This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json) Hash identifier: B9xSgyPYi4LVTQyaiiozM9kXH5NGTRyHCp+thOT/oGo= Subject key identifier: 3B:5A:F1:21:67:D7:1A:46:F5:5F:3A:BD:81:0B:96:F2:9E:DB:FD:9E Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Certificate serial: 019B66FB10143B9956B2221523C09D3EF9FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft Manifest number: 17A0 Signing time: Sun 28 Dec 2025 22:01:28 +0000 Manifest this update: Sun 28 Dec 2025 22:01:28 +0000 Manifest next update: Mon 29 Dec 2025 22:01:28 +0000 Files and hashes: 1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=) 2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: cRXSFw1BCIaDeaK8/xNKVE/Vev5R0SJ/2zQwH+poa1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:10:14:3b:99:56:b2:22:15:23:c0:9d:3e:f9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Validity Not Before: Dec 28 22:01:28 2025 GMT Not After : Dec 29 22:01:28 2025 GMT Subject: CN=3b5af12167d71a46f55f3abd810b96f29edbfd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:54:5e:58:a4:62:be:b4:25:04:7a:59:88: 6f:9d:44:fc:fe:28:70:02:48:5c:ed:3a:71:45:fb: cc:16:18:66:c2:90:ae:af:47:6e:19:3b:98:85:f6: a4:d0:04:98:7e:23:f0:63:76:f6:fb:6e:60:53:0f: 6c:c2:33:a9:a9:f2:e5:14:dd:f9:96:a8:11:23:4e: fe:8b:16:98:f5:3b:f5:31:8a:39:22:67:de:44:7e: 4a:8b:1f:f8:bc:b8:79:99:fe:40:24:83:c5:e4:16: cf:61:9e:fe:48:30:b1:89:23:b6:89:53:5a:9b:89: c2:6c:ac:0a:c5:e6:6d:47:89:1b:90:5f:ad:e6:db: 13:ed:5b:3f:6c:1d:0a:20:65:40:ca:7c:ff:ac:18: 9b:48:9f:14:20:6a:69:ec:7b:93:51:43:90:1e:a5: 77:52:e9:5e:53:91:10:f6:58:f0:f6:16:84:13:a2: ca:8f:4c:9a:29:b3:f0:dd:7c:55:5c:aa:76:99:58: a4:35:9b:c9:15:65:5b:8b:0e:45:7a:b7:8e:ab:65: 7c:f5:ec:d8:75:35:ce:2d:d6:a2:da:12:16:38:93: 7a:66:62:80:74:12:d0:95:41:a1:3f:d9:9b:d3:20: d9:9e:83:21:32:74:3b:00:6b:66:46:24:35:84:08: b1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5A:F1:21:67:D7:1A:46:F5:5F:3A:BD:81:0B:96:F2:9E:DB:FD:9E X509v3 Authority Key Identifier: keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d8:4e:0d:cb:f5:78:63:9c:b2:72:59:86:83:51:ff:ac:5a: ab:cd:de:d5:2d:d0:36:e3:3e:46:1a:70:9a:69:88:d9:4f:f6: dd:2e:3a:df:c7:04:c8:fd:d3:76:1b:1a:b3:13:e8:d3:82:8c: a6:b8:7c:ae:63:67:71:85:31:6b:c6:7f:16:80:86:98:2c:fb: dd:e5:03:6a:f3:e2:7f:14:45:1e:a3:bd:b2:51:0f:40:de:41: bb:0b:3d:06:c0:1b:15:1a:5d:23:59:a5:05:f2:66:a4:09:9a: 26:26:be:84:44:3d:3c:cd:0f:ed:a8:f0:fc:a5:5d:b7:b7:1e: b2:4a:75:92:d3:b0:cd:46:9f:7d:44:d2:77:cf:f3:70:1c:02: d3:7a:f5:59:b8:7a:d5:b2:d7:10:d0:be:8f:12:5f:71:df:09: fc:3e:72:66:2f:44:f9:1e:ef:9d:80:89:5a:28:6f:1f:b9:d1: 76:bd:ce:4d:45:2c:e8:74:a0:93:1a:65:89:2b:cb:65:a4:6f: b7:e3:8a:f3:3a:0c:a0:83:b7:3b:73:cb:23:6e:50:d3:34:6f: 47:ae:43:d4:49:6d:8e:48:3f:e8:43:90:7f:78:3d:93:67:19: e8:39:73:44:9d:96:b7:f7:9f:86:74:47:a3:fb:b5:75:c1:83: 66:c3:b7:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+xAUO5lWsiIVI8CdPvn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1 MDQxZDYwHhcNMjUxMjI4MjIwMTI4WhcNMjUxMjI5MjIwMTI4WjAzMTEwLwYDVQQD EygzYjVhZjEyMTY3ZDcxYTQ2ZjU1ZjNhYmQ4MTBiOTZmMjllZGJmZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmtUXlikYr60JQR6WYhvnUT8/ihw Akhc7TpxRfvMFhhmwpCur0duGTuYhfak0ASYfiPwY3b2+25gUw9swjOpqfLlFN35 lqgRI07+ixaY9Tv1MYo5ImfeRH5Kix/4vLh5mf5AJIPF5BbPYZ7+SDCxiSO2iVNa m4nCbKwKxeZtR4kbkF+t5tsT7Vs/bB0KIGVAynz/rBibSJ8UIGpp7HuTUUOQHqV3 UuleU5EQ9ljw9haEE6LKj0yaKbPw3XxVXKp2mVikNZvJFWVbiw5FereOq2V89ezY dTXOLdai2hIWOJN6ZmKAdBLQlUGhP9mb0yDZnoMhMnQ7AGtmRiQ1hAixywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDta8SFn1xpG9V86vYELlvKe2/2eMB8GA1UdIwQY MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt OGFkZjBkYTIyNTQ1LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1 LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdhODcv1 eGOcsnJZhoNR/6xaq83e1S3QNuM+RhpwmmmI2U/23S4638cEyP3TdhsasxPo04KM prh8rmNncYUxa8Z/FoCGmCz73eUDavPifxRFHqO9slEPQN5Buws9BsAbFRpdI1ml BfJmpAmaJia+hEQ9PM0P7ajw/KVdt7ceskp1ktOwzUaffUTSd8/zcBwC03r1Wbh6 1bLXENC+jxJfcd8J/D5yZi9E+R7vnYCJWihvH7nRdr3OTUUs6HSgkxpliSvLZaRv t+OK8zoMoIO3O3PLI25Q0zRvR65D1Eltjkg/6EOQf3g9k2cZ6DlzRJ2Wt/efhnRH o/u1dcGDZsO3Tw== -----END CERTIFICATE-----Generated at Mon Dec 29 01:09:36 2025 by rpki-client