This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json) Hash identifier: OJeo94UnRlOJWkETRuUODFxWq2aMWs+2UGI6V1X3m30= Subject key identifier: F2:9A:6E:D7:0C:04:22:03:39:34:A3:63:20:B6:29:13:EA:83:9F:0A Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25 Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25 Certificate serial: 019B194D24834341732CD2B42FB674AD761E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 20:00:44 +0000 Manifest this update: Sat 13 Dec 2025 20:00:44 +0000 Manifest next update: Sun 14 Dec 2025 20:00:44 +0000 Files and hashes: 1: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: BCOC2BGAbHc5yU7QAIti+NpTSALMusqMTdRdu7rp2jQ=) 2: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (hash: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:24:83:43:41:73:2c:d2:b4:2f:b6:74:ad:76:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25 Validity Not Before: Dec 13 20:00:44 2025 GMT Not After : Dec 14 20:00:44 2025 GMT Subject: CN=f29a6ed70c0422033934a36320b62913ea839f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:30:df:fa:2f:aa:ae:13:48:64:99:d5:a4: 9d:2d:94:b9:78:71:3a:59:ce:e1:0b:81:cb:bf:4d: 98:91:e7:50:06:80:14:d9:3f:c4:82:46:da:2f:21: c2:79:de:e0:4a:3e:11:15:6c:f0:8f:23:dc:3a:cc: 55:e2:f7:a9:2f:82:fb:92:d2:3b:47:34:a4:81:06: ef:a6:62:d9:b4:05:a5:83:4d:11:4c:8a:02:59:c8: 1d:71:bc:8a:5b:a9:88:5d:70:dd:31:ee:1a:0b:20: 66:94:c4:02:5e:f5:d9:06:24:93:93:3f:40:d3:f4: be:e5:a6:5f:f4:8f:0b:dd:db:0f:c6:60:e2:d1:52: 7a:8a:72:01:01:3a:39:8f:07:12:e6:2a:26:79:f0: 61:6b:ac:be:6d:cc:94:ad:aa:b1:75:43:a0:51:53: b7:c1:71:e4:68:d9:71:11:84:64:cc:f4:c8:96:2b: 36:67:c1:e1:9a:76:da:af:12:91:ab:da:54:9a:88: a0:52:0e:ff:70:bb:a7:8b:b0:8f:c3:52:0e:13:bc: 9c:cf:86:f9:2a:c3:3c:b7:ae:12:98:2c:4d:bd:a1: c3:0f:8d:58:e8:e8:15:43:9d:23:ee:87:6c:04:08: c1:80:aa:44:d9:80:27:c6:48:08:fa:fe:fc:42:8f: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:6E:D7:0C:04:22:03:39:34:A3:63:20:B6:29:13:EA:83:9F:0A X509v3 Authority Key Identifier: keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:71:68:08:52:ba:ff:29:10:20:67:cf:bd:98:92:24:b9:7b: 13:93:8e:37:db:54:41:3f:0f:bb:f5:c9:77:78:2e:dd:68:13: ca:91:64:b1:35:ac:a9:4b:75:a5:08:b1:6f:09:40:f2:cc:fd: bf:e4:d3:0f:6b:4d:9a:51:05:96:54:80:c0:91:9b:4a:13:59: 4b:d7:9f:de:68:94:52:d9:11:9d:a3:82:c8:9a:64:69:25:ff: 66:f8:c3:88:47:e9:da:d8:ce:44:95:79:c9:ef:51:d0:06:e3: 9a:b2:54:bd:b5:a0:eb:20:5e:b9:e7:95:4a:2a:4b:d6:82:79: d4:12:86:19:d0:d9:dd:96:3d:1f:92:10:74:ad:8c:f5:77:21: aa:65:74:ee:e9:a8:5e:88:29:a2:19:a9:6a:1b:2a:cf:b4:99: c4:ba:d1:11:32:50:10:81:39:a2:0b:0e:81:18:d8:db:c4:6f: 18:4b:f2:2b:7e:a9:6e:35:aa:43:e3:22:9e:e7:04:8f:83:24: 8f:a0:f9:25:c4:05:3b:38:2f:cc:8e:df:a8:36:b9:a9:f8:04: 43:d6:b4:3b:b5:1e:74:bf:9f:2a:bb:d8:36:ef:a5:74:84:3d: 39:50:5a:76:d4:05:41:0e:cc:7a:79:79:b5:d6:f1:a2:cb:80: 98:46:b9:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTSSDQ0FzLNK0L7Z0rXYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Njc5YTIyZDBkYmM5ODBkNWQ1OWIzMzM2NzlmOTM5Yjlh ZTNmMjUwHhcNMjUxMjEzMjAwMDQ0WhcNMjUxMjE0MjAwMDQ0WjAzMTEwLwYDVQQD EyhmMjlhNmVkNzBjMDQyMjAzMzkzNGEzNjMyMGI2MjkxM2VhODM5ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lkw3/ovqq4TSGSZ1aSdLZS5eHE6 Wc7hC4HLv02YkedQBoAU2T/EgkbaLyHCed7gSj4RFWzwjyPcOsxV4vepL4L7ktI7 RzSkgQbvpmLZtAWlg00RTIoCWcgdcbyKW6mIXXDdMe4aCyBmlMQCXvXZBiSTkz9A 0/S+5aZf9I8L3dsPxmDi0VJ6inIBATo5jwcS5iomefBha6y+bcyUraqxdUOgUVO3 wXHkaNlxEYRkzPTIlis2Z8HhmnbarxKRq9pUmoigUg7/cLuni7CPw1IOE7ycz4b5 KsM8t64SmCxNvaHDD41Y6OgVQ50j7odsBAjBgKpE2YAnxkgI+v78Qo8RQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKabtcMBCIDOTSjYyC2KRPqg58KMB8GA1UdIwQY MBaAFEhnmiLQ28mA1dWbMzZ5+Tm5rj8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZGZhMDQtN2MyYy00YWMzLWE2NmIt MGMxODBhMDg0MWFiLzEvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZGZhMDQtN2MyYy00YWMzLWE2NmItMGMxODBhMDg0MWFi LzEvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnFoCFK6 /ykQIGfPvZiSJLl7E5OON9tUQT8Pu/XJd3gu3WgTypFksTWsqUt1pQixbwlA8sz9 v+TTD2tNmlEFllSAwJGbShNZS9ef3miUUtkRnaOCyJpkaSX/ZvjDiEfp2tjORJV5 ye9R0AbjmrJUvbWg6yBeueeVSipL1oJ51BKGGdDZ3ZY9H5IQdK2M9XchqmV07umo Xogpohmpahsqz7SZxLrRETJQEIE5ogsOgRjY28RvGEvyK36pbjWqQ+MinucEj4Mk j6D5JcQFOzgvzI7fqDa5qfgEQ9a0O7UedL+fKrvYNu+ldIQ9OVBadtQFQQ7Menl5 tdbxosuAmEa5Fg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:53 2025 by rpki-client