This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json) Hash identifier: q0GO19O2/6P8ZeUEGsT7cpcwC7x/eLRIhYBdhYXrRuI= Subject key identifier: 9D:AC:9C:75:E9:8C:06:1C:79:88:4B:7B:C8:D5:48:E4:B1:3B:AB:93 Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Certificate serial: 019B356928E68D3398EA5CEDE18BD4CD5699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft Manifest number: 1114 Signing time: Fri 19 Dec 2025 07:00:42 +0000 Manifest this update: Fri 19 Dec 2025 07:00:42 +0000 Manifest next update: Sat 20 Dec 2025 07:00:42 +0000 Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=) 2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=) 3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: KK/vvSlFvUcDmvoZ1lH6OhYEEAoNjrFlvQp9UYG3ZAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:28:e6:8d:33:98:ea:5c:ed:e1:8b:d4:cd:56:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Validity Not Before: Dec 19 07:00:42 2025 GMT Not After : Dec 20 07:00:42 2025 GMT Subject: CN=9dac9c75e98c061c79884b7bc8d548e4b13bab93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:fc:eb:36:73:f9:60:c7:fc:4b:4e:23:eb: 4d:92:de:59:5f:be:42:8d:69:6e:72:c7:47:d9:d6: 07:5f:9f:08:ce:60:9a:56:29:dd:d0:8a:f8:ae:e6: 4e:0d:19:49:f1:16:0a:f0:90:10:dd:73:a0:b1:f6: d3:49:f6:76:e1:ea:28:e1:66:06:89:5f:3e:34:0d: df:68:0e:d2:33:5d:d1:d3:da:51:12:f6:e2:20:cb: bf:4e:23:dd:14:c0:b4:fe:59:8c:92:36:33:1d:43: dd:1e:41:83:b8:ac:df:48:af:6a:6f:86:da:5d:29: 9e:f9:0d:80:bc:af:df:e3:b5:35:ba:85:6f:bd:89: 8c:6c:f5:f2:8b:e1:9e:67:55:b4:7c:4c:93:31:0a: 82:c6:20:b2:4d:f6:71:e1:c3:29:4d:61:ed:95:73: ae:ce:64:28:9c:db:20:98:52:e8:4c:8e:70:f4:b0: 32:86:bc:cd:9c:79:ad:1a:43:04:be:58:2d:d7:3e: 20:80:c3:1b:9a:67:f6:5a:a9:a9:35:9e:08:f5:cf: 0a:45:91:d2:57:c7:91:31:e7:8a:65:8d:87:6c:3e: b8:b7:4c:b4:50:10:02:ed:53:48:1d:ef:84:14:2b: db:50:57:96:8c:b0:30:4a:98:eb:e4:78:41:35:09: 75:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AC:9C:75:E9:8C:06:1C:79:88:4B:7B:C8:D5:48:E4:B1:3B:AB:93 X509v3 Authority Key Identifier: keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a9:2a:c9:d4:2c:81:3a:52:c4:3e:b3:c4:04:cd:c6:d5:51: ef:b8:e6:c3:45:ca:1f:98:97:f6:fd:b9:19:05:f1:f4:5a:8c: 58:de:ef:1a:92:9f:b4:8c:57:26:0e:ce:17:83:66:2d:72:8e: a3:d9:29:53:85:cf:c4:3c:13:77:2b:24:60:62:41:45:0c:53: c2:68:42:df:61:38:c1:96:e5:0f:cd:e6:ad:89:8c:17:0b:e5: 78:32:43:fe:89:ad:d2:54:f9:9a:dd:d8:d2:6d:9d:2d:1e:4e: 09:cc:b0:53:ce:fa:b7:53:79:35:85:16:3c:3a:83:c8:32:8f: ee:48:63:5d:72:34:9c:47:07:3c:05:7a:dd:db:a6:bc:7a:e5: 15:f9:99:88:15:b6:60:58:8c:bb:43:c1:70:f2:7e:f0:69:60: 50:1e:c7:11:38:dc:b7:35:d5:f9:98:05:4b:07:a3:6f:12:16: 11:8c:34:46:25:c3:57:97:f4:d5:c2:51:c6:db:25:28:77:1b: 70:c7:f7:ba:f6:20:d1:4d:fa:d3:d0:69:aa:79:31:8f:d7:6f: b0:c4:6d:0f:ac:97:d7:2c:f5:5d:12:f1:5e:0a:02:df:de:4b: 33:a3:7c:9c:86:c4:67:ad:69:bc:41:de:47:8e:b2:49:6b:f5: f7:cb:b8:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aSjmjTOY6lzt4YvUzVaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli YjYzZjgwHhcNMjUxMjE5MDcwMDQyWhcNMjUxMjIwMDcwMDQyWjAzMTEwLwYDVQQD Eyg5ZGFjOWM3NWU5OGMwNjFjNzk4ODRiN2JjOGQ1NDhlNGIxM2JhYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLT86zZz+WDH/EtOI+tNkt5ZX75C jWlucsdH2dYHX58IzmCaVind0Ir4ruZODRlJ8RYK8JAQ3XOgsfbTSfZ24eoo4WYG iV8+NA3faA7SM13R09pREvbiIMu/TiPdFMC0/lmMkjYzHUPdHkGDuKzfSK9qb4ba XSme+Q2AvK/f47U1uoVvvYmMbPXyi+GeZ1W0fEyTMQqCxiCyTfZx4cMpTWHtlXOu zmQonNsgmFLoTI5w9LAyhrzNnHmtGkMEvlgt1z4ggMMbmmf2WqmpNZ4I9c8KRZHS V8eRMeeKZY2HbD64t0y0UBAC7VNIHe+EFCvbUFeWjLAwSpjr5HhBNQl1EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2snHXpjAYceYhLe8jVSOSxO6uTMB8GA1UdIwQY MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt ZmI0Y2YxMzdjMWU5LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5 LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkakqydQs gTpSxD6zxATNxtVR77jmw0XKH5iX9v25GQXx9FqMWN7vGpKftIxXJg7OF4NmLXKO o9kpU4XPxDwTdyskYGJBRQxTwmhC32E4wZblD83mrYmMFwvleDJD/omt0lT5mt3Y 0m2dLR5OCcywU876t1N5NYUWPDqDyDKP7khjXXI0nEcHPAV63dumvHrlFfmZiBW2 YFiMu0PBcPJ+8GlgUB7HETjctzXV+ZgFSwejbxIWEYw0RiXDV5f01cJRxtslKHcb cMf3uvYg0U3609Bpqnkxj9dvsMRtD6yX1yz1XRLxXgoC395LM6N8nIbEZ61pvEHe R46ySWv198u4oQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:32 2025 by rpki-client