This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json) Hash identifier: 9MGL5H2II4gS0yc53RbUm0nXe7mzPQSGpyYfwx3AoXU= Subject key identifier: B7:7D:62:8D:C2:93:67:0D:92:51:62:DA:AC:C2:76:E4:33:65:55:C7 Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1 Certificate serial: 019AF1D2494B1A49926462812F05A8A78170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft Manifest number: 0999 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: 5LBlrtXnEu/26YDvjSHwF8F4ds+U+9EoTDe0NGfXzTI=) 2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:49:4b:1a:49:92:64:62:81:2f:05:a8:a7:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=b77d628dc293670d925162daacc276e4336555c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:d5:da:d7:5c:7f:63:fd:38:0d:2b:71:99: 64:f3:4c:d2:4d:93:db:4f:89:f8:84:3d:2d:54:2a: 83:f2:ea:3a:66:54:64:27:77:f9:d3:32:d2:c2:a1: 6c:0f:d1:22:f6:88:f8:db:04:b1:af:ef:c0:75:0d: b5:80:38:04:99:12:d8:ae:ab:25:ee:75:b0:6d:0a: 22:44:6d:9a:06:03:5f:1d:6a:27:6b:e5:59:72:9b: f2:b5:1f:52:f8:76:a6:f0:e7:e3:69:5b:10:48:55: 09:de:9b:c7:9d:c9:0b:6c:a9:4c:07:b3:f5:97:d7: eb:dc:8e:4e:5c:f6:5d:7b:41:e4:56:8c:e4:41:59: c5:9f:03:b8:a4:8e:0d:00:76:bb:ea:36:86:c0:8a: e4:97:d3:0e:33:47:28:49:0a:4a:cf:dd:0c:cc:aa: 30:92:65:44:d5:43:e6:6b:d7:f9:c1:bb:bf:ce:81: 62:ec:92:e6:9e:dd:fb:e1:6b:4a:e7:ab:06:69:95: 9a:93:c9:44:b5:1d:4b:ac:51:ec:d8:a6:b6:d4:9b: af:30:95:8e:54:12:88:4f:7d:d7:31:c0:08:c6:38: 7f:d7:c1:d0:b4:b4:ed:c8:1e:a2:a5:b9:cd:49:6b: 42:d6:b9:6b:74:55:18:de:3a:b6:77:5f:38:60:49: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7D:62:8D:C2:93:67:0D:92:51:62:DA:AC:C2:76:E4:33:65:55:C7 X509v3 Authority Key Identifier: keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5f:a1:b5:33:25:a7:66:76:ec:b2:fa:47:d8:6d:63:4e:b0: f1:03:ca:5a:44:dd:d7:4a:ee:5f:41:18:ab:00:0e:59:5d:e5: 93:e9:ee:f6:3d:f7:9e:6b:99:08:25:a7:25:80:6f:1f:0b:43: ae:26:9d:fc:f0:5e:60:1f:fe:03:90:4e:d2:1a:cc:a7:18:63: 64:25:5e:b9:69:23:99:9b:ae:ab:3d:8f:9f:00:dd:f3:a7:b3: 3b:5f:26:b2:70:9b:f6:dd:87:4f:58:2c:22:e9:c8:97:02:22: f4:46:a1:bf:b7:5d:54:bb:bb:23:fe:01:ec:56:48:ae:d2:23: f7:8c:ab:e4:5f:b1:79:00:63:c4:6a:38:2a:6c:64:b4:8c:8b: 03:a4:a2:50:3e:eb:01:dd:1c:0f:ca:5a:6e:df:5c:f8:a1:ea: 95:c7:57:77:7c:07:37:03:95:e3:04:0c:93:ef:53:7e:5a:17: 85:38:2d:f7:14:da:08:f2:85:9d:8a:ac:9e:ee:11:98:fb:8c: 83:c8:97:21:d1:8b:9a:9b:11:21:2d:70:f0:9b:84:34:af:7e: a4:ca:8b:ea:15:3c:2d:99:4d:a4:78:f7:10:16:59:7c:04:1a: 66:f3:7d:42:45:25:6a:b5:9c:50:75:3a:50:01:8d:13:16:3a: 04:af:9f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0klLGkmSZGKBLwWop4FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMzQxNTU4ZGJhMGI2ZGI5NGM1NWNlMDZlMzA2ZmY2NTE5 ZDZlZjEwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD EyhiNzdkNjI4ZGMyOTM2NzBkOTI1MTYyZGFhY2MyNzZlNDMzNjU1NWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu7V2tdcf2P9OA0rcZlk80zSTZPb T4n4hD0tVCqD8uo6ZlRkJ3f50zLSwqFsD9Ei9oj42wSxr+/AdQ21gDgEmRLYrqsl 7nWwbQoiRG2aBgNfHWona+VZcpvytR9S+Ham8OfjaVsQSFUJ3pvHnckLbKlMB7P1 l9fr3I5OXPZde0HkVozkQVnFnwO4pI4NAHa76jaGwIrkl9MOM0coSQpKz90MzKow kmVE1UPma9f5wbu/zoFi7JLmnt374WtK56sGaZWak8lEtR1LrFHs2Ka21JuvMJWO VBKIT33XMcAIxjh/18HQtLTtyB6ipbnNSWtC1rlrdFUY3jq2d184YEkP9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd9Yo3Ck2cNklFi2qzCduQzZVXHMB8GA1UdIwQY MBaAFEo0FVjboLbblMVc4G4wb/ZRnW7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYt MGI2OTdhM2I3NjJhLzEvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYtMGI2OTdhM2I3NjJh LzEvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARV+htTMl p2Z27LL6R9htY06w8QPKWkTd10ruX0EYqwAOWV3lk+nu9j33nmuZCCWnJYBvHwtD riad/PBeYB/+A5BO0hrMpxhjZCVeuWkjmZuuqz2PnwDd86ezO18msnCb9t2HT1gs IunIlwIi9Eahv7ddVLu7I/4B7FZIrtIj94yr5F+xeQBjxGo4KmxktIyLA6SiUD7r Ad0cD8pabt9c+KHqlcdXd3wHNwOV4wQMk+9TfloXhTgt9xTaCPKFnYqsnu4RmPuM g8iXIdGLmpsRIS1w8JuENK9+pMqL6hU8LZlNpHj3EBZZfAQaZvN9QkUlarWcUHU6 UAGNExY6BK+f8w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:44 2025 by rpki-client