This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft File: d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json) Hash identifier: gEE204xfaJOzEdSPBLd/1jvhKSFcixsaeW/eOfkvMUs= Subject key identifier: F1:EA:EC:07:57:4D:3F:05:52:5E:F6:10:8C:56:AD:13:C5:02:01:86 Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5 Certificate issuer: /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5 Certificate serial: 019AF3522B177392236A14FC74D55C18A71D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft Manifest number: 05CE Signing time: Sat 06 Dec 2025 11:00:39 +0000 Manifest this update: Sat 06 Dec 2025 11:00:39 +0000 Manifest next update: Sun 07 Dec 2025 11:00:39 +0000 Files and hashes: 1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: 7Mutb6nmBFsn3uedt1EEE6s7xNrKLvcgwCtcv6bKSi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:2b:17:73:92:23:6a:14:fc:74:d5:5c:18:a7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5 Validity Not Before: Dec 6 11:00:39 2025 GMT Not After : Dec 7 11:00:39 2025 GMT Subject: CN=f1eaec07574d3f05525ef6108c56ad13c5020186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:e6:7a:34:63:18:b9:b6:d2:cd:b9:10:d6: 7c:aa:22:c3:ef:78:20:1c:72:b1:48:1a:47:99:cc: ce:04:68:bc:44:61:d6:40:93:e8:72:a5:c6:aa:a1: 15:ff:05:58:17:da:a1:e3:37:47:7a:dd:15:d8:cd: b5:44:ea:dc:49:9d:00:4e:03:c7:db:f0:e7:68:f0: 23:c1:e7:71:3e:88:8d:13:03:53:b7:6d:81:37:f1: f7:32:0a:94:b7:ee:43:a7:b2:3e:71:a2:c8:b8:60: 3c:ad:ee:b8:29:e2:22:0e:ca:e3:ad:75:73:bf:e8: 02:3f:39:5c:c3:47:10:2d:80:09:21:60:01:58:fd: 48:af:4d:48:ab:2d:4f:f4:7b:19:a7:86:d0:ad:19: 60:0e:15:1a:f6:8f:8c:ca:87:d7:2f:7a:88:9a:69: 40:24:eb:2a:45:94:0c:0d:69:75:20:64:84:4f:2f: ca:ae:4b:b9:a6:f8:49:3c:bb:a4:71:5c:ef:dd:96: 7d:09:96:2e:cb:33:3f:b1:00:c4:ae:55:1b:6e:c6: 60:ea:03:de:ed:cd:ce:41:4b:44:f2:82:f6:be:3e: ce:48:c4:8d:b2:b8:d8:c2:1b:96:42:8f:32:37:b1: 7d:f8:17:16:61:10:93:4d:c0:86:81:c9:70:ba:68: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EA:EC:07:57:4D:3F:05:52:5E:F6:10:8C:56:AD:13:C5:02:01:86 X509v3 Authority Key Identifier: keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:3e:02:86:ef:b0:37:bd:4d:82:38:36:59:32:94:40:0c:ed: ee:5d:40:79:60:c3:1f:21:a9:17:8a:9b:a0:7b:d3:dd:e8:a1: 85:b6:4e:9d:6a:13:98:d1:42:42:5a:a3:97:25:87:8c:82:54: 3a:23:b7:18:35:67:0e:72:4e:19:0e:63:49:14:fb:62:0d:4b: 9d:43:7c:6c:52:02:ab:bf:d0:74:52:61:7a:5e:f2:81:39:3d: 2e:0a:c0:6b:23:88:70:ff:1f:80:50:1c:1d:2c:b2:a5:ee:08: 79:e3:22:35:bb:db:e3:53:6d:6e:24:a7:fa:16:51:a6:51:1a: f2:55:ce:3d:b9:b7:ac:4f:1f:1c:44:ca:41:12:d3:b5:9b:56: d7:70:1d:4a:a1:e7:50:6b:1f:06:e4:ff:c2:21:7d:8c:4d:ba: e0:22:9e:54:9d:f5:79:30:2d:a4:5f:ed:b4:11:2c:28:94:33: 10:ab:40:eb:03:f8:16:8c:a4:20:25:65:47:b4:32:e4:4f:a2: fd:38:69:1d:42:dc:97:a6:dd:95:87:14:25:b7:d7:df:64:f9: 75:4f:af:df:d3:c5:a2:81:c4:e4:17:e7:1e:0f:d5:a9:d6:a5: aa:b2:dc:5f:fa:ba:e2:ee:9d:c0:ee:08:83:d0:db:4b:02:2a: da:bf:30:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUisXc5IjahT8dNVcGKcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjQ5YWY4NGMwYjhhMDlhN2IzYjRmMWYyNzE0NGViMjU5 MTBmYjUwHhcNMjUxMjA2MTEwMDM5WhcNMjUxMjA3MTEwMDM5WjAzMTEwLwYDVQQD EyhmMWVhZWMwNzU3NGQzZjA1NTI1ZWY2MTA4YzU2YWQxM2M1MDIwMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnXmejRjGLm20s25ENZ8qiLD73gg HHKxSBpHmczOBGi8RGHWQJPocqXGqqEV/wVYF9qh4zdHet0V2M21ROrcSZ0ATgPH 2/DnaPAjwedxPoiNEwNTt22BN/H3MgqUt+5Dp7I+caLIuGA8re64KeIiDsrjrXVz v+gCPzlcw0cQLYAJIWABWP1Ir01Iqy1P9HsZp4bQrRlgDhUa9o+MyofXL3qImmlA JOsqRZQMDWl1IGSETy/Krku5pvhJPLukcVzv3ZZ9CZYuyzM/sQDErlUbbsZg6gPe 7c3OQUtE8oL2vj7OSMSNsrjYwhuWQo8yN7F9+BcWYRCTTcCGgclwumgk0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHq7AdXTT8FUl72EIxWrRPFAgGGMB8GA1UdIwQY MBaAFHf0mvhMC4oJp7O08fJxROslkQ+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgt MzU2YzQxMWI0MzBlLzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgtMzU2YzQxMWI0MzBl LzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEART4Chu+w N71Ngjg2WTKUQAzt7l1AeWDDHyGpF4qboHvT3eihhbZOnWoTmNFCQlqjlyWHjIJU OiO3GDVnDnJOGQ5jSRT7Yg1LnUN8bFICq7/QdFJhel7ygTk9LgrAayOIcP8fgFAc HSyype4IeeMiNbvb41NtbiSn+hZRplEa8lXOPbm3rE8fHETKQRLTtZtW13AdSqHn UGsfBuT/wiF9jE264CKeVJ31eTAtpF/ttBEsKJQzEKtA6wP4FoykICVlR7Qy5E+i /ThpHULcl6bdlYcUJbfX32T5dU+v39PFooHE5BfnHg/VqdalqrLcX/q64u6dwO4I g9DbSwIq2r8wAg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:51 2025 by rpki-client