This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json) Hash identifier: WkQGDqz0C/Vq1q57EQEcw+1u1CeNQDOGf207o7CahWI= Subject key identifier: 12:F8:75:82:B6:B9:0B:58:19:1B:CB:5B:81:61:26:CE:E6:93:58:35 Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75 Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975 Certificate serial: 019B42497D847AAE35CE641FEAED24402849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft Manifest number: 0B5B Signing time: Sun 21 Dec 2025 19:01:11 +0000 Manifest this update: Sun 21 Dec 2025 19:01:11 +0000 Manifest next update: Mon 22 Dec 2025 19:01:11 +0000 Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: YCBCtcDZ4lO/41ODbHGJXUL+8xkoeQV7QUapS2rDdYw=) 2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:7d:84:7a:ae:35:ce:64:1f:ea:ed:24:40:28:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975 Validity Not Before: Dec 21 19:01:11 2025 GMT Not After : Dec 22 19:01:11 2025 GMT Subject: CN=12f87582b6b90b58191bcb5b816126cee6935835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:c7:85:4b:bf:94:e5:49:1c:f2:9f:b7:9b: 3b:41:89:30:17:27:5a:a8:3a:72:a8:fd:35:be:74: d1:f7:56:3f:7d:fe:c8:5a:bc:32:2e:36:65:8f:17: e4:fa:f9:a9:1e:6f:f4:94:c9:7a:d8:3f:7d:1d:ea: c9:1e:a6:0e:e9:28:a0:29:e7:31:4a:1c:5f:2c:32: 32:71:fa:a7:de:b3:64:cf:d1:ff:da:7d:4c:9d:bf: a3:a7:9d:08:17:da:05:d1:8e:19:26:31:a0:2c:39: ce:6b:00:be:c7:13:de:e8:69:10:c7:11:c8:8b:61: f5:61:58:ff:8c:15:05:b6:58:69:f6:bf:8e:09:4a: af:eb:e6:19:cb:2e:aa:be:26:06:76:b1:0b:e3:65: 48:27:fb:a8:2b:f2:aa:a1:09:d5:21:b4:1d:e9:43: c2:45:d3:ec:f9:89:e3:b4:8d:48:45:21:c5:3b:b6: f7:be:40:32:ba:f3:60:c2:97:2d:f2:a0:c8:da:46: 57:07:3d:d3:a3:16:1f:0c:b5:89:0c:58:3a:fb:7f: 05:cc:42:e3:78:16:6d:16:8d:6c:6f:c5:39:b7:a7: 81:f2:cf:98:06:dc:60:e0:49:6a:19:52:35:73:a4: e9:4b:c1:01:fc:3a:ee:3a:f4:0d:43:b8:78:4e:d9: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F8:75:82:B6:B9:0B:58:19:1B:CB:5B:81:61:26:CE:E6:93:58:35 X509v3 Authority Key Identifier: keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7a:f5:5c:ee:62:e6:15:af:91:7d:73:13:2a:03:26:20:cf: b8:93:99:69:6b:09:d1:7a:c2:4e:6d:5e:30:9c:fa:96:a7:88: 55:59:c3:92:77:05:5c:7d:56:43:7a:72:bf:07:89:24:3f:29: 09:83:33:d2:bf:68:16:7e:fc:7b:35:d1:d0:9a:7c:de:54:4e: be:68:fb:c2:fd:f5:ce:58:61:d5:1e:8c:d5:0a:1c:d5:cf:e7: ae:51:8b:26:2a:86:cf:98:ea:c6:3d:b2:bb:53:88:35:85:3c: ef:24:ac:36:83:22:4e:0b:20:a2:1a:12:28:ac:ea:28:47:fe: b0:98:48:f2:cd:9b:98:df:3d:f8:12:cc:97:bd:5f:f3:eb:68: ff:d9:57:38:bd:50:8f:47:00:f9:9f:7a:f8:57:90:1e:49:05: 80:06:36:47:d4:cf:7d:dd:c3:e1:53:dc:c1:95:32:4e:15:a7: 4d:e5:83:d3:cb:91:58:19:4e:11:00:a9:a1:54:16:24:1e:75: 11:06:bb:18:96:26:8f:c2:8a:f2:90:bc:91:16:19:e6:e3:e0: 72:49:63:ad:02:4b:8e:03:c2:f6:41:75:5a:68:48:71:e7:b8: 2d:23:4d:fb:29:b2:14:7f:d2:b9:f2:93:53:df:df:e0:f6:85: 8e:c0:e1:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSX2Eeq41zmQf6u0kQChJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2EwNDU4NmE4NWVkMTJlOWNkYTgzNGRmZGZhMTE5YzFh NTg5NzUwHhcNMjUxMjIxMTkwMTExWhcNMjUxMjIyMTkwMTExWjAzMTEwLwYDVQQD EygxMmY4NzU4MmI2YjkwYjU4MTkxYmNiNWI4MTYxMjZjZWU2OTM1ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf3HhUu/lOVJHPKft5s7QYkwFyda qDpyqP01vnTR91Y/ff7IWrwyLjZljxfk+vmpHm/0lMl62D99HerJHqYO6SigKecx ShxfLDIycfqn3rNkz9H/2n1Mnb+jp50IF9oF0Y4ZJjGgLDnOawC+xxPe6GkQxxHI i2H1YVj/jBUFtlhp9r+OCUqv6+YZyy6qviYGdrEL42VIJ/uoK/KqoQnVIbQd6UPC RdPs+YnjtI1IRSHFO7b3vkAyuvNgwpct8qDI2kZXBz3ToxYfDLWJDFg6+38FzELj eBZtFo1sb8U5t6eB8s+YBtxg4ElqGVI1c6TpS8EB/DruOvQNQ7h4TtkncwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL4dYK2uQtYGRvLW4FhJs7mk1g1MB8GA1UdIwQY MBaAFErKBFhqhe0S6c2oNN/foRnBpYl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2Ut MWI1ZGU1Yjc2MDYyLzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2UtMWI1ZGU1Yjc2MDYy LzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXr1XO5i 5hWvkX1zEyoDJiDPuJOZaWsJ0XrCTm1eMJz6lqeIVVnDkncFXH1WQ3pyvweJJD8p CYMz0r9oFn78ezXR0Jp83lROvmj7wv31zlhh1R6M1Qoc1c/nrlGLJiqGz5jqxj2y u1OINYU87ySsNoMiTgsgohoSKKzqKEf+sJhI8s2bmN89+BLMl71f8+to/9lXOL1Q j0cA+Z96+FeQHkkFgAY2R9TPfd3D4VPcwZUyThWnTeWD08uRWBlOEQCpoVQWJB51 EQa7GJYmj8KK8pC8kRYZ5uPgckljrQJLjgPC9kF1WmhIcee4LSNN+ymyFH/SufKT U9/f4PaFjsDhdQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:30:57 2025 by rpki-client