This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft File: sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json) Hash identifier: 2C9wS2OfGreTgPUSdYNmixG7KjXJ55QRcs6wBaGTpkQ= Subject key identifier: E1:AF:26:65:BB:1E:43:22:A3:86:8F:15:45:62:FD:6D:43:07:91:8C Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 Certificate issuer: /CN=b092c2c2350c590a4483fd44f250a77feeaab296 Certificate serial: 019B71EC5CBD216A9E5714F4CF039DC02CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft Manifest number: 0749 Signing time: Wed 31 Dec 2025 01:01:14 +0000 Manifest this update: Wed 31 Dec 2025 01:01:14 +0000 Manifest next update: Thu 01 Jan 2026 01:01:14 +0000 Files and hashes: 1: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: G1483akZJSrfgZhlegbQ63D6EqAB1ccmuMHHcwAGocY=) 2: xPs0nDJe3R7-T_MTjBUDCpVD-P0.roa (hash: +ghVSq1vvvNC/Tdx1esVzP21pV4gSI94aIDbxITlk7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:ec:5c:bd:21:6a:9e:57:14:f4:cf:03:9d:c0:2c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296 Validity Not Before: Dec 31 01:01:14 2025 GMT Not After : Jan 1 01:01:14 2026 GMT Subject: CN=e1af2665bb1e4322a3868f154562fd6d4307918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:f4:41:df:5c:5f:78:50:85:bb:a5:00:8b: 3f:3e:b9:72:50:e8:2c:49:24:61:50:02:d8:45:b4: ad:94:25:10:37:ee:bd:80:4e:b4:76:77:e4:3f:e9: a4:26:a1:fb:c3:51:04:fd:b4:76:2a:ad:c3:db:db: 09:89:ed:57:fd:a5:eb:99:82:26:eb:57:ce:e4:f9: fe:e5:fb:5b:c0:2e:4d:fe:92:e8:1c:0f:eb:1c:f9: 0c:5e:f5:9b:ec:a2:52:e2:ca:20:5e:63:a0:61:8b: d0:9a:78:bb:c5:8d:e3:3d:90:b9:ad:25:97:7e:cd: 34:46:e8:1d:50:4b:5e:2b:6a:3c:91:b4:6b:dc:fb: 4d:31:e1:87:d6:99:45:c3:53:f1:47:23:00:81:70: fd:88:fb:0c:bd:0c:8b:31:1c:c5:62:40:17:7c:a5: a3:8b:56:f2:bd:eb:2f:73:bd:e1:53:fe:a0:5a:72: 3c:36:32:a8:21:52:e8:26:a5:75:b7:be:bc:41:96: 6e:0a:40:c9:05:43:84:99:18:7f:d1:49:85:38:6b: 10:52:d0:9a:a3:9d:5f:d0:7f:a0:e4:2e:40:2e:49: 4e:a0:00:20:0c:cd:ca:57:63:a0:ec:2d:be:9b:c8: e3:d8:d4:1d:fe:0d:e6:1d:51:37:d9:2f:fc:06:48: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:26:65:BB:1E:43:22:A3:86:8F:15:45:62:FD:6D:43:07:91:8C X509v3 Authority Key Identifier: keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:27:f1:4a:f2:b7:1e:1d:1f:e3:3a:3b:36:d2:d5:49:58:83: 7f:d1:90:2c:79:c3:96:ab:3b:19:a1:a1:89:08:d3:51:bf:d9: d6:f7:3f:8e:ae:67:65:fa:7a:eb:dd:bf:8e:9f:76:dd:9e:e2: c2:8f:2b:27:58:b6:12:51:3c:e9:ea:a1:99:af:de:87:af:99: 5a:7f:d0:ee:80:64:b5:4b:35:04:ab:ed:aa:22:37:5e:b2:82: 61:2b:a2:7e:9c:f5:23:ae:00:bd:ee:97:99:23:0f:a8:53:e9: c1:0e:0a:c4:17:cc:0c:fd:0a:c7:df:70:75:4e:be:71:ef:2b: 8b:3b:eb:df:71:19:47:f0:d9:c4:2c:e6:f7:49:0c:46:a3:bb: d9:cd:db:9e:b2:bb:23:c1:d6:a6:d2:05:d3:76:55:51:54:0f: 6e:8c:4c:6b:a8:94:5b:56:d6:7d:e6:de:d2:f2:bb:53:4e:45: d4:2c:cb:9f:54:65:61:80:f1:bb:0e:32:a6:96:2b:e4:b4:23: 5a:a6:c4:53:a3:16:c1:8e:9b:e7:0a:2a:6e:5d:d8:16:89:b5: a2:91:fe:e6:09:38:05:02:bc:c5:b5:f3:4b:70:18:cf:2a:4d: 39:08:f5:72:24:83:53:18:bb:c8:54:88:72:81:e1:71:be:e7: c0:c0:ff:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx7Fy9IWqeVxT0zwOdwCy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTJjMmMyMzUwYzU5MGE0NDgzZmQ0NGYyNTBhNzdmZWVh YWIyOTYwHhcNMjUxMjMxMDEwMTE0WhcNMjYwMTAxMDEwMTE0WjAzMTEwLwYDVQQD EyhlMWFmMjY2NWJiMWU0MzIyYTM4NjhmMTU0NTYyZmQ2ZDQzMDc5MThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytP0Qd9cX3hQhbulAIs/PrlyUOgs SSRhUALYRbStlCUQN+69gE60dnfkP+mkJqH7w1EE/bR2Kq3D29sJie1X/aXrmYIm 61fO5Pn+5ftbwC5N/pLoHA/rHPkMXvWb7KJS4sogXmOgYYvQmni7xY3jPZC5rSWX fs00RugdUEteK2o8kbRr3PtNMeGH1plFw1PxRyMAgXD9iPsMvQyLMRzFYkAXfKWj i1byvesvc73hU/6gWnI8NjKoIVLoJqV1t768QZZuCkDJBUOEmRh/0UmFOGsQUtCa o51f0H+g5C5ALklOoAAgDM3KV2Og7C2+m8jj2NQd/g3mHVE32S/8BkgBswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGvJmW7HkMio4aPFUVi/W1DB5GMMB8GA1UdIwQY MBaAFLCSwsI1DFkKRIP9RPJQp3/uqrKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2Ut NDllYmViM2FmMGVhLzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2UtNDllYmViM2FmMGVh LzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyfxSvK3 Hh0f4zo7NtLVSViDf9GQLHnDlqs7GaGhiQjTUb/Z1vc/jq5nZfp6692/jp923Z7i wo8rJ1i2ElE86eqhma/eh6+ZWn/Q7oBktUs1BKvtqiI3XrKCYSuifpz1I64Ave6X mSMPqFPpwQ4KxBfMDP0Kx99wdU6+ce8rizvr33EZR/DZxCzm90kMRqO72c3bnrK7 I8HWptIF03ZVUVQPboxMa6iUW1bWfebe0vK7U05F1CzLn1RlYYDxuw4yppYr5LQj WqbEU6MWwY6b5woqbl3YFom1opH+5gk4BQK8xbXzS3AYzypNOQj1ciSDUxi7yFSI coHhcb7nwMD/0Q== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:28 2025 by rpki-client