This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json) Hash identifier: tWmd85/7xAXAkB4lJ0C+2yukqtjBESocwP7HwdM/8zI= Subject key identifier: 7C:0D:56:88:80:6F:0A:DB:93:0D:70:EB:16:C4:6B:D3:14:BB:8E:52 Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159 Certificate serial: 019B5CE48D13D6BB08F48BC6AE21788F0EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft Manifest number: 12DA Signing time: Fri 26 Dec 2025 23:00:40 +0000 Manifest this update: Fri 26 Dec 2025 23:00:40 +0000 Manifest next update: Sat 27 Dec 2025 23:00:40 +0000 Files and hashes: 1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: s3vSoZ61UKF8O+mHcThPO+xJ3WGg6T8rGFSx36cTyIE=) 2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:8d:13:d6:bb:08:f4:8b:c6:ae:21:78:8f:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092425ab7d66bab711fbaa22757377807834159 Validity Not Before: Dec 26 23:00:40 2025 GMT Not After : Dec 27 23:00:40 2025 GMT Subject: CN=7c0d5688806f0adb930d70eb16c46bd314bb8e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:51:94:69:ac:50:b6:ff:5f:a2:5e:05:08: 86:93:ef:12:86:19:a7:b9:1d:89:de:e3:ad:b5:07: ff:78:5c:b4:45:af:1f:c5:09:77:75:c0:3f:15:56: f5:60:d3:38:4c:3b:71:7e:23:7b:77:b2:8a:78:db: 5b:ae:9c:c9:d1:f7:67:fa:51:82:17:12:d8:b6:d4: f7:9b:af:60:ee:f5:05:3d:84:ed:1a:1d:eb:27:e9: 6c:1a:ec:3a:6b:30:ba:83:f6:22:b6:30:16:d2:67: a5:de:d6:81:66:14:eb:14:f4:bc:d9:6a:ba:52:fc: 17:9d:1c:21:d4:26:dc:bb:5a:ea:43:1a:e7:b9:e8: aa:7b:18:dc:06:c0:dd:0c:bd:e7:33:66:bd:4c:62: d9:49:28:e1:9d:ac:d9:d9:e1:04:5e:1a:01:8f:95: d6:d8:c6:df:f4:f1:8c:5f:34:2f:ac:a5:13:95:9b: 95:27:51:6d:da:ab:9f:80:54:49:af:b3:e8:d5:8e: 4d:63:1f:48:7c:1f:ee:99:ae:9a:3f:a0:5a:e1:0a: 15:70:7c:e2:33:67:b1:eb:c6:ef:a9:96:a0:53:40: 81:05:ba:7a:b7:7a:f3:46:68:71:c2:22:f4:aa:b4: b5:e5:05:f1:5e:2b:e9:9b:78:31:61:3d:f8:5b:6b: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0D:56:88:80:6F:0A:DB:93:0D:70:EB:16:C4:6B:D3:14:BB:8E:52 X509v3 Authority Key Identifier: keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1b:32:fb:e6:9c:58:4a:52:dc:6a:57:f4:c9:f6:6e:87:7b: cb:ce:8b:fe:2d:ac:dd:92:08:0f:15:9c:bc:4e:53:9d:f4:48: c2:54:3e:40:22:17:f0:1e:d7:c4:e7:9b:26:d4:06:87:5a:70: e2:09:f1:e4:f7:17:2d:42:5b:89:ae:bc:b6:c4:33:5e:97:d9: 04:38:77:36:57:de:76:b9:65:00:f1:dc:57:25:a2:7a:02:2e: e8:66:24:4e:bd:04:a5:3b:60:fe:36:77:e8:8f:51:79:f5:02: 4a:55:b9:0e:22:7b:72:dd:72:5f:41:e6:de:dc:23:ef:2c:12: 32:ff:33:03:75:23:10:97:53:33:5c:24:ad:15:f7:15:45:e3: f5:c7:4e:35:c0:3d:ee:b1:f2:a7:4b:dc:ce:03:e2:7f:d5:3c: 11:08:3c:01:8f:c9:67:18:00:ff:97:08:b9:3c:d0:80:c3:c3: a4:50:85:b7:4c:06:d1:cd:01:fa:26:14:ab:22:41:ec:63:e6: 98:99:52:c7:1f:b7:82:bd:76:18:fe:21:4d:88:fc:8c:50:db: 6a:b8:df:3a:f0:9b:f5:91:a5:01:5c:ba:51:fd:0b:74:01:f6: 93:7d:2d:a6:a3:1c:07:a4:5d:c0:1d:76:90:08:21:06:86:0a: c1:3a:2e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5I0T1rsI9IvGriF4jw7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4 MzQxNTkwHhcNMjUxMjI2MjMwMDQwWhcNMjUxMjI3MjMwMDQwWjAzMTEwLwYDVQQD Eyg3YzBkNTY4ODgwNmYwYWRiOTMwZDcwZWIxNmM0NmJkMzE0YmI4ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK1RlGmsULb/X6JeBQiGk+8Shhmn uR2J3uOttQf/eFy0Ra8fxQl3dcA/FVb1YNM4TDtxfiN7d7KKeNtbrpzJ0fdn+lGC FxLYttT3m69g7vUFPYTtGh3rJ+lsGuw6azC6g/YitjAW0mel3taBZhTrFPS82Wq6 UvwXnRwh1Cbcu1rqQxrnueiqexjcBsDdDL3nM2a9TGLZSSjhnazZ2eEEXhoBj5XW 2Mbf9PGMXzQvrKUTlZuVJ1Ft2qufgFRJr7Po1Y5NYx9IfB/uma6aP6Ba4QoVcHzi M2ex68bvqZagU0CBBbp6t3rzRmhxwiL0qrS15QXxXivpm3gxYT34W2tQywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwNVoiAbwrbkw1w6xbEa9MUu45SMB8GA1UdIwQY MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2 LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRsy++ac WEpS3GpX9Mn2bod7y86L/i2s3ZIIDxWcvE5TnfRIwlQ+QCIX8B7XxOebJtQGh1pw 4gnx5PcXLUJbia68tsQzXpfZBDh3NlfedrllAPHcVyWiegIu6GYkTr0EpTtg/jZ3 6I9RefUCSlW5DiJ7ct1yX0Hm3twj7ywSMv8zA3UjEJdTM1wkrRX3FUXj9cdONcA9 7rHyp0vczgPif9U8EQg8AY/JZxgA/5cIuTzQgMPDpFCFt0wG0c0B+iYUqyJB7GPm mJlSxx+3gr12GP4hTYj8jFDbarjfOvCb9ZGlAVy6Uf0LdAH2k30tpqMcB6RdwB12 kAghBoYKwTouZg== -----END CERTIFICATE-----Generated at Sat Dec 27 03:53:52 2025 by rpki-client