This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json) Hash identifier: f5N5NyYUsjkdAtaW3XY2qeNQH/fZBzFoRUEf/YHFnew= Subject key identifier: 6E:17:D4:05:E4:97:DE:DE:A3:36:B7:E6:DF:D5:F3:4D:95:9C:5A:4D Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159 Certificate serial: 019B43C9D080B3015348328F3CC561B9B1CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft Manifest number: 12CD Signing time: Mon 22 Dec 2025 02:00:58 +0000 Manifest this update: Mon 22 Dec 2025 02:00:58 +0000 Manifest next update: Tue 23 Dec 2025 02:00:58 +0000 Files and hashes: 1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: 6TKRQuRfPH1IlnhZBls7J2LYlF954sLFqJPtg50zAFA=) 2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:d0:80:b3:01:53:48:32:8f:3c:c5:61:b9:b1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092425ab7d66bab711fbaa22757377807834159 Validity Not Before: Dec 22 02:00:58 2025 GMT Not After : Dec 23 02:00:58 2025 GMT Subject: CN=6e17d405e497dedea336b7e6dfd5f34d959c5a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:16:a3:71:ea:4b:42:9a:3e:b6:68:8b:f7: 8f:44:b1:af:9c:a8:bd:b2:56:40:03:16:b4:98:05: 0a:18:46:31:85:67:32:ea:4c:37:52:bd:f1:85:26: 8d:1a:08:c3:9f:8b:0b:5f:ba:6f:9a:82:5f:ee:bc: 5e:d5:f7:68:72:87:32:34:58:46:32:71:ac:7e:1f: b4:eb:1a:ca:21:b9:97:b7:2d:2a:c7:5d:e5:c5:12: a2:55:9a:71:52:2a:42:95:fe:de:80:b8:52:2d:63: 23:19:2f:0f:a3:8b:9b:b3:3c:12:e3:8a:13:b9:70: 1d:da:4c:93:49:85:e4:b9:fe:3a:76:ab:38:6a:f1: 7e:f5:a7:94:7e:69:50:02:92:85:91:64:eb:4d:21: 38:a1:5a:84:dd:1f:37:48:af:a7:b8:df:90:f7:4f: 21:42:4b:5e:0c:a1:f0:94:d0:c7:35:42:5c:9f:4f: 8c:a2:5a:77:45:ee:22:a0:15:63:4b:02:58:be:35: 1e:1d:90:b0:1f:2f:6d:95:32:d8:48:04:48:b9:6f: 26:b8:db:6c:26:30:86:03:80:7c:c6:56:5e:40:1c: fe:16:0c:32:35:8f:7f:76:c3:0f:94:12:56:93:a4: c0:8b:5e:90:6a:ac:2a:9a:0f:4e:d3:51:f8:8c:9a: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:D4:05:E4:97:DE:DE:A3:36:B7:E6:DF:D5:F3:4D:95:9C:5A:4D X509v3 Authority Key Identifier: keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a0:0e:0a:8b:e1:ca:0a:a3:b4:1e:43:db:55:7a:1e:3b:40: 16:51:e8:56:c8:ae:c1:52:fd:46:0f:c7:c5:30:3d:82:f4:7b: 43:dc:c1:ef:55:ae:66:76:b4:2f:9a:d4:b4:f7:05:01:64:7a: e0:fd:20:43:1c:63:c2:e8:ca:77:1c:f1:09:0c:01:33:8a:25: 55:4a:d2:af:14:e9:8c:a8:79:1b:4b:b2:cd:c2:60:3e:da:3a: 6c:1d:48:b5:55:2f:49:e5:50:c6:ee:ff:cb:3f:ff:82:9c:04: 90:97:91:16:b1:da:dc:9b:86:96:ab:bb:05:8e:4b:24:26:06: 81:2b:28:72:b7:d4:4d:4c:31:03:02:47:5c:ae:6a:37:fd:18: b9:39:8d:45:cc:55:30:7d:7e:6a:f8:01:c1:04:fd:4c:40:51: a9:60:33:f8:c2:04:f8:29:10:94:16:d2:d7:b3:a3:fe:c3:cf: 90:29:9c:5e:2a:af:f9:fc:cb:f2:82:b5:a4:02:84:0e:5e:f3: 69:2d:26:53:6e:52:9c:e9:10:f6:f5:fb:36:8f:29:76:14:bb: f0:f7:47:6e:85:5a:fc:66:da:30:9e:ec:83:8f:cf:b2:3d:39: 4c:8a:93:e1:96:79:5e:3d:43:63:26:53:82:45:c4:25:00:7b: fd:92:e0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDydCAswFTSDKPPMVhubHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4 MzQxNTkwHhcNMjUxMjIyMDIwMDU4WhcNMjUxMjIzMDIwMDU4WjAzMTEwLwYDVQQD Eyg2ZTE3ZDQwNWU0OTdkZWRlYTMzNmI3ZTZkZmQ1ZjM0ZDk1OWM1YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJcWo3HqS0KaPrZoi/ePRLGvnKi9 slZAAxa0mAUKGEYxhWcy6kw3Ur3xhSaNGgjDn4sLX7pvmoJf7rxe1fdococyNFhG MnGsfh+06xrKIbmXty0qx13lxRKiVZpxUipClf7egLhSLWMjGS8Po4ubszwS44oT uXAd2kyTSYXkuf46dqs4avF+9aeUfmlQApKFkWTrTSE4oVqE3R83SK+nuN+Q908h QkteDKHwlNDHNUJcn0+Molp3Re4ioBVjSwJYvjUeHZCwHy9tlTLYSARIuW8muNts JjCGA4B8xlZeQBz+FgwyNY9/dsMPlBJWk6TAi16Qaqwqmg9O01H4jJoIQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4X1AXkl97eoza35t/V802VnFpNMB8GA1UdIwQY MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2 LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6AOCovh ygqjtB5D21V6HjtAFlHoVsiuwVL9Rg/HxTA9gvR7Q9zB71WuZna0L5rUtPcFAWR6 4P0gQxxjwujKdxzxCQwBM4olVUrSrxTpjKh5G0uyzcJgPto6bB1ItVUvSeVQxu7/ yz//gpwEkJeRFrHa3JuGlqu7BY5LJCYGgSsocrfUTUwxAwJHXK5qN/0YuTmNRcxV MH1+avgBwQT9TEBRqWAz+MIE+CkQlBbS17Oj/sPPkCmcXiqv+fzL8oK1pAKEDl7z aS0mU25SnOkQ9vX7No8pdhS78PdHboVa/GbaMJ7sg4/Psj05TIqT4ZZ5Xj1DYyZT gkXEJQB7/ZLg0Q== -----END CERTIFICATE-----Generated at Mon Dec 22 11:14:36 2025 by rpki-client