This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json) Hash identifier: g0Wroea1cCFZrFeCUEHrpooI7dzclFRgxgaXbliQuW0= Subject key identifier: 05:EB:DB:4A:58:9E:69:9E:6B:16:96:F8:14:D3:E2:70:B4:36:3B:D1 Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db Certificate serial: 019B22F50799FED8E17BD000084338767FB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft Manifest number: 03B9 Signing time: Mon 15 Dec 2025 17:00:42 +0000 Manifest this update: Mon 15 Dec 2025 17:00:42 +0000 Manifest next update: Tue 16 Dec 2025 17:00:42 +0000 Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: 244D5mOAi32IEad/rU8axAEKwhn6fpREiEk2uuwss80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:07:99:fe:d8:e1:7b:d0:00:08:43:38:76:7f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db Validity Not Before: Dec 15 17:00:42 2025 GMT Not After : Dec 16 17:00:42 2025 GMT Subject: CN=05ebdb4a589e699e6b1696f814d3e270b4363bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:3e:f2:d7:04:0a:41:95:ed:8d:cd:bd:71: 8c:45:7a:5d:2b:67:b9:88:fb:eb:f1:77:48:a2:89: 7f:0c:89:02:2a:35:4f:3a:d3:38:37:0a:d9:fe:b9: e4:33:d1:62:8c:fd:cd:3e:76:93:90:46:c4:14:72: 5f:96:b3:02:e1:7f:95:6f:18:4b:92:a5:87:b1:bb: e7:69:74:f9:ee:31:9c:c7:f2:78:bd:2b:39:7e:2a: 8c:4c:b5:18:1c:bf:17:b4:c3:1d:68:c0:92:ec:11: 96:e1:e7:3f:7c:92:9e:c5:a8:1d:29:8d:73:69:b6: 42:77:e2:da:0b:f0:c3:63:db:3f:b7:49:dd:55:5b: ba:50:8e:15:0c:d5:05:71:cd:d4:54:b2:e5:e7:9e: a5:d2:4e:48:a0:18:41:a3:2a:d0:e2:22:c1:60:16: 81:72:c3:49:51:27:61:46:6b:09:00:d5:93:7b:fe: 87:eb:6c:e1:1f:14:36:ed:97:e9:0f:e7:5b:45:26: 44:26:8b:4e:d2:ee:b8:a0:7e:5e:ce:bd:96:46:b8: 9c:9c:00:b0:68:dd:5a:da:95:9d:6e:1c:0a:27:d8: fd:62:02:ed:4b:16:92:bf:00:43:44:b4:ab:31:f3: 8a:fd:f6:14:6f:37:de:41:c4:d6:67:b9:ce:8a:cd: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EB:DB:4A:58:9E:69:9E:6B:16:96:F8:14:D3:E2:70:B4:36:3B:D1 X509v3 Authority Key Identifier: keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:12:c0:bf:c4:02:19:2d:81:a9:a5:46:ba:80:8b:09:af:f6: cb:24:3f:21:85:a2:6d:58:9a:6b:d3:39:06:a0:8b:d4:15:8f: 88:18:27:6c:ab:00:63:f9:99:56:98:b0:3b:3e:a1:86:6a:6e: 98:ef:03:f7:4f:e9:cb:45:73:45:9a:fd:20:9c:7c:aa:b2:59: 10:a7:33:42:12:98:06:89:74:c7:48:d3:d0:dd:89:de:c3:d1: 6e:0e:7c:0a:82:9c:47:46:09:36:71:8b:30:0a:ba:f8:94:04: 39:f4:d8:5b:00:b2:66:0a:e5:15:a0:70:1f:c7:c2:ad:62:2e: ff:50:35:0a:f9:cf:25:86:6e:1b:d1:fc:69:6a:01:52:c5:a2: 36:0f:59:83:eb:78:a6:97:9e:f6:5c:64:f1:31:52:da:2b:3e: e7:56:12:79:52:8f:07:c0:81:9d:da:48:2b:00:32:b6:d1:2f: 28:cb:8f:5d:96:18:c7:d5:91:66:4d:4b:fa:f3:bc:76:e7:61: 03:91:04:88:b3:7b:98:af:04:39:6e:90:64:e6:13:a9:97:23: 60:cb:f5:51:3e:a3:fa:28:53:e8:88:8f:c2:70:60:15:fd:b3: 68:43:1f:bd:c2:a1:84:fa:f0:e5:a4:82:cf:6f:b2:19:a5:62: ef:29:2a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9QeZ/tjhe9AACEM4dn+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMTEwNDhhMWE0OTE2ZTEzMWI4Y2UwODhlMmQ2ZmU0ZTVj NWUzZGIwHhcNMjUxMjE1MTcwMDQyWhcNMjUxMjE2MTcwMDQyWjAzMTEwLwYDVQQD EygwNWViZGI0YTU4OWU2OTllNmIxNjk2ZjgxNGQzZTI3MGI0MzYzYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+0+8tcECkGV7Y3NvXGMRXpdK2e5 iPvr8XdIool/DIkCKjVPOtM4NwrZ/rnkM9FijP3NPnaTkEbEFHJflrMC4X+VbxhL kqWHsbvnaXT57jGcx/J4vSs5fiqMTLUYHL8XtMMdaMCS7BGW4ec/fJKexagdKY1z abZCd+LaC/DDY9s/t0ndVVu6UI4VDNUFcc3UVLLl556l0k5IoBhBoyrQ4iLBYBaB csNJUSdhRmsJANWTe/6H62zhHxQ27ZfpD+dbRSZEJotO0u64oH5ezr2WRricnACw aN1a2pWdbhwKJ9j9YgLtSxaSvwBDRLSrMfOK/fYUbzfeQcTWZ7nOis2CcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXr20pYnmmeaxaW+BTT4nC0NjvRMB8GA1UdIwQY MBaAFEsRBIoaSRbhMbjOCI4tb+TlxePbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjIt ZTQ4NDYxMWE5NjIxLzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjItZTQ4NDYxMWE5NjIx LzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBLAv8QC GS2BqaVGuoCLCa/2yyQ/IYWibViaa9M5BqCL1BWPiBgnbKsAY/mZVpiwOz6hhmpu mO8D90/py0VzRZr9IJx8qrJZEKczQhKYBol0x0jT0N2J3sPRbg58CoKcR0YJNnGL MAq6+JQEOfTYWwCyZgrlFaBwH8fCrWIu/1A1CvnPJYZuG9H8aWoBUsWiNg9Zg+t4 ppee9lxk8TFS2is+51YSeVKPB8CBndpIKwAyttEvKMuPXZYYx9WRZk1L+vO8dudh A5EEiLN7mK8EOW6QZOYTqZcjYMv1UT6j+ihT6IiPwnBgFf2zaEMfvcKhhPrw5aSC z2+yGaVi7ykqqQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:17:09 2025 by rpki-client