This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft File: SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json) Hash identifier: o4LL3kMDzNKrwRYNlKibv5/WEGnTNrB5wSfb4qfqsps= Subject key identifier: 1B:DA:8B:22:FB:E8:EF:CC:FB:0C:A3:9A:57:D5:68:CD:E5:92:2B:B4 Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E Certificate issuer: /CN=48949d3c873503dbd296bda60eb777bc541d514e Certificate serial: 019AF2AD96AB17672A10500BAD55D0A64603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft Manifest number: 051D Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: cdHaFJ4zJMndfnatP0FXFyR/6sIGPRKoxh+14eGb/XQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:96:ab:17:67:2a:10:50:0b:ad:55:d0:a6:46:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=1bda8b22fbe8efccfb0ca39a57d568cde5922bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:03:ed:51:e9:ca:87:7d:eb:ec:04:09:1e: fb:66:ce:35:60:f9:08:f6:8d:cc:de:41:9f:fd:fd: f2:08:50:7c:67:ff:d3:44:37:4d:00:1b:6c:2c:f2: 14:64:92:11:e6:2d:de:37:72:56:32:01:a9:e7:4c: 91:22:98:55:a6:fb:5e:98:3d:a1:91:12:3b:53:1a: 28:72:18:f9:75:c3:4c:e8:b0:ae:14:fb:45:4f:18: 63:79:4f:4c:8b:9a:52:67:0e:8f:f5:2e:58:f4:c7: b8:bb:b0:42:b7:16:29:80:d5:31:2a:df:18:fd:0a: ce:9e:21:c4:3b:00:55:15:d3:39:05:63:6b:f3:36: be:b7:16:aa:b9:17:4e:49:54:48:29:41:ef:9d:a5: 32:1d:0b:93:58:71:b2:ee:cf:6f:4e:6b:8c:46:7d: 76:32:68:a0:1f:31:7f:81:e0:65:d5:7d:63:f5:1f: 6d:c0:e4:a0:30:3d:2c:26:6f:06:5d:71:b7:70:75: bc:3e:6b:a6:22:90:5e:93:34:d7:f8:55:50:6f:bd: 12:23:2d:8b:79:54:77:1b:20:b5:c4:60:48:50:5c: 3f:01:88:df:d6:51:f8:34:64:42:09:76:ba:9c:a5: 34:fd:8a:35:fe:84:62:94:81:fb:7a:0d:17:37:54: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:8B:22:FB:E8:EF:CC:FB:0C:A3:9A:57:D5:68:CD:E5:92:2B:B4 X509v3 Authority Key Identifier: keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:e6:ca:8d:14:2d:cf:5c:f9:62:e3:b4:9f:ff:75:28:8f: 90:39:88:bb:b7:35:e3:d7:88:67:54:55:9c:e4:4e:2c:20:16: fa:c8:55:f3:fe:9f:7d:6c:fc:23:cf:3d:18:b8:b1:a4:72:9a: 3b:93:50:56:1e:a7:4a:3f:c6:f7:fe:2d:9f:9d:62:5a:18:89: a7:39:7f:9d:87:f2:1e:71:a2:08:34:3c:23:6b:ef:a0:05:a5: a8:6a:d7:cd:78:fa:f7:ba:9d:0e:cf:29:7a:32:55:34:e9:8a: 7e:37:7d:73:a4:63:16:a3:d1:a8:bf:dc:f3:4c:dc:79:2d:4d: 6e:54:b8:30:65:85:0c:d8:1d:67:db:20:ea:55:59:2d:52:dd: eb:1d:8c:19:42:94:ed:75:d5:30:ac:de:11:b6:2f:34:fa:fd: 8f:c8:77:20:ac:b6:da:f1:79:12:ce:c5:74:0c:5a:43:d9:b7: 0f:5d:dd:e1:31:4d:5a:f9:4e:3b:2e:23:23:f5:d9:37:99:93: 20:fc:76:76:62:e0:7f:63:7e:cf:78:fb:6c:a4:23:b4:f9:47: 2f:7b:a6:1b:b8:26:1f:e4:d6:30:f1:37:e8:b8:de:f4:32:e3: ce:6d:5a:c3:c1:6a:b0:28:fd:4f:86:15:f9:d0:90:72:10:60: 15:70:08:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZarF2cqEFALrVXQpkYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OTQ5ZDNjODczNTAzZGJkMjk2YmRhNjBlYjc3N2JjNTQx ZDUxNGUwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD EygxYmRhOGIyMmZiZThlZmNjZmIwY2EzOWE1N2Q1NjhjZGU1OTIyYmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq8D7VHpyod96+wECR77Zs41YPkI 9o3M3kGf/f3yCFB8Z//TRDdNABtsLPIUZJIR5i3eN3JWMgGp50yRIphVpvtemD2h kRI7Uxoochj5dcNM6LCuFPtFTxhjeU9Mi5pSZw6P9S5Y9Me4u7BCtxYpgNUxKt8Y /QrOniHEOwBVFdM5BWNr8za+txaquRdOSVRIKUHvnaUyHQuTWHGy7s9vTmuMRn12 MmigHzF/geBl1X1j9R9twOSgMD0sJm8GXXG3cHW8PmumIpBekzTX+FVQb70SIy2L eVR3GyC1xGBIUFw/AYjf1lH4NGRCCXa6nKU0/Yo1/oRilIH7eg0XN1SPOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvaiyL76O/M+wyjmlfVaM3lkiu0MB8GA1UdIwQY MBaAFEiUnTyHNQPb0pa9pg63d7xUHVFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWIt NTM0OTYyMDE5NDYwLzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWItNTM0OTYyMDE5NDYw LzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtTmyo0U Lc9c+WLjtJ//dSiPkDmIu7c149eIZ1RVnOROLCAW+shV8/6ffWz8I889GLixpHKa O5NQVh6nSj/G9/4tn51iWhiJpzl/nYfyHnGiCDQ8I2vvoAWlqGrXzXj697qdDs8p ejJVNOmKfjd9c6RjFqPRqL/c80zceS1NblS4MGWFDNgdZ9sg6lVZLVLd6x2MGUKU 7XXVMKzeEbYvNPr9j8h3IKy22vF5Es7FdAxaQ9m3D13d4TFNWvlOOy4jI/XZN5mT IPx2dmLgf2N+z3j7bKQjtPlHL3umG7gmH+TWMPE36Lje9DLjzm1aw8FqsCj9T4YV +dCQchBgFXAIgw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:59 2025 by rpki-client