This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json) Hash identifier: DvFWHMVCEf7Pa5oLq3TGqMAJdhoZCDy6whI4ZfKmlqw= Subject key identifier: CB:E1:38:6E:5B:74:25:11:6D:24:BB:B2:C7:53:5B:1F:68:68:45:E4 Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0 Certificate serial: 019B6D6AACCAD6796C554470E6BC3494C120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft Manifest number: 0426 Signing time: Tue 30 Dec 2025 04:01:06 +0000 Manifest this update: Tue 30 Dec 2025 04:01:06 +0000 Manifest next update: Wed 31 Dec 2025 04:01:06 +0000 Files and hashes: 1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: blN5TVxeUkIquP2aTJo9OLwe58CrvtkAijL84P/fmMM=) 2: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=) 3: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=) 4: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (hash: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:ac:ca:d6:79:6c:55:44:70:e6:bc:34:94:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0 Validity Not Before: Dec 30 04:01:06 2025 GMT Not After : Dec 31 04:01:06 2025 GMT Subject: CN=cbe1386e5b7425116d24bbb2c7535b1f686845e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:90:29:6b:53:24:f3:e4:7a:7c:d1:4a:8b: 42:5b:d5:b7:f1:69:ba:57:54:de:8f:8d:ce:17:55: 53:ca:f3:16:08:a1:2f:52:80:d8:91:16:2d:75:56: f6:a8:e1:e2:96:26:25:d3:d0:4d:83:d1:84:57:b9: ed:9a:fd:0c:20:f6:a3:0a:b4:fd:d9:fa:05:97:5b: ef:42:c1:05:5c:93:30:82:c6:b4:f9:6f:c7:1e:00: e4:b6:1a:dc:67:1a:44:6d:72:00:c1:7e:64:78:5d: 08:ef:6e:a9:6b:c0:fc:0a:1c:43:8d:62:e0:19:6e: a3:ac:45:c0:c8:29:8c:4b:c3:47:77:b4:71:1f:dd: a5:f3:3d:46:72:c7:35:d9:a2:49:b1:a4:43:8c:b1: 19:08:e8:47:3e:65:11:cd:96:95:6d:bc:ea:61:c5: 75:09:36:06:82:cd:d8:c8:16:37:3d:5b:d1:49:5e: a4:bd:0c:0a:4e:c0:5a:a8:d6:7e:8f:6a:18:fb:5b: 41:7d:e4:3c:53:bc:4b:2c:3b:74:73:af:22:18:9a: 80:90:5e:12:47:5d:f7:b6:93:0b:73:12:09:da:88: 73:22:d5:90:a2:88:80:bb:91:57:57:0d:fd:9b:97: d3:4e:1a:aa:04:fe:94:af:54:4b:69:08:aa:e7:0e: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E1:38:6E:5B:74:25:11:6D:24:BB:B2:C7:53:5B:1F:68:68:45:E4 X509v3 Authority Key Identifier: keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:93:31:7f:1e:82:84:f8:3f:d2:27:09:92:4f:43:28:69:d4: dd:e0:6c:64:9b:9f:e0:ab:d5:37:a0:31:6b:25:bb:dd:d4:16: 73:ed:da:f0:c4:31:d8:13:b5:c9:35:86:f7:90:0a:8d:8a:2e: 68:f5:50:7e:e9:be:79:40:13:b7:be:46:fe:20:73:14:e1:77: 7f:48:84:7c:58:da:c1:5d:3d:a8:ae:a2:83:f2:61:94:26:ba: 06:33:7d:41:7d:f7:1d:ee:90:00:7b:32:81:dd:a2:68:be:9b: 94:db:eb:e9:3d:35:37:ba:4a:62:9d:9f:c3:94:21:7a:49:5a: 13:60:3e:3c:4f:d5:7a:82:b8:7c:fa:1f:6d:cc:68:a7:39:f7: 53:b9:b2:0c:cb:17:eb:c4:87:9b:c3:ef:c0:74:b9:37:dc:4d: 5a:58:f8:33:8a:bb:7c:1c:55:ce:b6:cd:1a:43:d8:90:01:36: 6a:ed:ab:f0:f6:04:ca:99:96:5e:f2:78:c1:ca:6c:8f:13:15: 3b:17:0c:64:35:64:42:79:7b:8d:88:6c:31:8b:f2:13:df:9c: fa:66:c9:bd:75:73:3f:c3:8d:13:01:5e:dc:00:09:d8:40:b9: cb:56:3c:79:b8:a6:3d:29:fd:59:a2:92:06:25:cc:4e:6c:1b: 26:32:b9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttaqzK1nlsVURw5rw0lMEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi ZDgxYzAwHhcNMjUxMjMwMDQwMTA2WhcNMjUxMjMxMDQwMTA2WjAzMTEwLwYDVQQD EyhjYmUxMzg2ZTViNzQyNTExNmQyNGJiYjJjNzUzNWIxZjY4Njg0NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmCQKWtTJPPkenzRSotCW9W38Wm6 V1Tej43OF1VTyvMWCKEvUoDYkRYtdVb2qOHiliYl09BNg9GEV7ntmv0MIPajCrT9 2foFl1vvQsEFXJMwgsa0+W/HHgDkthrcZxpEbXIAwX5keF0I726pa8D8ChxDjWLg GW6jrEXAyCmMS8NHd7RxH92l8z1Gcsc12aJJsaRDjLEZCOhHPmURzZaVbbzqYcV1 CTYGgs3YyBY3PVvRSV6kvQwKTsBaqNZ+j2oY+1tBfeQ8U7xLLDt0c68iGJqAkF4S R133tpMLcxIJ2ohzItWQooiAu5FXVw39m5fTThqqBP6Ur1RLaQiq5w74RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvhOG5bdCURbSS7ssdTWx9oaEXkMB8GA1UdIwQY MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt MmNhM2FhNzFlYzVmLzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvpMxfx6C hPg/0icJkk9DKGnU3eBsZJuf4KvVN6AxayW73dQWc+3a8MQx2BO1yTWG95AKjYou aPVQfum+eUATt75G/iBzFOF3f0iEfFjawV09qK6ig/JhlCa6BjN9QX33He6QAHsy gd2iaL6blNvr6T01N7pKYp2fw5QheklaE2A+PE/VeoK4fPofbcxopzn3U7myDMsX 68SHm8PvwHS5N9xNWlj4M4q7fBxVzrbNGkPYkAE2au2r8PYEypmWXvJ4wcpsjxMV OxcMZDVkQnl7jYhsMYvyE9+c+mbJvXVzP8ONEwFe3AAJ2EC5y1Y8ebimPSn9WaKS BiXMTmwbJjK5eQ== -----END CERTIFICATE-----Generated at Tue Dec 30 09:05:19 2025 by rpki-client