YFE2hRm0QF4n4IZFFizThHgBbjZD8cVi1IB0FP/cKVKr5gK0zDez pcNHzYi2E7NMXjHUVDB1H4b/w1Te5AmhXw1ssV/76rikiQrIt/CACxXDfCLDitCf +HMEDNe+c65n2eUgMRZYa+v646IS7VBT1dse7qIh9a1tp+mNIzySwU8JQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIrRZcKi9yHJ1OMgQ3ZSep0AgkeMB8GA1UdIwQY MBaAFEhoC95WvTv1YVeKD+EIy8HGp1nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQt OWE2YjZlYWFlZDM4LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQtOWE2YjZlYWFlZDM4 LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2O61wnE ef8wKoefKe62IWUEkvalLE94Ey8mXhOqCjMVGrKRT9PcQliPXuTP2H4aHEPu7TlE A+zGglMTbyqKVtpY+cK3F3+ajY9pRbl9BMzHd/2j6mTBsBhf5GtnETiM88uV8YXA g0aTW7cSc+UCQ975GET5NeF7dr6EprJCehua7FIhFwzHaicgnvR2rfQVdKVN3MLR NOObfLcUhNaLXnuaIHhnDgF8z3lCt091fVxKmjOrTApeRppGqB6WRsKou3+f01Au ODhdfD87CUlKimgg9vGfzrqv7YdH6Yr99wHlZbSrO/KtYfX+cFosGLW77ZR/diVX RcInin9zOQ84Cw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:33:27 2025 by rpki-client