This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json) Hash identifier: gCDjeiXq8odfUNFbf3aIUv2enSC6kmfbJ+JVWIHoruE= Subject key identifier: 20:82:29:52:91:A7:34:3F:3A:98:F0:DE:FD:C7:C5:B9:31:79:AE:CC Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6 Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6 Certificate serial: 019B5A887A80AD28088B6E3794E186FFF3E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 12:00:52 +0000 Manifest this update: Fri 26 Dec 2025 12:00:52 +0000 Manifest next update: Sat 27 Dec 2025 12:00:52 +0000 Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: zs7nwogjiQPUruwbhVQByUNQeIkwNM2PNZKyKQCHP08=) 2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:7a:80:ad:28:08:8b:6e:37:94:e1:86:ff:f3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6 Validity Not Before: Dec 26 12:00:52 2025 GMT Not After : Dec 27 12:00:52 2025 GMT Subject: CN=2082295291a7343f3a98f0defdc7c5b93179aecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:01:34:32:2d:92:93:0a:86:c9:28:cd:2e: 07:d8:3c:2d:cd:30:ce:6e:f2:4f:c3:05:35:5c:23: 85:7c:2b:37:6e:5a:f9:dc:f2:01:88:55:d4:c1:50: 28:a5:cf:ea:b2:39:e4:ea:81:80:9f:26:e1:d9:b4: 44:06:44:38:7e:63:af:7e:be:31:a7:4c:dd:f4:cd: 79:f6:56:d1:5b:8a:2f:ce:c4:fe:01:c3:63:ab:a2: 84:0b:16:61:af:b7:a2:c4:99:08:cc:b5:14:ab:84: 09:72:f5:1c:4d:f0:23:1c:f8:70:f1:ef:dc:8f:20: ef:d7:2e:a0:f7:d7:b5:3e:72:d7:22:94:50:1a:48: 62:03:dd:9e:79:1b:32:b1:68:37:ac:2f:a5:77:6f: cf:f4:83:54:89:f5:fa:3e:ba:5a:42:43:5e:de:d1: 9b:12:cb:ff:35:cc:76:a3:dc:80:29:bc:ab:63:21: b3:b3:73:0c:b5:d0:48:58:0c:ef:ca:45:e7:dc:10: b5:b2:14:0f:36:ba:2d:c9:8d:c9:3c:ac:99:42:6e: 11:4c:b2:53:ba:b4:ed:8f:dc:5c:ae:63:09:59:1a: ce:d3:35:ca:4d:4f:0e:c9:dc:09:51:26:ad:bc:51: 36:21:7d:ae:85:46:42:29:ab:38:8a:7d:ad:28:73: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:82:29:52:91:A7:34:3F:3A:98:F0:DE:FD:C7:C5:B9:31:79:AE:CC X509v3 Authority Key Identifier: keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9c:ea:2e:95:9d:a3:8d:cd:ae:f4:96:64:a6:e7:4e:59:38: 63:b2:c1:ea:cb:e8:52:68:cc:2c:c8:8c:17:c2:bb:3d:81:c0: 75:66:2f:d1:df:15:a1:c7:cd:81:a6:7c:7a:e2:20:05:e3:18: 74:d0:cc:fd:8b:52:15:c6:58:ee:d4:75:e3:05:9d:a8:89:a6: bb:7d:93:c9:4d:52:9b:cb:f7:c6:b0:5f:fb:86:74:c3:1f:10: 68:57:f7:7e:5f:e2:07:f6:f6:6f:de:65:59:32:9d:46:02:39: 73:66:dd:d1:23:a9:5d:29:ef:58:9d:4c:42:ea:34:55:8e:60: be:49:4d:4d:bb:4a:46:3c:33:38:75:e3:e3:7c:22:d6:a3:4a: 9c:42:55:8a:16:c8:99:5e:fb:ce:73:1f:41:0c:e3:2c:62:13: ab:92:87:a4:cb:54:cc:cf:50:86:00:25:e7:40:53:90:93:19: 07:19:e0:f6:57:88:ab:94:aa:b6:b8:a7:1c:63:00:05:d1:cc: 15:50:71:78:b4:46:3c:d8:ce:66:0c:5f:4f:c3:74:f5:e7:f2: 2b:42:ab:36:4b:0c:fd:7f:de:d7:36:24:a5:6b:f5:d0:d7:7c: 4e:fd:62:f4:15:ab:8b:75:d8:a2:b9:0b:2a:3a:93:f6:6d:67: da:50:47:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHqArSgIi243lOGG//PoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODhmM2FiOTRhMDc1ODcyMjBlM2Q3MTZmN2I3MTdkZjFk OWU2ZDYwHhcNMjUxMjI2MTIwMDUyWhcNMjUxMjI3MTIwMDUyWjAzMTEwLwYDVQQD EygyMDgyMjk1MjkxYTczNDNmM2E5OGYwZGVmZGM3YzViOTMxNzlhZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3QBNDItkpMKhskozS4H2DwtzTDO bvJPwwU1XCOFfCs3blr53PIBiFXUwVAopc/qsjnk6oGAnybh2bREBkQ4fmOvfr4x p0zd9M159lbRW4ovzsT+AcNjq6KECxZhr7eixJkIzLUUq4QJcvUcTfAjHPhw8e/c jyDv1y6g99e1PnLXIpRQGkhiA92eeRsysWg3rC+ld2/P9INUifX6PrpaQkNe3tGb Esv/Ncx2o9yAKbyrYyGzs3MMtdBIWAzvykXn3BC1shQPNrotyY3JPKyZQm4RTLJT urTtj9xcrmMJWRrO0zXKTU8OydwJUSatvFE2IX2uhUZCKas4in2tKHO1rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCCKVKRpzQ/Opjw3v3Hxbkxea7MMB8GA1UdIwQY MBaAFEqI86uUoHWHIg49cW97cX3x2ebWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEt ZDQ1MTljNTM5YzlhLzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MzZkZDItMGM5YS00OGU5LWFhNzEtZDQ1MTljNTM5Yzlh LzEvU29qenE1U2dkWWNpRGoxeGIzdHhmZkhaNXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJzqLpWd o43NrvSWZKbnTlk4Y7LB6svoUmjMLMiMF8K7PYHAdWYv0d8VocfNgaZ8euIgBeMY dNDM/YtSFcZY7tR14wWdqImmu32TyU1Sm8v3xrBf+4Z0wx8QaFf3fl/iB/b2b95l WTKdRgI5c2bd0SOpXSnvWJ1MQuo0VY5gvklNTbtKRjwzOHXj43wi1qNKnEJVihbI mV77znMfQQzjLGITq5KHpMtUzM9QhgAl50BTkJMZBxng9leIq5SqtrinHGMABdHM FVBxeLRGPNjOZgxfT8N09efyK0KrNksM/X/e1zYkpWv10Nd8Tv1i9BWri3XYorkL KjqT9m1n2lBHLQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:40 2025 by rpki-client