This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json) Hash identifier: KqGeRv7re2jEGKhn76PXX9RYGZYMnBjU9rOLdEslbK0= Subject key identifier: 31:D1:0A:3D:11:5A:60:EA:A3:DD:6C:86:C2:50:EC:76:5C:D2:2F:85 Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1 Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1 Certificate serial: 019B59772ADDB8E48DDE1700BEC91299FC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft Manifest number: 0843 Signing time: Fri 26 Dec 2025 07:02:20 +0000 Manifest this update: Fri 26 Dec 2025 07:02:20 +0000 Manifest next update: Sat 27 Dec 2025 07:02:20 +0000 Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: amunLH5HP7Htg7X0ySNpmYiXd+2HXl+zXN+Qgkyd0Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:2a:dd:b8:e4:8d:de:17:00:be:c9:12:99:fc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1 Validity Not Before: Dec 26 07:02:20 2025 GMT Not After : Dec 27 07:02:20 2025 GMT Subject: CN=31d10a3d115a60eaa3dd6c86c250ec765cd22f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:56:8d:a7:56:11:37:ef:0e:76:83:fb:29: f6:a9:39:f4:5f:e6:06:f3:99:05:67:39:56:dd:5e: 79:47:8a:ec:c8:b7:91:94:ef:10:36:2b:06:45:59: 2d:53:f5:d8:6f:30:5d:44:90:33:e5:09:42:7f:f5: 13:2a:74:22:df:3c:38:70:7e:e8:27:06:ef:53:ab: 81:09:4e:52:d4:73:1e:97:8f:f8:fd:e3:07:50:08: f7:28:ae:9e:05:4f:68:18:0b:dd:7f:e4:24:8c:b1: 92:97:78:a5:44:8d:0d:79:56:62:5a:2b:6e:1d:53: 23:07:b2:6c:9d:8d:65:f0:a3:d4:99:ae:1d:76:11: 40:5c:f5:68:b9:2d:34:c8:bf:44:50:11:e1:fb:ba: d5:1f:c8:fa:f5:55:9c:8a:b9:fb:d8:fe:12:2a:cf: cc:7b:13:4e:32:fb:00:f9:e6:5b:4f:73:f4:77:b4: b9:d2:27:b5:dc:a9:6f:fa:5f:60:46:74:b6:7a:95: 87:9b:7a:d7:6d:89:97:24:c6:3d:c2:3b:10:60:cb: 76:0e:cc:a7:ca:01:f4:3b:a7:7c:d4:55:2b:c6:93: 57:e0:4b:12:b8:d9:e5:83:ba:10:4f:9f:64:18:27: eb:73:89:ce:df:64:30:68:0f:7d:2a:fc:32:0d:69: 97:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D1:0A:3D:11:5A:60:EA:A3:DD:6C:86:C2:50:EC:76:5C:D2:2F:85 X509v3 Authority Key Identifier: keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:64:29:cb:a3:9a:9e:8c:11:e0:52:b6:b1:05:54:80:f8:4c: d1:e4:f9:f8:85:51:18:cb:20:6c:d4:93:62:28:91:f2:e7:2c: 72:6d:c4:82:cb:e5:69:78:ce:2a:e5:93:a6:a4:b2:1e:89:f6: 27:3d:83:96:35:82:aa:74:fc:fa:f2:82:90:7f:9e:e5:16:4c: 60:9a:81:7b:e0:3d:5e:23:28:97:5f:9d:3f:57:8b:d1:61:c0: 2c:22:55:0b:94:73:98:72:fe:0f:6e:20:f9:4e:c2:62:ec:28: ac:f8:ac:37:cd:c6:01:72:5f:c0:f0:93:0c:cf:4a:0f:1d:f8: 05:34:0b:b0:58:f8:cc:76:14:7c:99:74:37:37:bb:88:de:c8: 83:9b:6c:24:93:18:94:60:68:4f:f2:f4:85:6c:fd:ec:89:2c: 4b:37:cf:85:11:4a:ce:ff:e9:dc:91:2b:60:03:fd:6c:b6:8d: 94:ba:d8:73:e0:e5:41:f2:13:3f:07:a5:8b:1f:cd:79:ae:84: 14:b5:e8:b8:97:50:01:77:6d:4c:c6:56:9d:c3:a9:5a:0b:9f: 0b:8e:ba:0f:a8:85:13:26:50:69:8b:37:a0:09:e0:03:06:4f: ba:5c:9c:13:b6:af:c9:77:bb:d7:ac:de:50:08:be:a3:53:49: 7c:21:38:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdyrduOSN3hcAvskSmfybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMzQyZmM5OTczMGYyYTM0ZDA5ZWU0YjVlZTkyMTc4NzU2 Y2Q0ZDEwHhcNMjUxMjI2MDcwMjIwWhcNMjUxMjI3MDcwMjIwWjAzMTEwLwYDVQQD EygzMWQxMGEzZDExNWE2MGVhYTNkZDZjODZjMjUwZWM3NjVjZDIyZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8BWjadWETfvDnaD+yn2qTn0X+YG 85kFZzlW3V55R4rsyLeRlO8QNisGRVktU/XYbzBdRJAz5QlCf/UTKnQi3zw4cH7o JwbvU6uBCU5S1HMel4/4/eMHUAj3KK6eBU9oGAvdf+QkjLGSl3ilRI0NeVZiWitu HVMjB7JsnY1l8KPUma4ddhFAXPVouS00yL9EUBHh+7rVH8j69VWcirn72P4SKs/M exNOMvsA+eZbT3P0d7S50ie13Klv+l9gRnS2epWHm3rXbYmXJMY9wjsQYMt2Dsyn ygH0O6d81FUrxpNX4EsSuNnlg7oQT59kGCfrc4nO32QwaA99KvwyDWmXFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHRCj0RWmDqo91shsJQ7HZc0i+FMB8GA1UdIwQY MBaAFLI0L8mXMPKjTQnuS17pIXh1bNTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYt N2E4ZTM4OTIwMjUwLzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYtN2E4ZTM4OTIwMjUw LzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImQpy6Oa nowR4FK2sQVUgPhM0eT5+IVRGMsgbNSTYiiR8ucscm3EgsvlaXjOKuWTpqSyHon2 Jz2DljWCqnT8+vKCkH+e5RZMYJqBe+A9XiMol1+dP1eL0WHALCJVC5RzmHL+D24g +U7CYuworPisN83GAXJfwPCTDM9KDx34BTQLsFj4zHYUfJl0Nze7iN7Ig5tsJJMY lGBoT/L0hWz97IksSzfPhRFKzv/p3JErYAP9bLaNlLrYc+DlQfITPwelix/Nea6E FLXouJdQAXdtTMZWncOpWgufC466D6iFEyZQaYs3oAngAwZPulycE7avyXe716ze UAi+o1NJfCE4+w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:32 2025 by rpki-client