This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json) Hash identifier: clyM52zrkhdoARHm6cj3DPPJPegUg57jEIGH8HhNPUc= Subject key identifier: 47:E7:D4:D9:0D:84:70:E9:7E:CD:8E:E2:2E:B7:1E:1C:27:5E:3C:1F Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42 Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142 Certificate serial: 019B1803B1D7664BE8EBF00E70A16B01C7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft Manifest number: 02F2 Signing time: Sat 13 Dec 2025 14:00:53 +0000 Manifest this update: Sat 13 Dec 2025 14:00:53 +0000 Manifest next update: Sun 14 Dec 2025 14:00:53 +0000 Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=) 2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: dORwuVt0bBQuSnlFGtzoQH+NOEGOKYtVWWdorBcDlgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:03:b1:d7:66:4b:e8:eb:f0:0e:70:a1:6b:01:c7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142 Validity Not Before: Dec 13 14:00:53 2025 GMT Not After : Dec 14 14:00:53 2025 GMT Subject: CN=47e7d4d90d8470e97ecd8ee22eb71e1c275e3c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:8c:0d:71:71:57:03:81:1a:08:f9:4f:60: 8b:85:25:d8:5c:52:e4:c1:6f:74:32:ea:c3:ff:44: a2:54:f8:3f:13:ed:89:e6:4f:7f:be:5c:bd:21:a2: ba:30:16:37:52:c3:27:db:23:68:95:1e:54:52:4a: e7:b7:dc:12:f1:b1:85:d6:b3:e4:76:a8:26:0c:6d: be:ff:20:67:22:56:b7:01:99:9e:df:30:62:53:70: d0:d0:25:ea:1c:c0:04:03:55:1c:e2:23:b5:da:b0: 26:fe:ea:03:98:9e:02:a5:b0:4e:56:98:10:8f:68: 77:b3:24:d2:ac:e5:ee:ab:df:32:7b:5e:fd:53:0a: 97:e2:d1:f9:ed:be:b5:85:b4:5f:74:3a:3c:97:68: ab:0b:e0:9e:f6:2a:7d:4f:60:5b:24:6e:40:11:0c: 40:8f:bb:fb:b3:ed:c6:ce:85:49:6a:6e:09:25:41: 53:d9:50:0a:b6:8b:d9:d0:d9:3e:f4:76:91:b2:27: 19:12:53:40:73:05:fa:f2:f6:13:fd:99:5b:2f:bd: 1f:8a:5e:41:e2:2d:9c:e9:fa:31:41:84:73:7f:f6: ef:fc:55:cf:55:5a:92:b4:50:4c:3c:ab:e2:be:2f: 7a:99:ea:e0:51:2b:96:da:61:83:67:6f:c2:55:0e: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E7:D4:D9:0D:84:70:E9:7E:CD:8E:E2:2E:B7:1E:1C:27:5E:3C:1F X509v3 Authority Key Identifier: keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b3:31:fb:75:4d:be:e4:99:a0:61:5e:66:eb:43:91:48:0f: 5d:95:f9:22:91:0d:77:d0:70:1b:09:b4:3c:23:dc:10:b2:15: a6:36:c5:b9:9f:2e:1b:f5:e0:bf:97:c4:b0:7d:3a:14:11:4c: 07:3a:48:fa:19:72:e6:14:b3:29:3b:2e:76:83:fc:ed:2b:83: 97:fe:7f:da:b2:2c:5d:60:c2:8c:60:14:d7:ec:b1:41:e4:2f: a4:f2:73:5f:4e:e4:ea:82:ab:df:af:ec:2c:72:bf:cf:d3:b5: fc:64:b7:8c:45:e5:8e:23:78:17:36:08:52:f3:51:27:1c:0b: 03:1c:a3:30:45:00:aa:de:c4:9b:90:37:eb:ce:03:ab:a6:2b: a9:63:09:84:21:4d:89:11:1b:7d:d7:56:7f:e9:d0:9e:44:96: 6e:be:f7:59:65:14:e1:c8:c4:3b:da:6d:e3:0e:4a:de:3f:49: 98:60:68:f7:ea:07:12:41:b8:9d:23:e9:77:7a:8a:2f:79:c5: 5f:69:4f:75:c7:00:d5:97:cc:36:4e:13:43:d2:dd:ae:54:54: e6:1c:79:3f:00:32:a8:29:59:78:5a:4a:f8:1a:07:65:33:16: 1f:ac:b4:53:9b:42:04:af:f3:fa:24:3b:46:5b:1f:b3:24:1a: 88:62:68:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYA7HXZkvo6/AOcKFrAcfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Njg4OWNlNGViNGZkNzQ3ODE4MjQ4Mzk1ZGU1ZmI5M2Qx ZmUxNDIwHhcNMjUxMjEzMTQwMDUzWhcNMjUxMjE0MTQwMDUzWjAzMTEwLwYDVQQD Eyg0N2U3ZDRkOTBkODQ3MGU5N2VjZDhlZTIyZWI3MWUxYzI3NWUzYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuaMDXFxVwOBGgj5T2CLhSXYXFLk wW90MurD/0SiVPg/E+2J5k9/vly9IaK6MBY3UsMn2yNolR5UUkrnt9wS8bGF1rPk dqgmDG2+/yBnIla3AZme3zBiU3DQ0CXqHMAEA1Uc4iO12rAm/uoDmJ4CpbBOVpgQ j2h3syTSrOXuq98ye179UwqX4tH57b61hbRfdDo8l2irC+Ce9ip9T2BbJG5AEQxA j7v7s+3GzoVJam4JJUFT2VAKtovZ0Nk+9HaRsicZElNAcwX68vYT/ZlbL70fil5B 4i2c6foxQYRzf/bv/FXPVVqStFBMPKvivi96mergUSuW2mGDZ2/CVQ5TVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfn1NkNhHDpfs2O4i63HhwnXjwfMB8GA1UdIwQY MBaAFEhoic5OtP10eBgkg5XeX7k9H+FCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGIt YzEzNjQwNWI3YmI3LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGItYzEzNjQwNWI3YmI3 LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7Mx+3VN vuSZoGFeZutDkUgPXZX5IpENd9BwGwm0PCPcELIVpjbFuZ8uG/Xgv5fEsH06FBFM BzpI+hly5hSzKTsudoP87SuDl/5/2rIsXWDCjGAU1+yxQeQvpPJzX07k6oKr36/s LHK/z9O1/GS3jEXljiN4FzYIUvNRJxwLAxyjMEUAqt7Em5A3684Dq6YrqWMJhCFN iREbfddWf+nQnkSWbr73WWUU4cjEO9pt4w5K3j9JmGBo9+oHEkG4nSPpd3qKL3nF X2lPdccA1ZfMNk4TQ9LdrlRU5hx5PwAyqClZeFpK+BoHZTMWH6y0U5tCBK/z+iQ7 RlsfsyQaiGJoww== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:25 2025 by rpki-client