This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft File: SVx0J6902pRU8eKHwW-aXzp3gx8.mft (raw, json) Hash identifier: Nd9ZxBBX01FqQsHw+sRK6E0cgxirUfU9s4zKTgx7zSQ= Subject key identifier: 75:01:EB:EB:11:1D:7F:3A:92:C1:B6:A6:53:85:F5:35:F2:10:7C:FC Authority key identifier: 49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F Certificate issuer: /CN=495c7427af74da9454f1e287c16f9a5f3a77831f Certificate serial: 019AF31CB46CEFE727F3EA960B90CB263EE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft Manifest number: 156A Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: SVx0J6902pRU8eKHwW-aXzp3gx8.crl (hash: JcbKGJUycnerO2U890EyK5m3qWDXKKE/vsg7wfwFc0c=) 2: yGC5sIb3srVUEq8Qa2rFq7sGg3Y.roa (hash: C8hFdKgoa42ll+QkfetAIjLLM5z2fVcdANN2iM3elfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b4:6c:ef:e7:27:f3:ea:96:0b:90:cb:26:3e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495c7427af74da9454f1e287c16f9a5f3a77831f Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=7501ebeb111d7f3a92c1b6a65385f535f2107cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:a8:e0:de:c4:5b:a4:89:af:a3:4b:a6:53: 3c:61:6c:0b:34:96:40:d9:b2:b8:77:d9:c4:c9:3e: 47:18:24:11:b8:4f:a0:f3:fd:b6:58:57:af:ff:a5: 49:1a:01:f0:da:cb:0f:d5:20:d1:67:13:ac:f1:4f: 67:68:1e:c9:d3:09:9e:85:ed:fe:f3:c5:c9:10:53: 10:39:03:05:58:0e:54:01:7e:d3:c3:f9:4f:06:dc: 62:7c:7f:ba:7d:4a:d3:b9:52:9f:1f:e3:38:df:6d: 6c:5e:78:58:a7:90:33:c7:b4:4d:e2:fa:89:c3:97: b8:ff:fd:bc:12:80:d2:67:9b:0d:31:d9:10:ab:09: 18:77:17:c6:ae:37:d8:da:4e:86:9a:83:d0:31:30: fe:9a:80:97:e5:d7:fd:a2:43:13:d5:7f:ff:76:33: 09:d3:43:f6:3f:92:d1:eb:4e:1d:c3:47:1e:80:bf: 09:27:1c:b5:93:47:cc:1a:98:0a:b8:40:91:9d:e1: 50:38:fd:e8:12:3b:aa:bd:82:ea:8d:f2:84:9e:31: 2a:16:2d:47:46:96:1c:07:1b:f8:99:19:8b:21:17: 32:ba:31:09:9d:e8:ef:71:80:bd:ae:cf:9f:ca:f1: 3b:51:89:fd:bb:8b:65:61:35:e3:82:21:1c:03:60: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:EB:EB:11:1D:7F:3A:92:C1:B6:A6:53:85:F5:35:F2:10:7C:FC X509v3 Authority Key Identifier: keyid:49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:78:54:7d:5d:54:28:92:9e:70:9f:45:59:c7:3d:3f:83:2c: 6f:38:c0:ea:ae:7a:3f:30:c7:fe:cc:a6:3c:33:67:5b:45:8b: 29:65:89:6b:52:a9:b7:85:b7:1d:83:56:5a:6a:58:9c:0d:5e: 89:e7:42:8b:3a:ba:96:bd:0f:1a:c9:3d:77:f3:e2:5c:63:c8: 2d:96:47:f4:a2:84:c5:e5:a7:1d:f1:bb:02:8b:c3:27:58:4b: 91:40:fe:f7:e4:ff:5e:e6:72:81:bd:cb:ec:f0:ff:bb:e5:7f: 55:97:a5:dc:26:c4:91:3c:0f:b6:45:f2:6c:13:af:f0:48:89: b3:54:85:7e:88:59:22:6e:00:fa:46:e9:f9:7a:c6:0a:3b:53: 6e:20:0e:76:2f:fe:cb:38:68:66:af:8b:ea:39:91:0b:f0:d7: c8:4e:13:c1:7a:62:73:5b:69:a3:26:e7:81:03:88:c0:b1:da: 85:d3:81:70:ba:3d:ce:71:9b:61:eb:01:5a:97:f3:b8:1b:27: 4d:3f:a3:9d:6e:0a:39:bf:52:62:71:e0:5e:ac:4c:b3:62:52: c3:c7:d8:45:20:a9:b0:ef:ac:5a:c2:71:87:ce:8d:59:6a:60: 70:17:d8:f0:9e:1b:06:82:3f:cf:c8:f6:5c:ad:c1:fc:79:f1: 04:4e:ab:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLRs7+cn8+qWC5DLJj7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NWM3NDI3YWY3NGRhOTQ1NGYxZTI4N2MxNmY5YTVmM2E3 NzgzMWYwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD Eyg3NTAxZWJlYjExMWQ3ZjNhOTJjMWI2YTY1Mzg1ZjUzNWYyMTA3Y2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg6o4N7EW6SJr6NLplM8YWwLNJZA 2bK4d9nEyT5HGCQRuE+g8/22WFev/6VJGgHw2ssP1SDRZxOs8U9naB7J0wmehe3+ 88XJEFMQOQMFWA5UAX7Tw/lPBtxifH+6fUrTuVKfH+M4321sXnhYp5Azx7RN4vqJ w5e4//28EoDSZ5sNMdkQqwkYdxfGrjfY2k6GmoPQMTD+moCX5df9okMT1X//djMJ 00P2P5LR604dw0cegL8JJxy1k0fMGpgKuECRneFQOP3oEjuqvYLqjfKEnjEqFi1H RpYcBxv4mRmLIRcyujEJnejvcYC9rs+fyvE7UYn9u4tlYTXjgiEcA2ANcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUB6+sRHX86ksG2plOF9TXyEHz8MB8GA1UdIwQY MBaAFElcdCevdNqUVPHih8Fvml86d4MfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMt MDhkOGU1MGZjOWM1LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMtMDhkOGU1MGZjOWM1 LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnhUfV1U KJKecJ9FWcc9P4MsbzjA6q56PzDH/symPDNnW0WLKWWJa1Kpt4W3HYNWWmpYnA1e iedCizq6lr0PGsk9d/PiXGPILZZH9KKExeWnHfG7AovDJ1hLkUD+9+T/XuZygb3L 7PD/u+V/VZel3CbEkTwPtkXybBOv8EiJs1SFfohZIm4A+kbp+XrGCjtTbiAOdi/+ yzhoZq+L6jmRC/DXyE4TwXpic1tpoybngQOIwLHahdOBcLo9znGbYesBWpfzuBsn TT+jnW4KOb9SYnHgXqxMs2JSw8fYRSCpsO+sWsJxh86NWWpgcBfY8J4bBoI/z8j2 XK3B/HnxBE6rpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:47 2025 by rpki-client