This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft File: sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json) Hash identifier: 8Nb0nktqOjGXjteDXXNjkldWxNisASOXXP2pSgIw1aw= Subject key identifier: AC:CD:B6:96:C6:37:73:93:4E:2F:97:64:76:58:56:CD:FB:23:6B:9A Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Certificate serial: 019B12019468464F8B247CCB976A3F2897F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft Manifest number: 0B03 Signing time: Fri 12 Dec 2025 10:00:51 +0000 Manifest this update: Fri 12 Dec 2025 10:00:51 +0000 Manifest next update: Sat 13 Dec 2025 10:00:51 +0000 Files and hashes: 1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=) 2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: MTp6RXyLfJEWnK652xg/O0yBj8l5aItayygnae1qaz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:94:68:46:4f:8b:24:7c:cb:97:6a:3f:28:97:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Validity Not Before: Dec 12 10:00:51 2025 GMT Not After : Dec 13 10:00:51 2025 GMT Subject: CN=accdb696c63773934e2f9764765856cdfb236b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:f9:ef:61:9a:70:de:41:a3:85:d3:2b:96: ef:13:bf:86:3c:c4:d1:01:92:cc:11:99:28:41:dd: 69:1b:ed:3d:17:58:a0:de:da:c9:e9:a6:e7:59:a6: fb:d6:dc:1b:c2:c8:ca:f0:fd:90:d9:93:be:b4:f1: 6e:9c:5d:e6:bc:3e:92:c1:c7:3e:e2:49:ca:2d:06: 05:b0:5f:ec:26:83:7b:05:45:d2:59:e9:e8:6e:10: 87:b7:d1:8d:5b:23:fb:cc:24:98:4a:e0:5b:1d:e1: 8a:73:df:65:ea:6c:3a:ca:d2:1a:1c:d6:fd:06:52: f5:2c:32:5c:02:77:fe:d0:6d:59:ec:83:ea:70:71: fd:e9:df:a0:f7:67:ad:01:f7:f9:c2:c2:5c:9c:31: ad:c3:3b:f5:ce:89:e5:ba:18:f8:44:6e:d6:19:6a: a6:40:41:5b:a1:66:7b:37:85:6b:f4:96:ae:0c:25: 58:aa:20:b8:47:39:44:6f:a9:fb:89:a4:e2:39:2f: 57:3f:72:98:a6:69:c1:a6:79:6e:f0:ae:35:e0:e6: 0e:ec:10:b7:b2:15:3f:95:26:84:da:17:98:54:ae: 11:8e:bb:91:d1:96:eb:42:39:f8:d5:ac:dd:44:a2: 57:af:e3:c0:12:a0:92:75:fe:24:9c:27:9a:5c:60: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CD:B6:96:C6:37:73:93:4E:2F:97:64:76:58:56:CD:FB:23:6B:9A X509v3 Authority Key Identifier: keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:80:23:0a:84:18:1d:46:ae:04:16:71:c0:a3:60:b7:84:bd: 58:b6:5a:00:cc:4e:41:ca:97:c5:21:5b:1a:79:46:06:21:72: a2:5f:15:d4:82:7d:94:50:40:8f:7c:27:b0:89:b5:af:4b:d2: 24:f9:12:d7:cb:9a:65:be:a0:3d:df:8d:bc:b7:2a:9c:14:7d: fe:b9:58:5b:5d:29:a2:79:10:d6:52:ef:20:c4:f4:54:ee:8b: f8:c4:6c:b1:bc:90:f3:30:02:c1:99:69:e5:0d:86:2b:55:f4: ce:ae:0b:67:79:3f:68:7f:c9:b9:91:57:b0:70:9b:69:8c:86: 9f:08:08:76:e1:c7:14:7b:b1:3d:50:5a:1b:3b:27:66:d8:5d: 94:74:86:42:26:9a:3b:0e:75:f9:b3:f1:a5:ad:d5:cd:fc:7f: 02:75:6f:a8:b0:f6:49:ee:90:e4:e3:9d:30:11:b2:aa:aa:9a: be:25:a8:1e:21:ee:cc:75:09:6b:0d:32:0f:78:c2:41:67:7b: 4f:22:9d:6b:88:57:e8:70:b0:8e:f3:f2:34:33:7b:e6:cb:f8: 0a:4c:ba:8e:33:31:f2:ae:92:5b:aa:d1:bd:a0:c9:cf:ad:f4: ca:b7:62:e2:d6:1c:6c:c8:90:bc:63:e5:50:8b:fc:ca:0a:01: f1:45:35:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAZRoRk+LJHzLl2o/KJf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl NDQ4NTcwHhcNMjUxMjEyMTAwMDUxWhcNMjUxMjEzMTAwMDUxWjAzMTEwLwYDVQQD EyhhY2NkYjY5NmM2Mzc3MzkzNGUyZjk3NjQ3NjU4NTZjZGZiMjM2YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsT572GacN5Bo4XTK5bvE7+GPMTR AZLMEZkoQd1pG+09F1ig3trJ6abnWab71twbwsjK8P2Q2ZO+tPFunF3mvD6Swcc+ 4knKLQYFsF/sJoN7BUXSWenobhCHt9GNWyP7zCSYSuBbHeGKc99l6mw6ytIaHNb9 BlL1LDJcAnf+0G1Z7IPqcHH96d+g92etAff5wsJcnDGtwzv1zonluhj4RG7WGWqm QEFboWZ7N4Vr9JauDCVYqiC4RzlEb6n7iaTiOS9XP3KYpmnBpnlu8K414OYO7BC3 shU/lSaE2heYVK4RjruR0ZbrQjn41azdRKJXr+PAEqCSdf4knCeaXGCwwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzNtpbGN3OTTi+XZHZYVs37I2uaMB8GA1UdIwQY MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt MzJmZGEzMTE4NmVmLzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4AjCoQY HUauBBZxwKNgt4S9WLZaAMxOQcqXxSFbGnlGBiFyol8V1IJ9lFBAj3wnsIm1r0vS JPkS18uaZb6gPd+NvLcqnBR9/rlYW10ponkQ1lLvIMT0VO6L+MRssbyQ8zACwZlp 5Q2GK1X0zq4LZ3k/aH/JuZFXsHCbaYyGnwgIduHHFHuxPVBaGzsnZthdlHSGQiaa Ow51+bPxpa3Vzfx/AnVvqLD2Se6Q5OOdMBGyqqqaviWoHiHuzHUJaw0yD3jCQWd7 TyKda4hX6HCwjvPyNDN75sv4Cky6jjMx8q6SW6rRvaDJz630yrdi4tYcbMiQvGPl UIv8ygoB8UU1mA== -----END CERTIFICATE-----Generated at Fri Dec 12 18:13:55 2025 by rpki-client