This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft File: cgSGQdj3M3_OojrlMyv24RoR4io.mft (raw, json) Hash identifier: tHswoRJvqgMCkexnenwj3rlVxTUzpVgqs0cPkO/XGHY= Subject key identifier: 67:28:7A:6F:CE:3D:58:B6:B9:67:C0:B1:5C:CA:54:E7:64:D2:3B:60 Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Certificate serial: 019B32D6E004E2C4E28CA11C8A2253C9BFC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft Manifest number: 1716 Signing time: Thu 18 Dec 2025 19:01:41 +0000 Manifest this update: Thu 18 Dec 2025 19:01:41 +0000 Manifest next update: Fri 19 Dec 2025 19:01:41 +0000 Files and hashes: 1: cgSGQdj3M3_OojrlMyv24RoR4io.crl (hash: crlvqowsaXBMBGh9OSxabcv+GxCrp/gj9UOixx0hQw0=) 2: sUXI8TEl0_EY0ny0x2wUIGHfWtE.roa (hash: y40VhKX08V6Hbbb8okckM0BO+zcqTzGVyeXyeWjcSiQ=) 3: tMYXOdnmuKHyDHkYDVLVB3_EAgw.roa (hash: l/OWxGu+A9pYLrvKC/LSFt5QWYXmuwVXAc7ihnHF4OE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:e0:04:e2:c4:e2:8c:a1:1c:8a:22:53:c9:bf:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Validity Not Before: Dec 18 19:01:41 2025 GMT Not After : Dec 19 19:01:41 2025 GMT Subject: CN=67287a6fce3d58b6b967c0b15cca54e764d23b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:8a:75:b7:54:cb:46:59:6a:d2:37:b2:20: f8:2c:ab:5b:5b:4b:20:2e:20:ad:05:34:8d:67:7e: 22:b5:3a:5f:62:23:94:3c:bf:a1:2e:bc:20:a6:ea: 77:d2:49:4b:c0:3b:a2:76:9f:c4:eb:0e:81:5f:4c: 8f:35:ed:2b:8c:ab:e9:ce:e3:be:13:52:db:cc:c9: be:fe:bb:7a:52:1c:4d:7b:a6:90:3f:cb:af:65:4f: 87:98:5b:d0:2c:ae:ee:2e:af:a5:5b:33:72:d1:6b: 95:73:f6:1a:0d:d4:ec:c2:00:86:e5:28:99:cb:e3: 8b:b6:36:83:41:df:27:1e:05:98:a1:3d:ff:9b:67: 08:9e:a7:69:1d:9f:b0:f4:b7:e0:b3:a5:61:85:10: 6a:74:60:31:5f:40:49:b7:33:19:a1:f0:9e:72:aa: 4b:1d:39:1d:59:5f:cd:3c:3c:dd:37:d8:79:3b:79: bf:14:ac:60:08:c2:7a:72:24:6f:85:89:4b:b5:29: 0e:66:d3:e6:07:fa:bd:d0:89:44:19:e2:ca:82:64: 2f:2b:c5:a3:57:84:21:d8:c8:4a:9c:9b:ef:33:8a: 47:dc:33:a4:32:30:c5:cc:1c:a9:98:af:f6:c2:d1: 89:72:10:61:66:8d:f3:f8:16:19:6a:01:f2:26:91: b0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:7A:6F:CE:3D:58:B6:B9:67:C0:B1:5C:CA:54:E7:64:D2:3B:60 X509v3 Authority Key Identifier: keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f4:ea:2a:f0:09:3b:1a:bc:bf:84:09:1c:69:75:ad:bc:98: 10:b9:31:7c:cb:a7:1e:db:4e:63:7f:33:b3:85:bb:cb:f3:b4: da:c8:0d:ea:a8:11:d4:1e:75:b0:50:e3:ad:e8:4f:fc:85:a6: 34:75:6c:23:bc:c3:19:67:80:3d:4a:00:db:f8:6d:68:50:86: 8d:41:80:b9:1b:d8:82:d1:ed:15:2a:56:93:9c:9c:37:15:ef: 80:f1:00:ba:3a:68:7a:f7:9b:84:1c:20:2d:95:d3:fb:99:28: 1e:ea:34:c5:e8:fe:39:03:89:91:d3:f8:25:a9:f9:97:12:db: b4:17:a9:e0:a0:db:ab:fc:54:29:2f:10:59:17:86:3c:26:37: 01:47:a9:7f:a3:a1:79:dc:22:4d:04:21:3f:d0:01:77:79:44: 6b:54:be:31:6d:92:51:ba:7f:71:04:ac:1a:65:10:4d:f3:82: c1:4a:30:04:6f:34:e6:8b:76:b9:3e:5e:7b:30:51:e4:2d:75: 1e:89:1f:b9:13:d9:6a:4b:13:7d:62:de:b5:6e:45:6d:11:f2: 97:3d:c6:89:0e:a6:a0:24:16:23:aa:d7:d6:7a:11:1e:89:1c: 14:dd:49:70:16:6e:63:f8:dc:e3:7a:b0:3a:9d:e4:eb:d7:ed: 9c:2b:90:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uAE4sTijKEciiJTyb/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx MWUyMmEwHhcNMjUxMjE4MTkwMTQxWhcNMjUxMjE5MTkwMTQxWjAzMTEwLwYDVQQD Eyg2NzI4N2E2ZmNlM2Q1OGI2Yjk2N2MwYjE1Y2NhNTRlNzY0ZDIzYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEqKdbdUy0ZZatI3siD4LKtbW0sg LiCtBTSNZ34itTpfYiOUPL+hLrwgpup30klLwDuidp/E6w6BX0yPNe0rjKvpzuO+ E1LbzMm+/rt6UhxNe6aQP8uvZU+HmFvQLK7uLq+lWzNy0WuVc/YaDdTswgCG5SiZ y+OLtjaDQd8nHgWYoT3/m2cInqdpHZ+w9Lfgs6VhhRBqdGAxX0BJtzMZofCecqpL HTkdWV/NPDzdN9h5O3m/FKxgCMJ6ciRvhYlLtSkOZtPmB/q90IlEGeLKgmQvK8Wj V4Qh2MhKnJvvM4pH3DOkMjDFzBypmK/2wtGJchBhZo3z+BYZagHyJpGwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcoem/OPVi2uWfAsVzKVOdk0jtgMB8GA1UdIwQY MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt MWM4Y2Q1NmM2MTc0LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0 LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/TqKvAJ Oxq8v4QJHGl1rbyYELkxfMunHttOY38zs4W7y/O02sgN6qgR1B51sFDjrehP/IWm NHVsI7zDGWeAPUoA2/htaFCGjUGAuRvYgtHtFSpWk5ycNxXvgPEAujpoevebhBwg LZXT+5koHuo0xej+OQOJkdP4Jan5lxLbtBep4KDbq/xUKS8QWReGPCY3AUepf6Oh edwiTQQhP9ABd3lEa1S+MW2SUbp/cQSsGmUQTfOCwUowBG805ot2uT5eezBR5C11 HokfuRPZaksTfWLetW5FbRHylz3GiQ6moCQWI6rX1noRHokcFN1JcBZuY/jc43qw Op3k69ftnCuQRw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:48:53 2025 by rpki-client