This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json) Hash identifier: 3XfBOLmJ7mkKI0aYMvBEZsa32aNk2qBONFo7ICowhpg= Subject key identifier: BA:C5:60:78:99:5F:63:AF:64:D9:F0:AB:CC:28:4E:B6:BF:19:F8:F0 Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Certificate serial: 019B2D41AFBBE238949C8AA706596B7B568E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft Manifest number: 0C3B Signing time: Wed 17 Dec 2025 17:00:37 +0000 Manifest this update: Wed 17 Dec 2025 17:00:37 +0000 Manifest next update: Thu 18 Dec 2025 17:00:37 +0000 Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: k7wX9FUqBSTIkSlnxDJiUTMwNa9bkZhChrIUBxnd1MM=) 2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:af:bb:e2:38:94:9c:8a:a7:06:59:6b:7b:56:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Validity Not Before: Dec 17 17:00:37 2025 GMT Not After : Dec 18 17:00:37 2025 GMT Subject: CN=bac56078995f63af64d9f0abcc284eb6bf19f8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:6c:ee:6f:bc:8a:28:0c:d3:39:66:32:d2: 99:fe:a2:69:6f:d7:c3:e4:31:48:a3:1d:8f:f8:a0: 4e:71:86:84:9b:72:ce:ed:52:88:14:1c:b6:ee:01: c8:1b:bf:7c:f5:71:4e:6e:bd:a7:c9:24:39:d7:a5: 8a:c0:9a:62:bd:e0:4f:7e:90:2b:22:ed:0e:e5:a0: ba:d7:82:69:58:95:30:af:9b:d8:fc:52:02:84:48: f4:bf:a0:d2:b5:9e:2c:d3:4d:69:7e:0c:03:f0:62: 82:6e:bb:ad:a9:92:fc:e5:22:a0:27:af:b1:e3:20: 4f:9b:06:63:4c:63:7e:ba:04:3b:26:b1:0b:b0:b8: ba:97:a5:54:d5:16:75:cb:75:ad:13:bf:cd:bf:89: c4:5f:27:9b:2b:5b:7f:9e:c5:bb:70:e9:37:b0:b1: f4:bf:55:d9:67:72:75:91:94:35:1d:b6:e6:c4:cb: 8e:90:0e:66:d1:2f:29:1e:f5:ef:71:e5:07:ec:d4: ab:8c:ce:34:cf:34:ce:6a:01:b9:45:7d:3f:e0:65: 8c:5b:de:b0:e7:d9:41:37:60:25:54:5c:90:cb:f2: 86:3e:bf:43:f7:2c:80:be:6b:fc:61:3e:a8:07:3f: 55:f9:c5:92:17:fe:e6:36:d6:ff:94:db:e1:92:cb: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C5:60:78:99:5F:63:AF:64:D9:F0:AB:CC:28:4E:B6:BF:19:F8:F0 X509v3 Authority Key Identifier: keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:16:24:7f:18:4c:0d:e9:73:34:81:0f:df:0a:c1:93:05:55: bc:7e:de:9a:e1:6c:7c:de:29:b8:ca:89:3d:78:c0:e3:44:a6: cd:b4:5f:5e:56:d7:8a:5b:2a:fb:eb:e0:86:fd:c1:0c:42:4b: 30:2b:a5:1e:01:9f:1e:3a:f0:68:f9:ab:1b:c2:19:a1:c2:95: 65:5f:3d:56:b9:1e:6c:0e:27:e3:66:68:a8:dc:00:5e:c1:49: 15:03:de:d6:88:b0:d3:3a:3e:71:d4:b8:6f:a1:eb:ab:93:bc: 09:b5:43:90:91:e2:d6:39:be:ba:a3:07:7f:75:ed:6f:44:bf: 8b:8c:fa:37:a5:f6:a7:76:9a:50:2b:eb:6c:77:12:15:41:68: 2c:9b:35:8c:5b:66:0b:c7:4c:7b:9d:de:0a:15:bb:c7:ae:9e: 7f:b5:e6:e0:7b:80:b5:df:09:ac:2d:fb:7a:11:4e:bd:9a:93: f8:21:af:fe:38:c9:31:b3:8c:04:8a:81:a4:f7:68:ee:55:a3: 96:be:76:7b:e6:e6:1b:cb:c6:63:a2:3e:3f:36:59:02:c4:fc: b8:18:80:83:d6:7d:a1:da:cf:01:15:45:14:27:ca:b1:c8:8a: 24:90:2a:a9:92:8c:48:b6:89:38:48:97:3c:07:2c:3e:dd:7a: 41:84:0c:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQa+74jiUnIqnBllre1aOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWUzZGMwZWJmYjEwZWJiOTQxOTc0NTQ3MzJlZjc4NmFj NzViNzAwHhcNMjUxMjE3MTcwMDM3WhcNMjUxMjE4MTcwMDM3WjAzMTEwLwYDVQQD EyhiYWM1NjA3ODk5NWY2M2FmNjRkOWYwYWJjYzI4NGViNmJmMTlmOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSZs7m+8iigM0zlmMtKZ/qJpb9fD 5DFIox2P+KBOcYaEm3LO7VKIFBy27gHIG7989XFObr2nySQ516WKwJpiveBPfpAr Iu0O5aC614JpWJUwr5vY/FIChEj0v6DStZ4s001pfgwD8GKCbrutqZL85SKgJ6+x 4yBPmwZjTGN+ugQ7JrELsLi6l6VU1RZ1y3WtE7/Nv4nEXyebK1t/nsW7cOk3sLH0 v1XZZ3J1kZQ1HbbmxMuOkA5m0S8pHvXvceUH7NSrjM40zzTOagG5RX0/4GWMW96w 59lBN2AlVFyQy/KGPr9D9yyAvmv8YT6oBz9V+cWSF/7mNtb/lNvhksvo4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrFYHiZX2OvZNnwq8woTra/GfjwMB8GA1UdIwQY MBaAFLFePcDr+xDruUGXRUcy73hqx1twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYt MWQwMDdiZTljZGQ4LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYtMWQwMDdiZTljZGQ4 LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRYkfxhM DelzNIEP3wrBkwVVvH7emuFsfN4puMqJPXjA40SmzbRfXlbXilsq++vghv3BDEJL MCulHgGfHjrwaPmrG8IZocKVZV89VrkebA4n42ZoqNwAXsFJFQPe1oiw0zo+cdS4 b6Hrq5O8CbVDkJHi1jm+uqMHf3Xtb0S/i4z6N6X2p3aaUCvrbHcSFUFoLJs1jFtm C8dMe53eChW7x66ef7Xm4HuAtd8JrC37ehFOvZqT+CGv/jjJMbOMBIqBpPdo7lWj lr52e+bmG8vGY6I+PzZZAsT8uBiAg9Z9odrPARVFFCfKsciKJJAqqZKMSLaJOEiX PAcsPt16QYQMnw== -----END CERTIFICATE-----Generated at Wed Dec 17 23:42:54 2025 by rpki-client