This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json) Hash identifier: oHys1J7oQJL7hc/otNzy/8qXQtqZ0FHYiqOFyEwfIgo= Subject key identifier: CB:D2:07:1E:8D:6C:38:72:4F:F2:06:5D:EB:77:07:86:9C:D9:33:C2 Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Certificate serial: 019B0E9300F1218672D77D6DAB8779DB04CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft Manifest number: 0EE3 Signing time: Thu 11 Dec 2025 18:01:13 +0000 Manifest this update: Thu 11 Dec 2025 18:01:13 +0000 Manifest next update: Fri 12 Dec 2025 18:01:13 +0000 Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=) 2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=) 3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: vwFSVZwBU9b/wr/tFRZqvJ2n4hTHjmChfy1GU0bb6Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:00:f1:21:86:72:d7:7d:6d:ab:87:79:db:04:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Validity Not Before: Dec 11 18:01:13 2025 GMT Not After : Dec 12 18:01:13 2025 GMT Subject: CN=cbd2071e8d6c38724ff2065deb7707869cd933c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:a1:d9:a7:19:63:70:94:36:7d:8d:8e:38: aa:e3:8e:14:90:73:23:37:9b:7f:07:7a:8c:05:95: 98:43:68:30:83:34:5a:4c:88:36:2a:bd:8f:7b:15: 80:f1:37:d0:de:3b:b6:d0:59:31:36:32:ee:b7:38: ea:f3:cf:b2:1c:6b:ea:56:48:b0:d4:c7:60:bd:32: 66:02:32:60:0c:fd:56:da:07:1f:61:4e:1a:e1:a4: 2e:dd:c3:7f:7b:2c:7d:62:a4:4d:ba:60:9b:cd:71: 64:92:b1:d1:69:01:d0:12:0a:48:82:aa:5b:3d:1c: ca:d9:ff:e0:39:17:7a:eb:5a:ca:64:2a:f4:63:7d: ff:57:94:2f:d0:3d:44:53:a9:c7:d8:ac:c3:08:29: 41:33:92:70:64:19:3f:f7:3a:62:53:dd:d8:7c:a7: bb:e1:0b:9f:8e:be:e1:ef:ce:75:c5:b7:44:c4:60: 64:3b:e6:5e:82:14:30:59:e6:d3:c2:49:7c:00:ce: ec:17:15:74:6c:06:12:88:0f:b6:5d:f6:55:49:3b: 57:3f:0a:8b:42:96:55:aa:88:8c:5f:ee:5c:36:ae: 45:54:c4:89:b8:65:18:8b:a0:35:8f:ef:74:b3:dd: 4c:55:e0:45:e6:78:38:a6:1b:11:35:20:d7:cf:84: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D2:07:1E:8D:6C:38:72:4F:F2:06:5D:EB:77:07:86:9C:D9:33:C2 X509v3 Authority Key Identifier: keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:dd:a5:04:ab:47:ba:b6:af:36:b9:bc:ad:dd:1d:c8:17:1e: 6a:cb:27:6b:f0:73:b9:35:55:52:40:10:19:c5:99:60:c3:dc: 7e:c4:77:65:78:fa:a3:f5:97:33:fd:a4:ca:89:86:d4:67:f6: d5:a2:5d:41:14:60:ab:69:40:9b:ec:81:5b:fe:cf:cf:09:6b: 78:61:7b:c8:6b:03:3e:84:94:53:2c:94:a3:6b:81:ec:1a:22: 47:3d:09:ad:50:45:5b:d7:87:d5:f7:e8:d3:64:27:00:08:ce: a9:f8:a5:0a:81:97:22:5a:fb:6d:c0:b0:89:f4:32:6f:5e:21: 32:f0:20:e3:03:1e:fc:91:51:36:46:ad:c3:09:8d:67:44:cc: 73:97:56:da:ea:bf:c5:48:cf:6f:b3:71:7a:ba:e6:25:5a:73: c1:71:8a:29:85:ec:99:cb:da:b0:c3:83:46:c9:ff:a9:18:cf: c9:d6:e4:3a:18:3a:b2:f7:10:19:e4:4f:9b:fd:7a:d5:37:58: f1:6b:51:06:0a:b7:3c:f3:4d:a0:93:4c:98:2c:aa:1c:97:84: 8c:f0:9d:8e:5d:a8:38:c3:d4:aa:53:5e:ff:b5:a0:6d:f1:7d: a0:36:99:3d:c4:db:f7:92:ed:ca:49:34:1a:17:63:8d:5a:5f: a2:f6:45:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkwDxIYZy131tq4d52wTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4 NjU0ZDAwHhcNMjUxMjExMTgwMTEzWhcNMjUxMjEyMTgwMTEzWjAzMTEwLwYDVQQD EyhjYmQyMDcxZThkNmMzODcyNGZmMjA2NWRlYjc3MDc4NjljZDkzM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yuh2acZY3CUNn2Njjiq444UkHMj N5t/B3qMBZWYQ2gwgzRaTIg2Kr2PexWA8TfQ3ju20FkxNjLutzjq88+yHGvqVkiw 1MdgvTJmAjJgDP1W2gcfYU4a4aQu3cN/eyx9YqRNumCbzXFkkrHRaQHQEgpIgqpb PRzK2f/gORd661rKZCr0Y33/V5Qv0D1EU6nH2KzDCClBM5JwZBk/9zpiU93YfKe7 4Qufjr7h7851xbdExGBkO+ZeghQwWebTwkl8AM7sFxV0bAYSiA+2XfZVSTtXPwqL QpZVqoiMX+5cNq5FVMSJuGUYi6A1j+90s91MVeBF5ng4phsRNSDXz4RoKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvSBx6NbDhyT/IGXet3B4ac2TPCMB8GA1UdIwQY MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA192lBKtH uravNrm8rd0dyBceassna/BzuTVVUkAQGcWZYMPcfsR3ZXj6o/WXM/2kyomG1Gf2 1aJdQRRgq2lAm+yBW/7PzwlreGF7yGsDPoSUUyyUo2uB7BoiRz0JrVBFW9eH1ffo 02QnAAjOqfilCoGXIlr7bcCwifQyb14hMvAg4wMe/JFRNkatwwmNZ0TMc5dW2uq/ xUjPb7NxerrmJVpzwXGKKYXsmcvasMODRsn/qRjPydbkOhg6svcQGeRPm/161TdY 8WtRBgq3PPNNoJNMmCyqHJeEjPCdjl2oOMPUqlNe/7WgbfF9oDaZPcTb95Ltykk0 GhdjjVpfovZF8w== -----END CERTIFICATE-----Generated at Thu Dec 11 21:24:17 2025 by rpki-client