This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: cndjBWNR5T3uEviOypwgDXDe8CxEPRRFeU/RcPqxbWw=
Subject key identifier: C9:37:DE:70:72:11:42:0D:AC:EF:06:7B:D8:32:35:B7:6E:2A:FF:F4
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019AF2767ABD0D7339D2CF7FE80CD7519E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0872
Signing time: Sat 06 Dec 2025 07:00:42 +0000
Manifest this update: Sat 06 Dec 2025 07:00:42 +0000
Manifest next update: Sun 07 Dec 2025 07:00:42 +0000
Files and hashes: 1: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: iXN97Kok9BYzQ8ak0tD4Geyhb7WOpehJmr36JWmHwRo=)
2: dBWqqX7TUpjmbRpfXp44YLDQQKo.roa (hash: AVnu+TRmBANWXBo+f7zIG17k48ory+VgROMrgBy0M0A=)
3: iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa (hash: KntVVQ+l5TkxKddv8L7Y42R3lMc8nIp6SRc9XJjEO0c=)
4: l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa (hash: BmB8JatQfp2mQ4vWr7Bgl6YeJ1OakzxtLlN1iSUDIbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:7a:bd:0d:73:39:d2:cf:7f:e8:0c:d7:51:9e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Dec 6 07:00:42 2025 GMT
Not After : Dec 7 07:00:42 2025 GMT
Subject: CN=c937de707211420dacef067bd83235b76e2afff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:0c:c8:d6:fd:71:74:a5:d0:6b:af:fc:89:
9d:7f:60:f2:97:9b:7a:5e:f2:27:ec:4e:28:e1:70:
b3:2d:ed:4e:5e:73:ab:46:c0:e8:88:69:bb:00:04:
de:bc:8a:0e:33:08:2c:b5:83:b5:e0:da:9e:92:58:
05:b6:df:d8:4a:cc:5d:d7:62:e0:90:48:e0:fb:4f:
6f:ac:0c:d5:f8:f1:99:31:df:4c:a1:0c:6a:a9:f5:
df:44:5e:d9:fe:de:50:19:fe:7e:d2:ae:c3:c3:ed:
67:4e:35:cb:55:e3:60:62:97:d3:0d:9b:e7:f7:5f:
88:b9:c4:be:7c:25:59:a6:eb:03:d0:5e:90:e4:8a:
08:ca:92:b2:c0:fc:21:07:64:15:dd:c0:a2:52:69:
75:67:11:06:c1:90:54:ef:38:e3:d1:cb:f2:5e:ab:
91:c8:1a:0c:fd:d6:e1:7a:ad:87:21:c1:f1:c5:df:
fc:58:76:01:d3:ee:21:7b:1c:3e:25:c8:dc:60:ee:
c0:b8:9b:c7:15:27:dd:71:41:70:aa:87:e5:a6:be:
8d:2b:29:26:11:55:87:4c:b3:f2:83:97:dc:c8:8f:
a1:30:ec:e5:1b:06:c8:3a:47:d1:9a:20:ec:f0:1a:
21:cb:9d:33:48:b8:07:8c:07:ad:75:71:8c:14:c2:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:37:DE:70:72:11:42:0D:AC:EF:06:7B:D8:32:35:B7:6E:2A:FF:F4
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:ac:ee:92:32:9e:c3:80:51:f9:6d:32:03:e5:9b:b2:23:
d5:2b:43:a3:17:01:1f:c7:75:c9:37:b9:0a:e0:1e:bb:11:9e:
e6:d9:b3:de:ed:15:01:4b:47:71:35:4b:96:59:a3:0a:cd:81:
3a:b0:a6:98:2d:d3:49:22:af:9a:82:2c:80:4f:73:ed:ae:d8:
f9:8f:c0:27:76:07:58:7c:9a:16:49:cf:9b:30:8c:e9:06:94:
51:8a:35:8b:07:d3:b1:1f:6c:54:5d:4e:55:93:d9:3f:19:1c:
84:21:6d:9c:3e:c5:93:f6:bd:ae:5d:7f:a6:4a:9d:7c:7e:44:
ea:0f:6c:59:85:d6:0f:49:b1:c5:9f:06:08:a3:ae:1a:ce:bd:
f4:30:5f:1b:de:d9:41:e9:33:07:49:5d:25:93:69:87:6f:ad:
8f:e7:0c:2c:ef:b5:35:8f:9c:30:d0:39:b6:a0:71:94:d7:df:
6a:bc:e0:33:e6:f1:79:e6:2d:a7:57:22:c3:46:f3:f2:0a:1a:
1f:1f:cf:5c:7c:aa:fc:cc:49:28:ed:cb:db:09:9b:e6:01:ea:
3a:4e:4e:15:fa:67:4f:bb:b1:93:c4:cb:3c:f9:c3:64:53:d5:
7b:fb:d3:19:0d:e7:74:68:10:e1:79:88:a1:0e:6a:4d:64:90:
e5:a9:55:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydnq9DXM50s9/6AzXUZ4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw
MTU4YWUwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD
EyhjOTM3ZGU3MDcyMTE0MjBkYWNlZjA2N2JkODMyMzViNzZlMmFmZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3IMyNb9cXSl0Guv/Imdf2Dyl5t6
XvIn7E4o4XCzLe1OXnOrRsDoiGm7AATevIoOMwgstYO14NqeklgFtt/YSsxd12Lg
kEjg+09vrAzV+PGZMd9MoQxqqfXfRF7Z/t5QGf5+0q7Dw+1nTjXLVeNgYpfTDZvn
91+IucS+fCVZpusD0F6Q5IoIypKywPwhB2QV3cCiUml1ZxEGwZBU7zjj0cvyXquR
yBoM/dbheq2HIcHxxd/8WHYB0+4hexw+JcjcYO7AuJvHFSfdcUFwqoflpr6NKykm
EVWHTLPyg5fcyI+hMOzlGwbIOkfRmiDs8Bohy50zSLgHjAetdXGMFMJu5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk33nByEUINrO8Ge9gyNbduKv/0MB8GA1UdIwQY
MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt
MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj
LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQSs7pIy
nsOAUfltMgPlm7Ij1StDoxcBH8d1yTe5CuAeuxGe5tmz3u0VAUtHcTVLllmjCs2B
OrCmmC3TSSKvmoIsgE9z7a7Y+Y/AJ3YHWHyaFknPmzCM6QaUUYo1iwfTsR9sVF1O
VZPZPxkchCFtnD7Fk/a9rl1/pkqdfH5E6g9sWYXWD0mxxZ8GCKOuGs699DBfG97Z
QekzB0ldJZNph2+tj+cMLO+1NY+cMNA5tqBxlNffarzgM+bxeeYtp1ciw0bz8goa
Hx/PXHyq/MxJKO3L2wmb5gHqOk5OFfpnT7uxk8TLPPnDZFPVe/vTGQ3ndGgQ4XmI
oQ5qTWSQ5alV4w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:14 2025 by rpki-client