This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json) Hash identifier: iFgy3lsc1yI7XFq+a7Fd/Kc9lb71PaxyylTr10b3gcI= Subject key identifier: ED:63:BE:DB:23:EA:7D:C0:1D:21:C6:71:4E:EA:8B:98:A5:B1:EC:D9 Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6 Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6 Certificate serial: 019AF3C0561D0686CBD63685B0F80D339B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft Manifest number: 0D40 Signing time: Sat 06 Dec 2025 13:00:59 +0000 Manifest this update: Sat 06 Dec 2025 13:00:59 +0000 Manifest next update: Sun 07 Dec 2025 13:00:59 +0000 Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: k7UCtaj5IPDZ4meJYVFWmzBpbWI5sENtyu+oFxGUECs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:56:1d:06:86:cb:d6:36:85:b0:f8:0d:33:9b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6 Validity Not Before: Dec 6 13:00:59 2025 GMT Not After : Dec 7 13:00:59 2025 GMT Subject: CN=ed63bedb23ea7dc01d21c6714eea8b98a5b1ecd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:b4:b7:df:29:d6:83:fe:36:6e:79:26:d1: 7b:3e:f0:ea:40:13:b6:e2:a6:33:6c:24:27:ac:30: 3d:07:ef:77:08:a6:b6:f8:e5:f1:e9:6f:e9:31:ec: 45:52:14:b4:f7:7e:63:e1:51:a2:4c:65:d0:7c:24: 62:6e:ee:2d:bd:ba:ec:66:db:4d:26:a6:2a:04:ad: 42:11:86:e2:ac:7c:b4:d0:b3:0d:8d:2a:01:34:19: ed:d5:34:9b:31:37:f4:8f:db:4d:3f:40:4f:75:4f: 1b:a0:16:e3:c1:cc:9c:aa:ad:00:b0:86:ac:95:05: 17:2c:96:ca:e9:d3:f1:e2:c5:97:32:cb:4a:99:63: f9:47:ce:3b:7f:a9:44:ac:b8:e1:5c:8d:c7:73:c7: 1c:fe:0e:80:a0:86:42:91:21:0c:87:d7:32:20:cd: c8:2b:c7:f1:59:a4:74:00:ab:a9:88:68:15:cf:7b: e9:34:17:1b:74:16:fa:67:a1:35:ac:ff:78:fd:ef: 3d:c2:f9:ca:e8:81:38:c0:9f:d9:e7:40:04:7a:57: 60:2c:69:3b:a5:71:0c:44:f3:75:78:64:81:31:ca: be:fe:38:fb:a9:a4:a7:e4:0a:18:d8:0a:e8:9f:c0: cb:e1:3e:fe:35:d1:b0:cd:3b:2b:6f:bf:2d:c2:09: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:63:BE:DB:23:EA:7D:C0:1D:21:C6:71:4E:EA:8B:98:A5:B1:EC:D9 X509v3 Authority Key Identifier: keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:71:d3:70:12:45:25:9f:07:49:03:3a:32:80:2c:f3:bc:98: 34:d4:3d:20:c0:16:7c:8e:bc:30:8e:0e:86:d0:64:f8:e3:a6: 9f:47:aa:10:90:ec:49:29:0f:05:16:6d:06:aa:95:7b:b7:30: 15:06:60:86:d1:59:17:d2:e9:b8:40:a8:e2:c0:cf:5f:db:d9: fe:16:b3:ac:71:f3:b7:06:9d:c5:d5:f3:75:12:39:7d:cc:15: 5e:09:ad:f0:e1:be:e3:14:cd:27:09:51:80:af:08:06:32:20: cc:52:f4:44:2f:08:1d:e6:88:f2:98:a6:54:0f:d7:bc:28:93: e7:6e:fb:95:15:88:69:10:78:30:c7:80:19:93:62:c1:3e:a6: 65:06:c7:5a:45:60:f6:cd:e0:4b:40:22:2e:0a:c6:01:7a:27: 4d:cb:ba:03:61:49:4f:13:ae:56:db:b1:f9:55:8a:3e:29:6a: 89:8a:f7:c6:5a:aa:88:ec:65:66:4e:d9:12:06:c9:ea:b0:49: 1b:72:41:1c:2e:d1:05:aa:3c:a4:ce:b5:7b:8e:bd:38:15:04: 75:8c:17:45:7c:05:21:3f:ae:bf:12:c8:0b:09:79:3b:ac:9b: ba:ce:b1:03:dc:d5:c2:50:c3:da:9a:f7:1d:3f:9e:e5:24:51: 1f:aa:1d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFYdBobL1jaFsPgNM5tVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhM2M0MjY4M2MwODkxMzVhNDllZjFmNTY1M2NiOWNlNWVi NzBiZTYwHhcNMjUxMjA2MTMwMDU5WhcNMjUxMjA3MTMwMDU5WjAzMTEwLwYDVQQD EyhlZDYzYmVkYjIzZWE3ZGMwMWQyMWM2NzE0ZWVhOGI5OGE1YjFlY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBS0t98p1oP+Nm55JtF7PvDqQBO2 4qYzbCQnrDA9B+93CKa2+OXx6W/pMexFUhS0935j4VGiTGXQfCRibu4tvbrsZttN JqYqBK1CEYbirHy00LMNjSoBNBnt1TSbMTf0j9tNP0BPdU8boBbjwcycqq0AsIas lQUXLJbK6dPx4sWXMstKmWP5R847f6lErLjhXI3Hc8cc/g6AoIZCkSEMh9cyIM3I K8fxWaR0AKupiGgVz3vpNBcbdBb6Z6E1rP94/e89wvnK6IE4wJ/Z50AEeldgLGk7 pXEMRPN1eGSBMcq+/jj7qaSn5AoY2Aron8DL4T7+NdGwzTsrb78twgm9DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1jvtsj6n3AHSHGcU7qi5ilsezZMB8GA1UdIwQY MBaAFEo8Qmg8CJE1pJ7x9WU8uc5etwvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83NTJkM2UtOTEyNi00MWQ0LWI0NWIt NDc5MDlkZDU3ODAwLzEvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83NTJkM2UtOTEyNi00MWQ0LWI0NWItNDc5MDlkZDU3ODAw LzEvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXHTcBJF JZ8HSQM6MoAs87yYNNQ9IMAWfI68MI4OhtBk+OOmn0eqEJDsSSkPBRZtBqqVe7cw FQZghtFZF9LpuECo4sDPX9vZ/hazrHHztwadxdXzdRI5fcwVXgmt8OG+4xTNJwlR gK8IBjIgzFL0RC8IHeaI8pimVA/XvCiT5277lRWIaRB4MMeAGZNiwT6mZQbHWkVg 9s3gS0AiLgrGAXonTcu6A2FJTxOuVtux+VWKPilqiYr3xlqqiOxlZk7ZEgbJ6rBJ G3JBHC7RBao8pM61e469OBUEdYwXRXwFIT+uvxLICwl5O6ybus6xA9zVwlDD2pr3 HT+e5SRRH6od4A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:47 2025 by rpki-client