This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json) Hash identifier: oeXcuws+sKM9WuifHr2d0DhXNSyhQ1vwlyiBFLLnHR8= Subject key identifier: 29:7D:C8:49:54:60:33:37:52:61:97:7A:31:01:69:0C:78:E0:F0:97 Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Certificate serial: 019AF23F5E452ED65810AD24A11A27FB041B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft Manifest number: 109A Signing time: Sat 06 Dec 2025 06:00:30 +0000 Manifest this update: Sat 06 Dec 2025 06:00:30 +0000 Manifest next update: Sun 07 Dec 2025 06:00:30 +0000 Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=) 2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=) 3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: vJIZFNbhzmweBESqntscASTLI8eE9nA9tCrI7zuYjFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5e:45:2e:d6:58:10:ad:24:a1:1a:27:fb:04:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee Validity Not Before: Dec 6 06:00:30 2025 GMT Not After : Dec 7 06:00:30 2025 GMT Subject: CN=297dc849546033375261977a3101690c78e0f097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cf:94:d8:8d:8f:5c:30:7f:8c:91:76:dd:88: 8d:09:13:c1:68:ac:f8:1f:4d:9b:ce:b6:33:64:d4: 13:d9:11:f5:a7:9a:a7:bb:e0:20:a4:36:61:b3:52: 58:99:cd:72:c8:ed:66:a1:59:42:7a:1c:47:f6:05: 82:d5:9b:0d:17:a6:17:03:6a:e3:a6:a5:48:65:4f: d4:d1:aa:35:d7:c5:0a:f6:4a:d2:d4:4c:70:e6:20: 5f:bf:b2:47:ca:53:62:a2:66:3d:a6:b3:81:ff:fe: 06:83:21:12:0b:70:fd:ab:77:5b:4d:77:15:80:36: 59:21:53:54:4f:c8:1e:44:30:b3:11:e2:15:fb:a0: 81:c3:57:2b:d4:23:62:0f:d8:f9:56:39:73:7b:7f: 2a:cb:b4:32:6f:e8:f1:68:3d:6e:b3:9a:30:cd:d6: 78:d7:fb:b8:0a:2f:dd:79:7f:6f:b0:32:19:f2:33: e1:94:7c:59:d0:7b:df:9f:22:0c:61:c3:d7:8c:2a: ad:2e:a5:8d:7a:11:d5:bf:d6:5e:56:c5:ce:17:1c: 94:a1:db:03:09:de:5c:40:45:4e:41:5b:88:48:8e: ee:b6:bf:2c:c1:55:32:43:b9:3b:0a:fa:fa:2b:5a: 2b:79:61:55:e5:6c:58:80:cb:0e:9f:2b:60:77:32: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:C8:49:54:60:33:37:52:61:97:7A:31:01:69:0C:78:E0:F0:97 X509v3 Authority Key Identifier: keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f7:7b:95:ff:76:98:b3:64:69:3c:1c:34:93:50:44:60:3c: 0c:cc:d2:5c:66:9b:a5:b7:5e:c1:ad:03:fc:f6:eb:b7:01:e3: 8a:69:2e:76:6c:c4:ed:c1:c4:0d:7e:63:69:ab:87:7d:9b:1a: 53:d0:f6:a1:70:62:28:2d:62:2d:a8:34:50:41:1a:86:87:a8: de:e8:75:14:30:3b:73:c7:ab:7e:81:ba:9c:5c:7f:64:2c:5e: 96:de:1a:78:91:3c:f0:b1:a3:a0:8c:72:b7:f7:b8:ec:db:65: e2:19:0c:da:4b:15:a8:4b:4b:ef:4e:6b:63:8a:cb:c4:38:35: 0c:01:b1:f9:c0:09:b5:41:4f:d5:0c:58:3b:a6:ef:25:39:5a: 2c:10:79:b2:c3:f8:f3:0a:7c:e9:ae:5d:cc:dc:53:8d:a3:3f: 57:47:80:df:8a:d3:11:40:66:c5:7f:3f:1a:a9:11:68:33:e3: 99:10:30:19:80:44:78:af:f3:a9:b4:b1:9f:6b:b7:8e:6b:f1: c9:e6:b2:97:70:7b:b2:89:8b:b7:71:ae:a6:a6:a4:3c:94:5b: 3d:e5:4a:6f:0e:c2:2f:a5:15:5d:fe:d1:a4:ff:64:05:ea:f0: ba:39:4b:dc:d5:eb:e2:24:00:c8:79:c6:fb:ec:d2:bb:4b:75: b2:90:f4:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP15FLtZYEK0koRon+wQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi Mjc1ZWUwHhcNMjUxMjA2MDYwMDMwWhcNMjUxMjA3MDYwMDMwWjAzMTEwLwYDVQQD EygyOTdkYzg0OTU0NjAzMzM3NTI2MTk3N2EzMTAxNjkwYzc4ZTBmMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9c+U2I2PXDB/jJF23YiNCRPBaKz4 H02bzrYzZNQT2RH1p5qnu+AgpDZhs1JYmc1yyO1moVlCehxH9gWC1ZsNF6YXA2rj pqVIZU/U0ao118UK9krS1Exw5iBfv7JHylNiomY9prOB//4GgyESC3D9q3dbTXcV gDZZIVNUT8geRDCzEeIV+6CBw1cr1CNiD9j5Vjlze38qy7Qyb+jxaD1us5owzdZ4 1/u4Ci/deX9vsDIZ8jPhlHxZ0HvfnyIMYcPXjCqtLqWNehHVv9ZeVsXOFxyUodsD Cd5cQEVOQVuISI7utr8swVUyQ7k7Cvr6K1oreWFV5WxYgMsOnytgdzLWlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl9yElUYDM3UmGXejEBaQx44PCXMB8GA1UdIwQY MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvd7lf92 mLNkaTwcNJNQRGA8DMzSXGabpbdewa0D/PbrtwHjimkudmzE7cHEDX5jaauHfZsa U9D2oXBiKC1iLag0UEEahoeo3uh1FDA7c8erfoG6nFx/ZCxelt4aeJE88LGjoIxy t/e47Ntl4hkM2ksVqEtL705rY4rLxDg1DAGx+cAJtUFP1QxYO6bvJTlaLBB5ssP4 8wp86a5dzNxTjaM/V0eA34rTEUBmxX8/GqkRaDPjmRAwGYBEeK/zqbSxn2u3jmvx yeayl3B7somLt3GupqakPJRbPeVKbw7CL6UVXf7RpP9kBerwujlL3NXr4iQAyHnG ++zSu0t1spD0Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:39:21 2025 by rpki-client