This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json) Hash identifier: DOJCPw2rG/iLarmR4n7gvYbpAw8abshcZ6OO/9EMtVI= Subject key identifier: D3:58:81:BA:88:82:6F:8E:3F:40:4C:8A:DD:F8:89:30:26:FE:43:67 Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1 Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1 Certificate serial: 019AF12D2B04772D18FAAE2E41297005C85E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft Manifest number: 080D Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: eOho/ZYxbxSJoDQBCSqT89dCzCCBKQ8oYvjGyNfuXdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2b:04:77:2d:18:fa:ae:2e:41:29:70:05:c8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=d35881ba88826f8e3f404c8addf8893026fe4367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:35:73:a5:ab:b7:cd:8f:83:7b:ea:50:c2: 70:93:75:c6:98:cb:2a:cd:ce:e6:e2:0b:1f:7b:48: 52:2c:81:1f:01:fc:ec:28:5b:26:10:7e:7d:fe:f8: 00:fa:a1:44:a8:52:67:6e:c8:17:46:45:36:b5:5e: 6b:cc:18:bd:4e:40:43:35:32:b3:02:1e:72:51:ab: f4:9d:36:03:61:48:09:ba:b0:49:31:b4:27:a4:11: aa:a5:fd:f9:29:cc:2b:8c:56:94:72:ef:ea:5c:8b: 2c:be:b6:06:a9:e2:20:11:4f:4b:b7:6c:f8:9a:07: cc:50:f0:06:bc:d7:58:8a:aa:5a:f1:4a:63:1c:e6: 50:2c:8d:77:92:d7:c8:2f:ce:17:c7:2a:92:21:cf: cf:a7:30:2e:84:72:91:97:a8:07:35:26:27:f9:ac: f4:50:06:e2:4b:be:7f:29:6c:80:9a:56:d4:62:e1: 1e:11:0a:ba:35:2b:52:f1:c5:00:4e:d2:b0:70:2a: b2:47:67:c2:08:8c:10:3e:0c:44:3a:e7:5f:52:c4: 81:12:f1:de:a9:22:e1:e9:dd:23:cd:d7:1f:71:2e: 23:92:94:17:b7:9a:a9:4e:ec:9d:56:74:9c:3d:09: a3:34:2a:79:e1:03:37:d6:40:7e:23:fc:42:dd:02: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:81:BA:88:82:6F:8E:3F:40:4C:8A:DD:F8:89:30:26:FE:43:67 X509v3 Authority Key Identifier: keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:75:6a:5b:f1:ed:ff:f5:1a:25:33:5c:64:84:cc:42:ac:58: 8f:44:4e:9a:d1:de:1e:a6:55:18:f3:ff:d1:4a:bf:6e:51:49: 01:88:80:0e:46:99:35:6d:7c:b6:7f:db:ef:2c:42:e3:30:30: 57:a3:8b:6a:78:93:3c:e9:99:5e:48:59:ac:b0:0f:f9:38:80: 4c:94:dd:50:05:7a:42:2a:09:24:28:8b:85:27:60:78:cd:36: d6:09:c3:29:e9:45:8f:7e:8f:64:87:e7:1c:37:25:26:b2:c4: 92:a4:cf:f2:b7:bf:ae:c6:88:10:fe:42:9e:6f:fd:53:c6:88: 9b:5f:e2:fb:83:0a:8f:67:1c:79:f5:99:1e:4a:e1:e2:0b:db: c8:47:21:8e:81:5c:ba:6c:a1:01:17:f9:af:9b:e8:0b:fa:87: f7:b7:d6:fd:79:45:92:aa:09:68:92:83:c0:09:06:e4:11:88: ae:a8:96:40:de:44:74:54:ce:08:92:d0:8a:6c:0d:e8:b1:b0: 40:3e:3d:c9:7c:3a:fe:30:b0:c0:65:8f:33:78:c5:63:3c:cc: 4b:e2:46:e8:a9:5a:2a:e8:81:45:55:3a:19:5f:58:27:13:4d: d7:eb:00:bc:17:90:5c:74:8a:3c:e8:25:be:7b:9e:5b:43:0c: 69:be:70:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSsEdy0Y+q4uQSlwBcheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzQyZmM5OTczMGYyYTM0ZDA5ZWU0YjVlZTkyMTc4NzU2 Y2Q0ZDEwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EyhkMzU4ODFiYTg4ODI2ZjhlM2Y0MDRjOGFkZGY4ODkzMDI2ZmU0MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyso1c6Wrt82Pg3vqUMJwk3XGmMsq zc7m4gsfe0hSLIEfAfzsKFsmEH59/vgA+qFEqFJnbsgXRkU2tV5rzBi9TkBDNTKz Ah5yUav0nTYDYUgJurBJMbQnpBGqpf35KcwrjFaUcu/qXIssvrYGqeIgEU9Lt2z4 mgfMUPAGvNdYiqpa8UpjHOZQLI13ktfIL84XxyqSIc/PpzAuhHKRl6gHNSYn+az0 UAbiS75/KWyAmlbUYuEeEQq6NStS8cUATtKwcCqyR2fCCIwQPgxEOudfUsSBEvHe qSLh6d0jzdcfcS4jkpQXt5qpTuydVnScPQmjNCp54QM31kB+I/xC3QLIrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNYgbqIgm+OP0BMit34iTAm/kNnMB8GA1UdIwQY MBaAFLI0L8mXMPKjTQnuS17pIXh1bNTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYt N2E4ZTM4OTIwMjUwLzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYtN2E4ZTM4OTIwMjUw LzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHVqW/Ht //UaJTNcZITMQqxYj0ROmtHeHqZVGPP/0Uq/blFJAYiADkaZNW18tn/b7yxC4zAw V6OLaniTPOmZXkhZrLAP+TiATJTdUAV6QioJJCiLhSdgeM021gnDKelFj36PZIfn HDclJrLEkqTP8re/rsaIEP5Cnm/9U8aIm1/i+4MKj2ccefWZHkrh4gvbyEchjoFc umyhARf5r5voC/qH97fW/XlFkqoJaJKDwAkG5BGIrqiWQN5EdFTOCJLQimwN6LGw QD49yXw6/jCwwGWPM3jFYzzMS+JG6KlaKuiBRVU6GV9YJxNN1+sAvBeQXHSKPOgl vnueW0MMab5wMA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:21 2025 by rpki-client