This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json) Hash identifier: iy5+t8iTlsy5+FV+/ejx1vMAEH2kyeRmx7g+TfolJlo= Subject key identifier: C3:D0:72:E5:BD:3F:7C:D4:DF:93:90:ED:18:1B:8C:72:99:CB:83:1B Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0 Certificate serial: 019B1E3D22EEB8B882DCADED0F1D9550B75B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft Manifest number: 03FD Signing time: Sun 14 Dec 2025 19:01:21 +0000 Manifest this update: Sun 14 Dec 2025 19:01:21 +0000 Manifest next update: Mon 15 Dec 2025 19:01:21 +0000 Files and hashes: 1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: s/jFYVibLbwICojjyxVSjjg6T5V7VNA5TjTJEGc6S/U=) 2: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=) 3: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=) 4: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (hash: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:22:ee:b8:b8:82:dc:ad:ed:0f:1d:95:50:b7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0 Validity Not Before: Dec 14 19:01:21 2025 GMT Not After : Dec 15 19:01:21 2025 GMT Subject: CN=c3d072e5bd3f7cd4df9390ed181b8c7299cb831b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:b8:97:9c:7d:7d:43:39:37:c5:0f:0c:bf: d7:b1:b3:e3:41:cc:5b:27:94:6b:df:17:a6:00:bb: cf:1a:40:9e:5e:36:3b:a5:dc:d1:c8:ae:70:9d:bb: 56:35:63:dd:51:13:12:da:fb:3e:63:24:e8:5c:35: 05:e3:8c:e1:af:b8:07:11:61:30:9b:85:52:26:d4: 9e:fb:ce:ca:69:9e:bb:7e:74:5b:e0:d6:fa:bc:07: 89:65:90:f5:30:77:b9:5c:97:b3:5c:63:67:ca:1b: 6e:d4:36:15:2d:a5:b6:48:61:0d:4a:38:08:29:6c: fd:7f:c9:69:22:af:9d:43:5d:fc:81:73:83:08:11: bb:28:8c:02:cf:4b:8f:e5:03:f2:9f:91:c1:9f:ba: 52:43:6b:7f:4f:ee:a2:9a:47:bd:33:2c:0f:1a:9e: 20:f4:14:4f:3c:22:51:89:8d:7b:7e:a9:86:e5:f5: 8e:f3:4b:28:67:6a:4c:d3:5b:c6:0a:03:e0:99:1e: 5c:71:6b:ca:82:4f:27:6c:70:24:5a:35:e0:1a:d4: 09:d8:98:28:70:fc:5f:d1:ec:52:98:6c:e8:08:f9: de:10:2b:41:52:05:84:c1:89:86:45:5a:98:b6:66: 82:93:75:9c:6e:22:b1:0f:30:5f:33:1d:0e:08:bb: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:72:E5:BD:3F:7C:D4:DF:93:90:ED:18:1B:8C:72:99:CB:83:1B X509v3 Authority Key Identifier: keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e4:66:e2:5a:e5:eb:62:cc:d6:51:d1:61:7d:3d:ae:b1:39: 97:af:bb:af:30:1e:8e:c9:b1:73:f7:59:06:28:3d:b0:f3:3f: 48:3b:61:ff:80:04:74:a2:c1:be:3c:4e:46:c4:fc:cc:d6:bc: 63:49:de:1d:7b:19:36:f8:5c:b8:7d:4a:90:16:71:0b:d2:7f: 07:45:4d:f1:5e:05:bc:64:8c:65:36:b4:a6:65:e8:67:30:0b: d6:56:1e:19:cd:7e:c1:f6:75:7e:80:c8:8c:76:9a:3c:40:09: ec:05:7e:b5:03:a3:7f:00:77:76:ac:b8:7b:5b:0e:fc:16:91: 53:82:96:07:1c:10:e5:ce:1f:e7:db:7a:f4:45:38:93:1f:2a: 37:03:f1:4e:c3:09:74:8c:2e:dc:21:41:44:b5:69:05:71:b1: 02:23:fa:ec:88:30:fd:c7:ee:da:08:c8:80:35:4b:fb:98:90: 4a:6a:e3:09:41:de:ba:5d:88:3f:b2:f5:88:4c:aa:7e:44:1c: cb:cc:40:f2:a8:02:27:24:f6:fd:47:39:1b:e4:9f:a3:12:7a: c9:35:49:e2:1d:26:39:49:52:3f:45:45:ac:c3:0e:b4:30:d6: 61:0a:39:8f:7c:89:a9:93:ab:ec:f3:7d:d4:42:c5:c1:47:d4: 6c:e5:1a:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePSLuuLiC3K3tDx2VULdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi ZDgxYzAwHhcNMjUxMjE0MTkwMTIxWhcNMjUxMjE1MTkwMTIxWjAzMTEwLwYDVQQD EyhjM2QwNzJlNWJkM2Y3Y2Q0ZGY5MzkwZWQxODFiOGM3Mjk5Y2I4MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h24l5x9fUM5N8UPDL/XsbPjQcxb J5Rr3xemALvPGkCeXjY7pdzRyK5wnbtWNWPdURMS2vs+YyToXDUF44zhr7gHEWEw m4VSJtSe+87KaZ67fnRb4Nb6vAeJZZD1MHe5XJezXGNnyhtu1DYVLaW2SGENSjgI KWz9f8lpIq+dQ138gXODCBG7KIwCz0uP5QPyn5HBn7pSQ2t/T+6imke9MywPGp4g 9BRPPCJRiY17fqmG5fWO80soZ2pM01vGCgPgmR5ccWvKgk8nbHAkWjXgGtQJ2Jgo cPxf0exSmGzoCPneECtBUgWEwYmGRVqYtmaCk3WcbiKxDzBfMx0OCLt8eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPQcuW9P3zU35OQ7RgbjHKZy4MbMB8GA1UdIwQY MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt MmNhM2FhNzFlYzVmLzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuRm4lrl 62LM1lHRYX09rrE5l6+7rzAejsmxc/dZBig9sPM/SDth/4AEdKLBvjxORsT8zNa8 Y0neHXsZNvhcuH1KkBZxC9J/B0VN8V4FvGSMZTa0pmXoZzAL1lYeGc1+wfZ1foDI jHaaPEAJ7AV+tQOjfwB3dqy4e1sO/BaRU4KWBxwQ5c4f59t69EU4kx8qNwPxTsMJ dIwu3CFBRLVpBXGxAiP67Igw/cfu2gjIgDVL+5iQSmrjCUHeul2IP7L1iEyqfkQc y8xA8qgCJyT2/Uc5G+SfoxJ6yTVJ4h0mOUlSP0VFrMMOtDDWYQo5j3yJqZOr7PN9 1ELFwUfUbOUabg== -----END CERTIFICATE-----Generated at Sun Dec 14 22:56:37 2025 by rpki-client