This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json) Hash identifier: rCPNfqOj4LV0LfuFQED1UeN8vmOehfysmq03c7BMFro= Subject key identifier: 05:A7:37:9C:19:C2:5E:D3:99:56:64:56:A9:7A:C1:10:30:87:AE:20 Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0 Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0 Certificate serial: 019AFCC4559EE6023CF160C37CF21D8930C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft Manifest number: 0827 Signing time: Mon 08 Dec 2025 07:01:56 +0000 Manifest this update: Mon 08 Dec 2025 07:01:56 +0000 Manifest next update: Tue 09 Dec 2025 07:01:56 +0000 Files and hashes: 1: HfFJEDDUnETMgv_-tGTektHgOG0.roa (hash: n6Dq1dMrKgJPnJf8bwIr5DpzEFmjQ+eea+XVV9e+HTg=) 2: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: qPkYW/fC/tZ60UWAlwqUGk5z5iu29BTYHkFT0pmWPms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:55:9e:e6:02:3c:f1:60:c3:7c:f2:1d:89:30:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0 Validity Not Before: Dec 8 07:01:56 2025 GMT Not After : Dec 9 07:01:56 2025 GMT Subject: CN=05a7379c19c25ed399566456a97ac1103087ae20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:8e:1b:37:38:24:2f:33:1e:1b:51:94:c0: b3:dc:8f:59:7a:4d:6a:62:13:68:8a:9e:5a:32:7c: 4e:19:16:b7:d8:90:96:cd:a6:fb:02:74:31:cf:2a: 11:ca:18:06:d4:1f:50:5b:08:58:8e:82:52:d0:ef: 3a:18:f4:83:0d:c3:24:6f:91:16:b8:fb:2c:84:32: 91:2e:6a:69:5c:c9:0b:4f:96:f3:84:37:fd:6f:b0: 56:3c:5f:4b:d8:30:1b:9a:1c:8c:e3:52:5a:ac:6d: b1:42:8a:37:f1:9a:59:9a:80:8f:f2:86:b1:f7:dc: d8:bc:72:e3:a2:95:11:2c:9f:0e:df:ab:9e:26:c5: 83:a6:f4:41:9d:01:ea:b0:75:81:71:10:fe:6b:3a: d9:37:c2:3f:cf:90:99:e9:20:17:f6:fd:ec:a5:3c: 01:7c:d3:d4:2c:81:f1:69:35:50:6f:16:a6:81:51: ef:56:74:f2:ab:15:a6:69:e4:10:29:e7:e1:06:2a: 38:2a:15:97:06:40:15:ed:f8:88:72:4f:77:51:a0: 15:15:5e:8f:c7:82:ee:8e:d8:ea:71:fe:52:bc:16: 41:e1:ce:a5:eb:39:af:fd:5e:37:17:49:c0:e0:a0: be:28:11:51:a5:e2:fa:58:42:bf:3b:f5:19:3a:30: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A7:37:9C:19:C2:5E:D3:99:56:64:56:A9:7A:C1:10:30:87:AE:20 X509v3 Authority Key Identifier: keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:15:27:04:ed:1b:f4:5d:49:60:71:e0:b1:c6:f1:66:0a:64: 41:18:87:fc:fb:74:32:51:4c:af:83:ed:d0:2b:ec:89:62:a2: fe:6b:24:f3:37:e7:03:6b:2e:3b:b0:dc:25:f2:1a:ef:fd:7c: ec:4c:c3:4b:9e:ab:07:4d:3b:92:c7:7d:a6:8f:8c:02:93:d6: 44:ca:b7:63:80:90:fa:ac:1d:fd:e2:6e:b6:f5:4f:de:2b:78: 42:ac:bc:92:d1:59:04:8c:31:69:f6:91:b6:73:0e:3a:a3:4e: 5d:50:77:a5:08:d6:14:13:b5:eb:e4:08:fe:2d:54:a5:51:06: b6:96:0e:e1:40:e0:d1:61:3e:d2:33:aa:11:2a:c9:61:2c:70: 52:b6:67:6b:8b:37:7c:35:c5:fc:30:56:a3:72:2f:55:61:31: 4d:6b:61:d1:1b:09:7b:be:3e:e5:59:7c:e9:db:c3:11:64:70: a7:ba:4b:42:61:b1:02:7e:a2:ae:0f:d0:c0:f6:9c:04:f7:32: 76:2d:92:2e:0c:0c:bb:1a:19:05:24:8d:58:af:5c:99:f5:34: 54:cd:b5:08:65:9c:bc:9c:93:8e:40:08:d4:33:c8:4a:d1:cb: 31:8d:87:fc:16:58:aa:34:93:b9:3a:51:51:51:ea:34:de:ed: 02:4b:2f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xFWe5gI88WDDfPIdiTDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NmMyZDhhZjRjZTUwY2U2ZjQzZTdkZjQ0ZTBiNTAzNzAw YTg2YzAwHhcNMjUxMjA4MDcwMTU2WhcNMjUxMjA5MDcwMTU2WjAzMTEwLwYDVQQD EygwNWE3Mzc5YzE5YzI1ZWQzOTk1NjY0NTZhOTdhYzExMDMwODdhZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaCOGzc4JC8zHhtRlMCz3I9Zek1q YhNoip5aMnxOGRa32JCWzab7AnQxzyoRyhgG1B9QWwhYjoJS0O86GPSDDcMkb5EW uPsshDKRLmppXMkLT5bzhDf9b7BWPF9L2DAbmhyM41JarG2xQoo38ZpZmoCP8oax 99zYvHLjopURLJ8O36ueJsWDpvRBnQHqsHWBcRD+azrZN8I/z5CZ6SAX9v3spTwB fNPULIHxaTVQbxamgVHvVnTyqxWmaeQQKefhBio4KhWXBkAV7fiIck93UaAVFV6P x4Lujtjqcf5SvBZB4c6l6zmv/V43F0nA4KC+KBFRpeL6WEK/O/UZOjBqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWnN5wZwl7TmVZkVql6wRAwh64gMB8GA1UdIwQY MBaAFEhsLYr0zlDOb0Pn30TgtQNwCobAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0d3dGl2VE9VTTV2US1mZlJPQzFBM0FLaHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kODI3YzAtZDZkNS00OGY2LThmNDUt ZjFhNWRkZDc3OThiLzEvU0d3dGl2VE9VTTV2US1mZlJPQzFBM0FLaHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kODI3YzAtZDZkNS00OGY2LThmNDUtZjFhNWRkZDc3OThi LzEvU0d3dGl2VE9VTTV2US1mZlJPQzFBM0FLaHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBUnBO0b 9F1JYHHgscbxZgpkQRiH/Pt0MlFMr4Pt0CvsiWKi/msk8zfnA2suO7DcJfIa7/18 7EzDS56rB007ksd9po+MApPWRMq3Y4CQ+qwd/eJutvVP3it4Qqy8ktFZBIwxafaR tnMOOqNOXVB3pQjWFBO16+QI/i1UpVEGtpYO4UDg0WE+0jOqESrJYSxwUrZna4s3 fDXF/DBWo3IvVWExTWth0RsJe74+5Vl86dvDEWRwp7pLQmGxAn6irg/QwPacBPcy di2SLgwMuxoZBSSNWK9cmfU0VM21CGWcvJyTjkAI1DPIStHLMY2H/BZYqjSTuTpR UVHqNN7tAksvLA== -----END CERTIFICATE-----Generated at Mon Dec 8 12:36:27 2025 by rpki-client