This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json) Hash identifier: KOon60Fi9BRGPnHyIzHUXmW5uTzd6na++V/sMBn0TnY= Subject key identifier: F3:77:EF:3F:8A:7E:5F:BC:01:D0:94:AD:7A:6E:8D:59:7E:88:F2:0E Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8 Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8 Certificate serial: 019B3EA36906EADE4FA4A27CF10B794E4BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft Manifest number: 15D6 Signing time: Sun 21 Dec 2025 02:00:55 +0000 Manifest this update: Sun 21 Dec 2025 02:00:55 +0000 Manifest next update: Mon 22 Dec 2025 02:00:55 +0000 Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=) 2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: 31Aq7ZLOrF0mrN+H2lDVAu0vyf569MU6cY2a9Nx9KD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:69:06:ea:de:4f:a4:a2:7c:f1:0b:79:4e:4b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8 Validity Not Before: Dec 21 02:00:55 2025 GMT Not After : Dec 22 02:00:55 2025 GMT Subject: CN=f377ef3f8a7e5fbc01d094ad7a6e8d597e88f20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:4a:cd:e8:cf:eb:61:b8:25:33:6f:71:63: 59:e1:49:0c:91:2b:0e:1e:38:b6:82:3f:05:64:92: c5:7f:bb:99:fd:c8:3f:b6:de:e8:c4:97:e6:84:52: a4:34:be:18:9f:5e:64:f8:99:e2:24:0b:64:6d:28: fd:d0:f2:1f:c0:2c:2b:00:aa:6d:54:fe:fc:a4:ac: 1d:ac:f9:40:6d:09:d6:34:69:ec:dd:24:62:22:88: d3:4d:ae:e1:84:5a:6a:ac:0c:e1:7c:5c:42:80:61: 3f:3d:80:a8:30:47:21:72:3b:1a:07:d7:ab:07:00: 80:9a:87:6c:b8:28:18:53:d4:f9:94:17:e6:88:64: 27:21:f9:41:b7:49:fb:af:88:0a:55:fb:56:73:bc: 6e:09:47:28:80:85:e6:ff:8d:46:29:0c:b3:3a:da: ce:d8:f3:c0:5f:c5:de:0d:65:2b:cd:d7:5c:f9:1a: 9d:eb:44:f0:a2:9f:78:be:eb:66:86:79:8c:c7:e3: 0d:7a:5a:59:a6:f4:a4:eb:18:1f:d5:71:85:59:94: 27:2f:75:a0:bd:ee:cd:22:ca:38:10:75:40:39:4f: cb:bd:c3:9b:1b:71:62:ce:51:28:5b:e5:90:1b:00: d3:89:ba:b1:98:58:5b:24:99:f7:d9:73:4e:ad:19: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:77:EF:3F:8A:7E:5F:BC:01:D0:94:AD:7A:6E:8D:59:7E:88:F2:0E X509v3 Authority Key Identifier: keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fb:e9:3d:31:b4:5a:53:83:df:ea:a5:5c:59:27:e6:8a:2b: b7:30:3d:7d:60:24:eb:1f:75:6c:d2:6c:1b:a7:3f:dd:a1:d9: a7:04:2c:4d:46:a6:25:a7:a3:ba:d8:e4:b5:af:ce:fb:23:9b: 69:6f:c6:03:4f:fb:64:f3:d7:89:bc:32:8f:12:09:25:2b:8d: fa:bc:02:58:bb:b0:dc:96:fd:6b:dc:9a:d0:a6:a0:f9:6e:96: f7:0c:bd:1e:d8:2e:83:29:2f:5e:7e:6c:78:20:5e:8b:a9:4f: d4:71:7d:20:3c:cb:f9:18:63:fb:74:09:14:b5:4c:fa:06:d7: 10:fc:1b:6d:1e:ad:1f:d7:4b:c4:ce:19:cb:9e:24:38:83:97: cf:ba:1d:ec:fc:c3:90:77:07:d7:cc:27:51:67:86:57:22:f6: 6c:7a:1f:0d:23:a0:82:74:0d:52:36:45:09:d7:0b:bd:45:03: a7:4e:a3:08:d5:f6:f3:5e:02:bd:63:0d:4c:16:d4:8a:25:8d: f2:3a:6f:cc:5c:25:07:64:52:e9:fc:b5:6e:75:6e:b1:72:ba: 11:9c:71:0c:3c:b4:8a:bb:ec:01:f3:0e:ff:50:12:92:67:01: 0a:bb:d2:8d:3a:bc:9e:0d:fc:4a:d6:89:b1:3c:e3:c4:5c:a3: 02:c0:64:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2kG6t5PpKJ88Qt5TkvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx N2FjZTgwHhcNMjUxMjIxMDIwMDU1WhcNMjUxMjIyMDIwMDU1WjAzMTEwLwYDVQQD EyhmMzc3ZWYzZjhhN2U1ZmJjMDFkMDk0YWQ3YTZlOGQ1OTdlODhmMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLNKzejP62G4JTNvcWNZ4UkMkSsO Hji2gj8FZJLFf7uZ/cg/tt7oxJfmhFKkNL4Yn15k+JniJAtkbSj90PIfwCwrAKpt VP78pKwdrPlAbQnWNGns3SRiIojTTa7hhFpqrAzhfFxCgGE/PYCoMEchcjsaB9er BwCAmodsuCgYU9T5lBfmiGQnIflBt0n7r4gKVftWc7xuCUcogIXm/41GKQyzOtrO 2PPAX8XeDWUrzddc+Rqd60Twop94vutmhnmMx+MNelpZpvSk6xgf1XGFWZQnL3Wg ve7NIso4EHVAOU/LvcObG3FizlEoW+WQGwDTibqxmFhbJJn32XNOrRm0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPN37z+Kfl+8AdCUrXpujVl+iPIOMB8GA1UdIwQY MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfvpPTG0 WlOD3+qlXFkn5oortzA9fWAk6x91bNJsG6c/3aHZpwQsTUamJaejutjkta/O+yOb aW/GA0/7ZPPXibwyjxIJJSuN+rwCWLuw3Jb9a9ya0Kag+W6W9wy9HtgugykvXn5s eCBei6lP1HF9IDzL+Rhj+3QJFLVM+gbXEPwbbR6tH9dLxM4Zy54kOIOXz7od7PzD kHcH18wnUWeGVyL2bHofDSOggnQNUjZFCdcLvUUDp06jCNX2814CvWMNTBbUiiWN 8jpvzFwlB2RS6fy1bnVusXK6EZxxDDy0irvsAfMO/1ASkmcBCrvSjTq8ng38StaJ sTzjxFyjAsBkJg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:37 2025 by rpki-client