This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json) Hash identifier: vv4z+WKfmCvez5nKoX1p9Nn5rRUPk87poeQ822oHm7w= Subject key identifier: 46:F6:B7:D0:39:07:01:85:0D:B0:AA:92:6A:6A:3E:B2:DD:69:A3:D6 Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a Certificate serial: 019AF31B307BFB68FEF4FBC2F72B462FBAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft Manifest number: 1025 Signing time: Sat 06 Dec 2025 10:00:36 +0000 Manifest this update: Sat 06 Dec 2025 10:00:36 +0000 Manifest next update: Sun 07 Dec 2025 10:00:36 +0000 Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: X7VK3YNkYDw0NEPmzikPrj6o8u2BlsTfOHE1O5MDKlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:30:7b:fb:68:fe:f4:fb:c2:f7:2b:46:2f:ba:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a Validity Not Before: Dec 6 10:00:36 2025 GMT Not After : Dec 7 10:00:36 2025 GMT Subject: CN=46f6b7d0390701850db0aa926a6a3eb2dd69a3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:6a:50:7a:d6:0e:f7:70:5c:74:40:fa:c9: 30:e1:66:92:49:28:35:48:0e:c3:f0:5e:f5:e4:84: fd:5a:09:a4:41:42:41:03:61:c0:5e:8c:04:f6:12: ff:70:0c:0c:93:3c:68:d4:6a:6f:48:90:41:b2:3b: c1:83:de:b0:61:ca:2d:22:3e:24:24:80:12:86:cd: a0:d1:c4:63:d8:40:a8:df:65:88:6e:ee:f4:2e:7b: 14:7e:11:5c:ef:20:6e:a8:bb:8c:c0:a1:05:dc:db: f5:41:57:3d:e2:b3:f2:53:ac:c8:ad:09:27:6c:4e: 59:12:23:11:17:7e:b1:ee:c0:cf:48:bb:b3:65:fe: ef:49:1a:e5:62:52:5d:64:9f:b5:c5:23:91:cb:c7: 94:b6:f2:09:d4:38:3b:73:5d:83:56:ba:62:7d:02: ec:11:e7:62:e7:65:87:7d:c2:2d:ec:a6:61:b4:50: 7b:38:97:9b:e2:58:ae:bc:9b:24:a7:52:04:cc:d9: 78:b7:b7:23:b4:6b:65:46:df:74:f4:95:fe:17:96: 8b:0c:86:41:31:ab:7f:55:56:d1:75:f2:c9:d6:95: 2e:96:af:05:6a:fb:b6:53:a2:55:4d:17:c1:28:82: 27:49:7a:fc:14:8d:31:30:ce:15:49:c1:31:1f:c0: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F6:B7:D0:39:07:01:85:0D:B0:AA:92:6A:6A:3E:B2:DD:69:A3:D6 X509v3 Authority Key Identifier: keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e4:44:8a:78:f9:cb:b5:1a:e9:69:5e:8a:9f:01:1f:bf:26: 09:01:89:fb:e2:79:32:30:ce:81:66:f9:06:b3:54:f8:86:3f: 52:f9:e5:7e:72:00:67:96:17:d4:2e:e4:e1:66:75:bc:23:74: 93:e2:da:f0:e1:fb:47:c7:24:57:70:85:71:f1:28:6c:81:9f: 1e:0a:fa:f1:7c:9b:44:18:d3:48:1b:83:ed:5d:d6:8d:5c:54: 52:61:4a:39:d6:a8:20:e2:09:47:71:78:37:17:01:67:73:97: ae:67:d7:fe:e8:6f:fe:f3:58:e8:16:78:6f:14:96:b7:a2:52: c3:40:1e:7c:7c:fd:53:00:08:8a:11:65:37:a9:f6:d7:ce:b9: d6:ea:47:94:b1:b1:06:1b:88:3c:b0:59:ef:64:e4:fb:57:a1: b8:a7:3f:ff:41:cf:ac:49:1f:08:f2:cb:c1:34:df:7f:3a:7a: bb:75:d2:d4:f7:31:27:87:ba:e5:0a:5b:7f:c3:45:66:11:aa: 86:1d:6b:19:61:24:42:7c:e0:b5:a5:3e:ce:28:52:b4:dd:d0: c7:30:85:38:68:07:e9:fe:61:b6:e7:86:6f:a9:4f:55:d7:74: 96:70:d9:07:4c:61:dd:f6:34:8f:d6:81:e2:e1:5a:03:37:62: 75:f0:90:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzB7+2j+9PvC9ytGL7rmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDU5MzdkOGU2MDJiNDhjYjJmZjUxNzE2ZDk5NWQyM2Ex ZjNlMWEwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD Eyg0NmY2YjdkMDM5MDcwMTg1MGRiMGFhOTI2YTZhM2ViMmRkNjlhM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN5qUHrWDvdwXHRA+skw4WaSSSg1 SA7D8F715IT9WgmkQUJBA2HAXowE9hL/cAwMkzxo1GpvSJBBsjvBg96wYcotIj4k JIAShs2g0cRj2ECo32WIbu70LnsUfhFc7yBuqLuMwKEF3Nv1QVc94rPyU6zIrQkn bE5ZEiMRF36x7sDPSLuzZf7vSRrlYlJdZJ+1xSORy8eUtvIJ1Dg7c12DVrpifQLs Eedi52WHfcIt7KZhtFB7OJeb4liuvJskp1IEzNl4t7cjtGtlRt909JX+F5aLDIZB Mat/VVbRdfLJ1pUulq8Favu2U6JVTRfBKIInSXr8FI0xMM4VScExH8CeFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb2t9A5BwGFDbCqkmpqPrLdaaPWMB8GA1UdIwQY MBaAFEnVk32OYCtIyy/1FxbZldI6Hz4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmIt OWIyYWRjNzRiNTJkLzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lZGFhMzItYzVkOS00MDEzLTg0YmItOWIyYWRjNzRiNTJk LzEvU2RXVGZZNWdLMGpMTF9VWEZ0bVYwam9mUGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOREinj5 y7Ua6Wleip8BH78mCQGJ++J5MjDOgWb5BrNU+IY/UvnlfnIAZ5YX1C7k4WZ1vCN0 k+La8OH7R8ckV3CFcfEobIGfHgr68XybRBjTSBuD7V3WjVxUUmFKOdaoIOIJR3F4 NxcBZ3OXrmfX/uhv/vNY6BZ4bxSWt6JSw0AefHz9UwAIihFlN6n218651upHlLGx BhuIPLBZ72Tk+1ehuKc//0HPrEkfCPLLwTTffzp6u3XS1PcxJ4e65Qpbf8NFZhGq hh1rGWEkQnzgtaU+zihStN3QxzCFOGgH6f5htueGb6lPVdd0lnDZB0xh3fY0j9aB 4uFaAzdidfCQtw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:49 2025 by rpki-client