This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json) Hash identifier: ntka50z4f+oiN4v1zuATkpLuOhg6PfHrTW4jGvOZLl4= Subject key identifier: 44:53:46:82:2F:E0:58:A6:F2:7E:C8:02:88:D8:0F:E3:7B:EF:CD:F2 Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8 Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8 Certificate serial: 019AF163DDECB1510ACFD923056D84D37DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft Manifest number: 15AE Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=) 2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: xIf+hITz/wTJhWZZpdjzTAJf+uk2WMA8f0vTz1z9O4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dd:ec:b1:51:0a:cf:d9:23:05:6d:84:d3:7d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=445346822fe058a6f27ec80288d80fe37befcdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:32:26:40:03:10:4c:fa:77:cf:30:1a:a8: b3:e0:fd:d4:89:24:7b:fe:b2:af:fc:e2:7d:c7:69: 35:d9:ba:0a:71:de:3d:ab:4f:97:48:e1:e0:6d:99: 72:b8:c5:c5:72:91:63:19:10:b4:33:a4:48:66:53: b7:78:1a:92:4f:c1:8b:aa:04:cc:7f:a2:b4:9b:c5: d8:b7:7a:c6:d4:a5:93:60:d2:3b:b1:8f:da:3d:94: fa:f6:83:7c:c6:dc:87:53:69:16:4e:ec:a4:a9:54: 34:29:42:83:17:af:c2:10:b4:65:55:50:80:93:56: 84:99:75:37:b7:d9:d1:0f:ac:60:40:76:66:82:aa: f8:e5:40:97:1b:71:82:6b:50:82:09:53:39:3e:ba: 43:a7:9c:7d:99:4c:5c:3d:ec:75:4b:e1:95:07:b8: ea:ea:e5:db:58:35:e4:c5:fb:b6:d3:b0:14:f9:54: b4:86:10:8a:c2:40:0b:21:1c:d6:42:09:3d:a7:6d: 71:bc:89:b3:8e:ea:d0:8f:e2:c8:43:b4:a3:5c:26: ad:2a:71:e7:54:bd:53:46:f4:e3:6a:b3:af:b7:48: 10:6b:c0:93:71:9b:03:46:bd:48:0b:e8:1a:15:1f: fd:49:14:63:3d:5b:6b:fa:ab:2e:c0:11:72:76:99: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:53:46:82:2F:E0:58:A6:F2:7E:C8:02:88:D8:0F:E3:7B:EF:CD:F2 X509v3 Authority Key Identifier: keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:48:8b:ef:b9:4d:1a:08:fb:b9:1a:b3:bc:6d:f9:d5:d0:ec: b2:44:fb:ad:0d:b5:f0:de:2b:ef:f7:da:e0:f8:9a:b3:a7:40: c2:1d:48:11:50:32:0c:42:58:ad:7f:d2:84:b1:eb:0c:f6:37: de:e8:7f:81:e7:95:64:5d:10:5d:9e:37:66:6f:f9:37:28:dc: b4:b0:7d:ee:6b:ca:23:62:01:46:7e:49:42:8a:fc:1a:72:14: 03:45:0a:a1:a3:6c:7b:cb:a1:c6:3a:56:1c:e9:26:aa:25:4a: 10:22:59:da:ff:2d:21:ce:5b:a7:19:17:65:7c:82:7a:c5:0d: 6e:80:c7:b0:54:4b:1c:37:ad:bd:f5:cc:1a:77:65:09:58:86: 16:c8:36:f5:05:61:17:c3:71:fd:9d:5e:9e:6d:02:4a:04:ee: be:63:0a:41:4b:a7:48:26:4b:3a:7d:94:2a:27:8b:23:52:c0: a7:4a:83:ab:f8:af:db:83:62:40:20:d3:2b:2d:cd:61:d1:33: 68:37:f4:a8:ba:fb:95:66:08:c6:c8:c1:78:32:e8:35:8b:5b: 8c:55:69:ac:b0:2b:cc:14:a6:44:e8:07:f1:46:28:8d:d4:41: c2:21:ea:75:db:e7:34:9b:0e:59:13:a9:d1:ed:3e:bd:b5:32: 9d:4b:5d:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY93ssVEKz9kjBW2E0329MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx N2FjZTgwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD Eyg0NDUzNDY4MjJmZTA1OGE2ZjI3ZWM4MDI4OGQ4MGZlMzdiZWZjZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSYyJkADEEz6d88wGqiz4P3UiSR7 /rKv/OJ9x2k12boKcd49q0+XSOHgbZlyuMXFcpFjGRC0M6RIZlO3eBqST8GLqgTM f6K0m8XYt3rG1KWTYNI7sY/aPZT69oN8xtyHU2kWTuykqVQ0KUKDF6/CELRlVVCA k1aEmXU3t9nRD6xgQHZmgqr45UCXG3GCa1CCCVM5PrpDp5x9mUxcPex1S+GVB7jq 6uXbWDXkxfu207AU+VS0hhCKwkALIRzWQgk9p21xvImzjurQj+LIQ7SjXCatKnHn VL1TRvTjarOvt0gQa8CTcZsDRr1IC+gaFR/9SRRjPVtr+qsuwBFydplS+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERTRoIv4Fim8n7IAojYD+N7783yMB8GA1UdIwQY MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEiL77lN Ggj7uRqzvG351dDsskT7rQ218N4r7/fa4Pias6dAwh1IEVAyDEJYrX/ShLHrDPY3 3uh/geeVZF0QXZ43Zm/5NyjctLB97mvKI2IBRn5JQor8GnIUA0UKoaNse8uhxjpW HOkmqiVKECJZ2v8tIc5bpxkXZXyCesUNboDHsFRLHDetvfXMGndlCViGFsg29QVh F8Nx/Z1enm0CSgTuvmMKQUunSCZLOn2UKieLI1LAp0qDq/iv24NiQCDTKy3NYdEz aDf0qLr7lWYIxsjBeDLoNYtbjFVprLArzBSmROgH8UYojdRBwiHqddvnNJsOWROp 0e0+vbUynUtdgA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:00 2025 by rpki-client