This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json) Hash identifier: xKChnP8uUsklfUy2k6WEhuHq+pMweOm1V6fnyidHnxE= Subject key identifier: AC:FE:D3:FF:AC:62:00:76:A2:CF:0A:CB:00:C1:14:11:A4:7F:CA:05 Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Certificate serial: 019B3BA2061367800A1E1CA3804034FBD7AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft Manifest number: 10C0 Signing time: Sat 20 Dec 2025 12:00:32 +0000 Manifest this update: Sat 20 Dec 2025 12:00:32 +0000 Manifest next update: Sun 21 Dec 2025 12:00:32 +0000 Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=) 2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=) 3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 4nsT2zrkGPCer67a+uGVnQ7577um0v4wmFo4IhJogQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:06:13:67:80:0a:1e:1c:a3:80:40:34:fb:d7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Validity Not Before: Dec 20 12:00:32 2025 GMT Not After : Dec 21 12:00:32 2025 GMT Subject: CN=acfed3ffac620076a2cf0acb00c11411a47fca05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:e3:d1:38:c2:01:f6:4d:96:50:94:e0:f5: e6:0b:63:9a:73:a8:78:d1:12:d7:ca:03:11:8d:bd: 5a:3b:00:a7:b1:6d:52:8f:9b:53:5d:27:31:1c:7e: 73:27:90:06:99:cf:90:e5:22:d9:5d:e0:70:20:97: c5:22:f0:6a:28:18:9a:5f:bb:85:e7:37:cb:c2:de: 77:63:91:b4:1e:be:51:39:cb:96:aa:e6:1d:66:f8: 5e:a1:43:0f:6a:c8:fb:47:45:c8:82:3c:c2:97:54: 14:bf:0f:91:23:3f:da:3d:28:e9:70:39:8e:75:e4: 3a:6b:d2:c3:ad:ca:a3:b9:9a:32:fd:05:e9:48:af: 60:00:4d:8a:9b:69:26:83:ca:9e:8d:35:b3:58:5a: b9:0c:ae:11:44:35:df:13:d6:c8:6b:2a:7b:e4:ee: bc:75:bd:26:d1:58:6d:db:19:73:d9:19:93:4c:21: 9b:22:0a:67:47:da:41:c8:14:f0:e8:7b:7f:ce:2d: 4e:7d:69:b4:3c:62:47:24:95:19:2e:44:da:ac:05: 2f:c9:e1:53:dc:24:80:a9:45:43:7b:1a:48:a1:ed: 15:05:e6:ba:00:e3:49:b1:36:28:3d:ed:ef:6b:0a: b0:35:3b:5b:0f:d7:0d:9b:71:c7:fe:6b:7c:2e:64: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FE:D3:FF:AC:62:00:76:A2:CF:0A:CB:00:C1:14:11:A4:7F:CA:05 X509v3 Authority Key Identifier: keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:94:fc:9f:3f:54:51:fe:2a:18:f1:e3:b7:c0:b7:99:8b:a8: 9e:0e:fb:ae:d0:77:1d:93:bf:2e:31:e1:bc:b9:9b:52:4c:f6: ff:46:10:e1:ed:3e:10:6d:2f:a1:d3:3c:05:bd:5c:ea:d3:96: 5f:02:3f:2c:f8:7a:9e:9b:ca:4a:df:9c:6b:f5:d5:d3:37:52: 2e:55:b1:6b:c2:91:e4:e7:de:93:66:a7:45:b3:d9:8d:bd:fc: c8:64:ef:ba:0c:e7:f7:99:be:97:e1:b2:f6:e6:f8:44:bb:72: 5f:cc:7a:52:1e:7f:14:7f:cb:4e:52:01:91:7c:1b:fc:3d:a7: bb:71:0f:a8:7f:21:84:6e:34:d9:98:8c:30:37:ce:92:d3:1b: 61:55:dd:67:e2:e2:12:c0:72:bf:6f:17:b7:60:45:36:95:81: b5:94:31:91:70:6c:4d:dc:70:e3:02:9b:f1:39:ac:c6:1e:7a: 9e:12:5f:f3:12:7b:d4:3e:cd:bb:cd:70:f2:7f:b6:56:c4:dd: 7f:4a:8a:4f:9b:78:ae:c8:92:ac:46:93:3a:f1:19:db:1e:c2: 3a:67:1f:6c:d4:e5:9a:76:c9:e2:02:9a:f8:8a:44:c5:63:c9: 28:5b:91:5c:81:a1:ac:89:28:a9:72:16:59:3a:e9:7b:f1:a2: fa:90:07:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogYTZ4AKHhyjgEA0+9erMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi Mjc1ZWUwHhcNMjUxMjIwMTIwMDMyWhcNMjUxMjIxMTIwMDMyWjAzMTEwLwYDVQQD EyhhY2ZlZDNmZmFjNjIwMDc2YTJjZjBhY2IwMGMxMTQxMWE0N2ZjYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxLj0TjCAfZNllCU4PXmC2Oac6h4 0RLXygMRjb1aOwCnsW1Sj5tTXScxHH5zJ5AGmc+Q5SLZXeBwIJfFIvBqKBiaX7uF 5zfLwt53Y5G0Hr5ROcuWquYdZvheoUMPasj7R0XIgjzCl1QUvw+RIz/aPSjpcDmO deQ6a9LDrcqjuZoy/QXpSK9gAE2Km2kmg8qejTWzWFq5DK4RRDXfE9bIayp75O68 db0m0Vht2xlz2RmTTCGbIgpnR9pByBTw6Ht/zi1OfWm0PGJHJJUZLkTarAUvyeFT 3CSAqUVDexpIoe0VBea6AONJsTYoPe3vawqwNTtbD9cNm3HH/mt8LmQPSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz+0/+sYgB2os8KywDBFBGkf8oFMB8GA1UdIwQY MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpT8nz9U Uf4qGPHjt8C3mYuong77rtB3HZO/LjHhvLmbUkz2/0YQ4e0+EG0vodM8Bb1c6tOW XwI/LPh6npvKSt+ca/XV0zdSLlWxa8KR5Ofek2anRbPZjb38yGTvugzn95m+l+Gy 9ub4RLtyX8x6Uh5/FH/LTlIBkXwb/D2nu3EPqH8hhG402ZiMMDfOktMbYVXdZ+Li EsByv28Xt2BFNpWBtZQxkXBsTdxw4wKb8Tmsxh56nhJf8xJ71D7Nu81w8n+2VsTd f0qKT5t4rsiSrEaTOvEZ2x7COmcfbNTlmnbJ4gKa+IpExWPJKFuRXIGhrIkoqXIW WTrpe/Gi+pAH1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:54:39 2025 by rpki-client