This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json) Hash identifier: uESg0G1c6Uzr4+Y28rKPA8KuBIXbG5X6zb7GX6moJ/c= Subject key identifier: 6D:61:2C:07:29:42:AD:9E:99:B9:DE:3E:D5:6E:17:02:54:B4:19:4C Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0 Certificate serial: 019B42EE7398A27CF7953E67056E0B96B8E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft Manifest number: 0410 Signing time: Sun 21 Dec 2025 22:01:21 +0000 Manifest this update: Sun 21 Dec 2025 22:01:21 +0000 Manifest next update: Mon 22 Dec 2025 22:01:21 +0000 Files and hashes: 1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: Vk+pPMZP7kM+fTXjGyNuBq582PPTmlFkrs0kWKWGcHs=) 2: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=) 3: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=) 4: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (hash: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:73:98:a2:7c:f7:95:3e:67:05:6e:0b:96:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0 Validity Not Before: Dec 21 22:01:21 2025 GMT Not After : Dec 22 22:01:21 2025 GMT Subject: CN=6d612c072942ad9e99b9de3ed56e170254b4194c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:f0:11:65:12:94:cc:b1:0a:f6:9e:76:18: ab:02:2c:ed:12:28:64:2d:2c:90:af:f8:12:8f:9f: 6f:4c:f5:9e:65:d8:0e:8d:8d:3d:73:79:cf:91:b0: 99:04:98:a2:7a:25:9e:6c:6b:cc:d9:96:15:be:44: 28:d0:24:d8:e7:c0:e7:d7:b7:6c:22:a2:1a:05:e4: 28:27:f2:9c:12:be:4a:9c:ad:98:16:2c:01:57:a4: 6b:f8:fb:b8:00:4c:79:04:2f:4d:e7:3c:54:ed:bf: 39:5e:05:61:62:dc:13:88:35:f8:d0:3c:81:5f:ba: 14:b5:3c:e9:55:25:cd:70:f9:cd:4e:5a:df:13:75: 47:92:a8:83:60:06:0b:b2:6c:0d:f2:79:4f:52:73: ff:43:78:dd:eb:79:48:d3:e0:20:86:ae:f0:b2:93: b0:a0:1c:b7:5c:52:c8:09:79:ee:fa:c7:4e:87:31: c6:7a:67:29:6b:c2:95:cb:42:8c:8d:bb:08:d0:1b: 26:81:41:45:6a:11:89:cf:52:70:f0:5e:14:92:1e: 02:f4:8d:16:fd:a4:19:68:c2:eb:8e:0e:bc:07:1e: b8:2f:9b:82:d0:2b:3e:1c:3d:75:a1:6e:54:82:54: 15:a1:1d:fd:08:ec:5c:d7:43:fd:01:5c:de:20:c2: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:2C:07:29:42:AD:9E:99:B9:DE:3E:D5:6E:17:02:54:B4:19:4C X509v3 Authority Key Identifier: keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:96:e3:8e:fb:8a:58:b5:e0:03:cc:99:ba:a1:fc:05:bb:2f: f4:ae:5f:e5:78:0f:4e:68:4c:10:49:30:25:74:ad:df:60:b5: 9f:21:de:ad:b5:8e:00:74:e4:5b:50:1f:4f:dc:4d:ce:47:b1: f0:6f:8d:79:95:1f:87:b1:be:ca:c1:09:fb:ae:09:c4:85:e3: 9a:e5:2b:b6:88:5f:23:64:9c:a2:4b:78:0e:51:84:92:56:74: cf:61:d0:c8:53:b0:90:27:49:1a:6f:e0:e5:16:59:9b:44:1e: c1:9c:dc:38:eb:db:ab:a3:1e:ee:a0:05:fe:af:56:3c:c8:06: 4e:d3:ba:ca:31:1f:94:64:3e:f8:45:62:a7:cc:f4:f8:db:a5: cb:cf:5f:b3:e4:e4:25:1b:be:0a:9b:5c:ac:5d:d4:38:aa:48: 6e:d4:7d:0a:9e:5f:72:bf:a8:48:09:fe:33:81:f4:cc:95:4b: 07:6f:aa:30:88:72:33:a7:52:79:33:02:11:ef:3c:7b:ba:39: 63:54:ff:2c:bc:ea:54:a0:5d:81:d6:80:76:94:75:fe:53:ae: c6:ce:a8:01:61:99:97:95:08:98:43:f6:51:60:b2:35:07:34: 11:6c:0c:55:08:c0:16:45:e3:af:ad:00:0b:27:39:c6:84:f9: a7:62:4f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7nOYonz3lT5nBW4LlrjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi ZDgxYzAwHhcNMjUxMjIxMjIwMTIxWhcNMjUxMjIyMjIwMTIxWjAzMTEwLwYDVQQD Eyg2ZDYxMmMwNzI5NDJhZDllOTliOWRlM2VkNTZlMTcwMjU0YjQxOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss7wEWUSlMyxCvaedhirAiztEihk LSyQr/gSj59vTPWeZdgOjY09c3nPkbCZBJiieiWebGvM2ZYVvkQo0CTY58Dn17ds IqIaBeQoJ/KcEr5KnK2YFiwBV6Rr+Pu4AEx5BC9N5zxU7b85XgVhYtwTiDX40DyB X7oUtTzpVSXNcPnNTlrfE3VHkqiDYAYLsmwN8nlPUnP/Q3jd63lI0+Aghq7wspOw oBy3XFLICXnu+sdOhzHGemcpa8KVy0KMjbsI0BsmgUFFahGJz1Jw8F4Ukh4C9I0W /aQZaMLrjg68Bx64L5uC0Cs+HD11oW5UglQVoR39COxc10P9AVzeIMJHuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1hLAcpQq2embnePtVuFwJUtBlMMB8GA1UdIwQY MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt MmNhM2FhNzFlYzVmLzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZbjjvuK WLXgA8yZuqH8Bbsv9K5f5XgPTmhMEEkwJXSt32C1nyHerbWOAHTkW1AfT9xNzkex 8G+NeZUfh7G+ysEJ+64JxIXjmuUrtohfI2Scokt4DlGEklZ0z2HQyFOwkCdJGm/g 5RZZm0QewZzcOOvbq6Me7qAF/q9WPMgGTtO6yjEflGQ++EVip8z0+Nuly89fs+Tk JRu+CptcrF3UOKpIbtR9Cp5fcr+oSAn+M4H0zJVLB2+qMIhyM6dSeTMCEe88e7o5 Y1T/LLzqVKBdgdaAdpR1/lOuxs6oAWGZl5UImEP2UWCyNQc0EWwMVQjAFkXjr60A Cyc5xoT5p2JPjQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:05:12 2025 by rpki-client