This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json) Hash identifier: NjGGyxgDN+FEtxWc7bIuv82hGZiGCBWg8oQq9djVVf0= Subject key identifier: 22:35:DA:18:8A:3E:E5:0D:1E:90:F3:32:6F:65:9A:FC:B9:95:F6:D9 Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Certificate serial: 019B1013EC0E07F95CD8C30756087D9C6EA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft Manifest number: 1704 Signing time: Fri 12 Dec 2025 01:01:39 +0000 Manifest this update: Fri 12 Dec 2025 01:01:39 +0000 Manifest next update: Sat 13 Dec 2025 01:01:39 +0000 Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: F72zhsxaTn5Xa6zYp8V1ZmJ50SjlkBlt8+b2CxwC4Xo=) 2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=) 3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:ec:0e:07:f9:5c:d8:c3:07:56:08:7d:9c:6e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Validity Not Before: Dec 12 01:01:39 2025 GMT Not After : Dec 13 01:01:39 2025 GMT Subject: CN=2235da188a3ee50d1e90f3326f659afcb995f6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:cc:cc:86:ac:62:e3:85:8b:fb:7b:0f:5e: d7:17:da:38:63:d7:e4:ad:ce:76:64:2e:ab:fd:a1: 40:c4:89:cd:9e:a9:90:b7:99:a7:2f:b7:a8:bd:54: 38:26:1a:9a:92:91:c4:2b:73:3a:44:59:bd:2b:b4: cf:b1:34:a1:14:76:b4:13:3b:54:47:63:bb:06:7c: d3:1c:7b:f1:86:aa:68:f5:0b:6f:f7:92:61:02:cd: 4a:6e:38:01:54:21:4b:95:ef:46:70:77:6c:dd:9c: 40:80:eb:b6:18:62:ef:26:65:fd:e5:8c:01:b0:be: 06:4b:ed:a3:53:56:ad:55:93:ed:ba:37:40:58:dd: 1a:a2:58:b5:02:ec:64:56:01:9e:82:33:8a:51:a9: 2f:a8:65:d1:17:84:30:d4:3c:c7:e6:43:4d:20:97: 29:93:4a:5a:5f:19:a4:57:90:e5:90:1a:b3:ca:3b: a0:90:c5:f9:4e:0f:bb:e7:b6:48:e9:47:94:54:d9: dd:82:14:bf:1f:9f:8c:2f:e0:13:08:89:c7:5f:6c: bb:df:a7:aa:94:b8:3d:6f:fc:55:c2:b5:75:ae:83: 50:b2:d4:28:0b:34:89:2b:e3:bf:eb:e6:1d:00:59: c4:f0:3f:f1:2f:a5:85:bc:28:f9:04:5e:82:e1:89: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:DA:18:8A:3E:E5:0D:1E:90:F3:32:6F:65:9A:FC:B9:95:F6:D9 X509v3 Authority Key Identifier: keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:37:99:94:3a:19:f7:aa:79:af:61:75:f9:4e:f0:73:77:92: 5e:0e:e1:d9:8b:d1:09:f5:6f:13:82:a4:c7:1d:d1:b2:e6:45: 61:57:fa:06:21:fb:71:b3:1f:aa:8a:50:eb:86:6e:f5:c6:f4: 36:64:62:a7:3d:5b:86:b8:90:ec:3c:46:73:d4:9a:62:d2:fa: 63:6a:35:0b:58:fe:e0:c1:1f:27:aa:55:69:73:8a:ec:9b:6a: c9:90:ae:a7:5d:97:ff:5a:88:bf:e0:a2:9b:84:62:50:8a:69: fc:67:32:5f:08:ca:8a:9d:7c:e4:1e:33:68:fa:27:81:a7:62: a9:d2:1b:a9:a1:b7:56:49:e1:fc:35:ce:58:ff:6d:67:9a:75: d1:80:ef:0d:2b:9d:9d:33:e4:6a:04:7b:5f:81:c3:51:35:b3: b7:4c:9c:dd:dd:3b:b5:67:d2:ed:a1:2b:6d:9b:82:b1:3a:0d: 17:18:aa:ae:ec:73:f3:c5:d7:82:d5:00:14:b8:af:7c:fa:b9: a7:b4:15:54:90:b1:6e:65:e0:e9:74:63:5a:74:4f:62:d2:a2: 5b:b9:c1:e7:ee:9c:5e:df:8e:8b:d2:2a:d4:57:92:a5:62:dc: 80:25:11:27:23:29:91:88:4c:08:a4:88:33:7f:52:70:c9:fe: 59:25:46:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE+wOB/lc2MMHVgh9nG6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx MWUyMmEwHhcNMjUxMjEyMDEwMTM5WhcNMjUxMjEzMDEwMTM5WjAzMTEwLwYDVQQD EygyMjM1ZGExODhhM2VlNTBkMWU5MGYzMzI2ZjY1OWFmY2I5OTVmNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaHMzIasYuOFi/t7D17XF9o4Y9fk rc52ZC6r/aFAxInNnqmQt5mnL7eovVQ4JhqakpHEK3M6RFm9K7TPsTShFHa0EztU R2O7BnzTHHvxhqpo9Qtv95JhAs1KbjgBVCFLle9GcHds3ZxAgOu2GGLvJmX95YwB sL4GS+2jU1atVZPtujdAWN0aoli1AuxkVgGegjOKUakvqGXRF4Qw1DzH5kNNIJcp k0paXxmkV5DlkBqzyjugkMX5Tg+757ZI6UeUVNndghS/H5+ML+ATCInHX2y736eq lLg9b/xVwrV1roNQstQoCzSJK+O/6+YdAFnE8D/xL6WFvCj5BF6C4YmcwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI12hiKPuUNHpDzMm9lmvy5lfbZMB8GA1UdIwQY MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0 LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETeZlDoZ 96p5r2F1+U7wc3eSXg7h2YvRCfVvE4Kkxx3RsuZFYVf6BiH7cbMfqopQ64Zu9cb0 NmRipz1bhriQ7DxGc9SaYtL6Y2o1C1j+4MEfJ6pVaXOK7JtqyZCup12X/1qIv+Ci m4RiUIpp/GcyXwjKip185B4zaPongadiqdIbqaG3Vknh/DXOWP9tZ5p10YDvDSud nTPkagR7X4HDUTWzt0yc3d07tWfS7aErbZuCsToNFxiqruxz88XXgtUAFLivfPq5 p7QVVJCxbmXg6XRjWnRPYtKiW7nB5+6cXt+Oi9Iq1FeSpWLcgCURJyMpkYhMCKSI M39ScMn+WSVGGA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:43 2025 by rpki-client