This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json) Hash identifier: WdAz30mWrOPc1sI+oPT/De6+H1dyUQVgs5k1GHLQlic= Subject key identifier: B7:6C:17:6F:7B:A0:8F:AD:19:4F:43:C2:16:49:CE:77:8B:0A:E9:66 Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb Certificate serial: 019B12025D6DA9F408FD101A0C1A1E9CFAE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft Manifest number: 069D Signing time: Fri 12 Dec 2025 10:01:43 +0000 Manifest this update: Fri 12 Dec 2025 10:01:43 +0000 Manifest next update: Sat 13 Dec 2025 10:01:43 +0000 Files and hashes: 1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: ngxisf0trCHBjsuN3SLduuXWVijJGlVUrdRkTsYq1xo=) 2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:5d:6d:a9:f4:08:fd:10:1a:0c:1a:1e:9c:fa:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb Validity Not Before: Dec 12 10:01:43 2025 GMT Not After : Dec 13 10:01:43 2025 GMT Subject: CN=b76c176f7ba08fad194f43c21649ce778b0ae966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:a4:02:9c:e4:06:e7:3f:35:be:c3:61:24: f8:f9:be:c5:b4:7b:9c:a2:d5:c2:34:3b:50:8a:4f: 1d:4f:11:e2:7e:c2:44:a9:eb:b4:b9:82:cd:e9:64: 27:b2:d9:68:a6:bd:2c:9e:08:73:fa:e1:ed:79:b4: d8:6a:f5:98:ea:01:b1:d6:46:d7:34:82:46:ca:d3: a4:98:7f:53:44:52:bd:ca:6d:03:c7:37:7e:f8:74: 16:6b:d6:ba:c4:ea:9b:d9:80:79:f7:dd:63:bc:0f: 14:c7:f3:bb:d9:37:c3:8e:15:58:d6:a1:b2:9f:d4: 43:3a:05:64:1a:5e:3f:a3:19:b6:35:a1:40:a0:1a: b0:d2:90:4f:c9:44:f0:64:4b:63:9e:37:35:f3:98: 7c:8a:f3:8e:a7:d9:b7:74:55:25:78:c6:a7:76:0c: b6:da:a9:0b:3a:f2:b9:00:30:6c:0b:4f:b6:9a:d9: 8f:a0:a9:38:9f:8d:9c:27:ff:50:4d:e3:08:20:92: 22:1c:aa:ff:0b:f5:5e:5d:85:d7:d8:2d:5b:60:9a: 04:70:1c:59:a5:b0:e9:10:46:e2:ce:29:08:66:65: e9:d9:90:f9:50:38:38:58:ac:ad:88:be:de:f1:8e: 5a:10:26:75:93:65:c8:af:df:2f:c7:91:d7:c4:fd: 75:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6C:17:6F:7B:A0:8F:AD:19:4F:43:C2:16:49:CE:77:8B:0A:E9:66 X509v3 Authority Key Identifier: keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:70:90:29:95:24:1c:70:ab:c6:85:47:3c:40:2f:16:6e:ca: 00:fc:ba:a9:b6:a4:e6:0b:8c:37:ee:4b:61:35:df:d8:2e:da: 1c:77:9b:c0:04:17:69:dc:6d:46:34:02:56:a8:ac:08:ca:53: 73:82:ad:14:cd:2f:7f:25:be:29:d9:ae:00:bf:26:e6:65:99: ed:b5:25:92:57:af:18:5a:31:93:6b:2f:78:9a:36:fd:27:ad: 6e:5d:3b:08:44:e5:49:6b:a1:aa:a4:7b:bb:40:0a:62:26:8d: 0a:95:b8:ce:0e:df:41:d3:19:0e:bf:8e:b0:28:e1:ee:14:3e: ff:a6:42:6e:a9:35:64:8a:b1:8c:6a:f6:72:2d:49:b3:d9:02: b8:b1:93:f7:4c:fc:fd:7f:ab:e9:e1:c6:13:01:b1:72:3a:82: 67:b0:7b:3a:f6:f6:59:93:bd:e9:42:4a:42:04:50:da:db:b2: 03:14:b2:8e:4b:c8:df:45:e7:5e:c0:f9:35:ce:1d:74:c3:85: 94:17:55:13:3b:9b:94:b6:6a:c3:11:4a:47:7a:ad:61:e3:e6: e6:23:d6:96:2d:bc:b3:b2:db:36:57:c7:7a:c6:39:dd:20:68: 7a:67:32:10:4b:bd:d6:4b:59:90:4d:7f:c7:b5:33:fc:a1:89: f6:0a:de:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAl1tqfQI/RAaDBoenPrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0 YWZjZWIwHhcNMjUxMjEyMTAwMTQzWhcNMjUxMjEzMTAwMTQzWjAzMTEwLwYDVQQD EyhiNzZjMTc2ZjdiYTA4ZmFkMTk0ZjQzYzIxNjQ5Y2U3NzhiMGFlOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D6kApzkBuc/Nb7DYST4+b7FtHuc otXCNDtQik8dTxHifsJEqeu0uYLN6WQnstlopr0snghz+uHtebTYavWY6gGx1kbX NIJGytOkmH9TRFK9ym0Dxzd++HQWa9a6xOqb2YB5991jvA8Ux/O72TfDjhVY1qGy n9RDOgVkGl4/oxm2NaFAoBqw0pBPyUTwZEtjnjc185h8ivOOp9m3dFUleMandgy2 2qkLOvK5ADBsC0+2mtmPoKk4n42cJ/9QTeMIIJIiHKr/C/VeXYXX2C1bYJoEcBxZ pbDpEEbizikIZmXp2ZD5UDg4WKytiL7e8Y5aECZ1k2XIr98vx5HXxP114QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdsF297oI+tGU9DwhZJzneLCulmMB8GA1UdIwQY MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXCQKZUk HHCrxoVHPEAvFm7KAPy6qbak5guMN+5LYTXf2C7aHHebwAQXadxtRjQCVqisCMpT c4KtFM0vfyW+KdmuAL8m5mWZ7bUlklevGFoxk2sveJo2/Setbl07CETlSWuhqqR7 u0AKYiaNCpW4zg7fQdMZDr+OsCjh7hQ+/6ZCbqk1ZIqxjGr2ci1Js9kCuLGT90z8 /X+r6eHGEwGxcjqCZ7B7Ovb2WZO96UJKQgRQ2tuyAxSyjkvI30XnXsD5Nc4ddMOF lBdVEzublLZqwxFKR3qtYePm5iPWli28s7LbNlfHesY53SBoemcyEEu91ktZkE1/ x7Uz/KGJ9grecw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:09:12 2025 by rpki-client