This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json) Hash identifier: VzA7dRHbFkKF+YgPfgqJofIwAa7UEgOwG+FopSXCEX8= Subject key identifier: 96:32:2E:26:2A:59:9A:B9:B9:B7:E1:CE:DB:CF:58:13:94:6C:C4:55 Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb Certificate serial: 019B19BBF17E71EBC6C60BDCB14910A176B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft Manifest number: 06A1 Signing time: Sat 13 Dec 2025 22:01:45 +0000 Manifest this update: Sat 13 Dec 2025 22:01:45 +0000 Manifest next update: Sun 14 Dec 2025 22:01:45 +0000 Files and hashes: 1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: tGK0kWxH+e2maECAvgAzUxAh2nopcQLMj4txmXe6g4M=) 2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:f1:7e:71:eb:c6:c6:0b:dc:b1:49:10:a1:76:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb Validity Not Before: Dec 13 22:01:45 2025 GMT Not After : Dec 14 22:01:45 2025 GMT Subject: CN=96322e262a599ab9b9b7e1cedbcf5813946cc455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:ad:9d:6c:bc:b9:d4:3c:5a:d2:8f:ec:16: 97:cf:55:35:73:46:73:cf:d0:cf:5a:84:c9:09:d8: d5:c5:f1:2e:73:5f:31:ca:11:58:28:03:02:6a:a5: 58:ee:87:08:c0:ba:60:82:cb:96:b9:e5:5f:7e:e8: 5f:e2:33:5a:9a:20:75:84:71:eb:da:7a:c3:09:0e: 28:c5:a1:ec:99:25:d8:ac:c5:f1:ae:1e:60:7f:03: 9f:b4:ec:2a:22:25:c1:0f:30:f5:72:e1:f6:98:84: e6:ff:63:bd:99:e7:a5:aa:8e:35:33:6c:2e:37:9b: d7:2d:1b:67:ec:d6:e0:39:95:27:a2:06:81:81:86: b8:51:5d:06:66:64:94:fd:ea:13:2f:21:22:81:f6: bd:20:1a:af:0b:6a:c7:b9:5c:e9:74:8a:41:04:6f: f6:75:93:99:cc:55:b1:8b:d6:b1:f5:8f:c3:69:8a: 34:23:8f:27:09:88:1b:0c:c8:1e:1c:62:a1:40:ab: e5:93:64:2d:f5:46:20:fc:07:da:f2:03:a1:9f:70: 54:2c:b3:9f:32:ec:c5:73:48:8b:37:ce:da:ad:f2: b6:17:3e:8f:90:9b:dc:a8:87:62:5c:8b:87:7c:b1: 9b:51:75:b1:c9:74:ac:2f:25:68:7d:64:96:16:40: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:2E:26:2A:59:9A:B9:B9:B7:E1:CE:DB:CF:58:13:94:6C:C4:55 X509v3 Authority Key Identifier: keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:51:2c:f9:42:7f:0a:92:3d:ce:f2:dd:31:ae:e5:04:d9:62: a8:b0:e4:10:c1:d1:b0:01:2c:5f:9e:3a:fd:2e:2e:34:44:09: 19:43:87:86:64:16:3e:39:5f:32:e7:3a:6c:cd:a9:8b:86:2d: 70:4e:81:0a:b6:3a:b7:f1:bd:c4:47:48:3b:54:42:0e:0c:b7: 12:aa:71:2c:ba:f8:03:5d:24:9a:86:7f:fd:57:b1:17:f1:6e: 05:56:31:1f:24:a0:92:c8:b7:1e:8a:59:80:1d:9a:53:88:20: 42:d5:e3:6e:3c:81:14:7c:83:36:69:dd:eb:43:2a:21:de:5a: 58:9b:c2:be:ce:a7:5b:ff:bc:7c:84:74:a3:41:2d:e6:46:72: 42:9b:45:04:32:e5:c0:f2:e9:a4:ba:03:56:2d:43:85:ec:20: 63:74:36:16:d7:66:6c:ff:c1:90:b0:31:ed:d0:85:99:f9:df: 9a:04:77:b2:b5:90:ce:63:92:84:fc:dd:ff:62:dc:52:a1:0a: 94:b9:1e:69:e5:90:34:c5:63:1d:11:4a:92:57:46:a2:9f:69: ce:a3:a9:35:37:87:66:53:3f:e0:20:ea:b2:2f:ce:b5:8d:a8: 2c:00:f4:1d:b9:18:7a:9d:d8:53:0b:c1:c3:e3:1f:22:78:fc: 59:62:65:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu/F+cevGxgvcsUkQoXa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0 YWZjZWIwHhcNMjUxMjEzMjIwMTQ1WhcNMjUxMjE0MjIwMTQ1WjAzMTEwLwYDVQQD Eyg5NjMyMmUyNjJhNTk5YWI5YjliN2UxY2VkYmNmNTgxMzk0NmNjNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeCtnWy8udQ8WtKP7BaXz1U1c0Zz z9DPWoTJCdjVxfEuc18xyhFYKAMCaqVY7ocIwLpggsuWueVffuhf4jNamiB1hHHr 2nrDCQ4oxaHsmSXYrMXxrh5gfwOftOwqIiXBDzD1cuH2mITm/2O9meelqo41M2wu N5vXLRtn7NbgOZUnogaBgYa4UV0GZmSU/eoTLyEigfa9IBqvC2rHuVzpdIpBBG/2 dZOZzFWxi9ax9Y/DaYo0I48nCYgbDMgeHGKhQKvlk2Qt9UYg/Afa8gOhn3BULLOf MuzFc0iLN87arfK2Fz6PkJvcqIdiXIuHfLGbUXWxyXSsLyVofWSWFkDGmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYyLiYqWZq5ubfhztvPWBOUbMRVMB8GA1UdIwQY MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4FEs+UJ/ CpI9zvLdMa7lBNliqLDkEMHRsAEsX546/S4uNEQJGUOHhmQWPjlfMuc6bM2pi4Yt cE6BCrY6t/G9xEdIO1RCDgy3EqpxLLr4A10kmoZ//VexF/FuBVYxHySgksi3HopZ gB2aU4ggQtXjbjyBFHyDNmnd60MqId5aWJvCvs6nW/+8fIR0o0Et5kZyQptFBDLl wPLppLoDVi1DhewgY3Q2FtdmbP/BkLAx7dCFmfnfmgR3srWQzmOShPzd/2LcUqEK lLkeaeWQNMVjHRFKkldGop9pzqOpNTeHZlM/4CDqsi/OtY2oLAD0HbkYep3YUwvB w+MfInj8WWJlYg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:29:49 2025 by rpki-client