This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json) Hash identifier: fbK3CkTH+72Nt1MuoHy6ZOk4xVcOp60Ou5uvmZWDU1w= Subject key identifier: 5E:5D:5C:94:F4:74:68:BF:84:0E:2F:0C:C6:7A:17:BA:2E:EA:1A:62 Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Certificate serial: 019B1916BC8E6867A07F6484D92CEF64A767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 19:01:19 +0000 Manifest this update: Sat 13 Dec 2025 19:01:19 +0000 Manifest next update: Sun 14 Dec 2025 19:01:19 +0000 Files and hashes: 1: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: sh1jQF8OjP4HVzpbXeWoqC48jFwBVltZpXqe6L4/BAw=) 2: Yrt_BouTpfD_-Lptb2QjKUeabDQ.roa (hash: RVwFt2z75ZWHxQq8Pa0dw4qlC4U1TJ+Gtxhhest4JkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:bc:8e:68:67:a0:7f:64:84:d9:2c:ef:64:a7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da Validity Not Before: Dec 13 19:01:19 2025 GMT Not After : Dec 14 19:01:19 2025 GMT Subject: CN=5e5d5c94f47468bf840e2f0cc67a17ba2eea1a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:7c:cd:c1:01:3e:d8:ba:fb:16:c0:42:31: b7:49:8b:0f:d9:ab:a0:bf:17:74:41:fd:30:1a:69: 6d:e3:e8:f3:6f:2a:ef:89:dd:61:f2:25:74:1a:d3: 05:0e:7c:16:99:35:e3:b2:da:a3:da:8d:3e:57:84: 23:d4:c7:e4:8a:cd:92:c5:91:f2:3d:28:02:89:de: 0e:66:26:49:48:ea:73:5c:9e:e4:9d:2c:c5:9b:ff: 5b:5f:e4:a5:3d:ce:d0:eb:5a:10:01:47:81:06:7f: 6c:a1:e3:14:4f:6e:39:b0:f3:d6:ce:d9:55:59:07: 9a:76:e2:8c:57:dc:18:41:65:06:b0:49:64:c6:ea: ef:32:7d:2f:e0:8a:98:d7:5d:93:88:89:d0:d0:2b: 93:31:c3:0a:af:b5:e6:56:36:46:0e:da:d0:b9:b1: de:c9:dd:cf:79:78:65:ef:5c:80:99:28:b6:e2:b4: 77:8e:f7:33:ca:de:d4:79:03:06:cd:aa:36:9f:50: 58:eb:33:c0:50:23:4a:89:ed:8f:82:5b:f7:12:c6: e2:c7:17:66:aa:a2:53:c8:d9:ae:de:b8:e0:09:b9: e5:21:4f:e8:2b:d5:38:4d:5d:60:ff:f0:62:f8:63: e3:44:cf:99:04:04:f6:6b:cb:b8:df:a8:41:58:1f: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5D:5C:94:F4:74:68:BF:84:0E:2F:0C:C6:7A:17:BA:2E:EA:1A:62 X509v3 Authority Key Identifier: keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:50:0f:11:b2:84:dd:49:5c:f0:b8:15:a9:2c:be:b2:4d:fe: 0e:67:c3:8f:f5:0c:e1:9c:e6:ab:d8:bc:3b:30:2a:91:d8:20: f9:84:83:db:9b:06:55:a8:d8:f0:93:b6:62:5c:fd:f8:95:1c: 0a:f6:67:d0:1c:7b:7a:fa:10:68:3f:56:1e:25:73:13:e9:cf: 66:20:6f:34:99:fb:1d:c5:b7:66:19:f5:0f:4e:f9:d7:24:81: b2:1a:26:99:c7:7f:4f:45:99:28:b9:a1:31:4f:e5:cb:26:71: 01:bc:b5:44:08:90:82:f8:03:32:07:bd:fe:08:06:4f:0b:5f: 3c:59:32:ae:38:05:cc:c1:d3:d7:46:b5:89:c5:29:93:61:a9: 82:7e:ac:3f:0c:9b:70:05:7c:6f:01:d5:be:8b:6e:97:66:ad: 52:79:46:8d:43:0c:16:8d:57:2b:ac:5e:60:98:9c:e5:c2:7f: 5c:fa:07:31:5f:04:09:a0:ec:65:b5:bb:a4:94:5d:7a:af:0f: 7b:03:1e:35:da:1f:4b:6e:9b:48:0b:f4:7a:15:1c:6e:f9:2e: 3d:8b:8e:59:d9:37:bf:2a:cd:bd:75:48:fb:53:99:49:6e:e3: 67:6f:16:fc:f4:46:5a:93:e9:1b:70:71:f1:d4:c1:0f:2d:e6: 08:73:9a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFryOaGegf2SE2SzvZKdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMDk3M2MxZjQ0M2VjNGE4Mzg3YWFkN2FjYTc1ZDA3YjZm YWE5ZGEwHhcNMjUxMjEzMTkwMTE5WhcNMjUxMjE0MTkwMTE5WjAzMTEwLwYDVQQD Eyg1ZTVkNWM5NGY0NzQ2OGJmODQwZTJmMGNjNjdhMTdiYTJlZWExYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1V8zcEBPti6+xbAQjG3SYsP2aug vxd0Qf0wGmlt4+jzbyrvid1h8iV0GtMFDnwWmTXjstqj2o0+V4Qj1Mfkis2SxZHy PSgCid4OZiZJSOpzXJ7knSzFm/9bX+SlPc7Q61oQAUeBBn9soeMUT245sPPWztlV WQeaduKMV9wYQWUGsElkxurvMn0v4IqY112TiInQ0CuTMcMKr7XmVjZGDtrQubHe yd3PeXhl71yAmSi24rR3jvczyt7UeQMGzao2n1BY6zPAUCNKie2Pglv3Esbixxdm qqJTyNmu3rjgCbnlIU/oK9U4TV1g//Bi+GPjRM+ZBAT2a8u436hBWB+GswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5dXJT0dGi/hA4vDMZ6F7ou6hpiMB8GA1UdIwQY MBaAFEoJc8H0Q+xKg4eq16ynXQe2+qnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMt MTIxNzcyOWFmMWM4LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMtMTIxNzcyOWFmMWM4 LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlAPEbKE 3Ulc8LgVqSy+sk3+DmfDj/UM4Zzmq9i8OzAqkdgg+YSD25sGVajY8JO2Ylz9+JUc CvZn0Bx7evoQaD9WHiVzE+nPZiBvNJn7HcW3Zhn1D0751ySBshommcd/T0WZKLmh MU/lyyZxAby1RAiQgvgDMge9/ggGTwtfPFkyrjgFzMHT10a1icUpk2Gpgn6sPwyb cAV8bwHVvotul2atUnlGjUMMFo1XK6xeYJic5cJ/XPoHMV8ECaDsZbW7pJRdeq8P ewMeNdofS26bSAv0ehUcbvkuPYuOWdk3vyrNvXVI+1OZSW7jZ28W/PRGWpPpG3Bx 8dTBDy3mCHOaig== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:52 2025 by rpki-client