This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json) Hash identifier: PPxrYHSDRiIVZnTDEWoN7faSEUQ8XNqtL1E6wOYPZNk= Subject key identifier: BC:13:2D:3B:D5:BB:CB:51:16:E7:99:5C:47:3F:B4:E5:E1:89:8B:82 Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c Certificate serial: 019B5976B881366C34DC31EBB241C01A772C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft Manifest number: 106C Signing time: Fri 26 Dec 2025 07:01:51 +0000 Manifest this update: Fri 26 Dec 2025 07:01:51 +0000 Manifest next update: Sat 27 Dec 2025 07:01:51 +0000 Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=) 2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: fSXKUYEtFt7L4yuAOz+15XUZJ2xskGSGUiXZIl0qrJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:b8:81:36:6c:34:dc:31:eb:b2:41:c0:1a:77:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c Validity Not Before: Dec 26 07:01:51 2025 GMT Not After : Dec 27 07:01:51 2025 GMT Subject: CN=bc132d3bd5bbcb5116e7995c473fb4e5e1898b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:0f:34:c9:e5:ca:b2:d8:a4:7f:3b:5e:74: 3a:de:74:68:91:fa:c8:1b:41:ad:04:ea:89:5f:70: 85:80:ff:bc:94:d2:91:90:32:54:3a:3b:89:77:2e: e3:48:e2:ca:4d:0e:93:da:cd:fe:ed:3a:55:dd:8e: 28:93:b6:6f:8c:62:76:c7:b7:9e:85:16:53:df:ec: 0e:62:cb:08:2e:4b:52:36:c5:fe:a9:b1:b3:5b:cd: f1:d8:57:33:68:fb:ba:cd:54:58:fd:c4:9e:3f:9b: 1e:d3:6c:28:72:7d:e7:15:d9:42:06:6d:08:df:89: 96:a9:0c:86:91:e9:dd:75:fe:d5:cd:79:36:90:ec: 04:99:83:45:f7:f9:fd:01:10:bb:9f:2c:57:9b:1e: dc:e6:1f:4e:55:d0:d4:aa:72:f5:1b:1c:42:ae:2c: 54:37:39:b9:aa:b9:1c:eb:28:bf:cd:b2:06:76:cc: 25:ed:0d:63:a4:db:21:19:f1:31:6d:fd:a0:16:bb: 23:62:f3:50:24:59:97:6a:73:e5:0a:89:70:ba:ef: 25:52:48:b5:fc:e0:47:20:9c:71:f9:d5:f2:6e:14: 14:65:b9:a7:99:12:b5:d5:00:d4:4b:83:59:df:c1: e5:0b:90:78:33:3d:ac:fa:1a:07:fa:2b:60:20:93: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:13:2D:3B:D5:BB:CB:51:16:E7:99:5C:47:3F:B4:E5:E1:89:8B:82 X509v3 Authority Key Identifier: keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e9:35:a6:99:95:de:53:d6:ee:4f:cc:23:3f:59:75:1f:d5: dd:bf:2d:ad:3e:63:8e:9b:9f:96:77:21:d3:e9:c3:01:c9:41: 53:b7:79:61:8a:06:60:ce:3f:73:b8:d0:21:14:95:b5:24:bd: 56:a1:c3:28:63:b1:ab:0e:0c:0f:56:a8:f9:34:24:fe:7d:9d: 7c:bd:47:e7:fa:2d:d5:bd:8b:46:db:27:6c:bf:43:46:65:bc: 6a:2a:b6:64:23:c7:f4:16:e2:c3:01:ea:90:70:35:36:6a:36: 4d:af:f8:38:19:41:79:5d:e0:cb:18:5a:37:fe:59:67:36:81: 01:e1:b6:1e:25:11:84:74:89:96:1a:58:98:ff:17:9a:fe:f0: 4a:0d:d7:a7:2e:77:f7:4f:35:fc:1d:f7:c4:ea:b1:ef:72:1a: 8c:dd:16:f6:5e:86:b4:7f:e8:1e:92:04:a8:1e:d4:0e:26:07: 55:51:4e:dd:d6:02:b5:4f:16:4e:f8:3d:37:f2:a8:a1:91:dd: 20:04:e3:c0:df:d5:d7:ab:11:e8:65:7f:fe:5c:d7:cc:51:65: 08:10:68:f4:6d:77:d7:c6:7f:df:2b:1f:ea:15:12:2c:3d:cf: 25:fd:29:c0:b7:5b:d2:5d:c4:b7:6b:48:06:f4:f4:42:64:4a: dd:e2:b3:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdriBNmw03DHrskHAGncsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2 MjUzNmMwHhcNMjUxMjI2MDcwMTUxWhcNMjUxMjI3MDcwMTUxWjAzMTEwLwYDVQQD EyhiYzEzMmQzYmQ1YmJjYjUxMTZlNzk5NWM0NzNmYjRlNWUxODk4YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB0PNMnlyrLYpH87XnQ63nRokfrI G0GtBOqJX3CFgP+8lNKRkDJUOjuJdy7jSOLKTQ6T2s3+7TpV3Y4ok7ZvjGJ2x7ee hRZT3+wOYssILktSNsX+qbGzW83x2FczaPu6zVRY/cSeP5se02wocn3nFdlCBm0I 34mWqQyGkenddf7VzXk2kOwEmYNF9/n9ARC7nyxXmx7c5h9OVdDUqnL1GxxCrixU Nzm5qrkc6yi/zbIGdswl7Q1jpNshGfExbf2gFrsjYvNQJFmXanPlColwuu8lUki1 /OBHIJxx+dXybhQUZbmnmRK11QDUS4NZ38HlC5B4Mz2s+hoH+itgIJPxZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwTLTvVu8tRFueZXEc/tOXhiYuCMB8GA1UdIwQY MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5 LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+k1ppmV 3lPW7k/MIz9ZdR/V3b8trT5jjpuflnch0+nDAclBU7d5YYoGYM4/c7jQIRSVtSS9 VqHDKGOxqw4MD1ao+TQk/n2dfL1H5/ot1b2LRtsnbL9DRmW8aiq2ZCPH9BbiwwHq kHA1Nmo2Ta/4OBlBeV3gyxhaN/5ZZzaBAeG2HiURhHSJlhpYmP8Xmv7wSg3Xpy53 9081/B33xOqx73IajN0W9l6GtH/oHpIEqB7UDiYHVVFO3dYCtU8WTvg9N/KooZHd IATjwN/V16sR6GV//lzXzFFlCBBo9G1318Z/3ysf6hUSLD3PJf0pwLdb0l3Et2tI BvT0QmRK3eKzWg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:28 2025 by rpki-client