This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft File: sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json) Hash identifier: ny1gJO1FP00Eb72enmbykiYvAs/aHf5b50KF5X/taAc= Subject key identifier: E5:48:C9:89:57:69:DC:86:DA:36:3D:FB:E8:E0:68:15:B5:35:BE:67 Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 Certificate issuer: /CN=b092c2c2350c590a4483fd44f250a77feeaab296 Certificate serial: 019AF2774C5D48CCD81671D186D767BD22BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft Manifest number: 0707 Signing time: Sat 06 Dec 2025 07:01:35 +0000 Manifest this update: Sat 06 Dec 2025 07:01:35 +0000 Manifest next update: Sun 07 Dec 2025 07:01:35 +0000 Files and hashes: 1: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: rLERXfAoSMsJ1EikKhP/PdzW8gHT5xHb5oo2h02hQuo=) 2: xPs0nDJe3R7-T_MTjBUDCpVD-P0.roa (hash: +ghVSq1vvvNC/Tdx1esVzP21pV4gSI94aIDbxITlk7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:4c:5d:48:cc:d8:16:71:d1:86:d7:67:bd:22:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296 Validity Not Before: Dec 6 07:01:35 2025 GMT Not After : Dec 7 07:01:35 2025 GMT Subject: CN=e548c9895769dc86da363dfbe8e06815b535be67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:82:a0:94:69:4c:8e:7c:9b:08:4e:86:67: 2e:6c:09:07:dc:7a:ec:0e:eb:79:98:f8:f1:92:b8: d2:2f:d8:67:e6:45:16:7c:e9:3b:ea:fe:11:75:18: 0e:8a:a0:e2:e7:fc:18:e3:d8:c2:73:4d:5e:87:f7: ff:cc:b9:ba:ce:cd:7c:4a:b4:6b:31:71:58:92:3b: 9f:4e:21:e7:3e:b2:df:8d:a7:dc:b0:81:50:ee:21: a5:52:fa:11:3a:2b:2a:ef:38:d7:ac:cf:46:68:a6: 82:51:d7:a6:be:3b:6d:51:85:5d:a9:b1:0a:a0:52: d9:99:8a:4d:0c:2d:31:5c:56:88:0b:19:f8:99:ec: 2d:c3:70:bb:ee:91:88:0f:34:b7:2a:18:05:c5:1b: 04:ff:e2:72:68:fe:35:83:f7:3d:0c:28:cf:11:45: 64:db:f0:39:34:a4:12:10:06:0e:8a:e8:c9:94:7a: b4:f2:27:5a:40:33:8f:9a:a5:a3:ee:92:12:d5:75: bb:73:a2:87:c3:29:8a:28:27:73:39:5a:41:66:d0: ce:d6:33:0e:ce:fb:fc:fe:a6:f6:0c:ce:6c:cf:93: f0:b1:48:81:d9:4e:98:e0:94:c4:58:c4:44:07:99: 73:34:85:5b:86:12:23:b4:ee:51:d7:f5:f3:e3:c9: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:48:C9:89:57:69:DC:86:DA:36:3D:FB:E8:E0:68:15:B5:35:BE:67 X509v3 Authority Key Identifier: keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:90:f3:60:fb:ea:a4:72:06:68:57:cd:1b:fc:65:b5:45:4c: d2:32:a0:c4:62:8d:27:b3:d6:d0:10:b9:be:b4:b5:cd:b3:9e: c6:44:c4:db:78:eb:57:ad:1d:b0:6d:70:42:ac:66:5f:8b:45: 47:cc:6b:a2:27:30:ff:dc:3a:b1:33:31:59:ac:54:47:fa:27: a3:49:e0:36:b2:48:8c:65:3f:1b:20:55:1b:3f:4c:ab:83:3e: 3d:8f:1b:c0:94:79:39:ba:fa:d0:13:89:54:b1:e4:2e:4e:62: 86:f5:f6:db:77:f3:41:53:24:7a:50:19:30:f2:71:f4:04:03: aa:b9:d0:d4:78:95:4c:0f:77:d8:39:9c:2b:2f:88:8e:68:6e: 41:0e:dd:27:69:82:98:5e:81:42:be:a3:c0:df:43:f8:3b:8b: 11:b4:88:1b:1f:ef:65:cb:fc:ed:2b:df:ec:24:ba:cb:8e:36: 8d:ee:45:c5:97:0c:1f:20:2f:9f:52:1f:c3:c3:61:5a:f7:26: e9:e0:5f:24:b0:6b:2a:01:4b:e3:26:4b:11:23:18:87:00:94: ec:0d:f7:f8:af:54:e5:8d:3d:70:65:83:29:1d:4d:45:1e:23: 97:de:d7:78:68:75:86:cf:cd:9d:1d:b9:bc:56:a1:57:d8:2a: 0a:62:e6:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0xdSMzYFnHRhtdnvSK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTJjMmMyMzUwYzU5MGE0NDgzZmQ0NGYyNTBhNzdmZWVh YWIyOTYwHhcNMjUxMjA2MDcwMTM1WhcNMjUxMjA3MDcwMTM1WjAzMTEwLwYDVQQD EyhlNTQ4Yzk4OTU3NjlkYzg2ZGEzNjNkZmJlOGUwNjgxNWI1MzViZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZmCoJRpTI58mwhOhmcubAkH3Hrs Dut5mPjxkrjSL9hn5kUWfOk76v4RdRgOiqDi5/wY49jCc01eh/f/zLm6zs18SrRr MXFYkjufTiHnPrLfjafcsIFQ7iGlUvoROisq7zjXrM9GaKaCUdemvjttUYVdqbEK oFLZmYpNDC0xXFaICxn4mewtw3C77pGIDzS3KhgFxRsE/+JyaP41g/c9DCjPEUVk 2/A5NKQSEAYOiujJlHq08idaQDOPmqWj7pIS1XW7c6KHwymKKCdzOVpBZtDO1jMO zvv8/qb2DM5sz5PwsUiB2U6Y4JTEWMREB5lzNIVbhhIjtO5R1/Xz48l7AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVIyYlXadyG2jY9++jgaBW1Nb5nMB8GA1UdIwQY MBaAFLCSwsI1DFkKRIP9RPJQp3/uqrKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2Ut NDllYmViM2FmMGVhLzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2UtNDllYmViM2FmMGVh LzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJDzYPvq pHIGaFfNG/xltUVM0jKgxGKNJ7PW0BC5vrS1zbOexkTE23jrV60dsG1wQqxmX4tF R8xroicw/9w6sTMxWaxUR/ono0ngNrJIjGU/GyBVGz9Mq4M+PY8bwJR5Obr60BOJ VLHkLk5ihvX223fzQVMkelAZMPJx9AQDqrnQ1HiVTA932DmcKy+IjmhuQQ7dJ2mC mF6BQr6jwN9D+DuLEbSIGx/vZcv87Svf7CS6y442je5FxZcMHyAvn1Ifw8NhWvcm 6eBfJLBrKgFL4yZLESMYhwCU7A33+K9U5Y09cGWDKR1NRR4jl97XeGh1hs/NnR25 vFahV9gqCmLmIg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:14 2025 by rpki-client