This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json) Hash identifier: zFJesuhxYDJIO0XVi57mW2tFsPRcQoC4VaS3V++laaU= Subject key identifier: 03:62:05:5E:41:C8:09:98:1A:8B:80:D6:D2:EE:00:29:45:37:53:71 Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d Certificate serial: 019AF2AD3CDF832A9BBB52921F809321E491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft Manifest number: 0125 Signing time: Sat 06 Dec 2025 08:00:30 +0000 Manifest this update: Sat 06 Dec 2025 08:00:30 +0000 Manifest next update: Sun 07 Dec 2025 08:00:30 +0000 Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: yS5InpJXhLz+kiXDnVjLy7pldH2pvbZ5ANMNzaOcPwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3c:df:83:2a:9b:bb:52:92:1f:80:93:21:e4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d Validity Not Before: Dec 6 08:00:30 2025 GMT Not After : Dec 7 08:00:30 2025 GMT Subject: CN=0362055e41c809981a8b80d6d2ee002945375371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:3e:2a:32:93:25:8a:ca:2e:5a:9d:a9:9c: 0a:f4:15:83:57:b7:de:51:d4:69:74:de:62:9a:f8: a7:56:16:68:62:af:57:51:97:81:58:82:08:d5:20: 0f:c6:9e:cc:6f:e2:1a:05:fd:e2:0d:f9:4a:5b:2b: 1e:45:38:e0:e1:60:b4:64:a5:94:22:8c:a1:01:13: 2f:18:63:80:4b:49:80:59:71:4c:3a:fb:19:3e:aa: 3f:ae:87:33:51:1b:b4:6f:c6:96:95:db:57:7a:c5: 41:f6:05:31:ac:8d:49:11:29:d7:a3:d6:7e:9b:5f: 48:2a:28:3a:e9:fb:dd:45:a8:08:87:a5:22:33:22: 28:ae:ef:a4:72:b9:4a:03:50:96:bf:62:d5:49:c2: 00:fc:54:b9:f6:10:14:f0:21:60:9d:f9:28:f7:ed: c8:72:5b:a0:be:6e:c7:98:d4:a5:b7:e6:97:f5:a9: 1d:66:c5:42:8e:12:2c:b2:43:73:74:a5:b3:89:94: 7a:fd:94:fb:d9:85:d2:d2:40:7e:14:16:b8:85:79: 01:ff:78:57:8e:69:60:af:53:b8:93:85:a7:7d:8d: 54:ce:f2:31:a5:5f:56:36:89:8f:07:02:21:d0:51: b3:77:51:c4:23:15:e6:55:1c:eb:24:8c:ff:61:e1: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:62:05:5E:41:C8:09:98:1A:8B:80:D6:D2:EE:00:29:45:37:53:71 X509v3 Authority Key Identifier: keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:38:40:6c:32:db:b7:71:e4:ae:c7:6e:dc:d9:d9:e3:52:d8: b8:6e:46:37:29:28:2e:61:33:be:57:f4:7b:82:78:10:a0:85: b2:c2:cf:0e:8d:8f:52:fc:d9:d0:97:c2:0a:34:6e:09:10:38: 9a:62:58:7f:d8:46:e1:c8:ba:30:27:96:f1:b4:ad:cc:ea:40: f6:64:3f:cb:7c:e4:f6:36:16:2b:7a:b7:26:14:3b:34:c4:7c: 82:3f:90:f5:48:cf:17:cf:c7:5a:b0:a1:ba:b2:5c:4b:63:6d: 65:dd:6e:64:2b:c6:be:10:0b:f4:a6:87:0f:30:4c:61:d7:1a: 8f:55:9d:e7:07:8c:5f:3b:e1:01:09:f8:02:cf:de:1a:0b:e3: 49:57:63:8a:d0:f2:38:1d:83:13:95:a6:e0:c7:5d:fe:08:73: f6:9c:ca:68:22:ec:45:d6:f7:f2:27:30:b9:d9:6e:03:b9:6e: 30:81:6f:20:83:fb:70:57:5a:bc:19:4f:b6:b2:56:01:0e:b8: ca:49:8a:e4:36:2c:0a:15:61:44:02:c7:4a:47:c5:e2:f0:0f: 36:75:bc:a3:fa:5f:dc:b4:5a:68:76:39:f4:c5:5f:12:2a:da: 05:bc:bc:4b:1f:3d:8d:70:7f:2d:01:31:0e:ab:b6:c8:ce:db: 9c:fe:25:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTzfgyqbu1KSH4CTIeSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MmJmZjM2YmY5NTdhOTE2N2VlM2YwZmE0YTY0ZDg3MjUx NmU3MmQwHhcNMjUxMjA2MDgwMDMwWhcNMjUxMjA3MDgwMDMwWjAzMTEwLwYDVQQD EygwMzYyMDU1ZTQxYzgwOTk4MWE4YjgwZDZkMmVlMDAyOTQ1Mzc1MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyc+KjKTJYrKLlqdqZwK9BWDV7fe UdRpdN5imvinVhZoYq9XUZeBWIII1SAPxp7Mb+IaBf3iDflKWyseRTjg4WC0ZKWU IoyhARMvGGOAS0mAWXFMOvsZPqo/roczURu0b8aWldtXesVB9gUxrI1JESnXo9Z+ m19IKig66fvdRagIh6UiMyIoru+kcrlKA1CWv2LVScIA/FS59hAU8CFgnfko9+3I clugvm7HmNSlt+aX9akdZsVCjhIsskNzdKWziZR6/ZT72YXS0kB+FBa4hXkB/3hX jmlgr1O4k4WnfY1UzvIxpV9WNomPBwIh0FGzd1HEIxXmVRzrJIz/YeH8wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANiBV5ByAmYGouA1tLuAClFN1NxMB8GA1UdIwQY MBaAFNkr/za/lXqRZ+4/D6SmTYclFuctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjct NWRmZWI5NzgyY2ZiLzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjctNWRmZWI5NzgyY2Zi LzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzhAbDLb t3Hkrsdu3NnZ41LYuG5GNykoLmEzvlf0e4J4EKCFssLPDo2PUvzZ0JfCCjRuCRA4 mmJYf9hG4ci6MCeW8bStzOpA9mQ/y3zk9jYWK3q3JhQ7NMR8gj+Q9UjPF8/HWrCh urJcS2NtZd1uZCvGvhAL9KaHDzBMYdcaj1Wd5weMXzvhAQn4As/eGgvjSVdjitDy OB2DE5Wm4Mdd/ghz9pzKaCLsRdb38icwudluA7luMIFvIIP7cFdavBlPtrJWAQ64 ykmK5DYsChVhRALHSkfF4vAPNnW8o/pf3LRaaHY59MVfEiraBby8Sx89jXB/LQEx Dqu2yM7bnP4lzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:01 2025 by rpki-client