This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json) Hash identifier: FWFrYpD4bOKcBK5+I6nxyvmK3G8yhUACW7geP2XwAvk= Subject key identifier: AF:A1:EC:54:E3:ED:2C:AB:BF:3A:C5:18:D4:48:70:DF:AA:93:21:D1 Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4 Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4 Certificate serial: 019AF31D097D9C2D1BF5663ECD465EDE7AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft Manifest number: 0977 Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: IkqK9REE4tiCXMF3JiMVHHZ5QqN79Lm7x81ITX9tAQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:09:7d:9c:2d:1b:f5:66:3e:cd:46:5e:de:7a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4 Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=afa1ec54e3ed2cabbf3ac518d44870dfaa9321d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:03:be:ba:5a:48:99:15:a1:70:bd:d2:f5: c9:8d:df:32:7b:0a:59:f1:47:99:2f:31:7c:1b:8c: c3:c8:ff:15:1e:8b:9b:fd:77:f3:3a:6d:3d:34:ae: ad:c3:65:70:a6:8d:76:1e:64:65:02:32:69:e0:3b: 65:d6:cb:d5:35:7f:c5:e9:18:f7:cd:fb:47:06:42: 57:68:0c:4e:82:50:0d:4e:50:fb:d4:c3:49:dc:b3: 04:91:33:1b:f7:4b:a6:07:46:66:83:39:0c:a3:21: e7:99:c6:0e:b4:ff:d6:ea:b2:74:c6:0d:6c:3f:0e: d8:ba:6f:fe:d3:78:15:3a:04:e9:c5:66:e3:11:b8: 1b:6b:8c:29:30:56:b9:c1:67:3c:a1:fb:40:78:22: b7:d1:e8:f0:5c:87:e0:46:db:bd:4a:2a:b9:ee:ee: 16:95:19:a0:86:58:8b:37:9f:26:14:bf:86:66:64: fe:da:87:ce:a8:cd:ed:9e:b4:fb:90:72:ff:d1:35: c4:4d:bc:3e:d0:2d:5d:ba:80:a3:8a:8c:ac:a2:56: cb:61:c7:c0:e7:e3:bf:76:1d:a5:05:9d:72:20:b3: 4d:fb:4d:3c:7d:93:dd:24:e2:5f:1f:e9:48:9f:37: d7:c1:7e:26:f9:d3:40:29:ed:80:d8:c6:77:e2:57: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:EC:54:E3:ED:2C:AB:BF:3A:C5:18:D4:48:70:DF:AA:93:21:D1 X509v3 Authority Key Identifier: keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:6c:db:99:cc:47:66:e7:7b:76:cf:43:c3:ec:0e:cc:60:55: 44:36:c8:53:02:ee:30:d2:dd:a9:9e:2e:ec:b8:28:29:23:bf: 32:eb:f7:a2:71:9f:1b:14:88:35:85:19:03:5d:b2:3c:f0:c8: 89:71:42:e4:bf:3f:87:ed:1a:67:e4:fb:e0:78:17:0b:dd:b5: e9:c0:91:0c:94:a9:82:3f:df:ed:f3:c8:6c:85:f5:31:a5:1e: 6d:2a:13:68:fc:6f:d6:3c:1b:c3:86:a1:41:81:92:7c:dc:5a: b2:35:00:6c:a1:23:f0:51:3c:ce:ab:3f:11:26:21:64:5a:bd: 53:f6:21:6e:20:2a:f4:59:e7:d4:78:2f:d7:b1:00:3b:b4:a2: 7b:5a:f7:0e:ce:38:fa:58:bc:f0:45:79:90:42:a5:21:c8:4d: 37:cd:3f:b6:f7:37:a7:36:f2:a5:c5:bb:b0:6a:da:67:39:a8: 79:b4:5f:61:bf:fd:40:25:8d:6a:9f:fa:2f:10:1b:24:fa:a8: af:33:21:98:46:c1:ee:a5:0d:68:0d:29:54:9d:f5:7e:8d:62: 99:5e:c3:a1:b3:ff:21:cc:44:9b:00:d9:16:5b:8d:3b:a0:b5: 1b:3c:a8:01:ab:b6:05:38:6e:99:ac:78:d7:e7:7d:b7:34:de: 25:4a:10:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQl9nC0b9WY+zUZe3nrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTUzNmFiZWUzZDdiNTRiODMwM2I5YmM2OWE4YWFiYmU5 NzAwZTQwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD EyhhZmExZWM1NGUzZWQyY2FiYmYzYWM1MThkNDQ4NzBkZmFhOTMyMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHcDvrpaSJkVoXC90vXJjd8yewpZ 8UeZLzF8G4zDyP8VHoub/XfzOm09NK6tw2Vwpo12HmRlAjJp4Dtl1svVNX/F6Rj3 zftHBkJXaAxOglANTlD71MNJ3LMEkTMb90umB0ZmgzkMoyHnmcYOtP/W6rJ0xg1s Pw7Yum/+03gVOgTpxWbjEbgba4wpMFa5wWc8oftAeCK30ejwXIfgRtu9Siq57u4W lRmghliLN58mFL+GZmT+2ofOqM3tnrT7kHL/0TXETbw+0C1duoCjioysolbLYcfA 5+O/dh2lBZ1yILNN+008fZPdJOJfH+lInzfXwX4m+dNAKe2A2MZ34ld6MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+h7FTj7SyrvzrFGNRIcN+qkyHRMB8GA1UdIwQY MBaAFLMVNqvuPXtUuDA7m8aaiqu+lwDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMt Y2NjODc3YjVhMzc1LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMtY2NjODc3YjVhMzc1 LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmzbmcxH Zud7ds9Dw+wOzGBVRDbIUwLuMNLdqZ4u7LgoKSO/Muv3onGfGxSINYUZA12yPPDI iXFC5L8/h+0aZ+T74HgXC9216cCRDJSpgj/f7fPIbIX1MaUebSoTaPxv1jwbw4ah QYGSfNxasjUAbKEj8FE8zqs/ESYhZFq9U/YhbiAq9Fnn1Hgv17EAO7Sie1r3Ds44 +li88EV5kEKlIchNN80/tvc3pzbypcW7sGraZzmoebRfYb/9QCWNap/6LxAbJPqo rzMhmEbB7qUNaA0pVJ31fo1imV7DobP/IcxEmwDZFluNO6C1GzyoAau2BThumax4 1+d9tzTeJUoQzw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:45 2025 by rpki-client