This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json) Hash identifier: VMbBJaIPmrfznr9ZvD4oP7fI9aR12+y0b6XPDzOEa94= Subject key identifier: 96:7B:66:E1:A0:E8:78:FC:DA:8F:C3:54:9C:27:83:7C:40:9D:2B:05 Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019B2175F34ECA82E11032E9AE44DD3AD33B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft Manifest number: 0E32 Signing time: Mon 15 Dec 2025 10:02:16 +0000 Manifest this update: Mon 15 Dec 2025 10:02:16 +0000 Manifest next update: Tue 16 Dec 2025 10:02:16 +0000 Files and hashes: 1: 1-ghy1_BSABsGI7akBKLZbOuS5vM.roa (hash: 5f9usyUF6Ob7YmYVFXsGfm7dIcSCmT5Qe4VX7r7TJaU=) 2: E6OOQJWtbwPShTOPUyvmcydvlvo.roa (hash: v0Y/AFu8fz1isgKhX2mzBaqCN/V0k8wMymcRgrcaRnE=) 3: Ik19RRjyfHjJ96aag1tg9GHfyYs.roa (hash: OMp+kmye4OfcUJMJC7fA4xejXa2bwcRzzIV7LNwQJIA=) 4: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: eC/h7XyIubCycxoWaW1I4rVb3Jd/7TDaqaatdh1xIHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:f3:4e:ca:82:e1:10:32:e9:ae:44:dd:3a:d3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Dec 15 10:02:16 2025 GMT Not After : Dec 16 10:02:16 2025 GMT Subject: CN=967b66e1a0e878fcda8fc3549c27837c409d2b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:23:a3:a2:72:83:f2:50:2b:ba:e8:18:f9: 6e:fd:be:79:1e:78:be:79:1b:2c:cc:24:e4:40:2e: 47:22:cf:9a:c7:35:c3:ce:b7:c4:bf:1f:58:66:df: 4f:f1:61:49:18:21:6d:a8:e3:b5:b0:4e:4a:e3:3e: 78:26:f4:b6:0a:9f:e8:e5:17:9a:26:a4:22:55:4c: 81:c5:40:23:70:7d:1d:38:1a:fb:77:6b:b8:ab:42: 66:25:ce:89:b3:47:52:05:df:9b:5a:99:93:4e:db: f5:a7:fb:ba:c8:a6:dd:70:4e:6f:8c:c6:a4:13:f6: a7:9a:f3:a2:9e:76:93:70:39:1e:ca:af:1d:f7:9e: 0c:07:7e:99:ca:e6:c6:18:19:a1:d5:7b:57:da:fa: 56:16:10:f8:b6:f9:f4:fa:9e:4a:29:3c:f6:10:ac: 54:dc:88:49:85:90:2f:ba:94:cc:1a:96:27:28:ad: 5b:19:ae:6f:0c:d1:c3:2f:1b:66:c9:df:d8:b8:ca: e1:be:fa:ad:86:e9:7b:b6:de:24:d4:b6:45:a5:f0: 30:13:c5:a1:d1:53:53:6f:89:a8:a1:4a:66:a1:a4: b0:3a:f9:13:97:78:9e:20:b8:f4:5a:1b:90:27:29: a4:c8:0b:31:fb:b4:66:52:5b:a4:87:d9:0d:e6:2f: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7B:66:E1:A0:E8:78:FC:DA:8F:C3:54:9C:27:83:7C:40:9D:2B:05 X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2e:20:94:3d:46:c2:b7:98:13:f4:bd:04:cb:f6:2f:83:89: 93:9e:9b:ba:3a:68:41:8c:6f:da:91:2c:f9:d9:36:6e:e9:c0: 82:7a:1c:1a:79:53:b8:d8:56:41:8d:9e:fc:df:19:31:32:56: d6:42:4a:1c:8c:7b:69:a3:d6:47:3c:26:50:6d:80:4a:0b:3c: 69:c1:52:0b:d4:a9:1d:e8:56:39:71:2f:f9:00:4c:9e:39:d3: 69:b1:4f:52:ca:31:d6:44:0d:b8:f8:32:e9:20:62:25:4e:a0: d1:35:be:ff:89:d0:39:0d:30:e2:24:4b:58:71:1a:43:0d:f5: 31:61:32:c3:b8:fd:32:16:b1:3e:30:42:ea:02:03:20:9b:83: d0:89:83:d4:1f:e4:ef:42:09:64:e9:c8:09:f5:75:1c:e7:65: 1a:c0:7a:4d:86:c6:a5:7b:d9:99:49:d1:d8:11:97:27:40:60: 54:41:d2:d5:40:76:45:ba:13:37:da:b8:33:39:b7:44:ee:a1: b3:0a:41:fe:36:77:5c:95:54:0a:dc:0d:d1:ea:73:e4:e6:61: 9d:94:91:1d:52:cb:bd:ca:99:77:23:a3:d3:b8:6c:7c:df:78: 1f:6e:e7:ef:a1:81:60:87:28:de:33:be:7d:27:bf:1e:3a:d3: 0f:d8:ea:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdfNOyoLhEDLprkTdOtM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjUxMjE1MTAwMjE2WhcNMjUxMjE2MTAwMjE2WjAzMTEwLwYDVQQD Eyg5NjdiNjZlMWEwZTg3OGZjZGE4ZmMzNTQ5YzI3ODM3YzQwOWQyYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEjo6Jyg/JQK7roGPlu/b55Hni+ eRsszCTkQC5HIs+axzXDzrfEvx9YZt9P8WFJGCFtqOO1sE5K4z54JvS2Cp/o5Rea JqQiVUyBxUAjcH0dOBr7d2u4q0JmJc6Js0dSBd+bWpmTTtv1p/u6yKbdcE5vjMak E/anmvOinnaTcDkeyq8d954MB36ZyubGGBmh1XtX2vpWFhD4tvn0+p5KKTz2EKxU 3IhJhZAvupTMGpYnKK1bGa5vDNHDLxtmyd/YuMrhvvqthul7tt4k1LZFpfAwE8Wh 0VNTb4mooUpmoaSwOvkTl3ieILj0WhuQJymkyAsx+7RmUlukh9kN5i/c8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ7ZuGg6Hj82o/DVJwng3xAnSsFMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC4glD1G wreYE/S9BMv2L4OJk56bujpoQYxv2pEs+dk2bunAgnocGnlTuNhWQY2e/N8ZMTJW 1kJKHIx7aaPWRzwmUG2ASgs8acFSC9SpHehWOXEv+QBMnjnTabFPUsox1kQNuPgy 6SBiJU6g0TW+/4nQOQ0w4iRLWHEaQw31MWEyw7j9MhaxPjBC6gIDIJuD0ImD1B/k 70IJZOnICfV1HOdlGsB6TYbGpXvZmUnR2BGXJ0BgVEHS1UB2RboTN9q4Mzm3RO6h swpB/jZ3XJVUCtwN0epz5OZhnZSRHVLLvcqZdyOj07hsfN94H27n76GBYIco3jO+ fSe/HjrTD9jqLA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:39 2025 by rpki-client