This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json) Hash identifier: DySorAOz/pQmtzjTYIlXYjz53XSsnSBfGsx/M6ACDPM= Subject key identifier: 5A:3C:FF:89:34:37:FE:7B:59:E0:E3:E7:48:E2:BB:2E:15:C1:C4:30 Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Certificate serial: 019AF1D195EF245A93C74DED508479D180E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft Manifest number: 10F1 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=) 2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=) 3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: rb7GO4rb3vxKeGsStFsxxLxHj5godNmJmHt32wL+Gio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:ef:24:5a:93:c7:4d:ed:50:84:79:d1:80:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=5a3cff893437fe7b59e0e3e748e2bb2e15c1c430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:a0:8f:00:bc:45:62:4a:7b:33:8f:ce:fc: a5:a1:ed:4f:04:55:09:ba:48:42:02:38:27:19:99: c7:f7:b6:db:00:fe:0a:46:56:d3:aa:43:02:10:8f: a1:69:c9:7c:fd:85:78:dd:d5:25:a5:cc:f8:c8:b2: 52:02:fb:64:7d:7d:55:3e:a4:1b:69:1e:b8:18:aa: 47:46:3f:b3:de:1a:49:f2:17:cb:6b:4a:44:36:9e: b1:92:90:d6:3a:cf:c7:85:6e:8d:0c:98:12:0d:87: 35:22:ab:65:db:86:38:27:7b:8f:7c:32:ea:59:ce: f8:b2:33:09:d0:70:26:dd:ee:86:9d:5f:ae:f8:2a: 71:0a:c2:f1:e8:28:d4:18:df:04:bc:9e:43:85:ec: ae:1f:90:9c:f6:58:75:2f:dc:9b:ea:82:b0:0a:0b: 6d:d5:8d:d0:bb:c4:20:b8:1d:51:15:a8:23:63:0c: e9:60:0c:a7:f7:d6:76:a1:24:04:45:b0:06:bd:1b: 60:be:15:49:df:cc:a0:3d:4b:83:41:96:81:f5:b9: 80:69:5f:f9:85:ed:bb:0b:7f:7e:39:72:e7:6d:40: 54:19:23:7a:84:a8:70:fe:fb:d3:a0:f5:68:be:61: 43:5f:2e:88:c6:80:60:2c:4d:8e:c7:9e:66:21:f7: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:FF:89:34:37:FE:7B:59:E0:E3:E7:48:E2:BB:2E:15:C1:C4:30 X509v3 Authority Key Identifier: keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b9:d0:4a:8e:b9:8d:35:88:b4:54:70:72:9d:8a:7e:a0:5c: ab:ad:e6:71:34:5e:bd:78:1a:0e:cf:42:90:c0:9e:51:75:0d: 84:39:37:59:40:50:05:b5:e6:25:93:0f:af:dc:41:1a:9a:6e: 36:44:7e:ab:c6:9d:8f:bd:cd:a6:86:ea:93:5f:64:1f:33:51: 17:16:e6:9c:d7:b9:78:69:1c:04:5c:14:52:90:de:4c:3a:a7: fe:94:8a:11:78:5e:aa:7b:b7:06:6f:68:74:0c:39:f5:0f:21: de:2b:3d:36:ee:f1:89:67:cd:57:12:d5:0b:4d:a4:1b:cb:56: 5b:3b:42:76:d5:4e:fa:93:48:66:41:9c:63:cf:a2:b2:70:86: 5a:f0:4d:7f:4d:1a:ea:08:57:97:1b:b3:e3:8a:75:00:96:04: 98:80:8d:0a:73:50:c9:5d:39:94:78:79:91:26:8b:95:3c:f5: 75:9f:e4:ab:df:9f:c6:8a:77:8b:98:fe:e3:bc:14:70:ba:04: 38:2d:ca:c4:42:ee:e6:0c:53:bb:3e:8c:1c:f9:2a:0a:6c:ce: 4a:af:21:88:47:3d:f7:ca:8c:7a:a8:18:28:0e:ca:a8:f9:f0: f8:88:a4:7c:a5:f3:78:75:c9:c7:01:f3:c4:c3:0a:7c:32:e0: 04:c6:b7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZXvJFqTx03tUIR50YDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli YjYzZjgwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg1YTNjZmY4OTM0MzdmZTdiNTllMGUzZTc0OGUyYmIyZTE1YzFjNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/2gjwC8RWJKezOPzvyloe1PBFUJ ukhCAjgnGZnH97bbAP4KRlbTqkMCEI+hacl8/YV43dUlpcz4yLJSAvtkfX1VPqQb aR64GKpHRj+z3hpJ8hfLa0pENp6xkpDWOs/HhW6NDJgSDYc1Iqtl24Y4J3uPfDLq Wc74sjMJ0HAm3e6GnV+u+CpxCsLx6CjUGN8EvJ5DheyuH5Cc9lh1L9yb6oKwCgtt 1Y3Qu8QguB1RFagjYwzpYAyn99Z2oSQERbAGvRtgvhVJ38ygPUuDQZaB9bmAaV/5 he27C39+OXLnbUBUGSN6hKhw/vvToPVovmFDXy6IxoBgLE2Ox55mIfd0MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo8/4k0N/57WeDj50jiuy4VwcQwMB8GA1UdIwQY MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt ZmI0Y2YxMzdjMWU5LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5 LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7nQSo65 jTWItFRwcp2KfqBcq63mcTRevXgaDs9CkMCeUXUNhDk3WUBQBbXmJZMPr9xBGppu NkR+q8adj73Npobqk19kHzNRFxbmnNe5eGkcBFwUUpDeTDqn/pSKEXheqnu3Bm9o dAw59Q8h3is9Nu7xiWfNVxLVC02kG8tWWztCdtVO+pNIZkGcY8+isnCGWvBNf00a 6ghXlxuz44p1AJYEmICNCnNQyV05lHh5kSaLlTz1dZ/kq9+fxop3i5j+47wUcLoE OC3KxELu5gxTuz6MHPkqCmzOSq8hiEc998qMeqgYKA7KqPnw+IikfKXzeHXJxwHz xMMKfDLgBMa3og== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:24 2025 by rpki-client