This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft File: sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json) Hash identifier: peF7JoEaWRuwBIlELNhZ8fyvu6geLKSnHk4/a8uNQmg= Subject key identifier: 09:E1:6C:38:F0:E7:BD:76:4E:1B:B9:86:6E:2E:47:5E:6B:2C:85:BD Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 Certificate issuer: /CN=b092c2c2350c590a4483fd44f250a77feeaab296 Certificate serial: 019B56E30382B1E653B3461774777EAF0608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft Manifest number: 073B Signing time: Thu 25 Dec 2025 19:01:16 +0000 Manifest this update: Thu 25 Dec 2025 19:01:16 +0000 Manifest next update: Fri 26 Dec 2025 19:01:16 +0000 Files and hashes: 1: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: EO/MEosFjKZ6UQ36//AI5s3YkaKNBRVVSyRV5RI3a4U=) 2: xPs0nDJe3R7-T_MTjBUDCpVD-P0.roa (hash: +ghVSq1vvvNC/Tdx1esVzP21pV4gSI94aIDbxITlk7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e3:03:82:b1:e6:53:b3:46:17:74:77:7e:af:06:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296 Validity Not Before: Dec 25 19:01:16 2025 GMT Not After : Dec 26 19:01:16 2025 GMT Subject: CN=09e16c38f0e7bd764e1bb9866e2e475e6b2c85bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:1c:7b:f5:b4:08:4b:5c:00:63:ee:0f:63: b6:a9:c4:38:75:26:d5:90:e2:6f:1e:a4:8f:69:4f: df:7b:1f:f4:f4:61:7b:56:b6:54:01:de:4b:eb:e8: 20:c4:e7:42:40:29:b1:52:b7:0b:da:24:33:c4:41: 40:4f:22:84:f1:35:c7:e4:7d:3e:8f:93:16:61:e3: 9c:49:ed:14:d1:a2:11:3c:9a:4a:6d:40:71:c8:a8: 0b:5f:ad:8c:e2:c7:1a:4e:27:b3:ab:94:ef:72:f4: b6:2b:ae:cf:70:28:94:8b:c3:76:e2:fa:05:b0:ed: ca:bb:91:f4:b3:ce:46:f9:2b:00:c3:f2:7d:2b:ff: d1:08:46:d5:21:d5:06:3c:3d:4c:db:b0:b4:99:43: 92:e6:db:84:fb:9a:7e:a3:da:02:9d:7d:19:9e:e3: fb:e3:54:0b:4f:03:b7:f5:fd:a3:3a:e9:b5:9f:c9: 5d:8f:70:2e:6e:2b:fb:46:8d:9d:a4:cc:f2:eb:d8: ad:a6:0b:8d:a4:5f:23:bd:a4:96:ae:7d:6c:85:be: 71:1f:16:35:61:06:84:d4:66:87:82:e2:e2:95:7a: 27:7e:b3:2b:67:5e:e8:e8:6d:83:36:eb:b9:97:6b: 0f:68:95:97:e6:e0:b5:84:ff:3a:63:12:79:f5:f2: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E1:6C:38:F0:E7:BD:76:4E:1B:B9:86:6E:2E:47:5E:6B:2C:85:BD X509v3 Authority Key Identifier: keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f5:97:d8:c7:91:1e:56:aa:d6:ae:dc:14:24:4f:3d:9b:ac: b9:b2:d6:40:4e:23:b4:16:70:c7:18:5d:c3:24:7f:a3:66:a7: b9:a1:aa:b0:1b:41:9a:01:2d:a9:51:79:e5:fe:b4:34:d2:c4: 73:63:57:75:18:75:e0:a1:7a:c1:14:52:0c:95:88:bb:d5:03: 84:bb:ca:1a:35:ce:4a:cf:41:13:b8:e9:c2:9d:82:b2:68:e9: 06:0a:e2:73:c5:af:c1:46:50:6b:cb:f3:4a:75:56:7b:16:41: 72:cd:44:7d:3e:c8:4b:05:fa:48:8b:6a:eb:b0:3b:f2:5a:60: 3a:c2:30:6d:a9:a5:a5:02:ec:62:40:76:df:77:7f:80:65:36: 7e:dd:02:f3:31:9a:44:91:36:54:82:11:e6:66:df:75:6c:61: db:3a:b2:19:ef:c8:d9:05:c3:18:29:75:c5:e1:35:1b:5b:3b: 1e:0a:9e:58:62:1b:d0:62:65:35:be:8a:39:62:71:5f:2f:a8: 8b:f6:1b:ef:8b:55:e6:3a:0d:92:72:d5:68:cc:e7:09:4a:8b: b3:e1:e2:dc:a4:38:88:f7:08:53:00:70:d1:55:3d:7f:98:59: 32:77:79:fd:fd:be:12:55:55:33:24:d7:67:d2:75:50:3c:7e: 5c:24:f7:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW4wOCseZTs0YXdHd+rwYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTJjMmMyMzUwYzU5MGE0NDgzZmQ0NGYyNTBhNzdmZWVh YWIyOTYwHhcNMjUxMjI1MTkwMTE2WhcNMjUxMjI2MTkwMTE2WjAzMTEwLwYDVQQD EygwOWUxNmMzOGYwZTdiZDc2NGUxYmI5ODY2ZTJlNDc1ZTZiMmM4NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPYce/W0CEtcAGPuD2O2qcQ4dSbV kOJvHqSPaU/fex/09GF7VrZUAd5L6+ggxOdCQCmxUrcL2iQzxEFATyKE8TXH5H0+ j5MWYeOcSe0U0aIRPJpKbUBxyKgLX62M4scaTiezq5TvcvS2K67PcCiUi8N24voF sO3Ku5H0s85G+SsAw/J9K//RCEbVIdUGPD1M27C0mUOS5tuE+5p+o9oCnX0ZnuP7 41QLTwO39f2jOum1n8ldj3Aubiv7Ro2dpMzy69itpguNpF8jvaSWrn1shb5xHxY1 YQaE1GaHguLilXonfrMrZ17o6G2DNuu5l2sPaJWX5uC1hP86YxJ59fL2cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnhbDjw5712Thu5hm4uR15rLIW9MB8GA1UdIwQY MBaAFLCSwsI1DFkKRIP9RPJQp3/uqrKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2Ut NDllYmViM2FmMGVhLzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2UtNDllYmViM2FmMGVh LzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevWX2MeR Hlaq1q7cFCRPPZusubLWQE4jtBZwxxhdwyR/o2anuaGqsBtBmgEtqVF55f60NNLE c2NXdRh14KF6wRRSDJWIu9UDhLvKGjXOSs9BE7jpwp2CsmjpBgric8WvwUZQa8vz SnVWexZBcs1EfT7ISwX6SItq67A78lpgOsIwbamlpQLsYkB233d/gGU2ft0C8zGa RJE2VIIR5mbfdWxh2zqyGe/I2QXDGCl1xeE1G1s7HgqeWGIb0GJlNb6KOWJxXy+o i/Yb74tV5joNknLVaMznCUqLs+Hi3KQ4iPcIUwBw0VU9f5hZMnd5/f2+ElVVMyTX Z9J1UDx+XCT3Ow== -----END CERTIFICATE-----Generated at Thu Dec 25 21:08:15 2025 by rpki-client