This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft File: SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json) Hash identifier: 3rHCNnTOOUwU/vs3j+DzbaAvZ/OKqdoKCAprzrGxzsU= Subject key identifier: 4E:BB:32:46:29:F7:44:34:23:C7:29:DE:C1:B0:E0:FE:C8:63:0A:74 Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E Certificate issuer: /CN=48949d3c873503dbd296bda60eb777bc541d514e Certificate serial: 019B22F50ED765494AEC3A264E5E1405F7E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft Manifest number: 0536 Signing time: Mon 15 Dec 2025 17:00:43 +0000 Manifest this update: Mon 15 Dec 2025 17:00:43 +0000 Manifest next update: Tue 16 Dec 2025 17:00:43 +0000 Files and hashes: 1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: HYBcPDAoXtsfdfHQ/P5CMy1GQGW7zCPSJ2w3Q+Ll6Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:0e:d7:65:49:4a:ec:3a:26:4e:5e:14:05:f7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e Validity Not Before: Dec 15 17:00:43 2025 GMT Not After : Dec 16 17:00:43 2025 GMT Subject: CN=4ebb324629f7443423c729dec1b0e0fec8630a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:c6:b6:a5:6a:a9:63:85:67:8c:a3:fa:0f: 67:99:e0:35:8a:93:90:d2:af:93:8b:03:f5:3d:2e: 0b:19:88:6c:db:eb:f4:42:a4:d7:c4:ab:15:81:1e: 7c:69:d8:e3:31:0e:3c:25:45:cc:c2:b9:6e:71:51: fb:e3:6f:08:a5:d4:2f:39:46:78:9e:a5:08:f5:33: 38:fe:36:4b:97:a9:18:88:d0:5b:57:3e:33:2c:af: 7b:80:d5:a8:71:db:0e:14:ca:09:8f:fb:11:da:b5: 71:f1:f5:92:8c:f6:a4:ba:a5:90:52:b5:c0:7f:58: de:e7:2b:06:77:cf:53:7c:1d:d5:d4:da:05:9d:d3: 0a:b6:ce:0d:b5:5c:21:bf:65:b5:8d:40:c4:81:c7: a1:6e:1a:46:50:b1:a2:38:94:80:f0:e9:0a:94:c2: f4:cb:1d:f0:1d:b9:a0:a5:72:11:48:52:fa:21:e6: 62:8a:41:62:3d:a0:79:3a:17:10:72:80:05:0b:02: a2:26:2f:17:45:62:bc:51:ad:24:c5:8a:ba:9c:7c: ee:31:31:09:28:cf:fa:19:f6:a9:f1:87:6f:72:bc: 0d:d4:de:bf:81:8e:85:9b:15:ad:f3:d7:70:3f:b4: 5e:aa:6b:30:b9:83:b0:81:fe:3a:86:6c:86:d6:47: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BB:32:46:29:F7:44:34:23:C7:29:DE:C1:B0:E0:FE:C8:63:0A:74 X509v3 Authority Key Identifier: keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:86:ac:f7:98:4e:29:4a:48:e1:49:e8:ab:b7:e3:32:1c:76: a0:b1:b3:48:82:73:bb:24:c2:45:4e:55:a8:15:9c:28:6d:26: 10:5a:8d:f9:06:e2:2d:de:9a:63:40:38:31:c8:ce:80:2b:4a: 44:0d:ff:ff:ac:75:0d:46:63:68:16:e6:f4:be:b4:5b:89:13: 33:5d:e2:01:8b:1c:5f:2d:08:32:55:11:3f:ea:ab:67:26:be: 37:f8:4d:8f:35:b7:75:7f:05:dc:5a:29:ae:62:31:e0:2f:f4: b6:8a:0e:c8:5b:3f:64:b2:11:ba:82:1a:1d:5c:27:da:1a:af: f9:39:bc:a6:59:af:0a:20:59:fc:88:9f:f8:41:4f:f9:57:bc: 8a:a9:b7:c4:d0:cf:f6:4e:a4:4d:3f:df:e9:df:47:a6:c1:71: 57:78:80:c7:24:a0:34:b9:e1:d3:47:ee:79:99:18:c6:fd:c3: bf:60:83:bd:0c:df:a3:a7:d3:4c:e7:7b:7c:06:34:fe:e7:2e: ed:20:01:76:f7:96:c7:05:32:8a:f8:1c:74:f6:1c:a0:e9:f2: aa:23:14:f2:ae:b7:d9:55:59:02:1a:ba:78:d4:44:b3:8e:b0: 6a:89:2d:87:a3:1d:07:6a:a0:83:d3:56:f4:ed:0a:db:a2:41: 0a:08:92:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Q7XZUlK7DomTl4UBffoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OTQ5ZDNjODczNTAzZGJkMjk2YmRhNjBlYjc3N2JjNTQx ZDUxNGUwHhcNMjUxMjE1MTcwMDQzWhcNMjUxMjE2MTcwMDQzWjAzMTEwLwYDVQQD Eyg0ZWJiMzI0NjI5Zjc0NDM0MjNjNzI5ZGVjMWIwZTBmZWM4NjMwYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpXGtqVqqWOFZ4yj+g9nmeA1ipOQ 0q+TiwP1PS4LGYhs2+v0QqTXxKsVgR58adjjMQ48JUXMwrlucVH7428IpdQvOUZ4 nqUI9TM4/jZLl6kYiNBbVz4zLK97gNWocdsOFMoJj/sR2rVx8fWSjPakuqWQUrXA f1je5ysGd89TfB3V1NoFndMKts4NtVwhv2W1jUDEgcehbhpGULGiOJSA8OkKlML0 yx3wHbmgpXIRSFL6IeZiikFiPaB5OhcQcoAFCwKiJi8XRWK8Ua0kxYq6nHzuMTEJ KM/6Gfap8YdvcrwN1N6/gY6FmxWt89dwP7ReqmswuYOwgf46hmyG1keCAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE67MkYp90Q0I8cp3sGw4P7IYwp0MB8GA1UdIwQY MBaAFEiUnTyHNQPb0pa9pg63d7xUHVFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWIt NTM0OTYyMDE5NDYwLzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWItNTM0OTYyMDE5NDYw LzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4as95hO KUpI4Unoq7fjMhx2oLGzSIJzuyTCRU5VqBWcKG0mEFqN+QbiLd6aY0A4McjOgCtK RA3//6x1DUZjaBbm9L60W4kTM13iAYscXy0IMlURP+qrZya+N/hNjzW3dX8F3Fop rmIx4C/0tooOyFs/ZLIRuoIaHVwn2hqv+Tm8plmvCiBZ/Iif+EFP+Ve8iqm3xNDP 9k6kTT/f6d9HpsFxV3iAxySgNLnh00fueZkYxv3Dv2CDvQzfo6fTTOd7fAY0/ucu 7SABdveWxwUyivgcdPYcoOnyqiMU8q632VVZAhq6eNREs46waokth6MdB2qgg9NW 9O0K26JBCgiSgw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:13:03 2025 by rpki-client