This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json) Hash identifier: 7toeSQXO0yhegT3AGvqxoWhIqd9Ckf/Hmw39hJdvp/g= Subject key identifier: 47:A8:E2:C1:E4:23:F7:5E:65:BD:11:7D:24:09:2E:21:BA:95:DE:D2 Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7 Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7 Certificate serial: 019B10135E69243A2876B86BDCA020C0C9DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft Manifest number: 0E8D Signing time: Fri 12 Dec 2025 01:01:03 +0000 Manifest this update: Fri 12 Dec 2025 01:01:03 +0000 Manifest next update: Sat 13 Dec 2025 01:01:03 +0000 Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: xLW/2/ImwoX0WqIzPMCmsp487qThzCwn+y6/2Z6p3Bo=) 2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:5e:69:24:3a:28:76:b8:6b:dc:a0:20:c0:c9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7 Validity Not Before: Dec 12 01:01:03 2025 GMT Not After : Dec 13 01:01:03 2025 GMT Subject: CN=47a8e2c1e423f75e65bd117d24092e21ba95ded2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:60:a4:aa:c8:44:2b:82:3e:2d:1c:a6:6d: e8:8f:65:d0:d9:b6:7d:3d:7d:7b:ae:c1:f7:1c:45: e0:9e:76:b6:33:05:c7:ed:ba:3c:03:56:f3:e4:25: 23:fa:38:01:22:bd:2b:84:ef:dc:65:67:32:bd:71: 2f:21:6a:05:1b:c9:0c:80:26:d4:f1:95:48:38:73: ab:b3:2e:1f:94:42:64:94:56:3f:c8:fc:a1:5f:57: fc:5c:79:e0:f5:53:7f:43:57:e2:a0:8d:95:3a:4a: b0:75:74:77:9c:b2:c4:78:5c:78:c9:a7:05:52:76: 21:e4:88:46:73:67:b7:58:28:51:21:89:68:49:99: 1b:a9:f0:b4:07:44:f8:17:cd:5b:2f:41:82:9b:f9: 95:76:5d:82:28:fc:9c:ca:2b:18:76:20:03:dc:ea: 80:1b:93:b8:7f:b0:88:31:0e:c7:96:0b:cd:81:30: bf:f3:37:95:50:62:47:1d:98:23:09:35:54:4c:04: c0:c6:50:81:dd:19:0f:00:cb:e7:28:a2:2a:b1:ce: 87:f9:72:b1:91:bd:0c:37:b5:f6:a6:81:b4:f4:72: ef:0a:9e:5c:f1:7d:82:c1:39:ba:ff:c2:d9:f9:fe: fd:61:db:a9:4d:3b:72:23:9c:c9:f0:1e:fb:a7:9a: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A8:E2:C1:E4:23:F7:5E:65:BD:11:7D:24:09:2E:21:BA:95:DE:D2 X509v3 Authority Key Identifier: keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6c:89:8c:08:33:66:04:2c:2a:54:f6:1c:d3:b3:f8:42:c1: cd:c3:f0:4f:0c:37:bd:ae:42:dc:c0:0b:52:61:58:97:c6:fd: 39:b7:82:ee:59:29:fc:0e:a0:52:3f:b2:e7:f4:78:c6:87:d7: 14:70:d4:78:00:b1:13:1f:f4:88:e5:8f:69:c9:35:97:1f:02: 2c:98:80:c4:57:75:36:18:6f:f9:5b:6c:38:ca:ce:85:ac:4f: 6b:56:0a:96:6a:0a:3f:9f:dc:e3:b7:96:29:18:0f:c0:66:31: 5f:01:ce:a0:ba:66:b0:43:29:32:54:5f:52:3b:6f:ac:35:87: cc:ce:7e:5b:57:7a:f7:41:ce:b5:04:07:6e:90:ad:7e:0e:17: b4:22:71:7b:8a:02:7f:d3:b6:b0:0e:08:14:f9:70:a6:35:e4: 38:f4:e7:a9:c6:61:b3:b1:8f:7c:9e:5a:cb:34:ea:ba:b8:89: e1:49:33:fb:fa:aa:48:a3:e8:5d:23:4e:41:3b:1d:41:7c:32: 98:d3:34:8e:26:da:92:27:50:dd:bd:ca:63:72:b8:e6:40:54: 4b:33:f7:c9:f8:81:85:12:e0:e2:c6:31:70:76:7b:fa:c1:aa: 18:cf:97:41:c0:f0:73:76:c0:6f:c6:f9:0f:9b:60:a3:64:ba: f6:42:41:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE15pJDoodrhr3KAgwMnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3 Mjg1YjcwHhcNMjUxMjEyMDEwMTAzWhcNMjUxMjEzMDEwMTAzWjAzMTEwLwYDVQQD Eyg0N2E4ZTJjMWU0MjNmNzVlNjViZDExN2QyNDA5MmUyMWJhOTVkZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHFgpKrIRCuCPi0cpm3oj2XQ2bZ9 PX17rsH3HEXgnna2MwXH7bo8A1bz5CUj+jgBIr0rhO/cZWcyvXEvIWoFG8kMgCbU 8ZVIOHOrsy4flEJklFY/yPyhX1f8XHng9VN/Q1fioI2VOkqwdXR3nLLEeFx4yacF UnYh5IhGc2e3WChRIYloSZkbqfC0B0T4F81bL0GCm/mVdl2CKPycyisYdiAD3OqA G5O4f7CIMQ7HlgvNgTC/8zeVUGJHHZgjCTVUTATAxlCB3RkPAMvnKKIqsc6H+XKx kb0MN7X2poG09HLvCp5c8X2CwTm6/8LZ+f79YdupTTtyI5zJ8B77p5okpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeo4sHkI/deZb0RfSQJLiG6ld7SMB8GA1UdIwQY MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt ZmNjNjYxNGRlMDM1LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1 LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWyJjAgz ZgQsKlT2HNOz+ELBzcPwTww3va5C3MALUmFYl8b9ObeC7lkp/A6gUj+y5/R4xofX FHDUeACxEx/0iOWPack1lx8CLJiAxFd1Nhhv+VtsOMrOhaxPa1YKlmoKP5/c47eW KRgPwGYxXwHOoLpmsEMpMlRfUjtvrDWHzM5+W1d690HOtQQHbpCtfg4XtCJxe4oC f9O2sA4IFPlwpjXkOPTnqcZhs7GPfJ5ayzTquriJ4Ukz+/qqSKPoXSNOQTsdQXwy mNM0jibakidQ3b3KY3K45kBUSzP3yfiBhRLg4sYxcHZ7+sGqGM+XQcDwc3bAb8b5 D5tgo2S69kJBcg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:44:29 2025 by rpki-client