This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft File: sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json) Hash identifier: CyRd5Bc0vz2d0ZOWtAM4t642f+oRb5DeXrS5ZYdvIuc= Subject key identifier: 4B:FA:D9:05:D4:A3:BC:AB:D9:CA:E7:9E:8A:A8:82:42:6D:46:53:02 Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159 Certificate serial: 019AF2ADC36F5590464DFF950EF2E956616D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft Manifest number: 12A3 Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: JwpDGDZQPAJJjK/JB+vP6KZlqZhBlv1tucUG2v/eRAA=) 2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c3:6f:55:90:46:4d:ff:95:0e:f2:e9:56:61:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092425ab7d66bab711fbaa22757377807834159 Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=4bfad905d4a3bcabd9cae79e8aa882426d465302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:83:6e:00:56:95:b7:0c:f2:1c:48:7c:ec: ce:d8:03:c6:a1:d9:27:5f:fe:cf:82:64:a5:9b:28: 72:78:da:9a:55:c7:3b:33:15:b9:8d:52:7d:6d:f3: 12:ca:59:3a:85:c4:62:0f:cb:77:f2:91:e1:74:b8: 67:02:0f:91:28:2c:2c:86:12:de:fd:31:9d:92:07: 2f:d3:11:cf:08:a1:5b:5f:99:64:f8:c5:e9:45:a3: ce:6c:54:ef:92:58:45:4a:33:40:e8:5e:c1:ad:94: 29:46:99:6b:1b:53:26:18:45:f3:1f:37:fa:c7:db: 3c:fe:40:9b:23:8f:57:fb:1a:7e:45:23:14:bb:11: 83:d2:40:fe:cd:70:92:10:45:00:3d:30:0e:62:af: ee:e4:68:95:01:02:19:50:2e:23:4c:ea:d5:fa:9e: d7:fe:46:36:ac:40:9b:b6:fd:16:5b:43:28:40:bd: 34:34:f4:1b:c9:35:c7:54:49:84:94:f9:dd:4e:52: 34:1e:f8:e3:d4:e8:36:f1:cb:b9:18:0b:db:9a:39: 9a:aa:11:a4:79:25:c0:31:5b:70:41:5f:bc:da:ca: 9a:15:8b:1d:24:af:fe:ec:e6:a8:ef:10:1b:d0:84: 2e:1f:76:3b:f9:e3:ee:d0:fd:bf:2a:cb:7f:bd:64: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FA:D9:05:D4:A3:BC:AB:D9:CA:E7:9E:8A:A8:82:42:6D:46:53:02 X509v3 Authority Key Identifier: keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3b:f0:c8:ff:8b:09:c2:1a:68:3c:78:e5:1c:5e:c9:c7:2c: a4:15:34:60:26:32:23:78:f1:d5:b2:00:fd:a0:1f:17:ee:f2: c6:82:05:54:0e:27:73:3b:a3:f3:60:46:9e:55:d7:11:3e:10: d5:12:5d:96:89:03:2a:25:7d:22:df:39:16:38:74:18:6c:75: 15:dc:64:34:cd:e5:1e:91:60:82:eb:b6:13:02:a6:67:f6:6f: 52:03:6e:6c:75:45:3f:96:81:d6:c1:0f:82:08:af:ec:50:ab: 4e:5d:a0:23:ba:8f:35:33:d4:f3:07:df:55:d7:d0:5f:e9:9d: c3:47:81:61:6e:7a:58:37:ee:ea:c7:a7:74:9f:ea:3d:c8:94: 2b:11:1f:f4:74:4a:04:87:0e:f9:21:64:bd:6c:93:d8:26:30: 9f:d8:0d:13:84:8c:5c:43:0b:2a:8a:d5:45:76:26:40:51:64: d2:79:4d:d4:df:23:0f:eb:f3:a9:9c:0e:2b:18:f4:b9:e4:04: 6a:6b:f8:32:46:a5:21:61:56:11:8b:fd:bc:d0:9c:3e:2a:f6: 5c:b1:99:17:86:bc:21:c3:19:42:fa:54:ca:04:f7:28:5a:3d: 19:32:7d:81:be:79:67:44:e6:b7:7c:03:9c:74:f7:dc:76:1a: 55:93:f2:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcNvVZBGTf+VDvLpVmFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4 MzQxNTkwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD Eyg0YmZhZDkwNWQ0YTNiY2FiZDljYWU3OWU4YWE4ODI0MjZkNDY1MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldKDbgBWlbcM8hxIfOzO2APGodkn X/7PgmSlmyhyeNqaVcc7MxW5jVJ9bfMSylk6hcRiD8t38pHhdLhnAg+RKCwshhLe /TGdkgcv0xHPCKFbX5lk+MXpRaPObFTvklhFSjNA6F7BrZQpRplrG1MmGEXzHzf6 x9s8/kCbI49X+xp+RSMUuxGD0kD+zXCSEEUAPTAOYq/u5GiVAQIZUC4jTOrV+p7X /kY2rECbtv0WW0MoQL00NPQbyTXHVEmElPndTlI0Hvjj1Og28cu5GAvbmjmaqhGk eSXAMVtwQV+82sqaFYsdJK/+7Oao7xAb0IQuH3Y7+ePu0P2/Kst/vWRvCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv62QXUo7yr2crnnoqogkJtRlMCMB8GA1UdIwQY MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2 LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDvwyP+L CcIaaDx45RxeyccspBU0YCYyI3jx1bIA/aAfF+7yxoIFVA4nczuj82BGnlXXET4Q 1RJdlokDKiV9It85Fjh0GGx1FdxkNM3lHpFgguu2EwKmZ/ZvUgNubHVFP5aB1sEP ggiv7FCrTl2gI7qPNTPU8wffVdfQX+mdw0eBYW56WDfu6sendJ/qPciUKxEf9HRK BIcO+SFkvWyT2CYwn9gNE4SMXEMLKorVRXYmQFFk0nlN1N8jD+vzqZwOKxj0ueQE amv4MkalIWFWEYv9vNCcPir2XLGZF4a8IcMZQvpUygT3KFo9GTJ9gb55Z0Tmt3wD nHT33HYaVZPy4A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:27 2025 by rpki-client