This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json) Hash identifier: PdQMzFhU1qZ2uW85knWICfDR+qyJENQwpmV0Px6Bz9c= Subject key identifier: CC:1B:E8:B8:FF:A4:44:FE:95:B0:2E:2A:BD:0E:3A:63:02:EF:7E:A8 Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1 Certificate serial: 019B3F11C5A1FB010584A2463E82238A69FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft Manifest number: 09C1 Signing time: Sun 21 Dec 2025 04:01:27 +0000 Manifest this update: Sun 21 Dec 2025 04:01:27 +0000 Manifest next update: Mon 22 Dec 2025 04:01:27 +0000 Files and hashes: 1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: yHg6090mtJS2MMR1acCGr6wLcJJeluqGPE+wzNKRSZA=) 2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:c5:a1:fb:01:05:84:a2:46:3e:82:23:8a:69:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1 Validity Not Before: Dec 21 04:01:27 2025 GMT Not After : Dec 22 04:01:27 2025 GMT Subject: CN=cc1be8b8ffa444fe95b02e2abd0e3a6302ef7ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:0a:7e:62:b2:31:d4:8d:67:67:a0:48:01: d7:86:16:c1:9f:bb:56:35:2c:08:90:8e:6a:eb:84: d5:15:9b:71:3a:1b:63:ff:db:d6:74:c5:03:3d:4d: b5:18:9d:87:2a:f4:8e:7e:bb:a0:1c:48:84:87:23: 45:18:7f:59:6e:3a:c1:34:af:81:94:c2:de:1c:18: 66:7a:43:ae:d2:d1:26:3d:04:d4:f8:64:67:40:ea: db:47:0f:3c:7d:5e:3d:03:dd:fc:a6:90:91:48:2e: c9:58:04:6b:83:0e:83:46:77:34:ed:35:f7:71:e7: 3c:25:4c:4b:be:47:e6:ef:77:5e:a2:96:5a:ed:57: d1:17:8f:cb:01:2f:e4:bb:cb:68:65:64:d9:2d:e8: 3d:3a:55:38:e8:dd:3d:de:41:9e:a3:f6:be:44:03: 89:c8:94:8a:dc:a6:ea:50:27:75:ed:fa:aa:1e:10: af:0d:99:ed:c1:13:03:91:08:a5:bd:05:34:81:47: f5:61:b6:4f:93:68:ec:83:4b:99:b2:29:5c:22:63: 62:8c:ed:8d:a6:fb:9a:2a:25:92:e1:56:5d:da:ad: cf:28:7b:52:14:af:43:ae:dd:dc:8f:02:ca:ba:73: 68:71:52:67:02:7c:7c:41:04:34:84:98:68:f1:9b: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1B:E8:B8:FF:A4:44:FE:95:B0:2E:2A:BD:0E:3A:63:02:EF:7E:A8 X509v3 Authority Key Identifier: keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:25:fe:c9:5a:9f:97:fe:2b:33:00:5a:a4:ac:50:62:28:78: 1d:3c:36:26:a8:85:ce:a2:1d:36:80:37:19:e3:0b:e8:94:83: 0e:67:8a:4d:3a:6f:5a:d9:ee:7a:d7:d0:96:6f:c2:65:67:d2: 9d:ce:28:b5:fb:6b:76:40:38:a4:f5:63:b0:ee:6c:d6:43:43: 67:90:5a:b0:15:22:52:91:d1:1b:fd:c0:42:ce:f4:b5:86:eb: 5d:6a:59:ce:3c:03:76:b5:4f:03:3c:6e:53:a9:8a:cb:d3:a4: 8a:a0:28:be:0b:ba:b6:54:ad:56:e2:7f:8b:c8:0c:74:42:5c: 9b:f9:33:26:1e:f4:af:11:9e:75:0d:5e:b5:23:5c:19:3c:4e: 2a:18:97:32:cf:a5:a0:cf:b6:d2:82:a2:41:73:89:37:b7:dc: 37:9e:ec:1a:1b:ab:69:2c:69:b0:d5:7b:ee:82:78:54:b2:79: 9e:6d:69:7e:1b:7f:40:8e:7b:e5:fc:9b:2a:ec:e6:1b:fd:cb: 23:fb:f7:7f:15:9d:ba:2c:37:88:a5:d4:27:e0:d3:d9:d1:72: 7e:97:59:d2:63:80:de:c2:1b:d2:39:97:86:58:70:42:f8:b6: 52:e5:fa:32:df:b9:14:10:56:3c:e7:c5:f1:4f:82:43:a8:e6: 46:55:27:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EcWh+wEFhKJGPoIjimn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMzQxNTU4ZGJhMGI2ZGI5NGM1NWNlMDZlMzA2ZmY2NTE5 ZDZlZjEwHhcNMjUxMjIxMDQwMTI3WhcNMjUxMjIyMDQwMTI3WjAzMTEwLwYDVQQD EyhjYzFiZThiOGZmYTQ0NGZlOTViMDJlMmFiZDBlM2E2MzAyZWY3ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHIKfmKyMdSNZ2egSAHXhhbBn7tW NSwIkI5q64TVFZtxOhtj/9vWdMUDPU21GJ2HKvSOfrugHEiEhyNFGH9ZbjrBNK+B lMLeHBhmekOu0tEmPQTU+GRnQOrbRw88fV49A938ppCRSC7JWARrgw6DRnc07TX3 cec8JUxLvkfm73deopZa7VfRF4/LAS/ku8toZWTZLeg9OlU46N093kGeo/a+RAOJ yJSK3KbqUCd17fqqHhCvDZntwRMDkQilvQU0gUf1YbZPk2jsg0uZsilcImNijO2N pvuaKiWS4VZd2q3PKHtSFK9Drt3cjwLKunNocVJnAnx8QQQ0hJho8ZtdNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwb6Lj/pET+lbAuKr0OOmMC736oMB8GA1UdIwQY MBaAFEo0FVjboLbblMVc4G4wb/ZRnW7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYt MGI2OTdhM2I3NjJhLzEvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81NTI2ZDQtYWZjMS00MDFmLWEwOWYtMGI2OTdhM2I3NjJh LzEvU2pRVldOdWd0dHVVeFZ6Z2JqQnY5bEdkYnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiX+yVqf l/4rMwBapKxQYih4HTw2JqiFzqIdNoA3GeML6JSDDmeKTTpvWtnuetfQlm/CZWfS nc4otftrdkA4pPVjsO5s1kNDZ5BasBUiUpHRG/3AQs70tYbrXWpZzjwDdrVPAzxu U6mKy9OkiqAovgu6tlStVuJ/i8gMdEJcm/kzJh70rxGedQ1etSNcGTxOKhiXMs+l oM+20oKiQXOJN7fcN57sGhuraSxpsNV77oJ4VLJ5nm1pfht/QI575fybKuzmG/3L I/v3fxWduiw3iKXUJ+DT2dFyfpdZ0mOA3sIb0jmXhlhwQvi2UuX6Mt+5FBBWPOfF 8U+CQ6jmRlUnBg== -----END CERTIFICATE-----Generated at Sun Dec 21 14:11:25 2025 by rpki-client