This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json) Hash identifier: HjLLCssY4b2KeJ9yLPfMH/Kw75gENfV3HleiNYTgEi8= Subject key identifier: 11:77:43:3D:44:2E:4C:9A:BC:0E:19:C4:06:9F:A4:67:FE:1E:F5:50 Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0 Certificate serial: 019AF5AF2146DB19F91AA86BDBC7AE5F243F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft Manifest number: 03E8 Signing time: Sat 06 Dec 2025 22:01:26 +0000 Manifest this update: Sat 06 Dec 2025 22:01:26 +0000 Manifest next update: Sun 07 Dec 2025 22:01:26 +0000 Files and hashes: 1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: 5CbKzrZQlo9AUEkmBNM+v9ElV0Y29U88AFGMigGUGrU=) 2: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=) 3: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=) 4: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (hash: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:21:46:db:19:f9:1a:a8:6b:db:c7:ae:5f:24:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0 Validity Not Before: Dec 6 22:01:26 2025 GMT Not After : Dec 7 22:01:26 2025 GMT Subject: CN=1177433d442e4c9abc0e19c4069fa467fe1ef550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:63:db:c8:c9:d4:b3:89:24:ea:77:4a:10: 7b:9f:be:02:6e:0a:9b:3a:35:41:e9:c9:a6:85:db: 3a:38:76:64:8b:67:a0:1f:b1:8e:5e:42:a4:d8:96: 5d:ce:20:9a:cb:c8:9d:66:1a:11:cf:d8:f6:bd:30: c1:77:ba:90:42:82:3b:27:88:2b:f2:cf:fc:73:aa: 00:30:39:0a:31:5f:70:d5:ec:09:1c:07:d7:d6:af: 53:6a:b0:f1:f2:8f:62:b3:b2:98:7e:40:c5:8a:38: 1f:b6:07:12:ec:d3:13:c6:59:40:01:ae:4a:4a:aa: 46:a0:ae:62:c3:1d:c3:2f:30:91:a2:09:17:fa:77: 55:76:99:9a:c9:34:53:67:4f:e9:42:a0:8c:98:81: 18:9b:e0:2b:31:49:eb:88:d1:2f:ac:de:26:bf:d3: 90:9d:cc:9d:6a:44:b0:c6:9f:d8:8b:5b:bb:29:59: ec:40:2d:dc:62:d8:fd:cd:08:34:fc:9a:b8:f7:42: f2:d0:90:70:b6:65:45:88:3e:0c:ad:bf:68:04:06: fe:16:7c:4b:71:4e:47:50:85:ab:7e:5e:2f:c3:e6: 8f:37:32:a4:a3:17:0a:74:0c:7f:bf:cd:13:0d:50: a9:2f:0f:b7:0a:0b:ae:75:52:40:6c:e4:35:34:78: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:77:43:3D:44:2E:4C:9A:BC:0E:19:C4:06:9F:A4:67:FE:1E:F5:50 X509v3 Authority Key Identifier: keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e0:e0:07:f4:de:f1:b3:a0:53:05:2a:55:26:47:82:2e:24: 40:21:7f:8b:6b:ec:ee:d5:2f:60:05:30:c3:a0:d7:2e:d0:c1: aa:15:ba:7f:fc:92:36:3b:8f:7c:bc:48:ec:35:b9:80:14:65: fd:80:c5:7b:74:92:7f:02:11:97:eb:1c:45:43:43:a3:8b:d0: 17:2d:0d:46:d9:18:91:c8:54:d0:9a:39:d0:07:ac:1c:c0:20: e7:d1:46:4d:99:de:90:68:81:3e:9d:1e:e8:32:8b:79:d1:e7: 30:01:f7:db:7c:55:0f:55:5c:02:eb:fe:51:ed:50:52:4b:70: ab:2f:a4:33:07:b7:42:c2:03:a8:20:08:9f:0b:a3:76:60:e1: ea:44:64:53:10:5c:33:b8:74:0a:83:1e:c0:9c:e5:42:aa:cf: 06:c0:8f:92:c3:25:24:79:15:98:24:55:0d:e7:60:24:73:54: b7:a3:dc:e0:d3:61:b7:4c:8e:e7:0e:da:85:51:75:d1:f6:fb: c5:ff:ea:81:67:58:3a:16:54:e0:b6:73:97:6c:45:79:03:a1: 29:48:28:37:61:4b:e7:2f:7b:8c:25:83:41:41:d8:e6:1e:31: 6d:19:19:d8:9f:f4:79:b7:e0:2d:01:c8:66:b1:5b:e3:e8:aa: be:fd:85:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ryFG2xn5Gqhr28euXyQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi ZDgxYzAwHhcNMjUxMjA2MjIwMTI2WhcNMjUxMjA3MjIwMTI2WjAzMTEwLwYDVQQD EygxMTc3NDMzZDQ0MmU0YzlhYmMwZTE5YzQwNjlmYTQ2N2ZlMWVmNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Fj28jJ1LOJJOp3ShB7n74Cbgqb OjVB6cmmhds6OHZki2egH7GOXkKk2JZdziCay8idZhoRz9j2vTDBd7qQQoI7J4gr 8s/8c6oAMDkKMV9w1ewJHAfX1q9TarDx8o9is7KYfkDFijgftgcS7NMTxllAAa5K SqpGoK5iwx3DLzCRogkX+ndVdpmayTRTZ0/pQqCMmIEYm+ArMUnriNEvrN4mv9OQ ncydakSwxp/Yi1u7KVnsQC3cYtj9zQg0/Jq490Ly0JBwtmVFiD4Mrb9oBAb+FnxL cU5HUIWrfl4vw+aPNzKkoxcKdAx/v80TDVCpLw+3CguudVJAbOQ1NHhFjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF3Qz1ELkyavA4ZxAafpGf+HvVQMB8GA1UdIwQY MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt MmNhM2FhNzFlYzVmLzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXODgB/Te 8bOgUwUqVSZHgi4kQCF/i2vs7tUvYAUww6DXLtDBqhW6f/ySNjuPfLxI7DW5gBRl /YDFe3SSfwIRl+scRUNDo4vQFy0NRtkYkchU0Jo50AesHMAg59FGTZnekGiBPp0e 6DKLedHnMAH323xVD1VcAuv+Ue1QUktwqy+kMwe3QsIDqCAInwujdmDh6kRkUxBc M7h0CoMewJzlQqrPBsCPksMlJHkVmCRVDedgJHNUt6Pc4NNht0yO5w7ahVF10fb7 xf/qgWdYOhZU4LZzl2xFeQOhKUgoN2FL5y97jCWDQUHY5h4xbRkZ2J/0ebfgLQHI ZrFb4+iqvv2FqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:45:02 2025 by rpki-client