This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft File: Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft (raw, json) Hash identifier: SbK6U8j0KUbmLWhu+UW9/IaLqE+YBkgqsqUpGY2ACvU= Subject key identifier: 60:8B:08:EC:D2:0C:B6:19:BB:B0:FA:73:CA:86:69:AF:AF:8E:45:6B Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61 Certificate issuer: /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661 Certificate serial: 019B484B8E511B7B28966E6A3398AC6E78B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft Manifest number: 02BE Signing time: Mon 22 Dec 2025 23:01:09 +0000 Manifest this update: Mon 22 Dec 2025 23:01:09 +0000 Manifest next update: Tue 23 Dec 2025 23:01:09 +0000 Files and hashes: 1: Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl (hash: Kn0qiogSbPFKpgUKxEiY3rl99d9VYgnwIekYYaFOEeI=) 2: jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa (hash: CgAcBMHOHIF/zsicGTopucDznqKVIIzdoQQgNx76Mfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:8e:51:1b:7b:28:96:6e:6a:33:98:ac:6e:78:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661 Validity Not Before: Dec 22 23:01:09 2025 GMT Not After : Dec 23 23:01:09 2025 GMT Subject: CN=608b08ecd20cb619bbb0fa73ca8669afaf8e456b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:65:2e:95:47:80:b4:13:03:66:fc:d5:9c: 8f:c7:55:2c:13:b4:a3:00:68:87:80:77:3a:45:77: e3:4d:37:81:42:63:07:c1:33:d3:d8:75:f7:11:3e: df:b3:8d:5a:fd:8b:12:4c:4f:90:66:f7:cf:a4:e7: 40:c1:51:a6:a5:c1:e4:1c:2b:8c:48:5d:58:27:87: e5:10:76:fc:b8:fc:11:22:ce:4a:a6:55:35:e1:7f: cc:a0:df:33:40:78:0d:96:e5:6c:0d:99:e7:53:c3: e8:24:30:95:a3:2d:2a:c6:f8:36:91:62:7a:0a:81: 42:76:bb:9b:c8:97:0f:e8:87:70:46:bd:2d:19:37: 90:87:24:1e:75:f0:90:66:62:18:2f:a8:56:9f:03: 1a:a3:b0:2a:13:f2:45:62:a4:fa:e6:63:da:02:a8: 49:eb:65:66:a5:05:d5:10:1a:20:0e:91:38:27:37: 6c:9a:d7:3f:89:ba:68:e7:d4:78:49:db:ea:2d:7b: d7:f6:8c:0f:8d:7a:6b:04:94:37:23:ba:d9:ae:d5: 0c:39:5a:c1:53:12:50:b0:0a:42:2a:93:bd:bb:86: f0:5a:0d:62:02:1e:09:89:2d:37:d3:8e:8d:71:e5: 1d:9e:ca:e9:fa:c2:82:00:31:c7:ee:9b:5f:c4:1c: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:08:EC:D2:0C:B6:19:BB:B0:FA:73:CA:86:69:AF:AF:8E:45:6B X509v3 Authority Key Identifier: keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:75:95:1a:5b:eb:96:c0:86:63:f8:65:bc:9d:31:fa:0c:e6: 45:cb:0b:1b:ec:72:81:07:bb:12:90:5e:b7:bb:f4:b5:05:85: 92:47:6b:24:d4:db:f0:1b:a4:ba:4f:bf:1b:1c:4f:0a:f2:cb: 8f:6a:8c:84:df:26:c7:f1:e0:cb:fd:da:9b:7e:1c:d4:0b:81: 80:c4:a8:86:40:fd:ee:ba:e7:dc:90:0e:a3:70:fd:ea:4b:0a: fb:80:be:94:c4:ee:b1:c0:76:9a:91:b2:e8:80:98:ea:6b:a9: 23:05:a7:0c:e4:b9:68:46:6b:05:b2:f9:56:7f:7e:11:3d:98: 1d:b1:6f:cc:fa:0e:1b:16:8f:d7:da:05:45:05:24:e3:ce:ee: f8:24:1c:2e:07:55:3f:24:b2:62:28:17:86:87:76:aa:92:92: c5:b6:8b:29:52:10:46:f8:2a:ff:07:48:66:20:1e:42:08:dc: 96:a3:60:27:39:d9:aa:a2:f8:a4:e6:03:19:b0:e3:93:5d:42: d1:74:ec:e0:3d:c4:b4:13:e3:d5:4c:a6:c8:8f:e0:2b:9f:2c: 71:98:fa:68:51:17:1f:8d:06:ca:20:38:6f:9f:fb:32:34:70: 69:39:bc:f5:af:fe:20:3e:0c:66:b3:0c:7a:f1:64:a8:f2:23: e5:97:f9:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS45RG3solm5qM5isbniwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODgzZTk0YWExNDUxYmE3NDhkNmE1YmYxNzVhNDNmZTgx NmU2NjEwHhcNMjUxMjIyMjMwMTA5WhcNMjUxMjIzMjMwMTA5WjAzMTEwLwYDVQQD Eyg2MDhiMDhlY2QyMGNiNjE5YmJiMGZhNzNjYTg2NjlhZmFmOGU0NTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKVlLpVHgLQTA2b81ZyPx1UsE7Sj AGiHgHc6RXfjTTeBQmMHwTPT2HX3ET7fs41a/YsSTE+QZvfPpOdAwVGmpcHkHCuM SF1YJ4flEHb8uPwRIs5KplU14X/MoN8zQHgNluVsDZnnU8PoJDCVoy0qxvg2kWJ6 CoFCdrubyJcP6IdwRr0tGTeQhyQedfCQZmIYL6hWnwMao7AqE/JFYqT65mPaAqhJ 62VmpQXVEBogDpE4Jzdsmtc/ibpo59R4SdvqLXvX9owPjXprBJQ3I7rZrtUMOVrB UxJQsApCKpO9u4bwWg1iAh4JiS03046NceUdnsrp+sKCADHH7ptfxBxjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCLCOzSDLYZu7D6c8qGaa+vjkVrMB8GA1UdIwQY MBaAFEqIPpSqFFG6dI1qW/F1pD/oFuZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMt OWQzNzAyNmY1MWI0LzEvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85MTc4MjgtN2M0MC00OWNlLTg3MDMtOWQzNzAyNmY1MWI0 LzEvU29nLWxLb1VVYnAwaldwYjhYV2tQLWdXNW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnWVGlvr lsCGY/hlvJ0x+gzmRcsLG+xygQe7EpBet7v0tQWFkkdrJNTb8Bukuk+/GxxPCvLL j2qMhN8mx/Hgy/3am34c1AuBgMSohkD97rrn3JAOo3D96ksK+4C+lMTuscB2mpGy 6ICY6mupIwWnDOS5aEZrBbL5Vn9+ET2YHbFvzPoOGxaP19oFRQUk487u+CQcLgdV PySyYigXhod2qpKSxbaLKVIQRvgq/wdIZiAeQgjclqNgJznZqqL4pOYDGbDjk11C 0XTs4D3EtBPj1UymyI/gK58scZj6aFEXH40GyiA4b5/7MjRwaTm89a/+ID4MZrMM evFkqPIj5Zf5HQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:05:23 2025 by rpki-client