This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft File: sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json) Hash identifier: LZRcDzOW0F0xV9mrM61EnUjL6cw9EOsnXL2H8twM+0Q= Subject key identifier: BB:66:AE:23:2B:A0:34:49:5F:82:5D:BA:1D:D8:A4:B5:61:6C:CE:D7 Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 Certificate issuer: /CN=b092c2c2350c590a4483fd44f250a77feeaab296 Certificate serial: 019B68449A20263FEDB5485469186ACE94F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft Manifest number: 0744 Signing time: Mon 29 Dec 2025 04:01:24 +0000 Manifest this update: Mon 29 Dec 2025 04:01:24 +0000 Manifest next update: Tue 30 Dec 2025 04:01:24 +0000 Files and hashes: 1: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: tl1lrR3Rthg31QapQBmvIdHBBE5lnWTOep3lI4BD6VE=) 2: xPs0nDJe3R7-T_MTjBUDCpVD-P0.roa (hash: +ghVSq1vvvNC/Tdx1esVzP21pV4gSI94aIDbxITlk7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:9a:20:26:3f:ed:b5:48:54:69:18:6a:ce:94:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296 Validity Not Before: Dec 29 04:01:24 2025 GMT Not After : Dec 30 04:01:24 2025 GMT Subject: CN=bb66ae232ba034495f825dba1dd8a4b5616cced7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:23:96:c6:fb:bd:f5:48:ba:54:0c:23:26: 82:d6:94:00:ab:90:9c:c9:e2:b5:da:fc:91:b1:29: c8:92:2a:f9:2b:cf:ed:e0:b6:84:6c:01:e7:43:a5: 8a:62:36:1d:9f:2a:cf:51:70:35:85:7d:dd:a1:7b: e0:91:94:99:41:30:e1:d7:20:ac:4d:73:0f:a7:5f: d2:5e:ca:b3:be:9a:1d:40:f1:00:09:9c:8e:88:00: 80:54:63:ce:f9:23:f9:6d:7e:ef:91:d2:e0:95:19: 52:8e:40:b1:31:64:26:d2:6f:09:e4:4e:ff:e3:1c: 78:0d:67:fc:e6:76:1c:30:5a:9c:5c:85:3f:cc:91: cc:66:f6:8e:ab:b1:69:b4:00:07:9e:c2:d2:cf:e4: 30:a3:8c:2e:19:2d:3d:43:00:5c:94:6b:b9:78:09: ab:81:63:49:6f:b9:09:13:7b:d1:1f:09:58:2f:75: 17:ce:7f:9b:05:b9:07:f8:a7:08:27:6f:cf:d8:b5: 64:e3:67:79:c9:b6:23:6d:bb:03:74:06:8e:56:56: a7:3f:77:7b:5d:96:75:c6:87:b9:4d:21:eb:b3:7c: 37:26:d4:9b:49:48:16:52:af:83:24:7e:1e:a7:b4: 86:89:32:b2:b2:14:4b:05:26:17:ef:1a:39:6a:69: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:66:AE:23:2B:A0:34:49:5F:82:5D:BA:1D:D8:A4:B5:61:6C:CE:D7 X509v3 Authority Key Identifier: keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:94:0b:77:9f:9c:d7:3b:7e:38:36:e3:46:22:cd:19:1f:ae: be:ec:48:b3:22:10:2a:5b:20:eb:9e:5a:91:f9:1b:ba:98:43: 37:c9:2d:65:b5:e2:7e:cb:d3:30:ed:33:3d:93:12:54:19:3c: ee:27:79:c8:ec:38:59:72:2f:f6:59:a3:fa:26:49:e7:05:82: f6:5a:e1:58:ec:ee:31:c5:9b:3b:7c:df:9a:7c:4a:03:79:77: 7d:22:ea:bb:1d:36:29:13:94:41:b8:ba:48:8e:af:1f:b6:c6: 8a:72:6f:52:d0:10:52:7d:1d:b4:c9:56:90:c1:6c:ac:4f:6c: cb:bb:a8:c8:04:74:3c:be:96:b8:53:e3:cd:97:04:5c:cd:65: 08:69:61:5e:9e:28:87:1a:3c:32:a1:98:63:a0:49:d6:fa:5d: 41:0f:7f:59:e7:14:fe:21:15:86:42:66:0c:31:8a:77:01:e2: 5b:64:3d:a5:78:1c:c0:3a:59:20:ed:70:7b:01:e5:b0:bb:37: b1:52:1a:eb:e2:1f:e6:78:d4:bf:9b:51:99:71:bf:93:63:0c: 03:96:d7:ca:57:cd:56:51:a8:a3:4c:d1:18:74:2c:71:6a:46: fa:0a:91:50:a1:3e:50:67:db:d6:51:82:4b:2d:e6:41:82:b8: 42:7f:01:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRJogJj/ttUhUaRhqzpTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTJjMmMyMzUwYzU5MGE0NDgzZmQ0NGYyNTBhNzdmZWVh YWIyOTYwHhcNMjUxMjI5MDQwMTI0WhcNMjUxMjMwMDQwMTI0WjAzMTEwLwYDVQQD EyhiYjY2YWUyMzJiYTAzNDQ5NWY4MjVkYmExZGQ4YTRiNTYxNmNjZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytQjlsb7vfVIulQMIyaC1pQAq5Cc yeK12vyRsSnIkir5K8/t4LaEbAHnQ6WKYjYdnyrPUXA1hX3doXvgkZSZQTDh1yCs TXMPp1/SXsqzvpodQPEACZyOiACAVGPO+SP5bX7vkdLglRlSjkCxMWQm0m8J5E7/ 4xx4DWf85nYcMFqcXIU/zJHMZvaOq7FptAAHnsLSz+Qwo4wuGS09QwBclGu5eAmr gWNJb7kJE3vRHwlYL3UXzn+bBbkH+KcIJ2/P2LVk42d5ybYjbbsDdAaOVlanP3d7 XZZ1xoe5TSHrs3w3JtSbSUgWUq+DJH4ep7SGiTKyshRLBSYX7xo5amkFRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtmriMroDRJX4Jduh3YpLVhbM7XMB8GA1UdIwQY MBaAFLCSwsI1DFkKRIP9RPJQp3/uqrKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2Ut NDllYmViM2FmMGVhLzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2UtNDllYmViM2FmMGVh LzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5QLd5+c 1zt+ODbjRiLNGR+uvuxIsyIQKlsg655akfkbuphDN8ktZbXifsvTMO0zPZMSVBk8 7id5yOw4WXIv9lmj+iZJ5wWC9lrhWOzuMcWbO3zfmnxKA3l3fSLqux02KROUQbi6 SI6vH7bGinJvUtAQUn0dtMlWkMFsrE9sy7uoyAR0PL6WuFPjzZcEXM1lCGlhXp4o hxo8MqGYY6BJ1vpdQQ9/WecU/iEVhkJmDDGKdwHiW2Q9pXgcwDpZIO1wewHlsLs3 sVIa6+If5njUv5tRmXG/k2MMA5bXylfNVlGoo0zRGHQscWpG+gqRUKE+UGfb1lGC Sy3mQYK4Qn8BcQ== -----END CERTIFICATE-----Generated at Mon Dec 29 05:26:28 2025 by rpki-client