This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json) Hash identifier: nd4vTItx983pdrUYB/nHhHiAhGcDN0tdvNRsSEvcXaI= Subject key identifier: 7E:24:92:80:71:75:9A:DC:E4:C5:7A:53:6E:E1:AD:3F:DB:C0:7C:A9 Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Certificate serial: 019AF352949D8B87BEE605042147495E67C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft Manifest number: 0C1D Signing time: Sat 06 Dec 2025 11:01:06 +0000 Manifest this update: Sat 06 Dec 2025 11:01:06 +0000 Manifest next update: Sun 07 Dec 2025 11:01:06 +0000 Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: km6GL6ZmAvPxNOzdExFPvvfEgyGQizPhUWp1pG3JavQ=) 2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:94:9d:8b:87:be:e6:05:04:21:47:49:5e:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Validity Not Before: Dec 6 11:01:06 2025 GMT Not After : Dec 7 11:01:06 2025 GMT Subject: CN=7e24928071759adce4c57a536ee1ad3fdbc07ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:69:37:68:2a:3b:67:b1:a8:9f:08:b7:74: 33:0f:8c:48:ee:c8:0d:4f:9e:b5:b9:5b:bf:00:73: a8:34:e9:29:04:4e:91:66:c6:c4:f9:ba:cb:93:bc: 15:fe:37:a2:67:17:a0:d2:ec:87:b0:7b:97:c7:9c: d6:5a:95:ed:e4:5d:49:c1:22:a3:72:ad:ae:b6:fc: 14:d3:3c:a2:77:e7:47:8e:78:19:fb:1c:de:7a:01: 16:de:b6:35:2f:6b:2e:9b:6c:39:1e:87:17:c5:ad: ed:21:7e:55:a1:96:a4:ff:ac:40:b4:1c:d4:cb:e8: 17:31:14:61:bf:23:48:62:62:7a:c0:a1:27:4a:65: 1d:6d:4a:a2:b4:d2:4f:17:a2:7b:fe:65:a9:ee:5c: f1:4a:66:9e:b0:6f:39:9c:78:a2:6e:54:d9:3c:d8: 67:4d:f7:ad:7f:a9:fc:75:7d:98:fe:54:2e:c3:89: 37:08:a9:10:df:1b:e1:a9:41:23:9b:10:fc:be:42: 5c:a2:5c:c4:d7:29:87:fe:6c:e6:d4:9a:10:0e:a8: 70:7f:19:43:7b:36:04:c0:3e:22:94:e8:9e:52:15: da:c3:5e:3c:af:49:3c:8d:90:4a:42:1d:e1:48:e6: 31:7e:f2:dd:0f:55:21:de:3d:6c:b4:4c:a7:17:ed: 29:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:92:80:71:75:9A:DC:E4:C5:7A:53:6E:E1:AD:3F:DB:C0:7C:A9 X509v3 Authority Key Identifier: keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ea:24:97:87:13:14:94:b2:b0:8b:5b:94:0e:14:fc:ac:32: 30:23:59:95:24:a0:bd:ff:cd:48:c2:ab:8f:72:04:0e:68:73: 16:db:68:a2:01:08:11:21:31:8e:e9:48:70:8e:2c:e4:08:68: da:49:c0:c5:30:af:0e:52:15:1e:14:78:14:47:bb:c0:99:b3: 0d:56:c2:a5:6b:b0:a9:67:0c:64:b0:e1:78:99:69:39:cf:92: 75:09:db:7c:07:eb:3a:11:e7:5c:39:80:d2:30:d9:39:a7:9e: 8e:1b:d5:a2:28:6e:cf:0f:cb:28:8b:e8:38:d5:51:92:c2:02: fa:8f:59:cc:16:f2:b9:6f:fc:b7:cb:20:64:85:61:46:1d:d4: 5d:28:86:66:ec:80:23:b4:84:78:eb:b0:f1:b8:f7:ee:96:c5: 29:74:df:a0:e1:8c:57:e2:ce:b9:75:c7:c4:40:1e:21:8a:a1: a9:2f:63:8f:8c:b8:c4:b1:4e:6c:9f:51:18:98:99:f4:97:e6: ce:eb:6b:0e:d9:d6:68:24:1a:e9:bc:5c:aa:32:a8:ef:df:d0: db:5b:8c:a4:2d:3a:ea:11:1c:83:6e:07:de:d3:38:b1:eb:40: 65:c2:9e:f8:8c:46:3c:4a:0d:51:96:28:6b:e5:23:08:75:b2: 26:7e:b9:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpSdi4e+5gUEIUdJXmfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWUzZGMwZWJmYjEwZWJiOTQxOTc0NTQ3MzJlZjc4NmFj NzViNzAwHhcNMjUxMjA2MTEwMTA2WhcNMjUxMjA3MTEwMTA2WjAzMTEwLwYDVQQD Eyg3ZTI0OTI4MDcxNzU5YWRjZTRjNTdhNTM2ZWUxYWQzZmRiYzA3Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1VpN2gqO2exqJ8It3QzD4xI7sgN T561uVu/AHOoNOkpBE6RZsbE+brLk7wV/jeiZxeg0uyHsHuXx5zWWpXt5F1JwSKj cq2utvwU0zyid+dHjngZ+xzeegEW3rY1L2sum2w5HocXxa3tIX5VoZak/6xAtBzU y+gXMRRhvyNIYmJ6wKEnSmUdbUqitNJPF6J7/mWp7lzxSmaesG85nHiiblTZPNhn Tfetf6n8dX2Y/lQuw4k3CKkQ3xvhqUEjmxD8vkJcolzE1ymH/mzm1JoQDqhwfxlD ezYEwD4ilOieUhXaw148r0k8jZBKQh3hSOYxfvLdD1Uh3j1stEynF+0pOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4kkoBxdZrc5MV6U27hrT/bwHypMB8GA1UdIwQY MBaAFLFePcDr+xDruUGXRUcy73hqx1twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYt MWQwMDdiZTljZGQ4LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYtMWQwMDdiZTljZGQ4 LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+okl4cT FJSysItblA4U/KwyMCNZlSSgvf/NSMKrj3IEDmhzFttoogEIESExjulIcI4s5Aho 2knAxTCvDlIVHhR4FEe7wJmzDVbCpWuwqWcMZLDheJlpOc+SdQnbfAfrOhHnXDmA 0jDZOaeejhvVoihuzw/LKIvoONVRksIC+o9ZzBbyuW/8t8sgZIVhRh3UXSiGZuyA I7SEeOuw8bj37pbFKXTfoOGMV+LOuXXHxEAeIYqhqS9jj4y4xLFObJ9RGJiZ9Jfm zutrDtnWaCQa6bxcqjKo79/Q21uMpC066hEcg24H3tM4setAZcKe+IxGPEoNUZYo a+UjCHWyJn65Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:23 2025 by rpki-client