This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json) Hash identifier: 6yoGQmH8VwrFxE3eCN2P1xJayujFo7gizhH10Qg4KLE= Subject key identifier: E5:61:8C:AA:05:0E:84:BC:D8:EF:2A:46:FF:D5:E9:C3:25:C8:E8:27 Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Certificate serial: 019B46278AC40740867025C3EF02F6059D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 13:02:35 +0000 Manifest this update: Mon 22 Dec 2025 13:02:35 +0000 Manifest next update: Tue 23 Dec 2025 13:02:35 +0000 Files and hashes: 1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=) 2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: Q6e/40jURM8+MsI+Tlvz55mKQEVjkCOhdXhfvGEJOdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:8a:c4:07:40:86:70:25:c3:ef:02:f6:05:9d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Validity Not Before: Dec 22 13:02:35 2025 GMT Not After : Dec 23 13:02:35 2025 GMT Subject: CN=e5618caa050e84bcd8ef2a46ffd5e9c325c8e827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:5f:44:12:a6:c2:12:41:00:eb:d7:4d:85: 61:b6:87:44:fd:f3:2d:c7:5e:19:29:d1:f5:17:5f: f5:a7:d2:8a:d5:4b:7e:fd:03:8f:7b:7f:bf:b0:d3: 9a:24:4f:b1:fb:c4:dd:70:29:03:a3:ad:74:11:83: a8:c9:60:7e:99:9e:0a:e7:4c:60:53:77:ce:d6:2f: f3:27:67:d3:09:0c:9c:8d:dc:04:4e:33:e2:54:e4: fc:8a:97:43:e6:f1:8b:ed:03:21:0b:ec:3f:c4:35: e6:cb:48:f9:69:2a:ff:34:9c:0b:e9:bf:64:6b:33: 75:ef:85:9f:f9:10:28:26:5a:87:28:c9:72:01:69: 3b:08:ae:e7:b4:97:e6:b7:fe:c3:8d:7f:02:db:c7: 8b:ba:42:e0:21:69:d3:da:07:85:4b:d6:32:23:df: 1a:a6:41:ca:45:0e:5a:fc:46:d2:70:4c:3f:3b:90: 09:53:dc:65:bd:e9:1f:21:56:17:a0:0b:3c:df:dd: 37:51:af:52:2a:13:53:07:9e:a9:c5:2a:58:6b:85: 67:be:b5:4d:98:3a:06:42:77:f3:23:c3:e1:98:65: a9:f2:f3:76:9c:ab:ba:63:b4:f3:64:52:c7:f0:6c: 80:9b:4d:9f:ac:9f:3c:6c:03:47:b5:a3:4f:e0:02: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:61:8C:AA:05:0E:84:BC:D8:EF:2A:46:FF:D5:E9:C3:25:C8:E8:27 X509v3 Authority Key Identifier: keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:30:2e:e0:69:84:7a:e8:f6:69:1f:ee:ed:5d:ac:62:f1:e9: 65:8b:98:c0:9e:59:42:1c:d2:b1:7c:b0:eb:0f:1a:83:f6:8c: 45:4b:66:a5:08:cf:d6:b2:30:3a:35:92:b9:fb:fa:7a:73:75: 20:fe:e4:79:d2:2d:59:41:12:fe:db:c7:2f:1b:29:29:e2:65: 76:64:17:4b:c7:05:51:3b:90:f7:78:5a:18:2e:5b:db:0c:99: c0:2a:a9:f0:51:2d:31:05:b4:b1:26:04:ac:1c:47:f4:54:71: ef:a8:17:7c:2a:53:79:1a:13:d7:87:53:18:39:9e:c4:0d:50: 9c:22:61:a9:20:e5:1e:07:b0:b8:54:84:eb:85:21:d9:6d:c9: 92:53:ab:e4:aa:12:99:f0:00:7b:cf:5d:b6:c5:56:aa:a8:4f: ed:c8:8b:38:1c:d8:07:79:ca:24:df:31:b5:2e:63:5a:80:ea: b7:89:f8:40:79:24:8d:03:8b:6b:17:31:96:ca:8a:59:db:f7: 8b:57:ce:22:0f:6c:00:9b:52:3b:5e:4d:3e:0e:95:76:de:1f: 3a:c8:05:57:75:0d:8d:08:4e:38:f5:56:ee:61:a5:2b:d2:55: 77:c6:8f:3f:84:1b:e9:57:59:b0:3e:c1:27:3f:33:2b:01:fe: 6e:d6:41:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ4rEB0CGcCXD7wL2BZ0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1 MDQxZDYwHhcNMjUxMjIyMTMwMjM1WhcNMjUxMjIzMTMwMjM1WjAzMTEwLwYDVQQD EyhlNTYxOGNhYTA1MGU4NGJjZDhlZjJhNDZmZmQ1ZTljMzI1YzhlODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYFfRBKmwhJBAOvXTYVhtodE/fMt x14ZKdH1F1/1p9KK1Ut+/QOPe3+/sNOaJE+x+8TdcCkDo610EYOoyWB+mZ4K50xg U3fO1i/zJ2fTCQycjdwETjPiVOT8ipdD5vGL7QMhC+w/xDXmy0j5aSr/NJwL6b9k azN174Wf+RAoJlqHKMlyAWk7CK7ntJfmt/7DjX8C28eLukLgIWnT2geFS9YyI98a pkHKRQ5a/EbScEw/O5AJU9xlvekfIVYXoAs83903Ua9SKhNTB56pxSpYa4VnvrVN mDoGQnfzI8PhmGWp8vN2nKu6Y7TzZFLH8GyAm02frJ88bANHtaNP4AI1fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVhjKoFDoS82O8qRv/V6cMlyOgnMB8GA1UdIwQY MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt OGFkZjBkYTIyNTQ1LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1 LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszAu4GmE euj2aR/u7V2sYvHpZYuYwJ5ZQhzSsXyw6w8ag/aMRUtmpQjP1rIwOjWSufv6enN1 IP7kedItWUES/tvHLxspKeJldmQXS8cFUTuQ93haGC5b2wyZwCqp8FEtMQW0sSYE rBxH9FRx76gXfCpTeRoT14dTGDmexA1QnCJhqSDlHgewuFSE64Uh2W3JklOr5KoS mfAAe89dtsVWqqhP7ciLOBzYB3nKJN8xtS5jWoDqt4n4QHkkjQOLaxcxlsqKWdv3 i1fOIg9sAJtSO15NPg6Vdt4fOsgFV3UNjQhOOPVW7mGlK9JVd8aPP4Qb6VdZsD7B Jz8zKwH+btZBig== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:31 2025 by rpki-client