This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json) Hash identifier: FTV/L0Jo9jyr4hCtqjZwzRrA59zwDzdejrV9jqVzg6U= Subject key identifier: 37:DB:4B:F3:1D:7E:AD:7F:56:0C:3A:3D:C5:19:89:39:E4:6A:D8:22 Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc Certificate serial: 019AF208CFB34EFE0442F58478A5A9F9803C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: AvYv0xXuVXfBh6pukIzgekPNHsRgnVBHnDdZ48z2CPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cf:b3:4e:fe:04:42:f5:84:78:a5:a9:f9:80:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=37db4bf31d7ead7f560c3a3dc5198939e46ad822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:0a:2d:6e:e2:ec:56:35:8e:b1:91:e4:9d: 4e:c8:18:0e:f7:06:87:fa:84:01:0e:4a:1d:70:74: d5:40:12:69:34:70:aa:bf:74:50:ac:ef:ba:ac:4d: 4f:a4:cc:99:3b:41:66:e4:86:37:3c:40:47:34:89: b3:07:12:12:e6:0c:70:81:df:e8:b5:c3:79:98:3a: 69:f5:56:dd:e7:70:30:f0:18:c4:73:65:51:32:2c: 82:54:4c:e2:e9:cb:3e:4e:b1:cf:18:2b:85:86:be: 01:34:20:fd:c0:e2:52:10:2a:9e:84:b4:60:0d:29: 77:67:ea:a0:b6:ec:39:6d:a3:0c:4e:52:1e:90:b1: e0:56:df:ea:49:6d:3a:6b:3b:52:50:a6:10:b5:09: 63:96:89:7e:99:57:6b:1e:e0:11:6e:a2:77:b5:06: c3:79:3d:49:97:ce:a4:ee:b7:15:0d:19:4b:e6:45: f4:1e:96:73:ad:6b:13:ed:db:29:6b:7f:7d:27:b9: 8a:e9:2c:64:d5:bd:3b:f1:d4:24:06:5f:82:ab:43: 58:90:ed:18:1b:6c:26:35:6f:90:41:91:dd:ff:3a: 97:50:78:03:c3:83:60:d9:72:76:37:0c:6e:91:62: 23:f7:5f:cb:2b:2c:b9:af:30:04:e0:d1:a6:1f:a2: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DB:4B:F3:1D:7E:AD:7F:56:0C:3A:3D:C5:19:89:39:E4:6A:D8:22 X509v3 Authority Key Identifier: keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0f:95:6f:26:b0:d8:2a:de:fb:8c:da:43:7c:bb:66:60:89: 01:80:5a:e7:9a:28:71:0f:82:f4:64:52:2c:33:08:54:3a:cb: 21:65:84:63:09:4b:56:eb:ad:5e:d9:f6:03:f2:51:bb:c1:78: b9:73:6c:a9:d9:65:51:f6:02:4b:05:0d:5a:0d:74:87:89:4e: 55:36:53:9b:fa:9c:cd:43:e1:16:7d:a9:d1:d7:eb:88:96:f3: a0:f6:5d:35:a2:24:96:a8:08:82:0a:97:d2:41:8e:6d:f9:a5: 07:ba:ad:77:59:49:6e:79:f0:31:37:12:e0:fe:6b:02:d4:fd: f9:be:69:7c:09:27:da:9b:7d:63:d9:2d:75:15:b4:d4:aa:27: 97:90:50:60:7b:d8:32:cf:df:82:2d:09:37:74:23:13:a6:bb: 53:2f:34:8d:34:0f:af:82:ee:3c:8f:11:d8:45:e2:0a:04:2b: 9c:17:e3:b6:cf:a5:d8:b0:8f:a7:4c:dd:e2:d9:ea:0d:3c:0e: 0a:61:77:1d:d3:8a:a6:c2:31:4a:10:1f:5c:bc:34:17:89:4d: 14:84:30:11:b0:69:e3:8a:26:be:76:2a:81:e1:51:3b:9f:af: cc:d2:37:3e:3d:94:aa:59:b3:5d:48:02:5b:f9:29:54:66:e3: b8:5e:9e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM+zTv4EQvWEeKWp+YA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmQxNTI3NjA3ZDExODhlOWRiODBjZjE2NDk4YTQxMzgy MDBjZGMwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EygzN2RiNGJmMzFkN2VhZDdmNTYwYzNhM2RjNTE5ODkzOWU0NmFkODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMYKLW7i7FY1jrGR5J1OyBgO9waH +oQBDkodcHTVQBJpNHCqv3RQrO+6rE1PpMyZO0Fm5IY3PEBHNImzBxIS5gxwgd/o tcN5mDpp9Vbd53Aw8BjEc2VRMiyCVEzi6cs+TrHPGCuFhr4BNCD9wOJSECqehLRg DSl3Z+qgtuw5baMMTlIekLHgVt/qSW06aztSUKYQtQljlol+mVdrHuARbqJ3tQbD eT1Jl86k7rcVDRlL5kX0HpZzrWsT7dspa399J7mK6Sxk1b078dQkBl+Cq0NYkO0Y G2wmNW+QQZHd/zqXUHgDw4Ng2XJ2NwxukWIj91/LKyy5rzAE4NGmH6JGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfbS/Mdfq1/Vgw6PcUZiTnkatgiMB8GA1UdIwQY MBaAFP0tFSdgfRGI6duAzxZJikE4IAzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzct ZGMxYWJlYzE2NjZjLzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzctZGMxYWJlYzE2NjZj LzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw+Vbyaw 2Cre+4zaQ3y7ZmCJAYBa55oocQ+C9GRSLDMIVDrLIWWEYwlLVuutXtn2A/JRu8F4 uXNsqdllUfYCSwUNWg10h4lOVTZTm/qczUPhFn2p0dfriJbzoPZdNaIklqgIggqX 0kGObfmlB7qtd1lJbnnwMTcS4P5rAtT9+b5pfAkn2pt9Y9ktdRW01Konl5BQYHvY Ms/fgi0JN3QjE6a7Uy80jTQPr4LuPI8R2EXiCgQrnBfjts+l2LCPp0zd4tnqDTwO CmF3HdOKpsIxShAfXLw0F4lNFIQwEbBp44omvnYqgeFRO5+vzNI3Pj2UqlmzXUgC W/kpVGbjuF6eKA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:06 2025 by rpki-client