This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json) Hash identifier: yj4PK/12RBwie9DKQYm9NrltotWtilAOC/TxfDZdg9I= Subject key identifier: 41:C6:B5:15:E5:0C:8C:FA:1F:17:EB:6B:5F:31:5D:CC:42:43:41:98 Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc Certificate serial: 019B2EFA0F704F5546828074164C5D0FF393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft Manifest number: 14A8 Signing time: Thu 18 Dec 2025 01:01:38 +0000 Manifest this update: Thu 18 Dec 2025 01:01:38 +0000 Manifest next update: Fri 19 Dec 2025 01:01:38 +0000 Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: VEAFfMc3aSiZkOkatzFLnZI3DR+0MEid2tZXnCri8vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:0f:70:4f:55:46:82:80:74:16:4c:5d:0f:f3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc Validity Not Before: Dec 18 01:01:38 2025 GMT Not After : Dec 19 01:01:38 2025 GMT Subject: CN=41c6b515e50c8cfa1f17eb6b5f315dcc42434198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:2e:0d:56:dc:22:b9:87:31:60:69:b4:62: 59:0a:cd:d2:38:d0:a1:fb:ea:6c:d2:57:41:f2:ea: eb:ad:35:d2:ec:23:98:e4:a2:2b:73:b2:34:e1:3a: 14:28:81:f9:88:0a:1a:94:cb:2d:ab:ba:bd:61:d2: ed:d0:6b:23:22:4c:d2:e5:ec:5f:a1:13:82:1d:ca: 0e:66:a6:fc:aa:2b:e8:7e:24:b3:06:e5:e6:bd:47: 28:1c:d9:6e:ac:0b:a9:76:01:e4:e7:6d:bd:9c:1b: b9:a9:b5:2a:a9:76:68:c5:1b:3d:9d:d8:e8:36:74: 64:f1:61:f1:0a:17:ca:ee:1b:ca:13:6d:f1:e0:2b: b8:05:0a:33:28:fe:90:3f:76:68:88:ae:ca:bd:e5: 2f:39:45:ae:19:63:43:f1:c4:4e:0d:d8:c8:2f:58: 4b:a4:cc:b1:d0:24:86:76:a4:57:9b:71:27:14:29: 01:c6:7b:b7:59:01:0f:42:70:cd:ea:07:66:e4:e1: a0:8f:94:00:40:a3:76:dd:97:c4:f4:28:70:c0:93: cb:e8:95:f8:c9:6f:34:4f:b7:59:8a:80:bd:9c:28: 75:ed:b7:82:4c:21:aa:05:43:72:dc:15:ae:5a:7a: d1:67:cb:14:c1:88:c3:46:31:0b:3a:a8:21:25:83: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:B5:15:E5:0C:8C:FA:1F:17:EB:6B:5F:31:5D:CC:42:43:41:98 X509v3 Authority Key Identifier: keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c3:27:00:86:29:74:16:bb:66:09:c5:e8:94:31:45:62:56: 51:a7:6b:ea:81:5b:5e:b8:75:99:f1:7a:97:52:a2:5d:e3:89: 2a:3d:cd:7d:9e:43:c8:a8:3e:5c:8a:59:7f:d9:58:40:8b:c3: 06:51:be:d9:da:21:ca:25:f4:03:3b:c2:b7:cf:be:49:47:22: ef:e4:b8:f6:ec:60:cb:23:bc:f3:36:d2:a0:b6:bb:62:21:40: 32:8f:c2:77:c3:11:53:dd:ab:2e:26:83:da:3f:19:ca:67:9b: e6:7b:77:20:ba:16:de:5a:86:3e:9b:78:99:2f:fb:c0:ac:5c: d8:5b:10:4d:bb:78:73:ad:ec:ca:a0:06:07:b7:bd:f1:c9:72: 0c:5c:1a:8e:39:41:99:55:e5:23:9d:da:b4:23:c6:d7:37:5e: 8e:b8:4e:e6:32:49:5c:b5:84:64:90:b8:f9:9a:ac:3b:e2:c9: fc:5b:e3:35:51:0f:6d:91:2f:6e:41:5a:8f:36:6e:e2:b3:cd: 59:46:7a:1f:be:23:e2:b7:dd:52:83:e1:fb:9b:b9:10:20:74: 72:b1:58:27:1b:5f:c8:55:0d:78:57:fd:09:46:23:e6:7c:eb: 6b:a7:4c:71:74:43:1a:8b:5e:6f:5c:db:a8:c5:30:f0:a3:8e: 77:13:f1:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+g9wT1VGgoB0FkxdD/OTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MWFkYzIzNjU3NWVjMjNkN2ViYmZiZGMyMDQzOTkxODAy NmJlZmMwHhcNMjUxMjE4MDEwMTM4WhcNMjUxMjE5MDEwMTM4WjAzMTEwLwYDVQQD Eyg0MWM2YjUxNWU1MGM4Y2ZhMWYxN2ViNmI1ZjMxNWRjYzQyNDM0MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFMuDVbcIrmHMWBptGJZCs3SONCh ++ps0ldB8urrrTXS7COY5KIrc7I04ToUKIH5iAoalMstq7q9YdLt0GsjIkzS5exf oROCHcoOZqb8qivofiSzBuXmvUcoHNlurAupdgHk5229nBu5qbUqqXZoxRs9ndjo NnRk8WHxChfK7hvKE23x4Cu4BQozKP6QP3ZoiK7KveUvOUWuGWND8cRODdjIL1hL pMyx0CSGdqRXm3EnFCkBxnu3WQEPQnDN6gdm5OGgj5QAQKN23ZfE9ChwwJPL6JX4 yW80T7dZioC9nCh17beCTCGqBUNy3BWuWnrRZ8sUwYjDRjELOqghJYOrAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHGtRXlDIz6Hxfra18xXcxCQ0GYMB8GA1UdIwQY MBaAFEka3CNldewj1+u/vcIEOZGAJr78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yZTIxOTQtM2Y5MS00OTM5LWE4MzAt YWE4MGI0ZTdmMmZkLzEvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8yZTIxOTQtM2Y5MS00OTM5LWE4MzAtYWE4MGI0ZTdmMmZk LzEvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcMnAIYp dBa7ZgnF6JQxRWJWUadr6oFbXrh1mfF6l1KiXeOJKj3NfZ5DyKg+XIpZf9lYQIvD BlG+2dohyiX0AzvCt8++SUci7+S49uxgyyO88zbSoLa7YiFAMo/Cd8MRU92rLiaD 2j8Zymeb5nt3ILoW3lqGPpt4mS/7wKxc2FsQTbt4c63syqAGB7e98clyDFwajjlB mVXlI53atCPG1zdejrhO5jJJXLWEZJC4+ZqsO+LJ/FvjNVEPbZEvbkFajzZu4rPN WUZ6H74j4rfdUoPh+5u5ECB0crFYJxtfyFUNeFf9CUYj5nzra6dMcXRDGoteb1zb qMUw8KOOdxPxJQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:52 2025 by rpki-client