This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json) Hash identifier: N2si1FkYZockVczHz76JcECo06l2+4Rakb2G9opnMyc= Subject key identifier: 6E:5D:56:0D:4E:77:D2:BF:3F:9B:F8:41:65:AB:C6:B8:41:8B:2B:01 Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74 Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74 Certificate serial: 019AF2771AE9EE4E448674C79241C28BFFFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: fR+YGjrbhhv/VJiWnFsZNaw87YGQAJTCOHokjRdVxSU=) 2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1a:e9:ee:4e:44:86:74:c7:92:41:c2:8b:ff:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=6e5d560d4e77d2bf3f9bf84165abc6b8418b2b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c6:8c:db:a5:86:92:ad:65:f8:57:bf:3d:e2: 0e:52:4d:77:5f:48:d0:73:19:44:98:86:bd:a6:40: c3:12:c1:7a:75:92:f3:09:23:26:0a:90:85:de:3b: 5e:17:1c:f7:74:bf:1a:88:bf:1b:43:42:1d:b1:32: 60:1b:78:80:4e:c0:d6:4a:89:68:e0:3c:22:a7:25: 32:31:bf:84:2e:22:19:b9:85:24:c8:da:12:ce:47: 37:08:e4:45:b0:6a:0a:d7:45:77:e9:60:52:2e:dd: 4b:c9:c2:83:01:73:dc:64:93:50:03:47:94:1d:8a: d7:16:52:ed:1c:df:64:51:7a:64:08:46:13:39:21: f5:69:5e:ef:6c:b3:4c:82:ca:4b:1a:86:8a:35:27: 9d:12:91:f0:54:9a:58:23:4c:e2:18:a2:e7:d2:cc: 17:ff:ce:47:4e:b5:3b:12:f5:96:e9:3c:a1:b3:80: f2:46:24:2d:db:73:bc:ef:97:01:90:dc:eb:12:42: 68:b6:80:39:43:cd:db:49:95:36:99:79:2f:bf:b8: f8:f0:4b:a6:bd:81:ed:f9:12:d7:b0:96:46:09:8a: 19:87:af:d9:be:71:95:51:95:87:db:09:5d:0c:60: 4c:f0:dc:a0:cf:49:cb:57:00:53:c7:6b:91:a0:22: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5D:56:0D:4E:77:D2:BF:3F:9B:F8:41:65:AB:C6:B8:41:8B:2B:01 X509v3 Authority Key Identifier: keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0c:7e:b3:ee:2a:88:cf:fa:5d:e2:a9:31:ed:e3:62:c8:d9: 18:8b:4c:d3:89:99:d3:04:d0:24:04:38:39:9a:9f:d5:a7:b0: 89:48:b1:74:ff:21:75:07:f1:b4:52:20:d9:84:c2:5a:e9:33: a9:c8:e5:7f:3c:d4:ad:62:13:1d:3f:0f:61:34:6b:07:27:44: b3:63:ce:80:54:68:da:f4:20:30:9d:b4:f6:61:23:b1:09:ec: 31:bf:45:c9:fe:b6:02:4b:3e:68:24:b7:17:c4:80:c5:60:50: d3:d7:1f:48:7d:52:fa:16:ea:fb:64:d8:ea:ed:69:3a:df:a3: 4e:de:95:18:d5:8a:43:28:c7:b8:57:e5:35:bc:eb:a7:4c:6d: 16:01:b1:21:75:6b:3a:9f:82:1b:c4:64:4d:f5:62:aa:8e:4b: e0:a3:87:9f:b4:da:15:2e:7b:68:a0:ad:08:8d:14:c9:98:b8: 98:70:84:7b:c9:82:f9:19:70:51:8e:b8:20:a6:22:ac:83:5d: 2b:2d:51:a4:79:83:13:6e:fa:70:fe:3c:eb:01:69:d2:a5:98: e1:f3:eb:70:83:60:8b:5a:80:a1:75:3f:b6:8b:d3:6a:d1:ff: cb:58:ff:95:9a:c8:14:b6:45:10:ce:82:06:bd:8a:6a:3a:bf: 5c:7c:c1:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxrp7k5EhnTHkkHCi///MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZmVjZjY2NDJhNDUwYjUzYjA3NmQ0NDY0ODJkOWMxYTg5 ZGVkNzQwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD Eyg2ZTVkNTYwZDRlNzdkMmJmM2Y5YmY4NDE2NWFiYzZiODQxOGIyYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6saM26WGkq1l+Fe/PeIOUk13X0jQ cxlEmIa9pkDDEsF6dZLzCSMmCpCF3jteFxz3dL8aiL8bQ0IdsTJgG3iATsDWSolo 4DwipyUyMb+ELiIZuYUkyNoSzkc3CORFsGoK10V36WBSLt1LycKDAXPcZJNQA0eU HYrXFlLtHN9kUXpkCEYTOSH1aV7vbLNMgspLGoaKNSedEpHwVJpYI0ziGKLn0swX /85HTrU7EvWW6Tyhs4DyRiQt23O875cBkNzrEkJotoA5Q83bSZU2mXkvv7j48Eum vYHt+RLXsJZGCYoZh6/ZvnGVUZWH2wldDGBM8Nygz0nLVwBTx2uRoCLdywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5dVg1Od9K/P5v4QWWrxrhBiysBMB8GA1UdIwQY MBaAFEr+z2ZCpFC1OwdtRGSC2cGone10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQt NDI4YTExMWFjNWUwLzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQtNDI4YTExMWFjNWUw LzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgx+s+4q iM/6XeKpMe3jYsjZGItM04mZ0wTQJAQ4OZqf1aewiUixdP8hdQfxtFIg2YTCWukz qcjlfzzUrWITHT8PYTRrBydEs2POgFRo2vQgMJ209mEjsQnsMb9Fyf62Aks+aCS3 F8SAxWBQ09cfSH1S+hbq+2TY6u1pOt+jTt6VGNWKQyjHuFflNbzrp0xtFgGxIXVr Op+CG8RkTfViqo5L4KOHn7TaFS57aKCtCI0UyZi4mHCEe8mC+RlwUY64IKYirINd Ky1RpHmDE276cP486wFp0qWY4fPrcINgi1qAoXU/tovTatH/y1j/lZrIFLZFEM6C Br2Kajq/XHzBvA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:37 2025 by rpki-client