This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json) Hash identifier: vl+zhzVPX21v9/pv4ZMTLeiw7S1humhG13HEDvwCnt0= Subject key identifier: 72:0C:6F:5C:49:AD:51:1D:8C:11:1F:57:86:53:EC:32:4B:CB:76:EA Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db Certificate serial: 019AF2AD68565938A7DDC4551DA57360DFA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft Manifest number: 03A0 Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: XPK5xstwcGp+1/pxAj6HdZb9Qb+rZ5mzQK6zLLGCahQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:68:56:59:38:a7:dd:c4:55:1d:a5:73:60:df:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=720c6f5c49ad511d8c111f578653ec324bcb76ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:07:c3:a6:a0:38:d2:6c:4d:5a:58:9d:d0: 16:e5:3b:fe:03:ad:3a:e1:8b:f2:50:54:b0:5c:46: 9d:cf:23:8f:f3:bb:f4:52:b6:25:57:6d:1b:f0:82: c6:6e:53:cb:5c:4c:d4:9f:20:dc:f8:2b:15:3a:fb: 2b:da:ec:db:76:8a:a2:c6:bc:8c:1c:b6:ec:cb:1c: c5:20:70:f4:ee:c2:f2:06:6a:55:49:04:22:ad:a0: db:43:cb:ee:bd:a1:d8:68:9d:ed:23:12:5a:1a:5e: ca:35:a0:3f:86:64:c2:7d:fb:3a:ea:e5:65:e5:04: 5d:ad:11:5d:ad:33:7d:31:9e:24:e6:3b:45:e1:ed: 41:a1:44:0a:03:83:52:f3:e3:ea:69:69:71:a1:d7: cf:38:b9:10:80:b3:99:6c:70:11:18:1e:a3:16:21: 80:6b:ee:9a:b9:c4:99:6b:d6:d2:df:03:f8:3c:3e: 79:ca:99:0b:6f:bd:29:5c:ee:8a:7c:6f:40:27:4d: 1f:d2:2c:f9:7e:40:59:8a:5f:94:b1:ee:28:46:c0: 99:87:76:52:20:6e:70:d1:50:56:db:35:61:5a:47: bb:ac:5d:35:ad:f1:39:01:df:d0:c1:fc:d0:f0:fc: df:d7:02:4a:d0:3a:71:bd:b8:23:ec:6d:ac:98:22: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:6F:5C:49:AD:51:1D:8C:11:1F:57:86:53:EC:32:4B:CB:76:EA X509v3 Authority Key Identifier: keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9e:87:32:7d:f8:81:0d:d9:34:15:78:e9:d4:1f:38:bd:4d: 54:a0:73:d6:92:c9:1d:6c:1f:0e:29:d4:3b:19:02:69:ae:b7: ad:56:b3:44:79:51:87:71:08:35:76:53:6a:7d:ee:38:23:56: 4b:fe:2e:e1:31:0b:96:10:ff:fc:bb:4b:58:34:50:da:a0:a3: 67:8e:21:ef:86:f1:0d:0c:38:0b:2c:02:57:53:e1:9f:1c:29: 7b:67:ec:f5:02:a9:ce:97:28:98:67:d4:f5:64:e3:23:bd:0d: 63:c1:eb:bb:b0:2d:b3:3c:ee:8e:50:f9:86:f4:10:25:93:c7: ff:e6:e7:ba:da:5c:6b:fe:35:a1:4f:0c:3a:af:d3:80:3a:d1: 65:f5:d5:c4:de:ed:0c:2b:d2:ec:24:f4:d8:e4:56:ee:d7:c5: ac:8a:41:4c:53:7d:e3:0e:7f:ef:37:77:59:c8:9b:1f:fd:cf: be:42:ce:a0:f8:36:3d:24:c2:23:86:3c:e4:70:0d:b4:d3:c7: a7:ab:7f:79:ad:f8:e4:f0:8d:01:79:64:e4:96:6c:33:c0:d3: 09:d1:a6:31:14:a6:c7:5d:ee:c1:49:d6:40:ec:8f:54:0d:3b: 6d:b4:bc:ec:32:7f:d2:7c:b5:b7:91:11:63:d5:c8:ec:60:18: c7:7d:28:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWhWWTin3cRVHaVzYN+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMTEwNDhhMWE0OTE2ZTEzMWI4Y2UwODhlMmQ2ZmU0ZTVj NWUzZGIwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD Eyg3MjBjNmY1YzQ5YWQ1MTFkOGMxMTFmNTc4NjUzZWMzMjRiY2I3NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8UHw6agONJsTVpYndAW5Tv+A606 4YvyUFSwXEadzyOP87v0UrYlV20b8ILGblPLXEzUnyDc+CsVOvsr2uzbdoqixryM HLbsyxzFIHD07sLyBmpVSQQiraDbQ8vuvaHYaJ3tIxJaGl7KNaA/hmTCffs66uVl 5QRdrRFdrTN9MZ4k5jtF4e1BoUQKA4NS8+PqaWlxodfPOLkQgLOZbHARGB6jFiGA a+6aucSZa9bS3wP4PD55ypkLb70pXO6KfG9AJ00f0iz5fkBZil+Use4oRsCZh3ZS IG5w0VBW2zVhWke7rF01rfE5Ad/QwfzQ8Pzf1wJK0Dpxvbgj7G2smCKnVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIMb1xJrVEdjBEfV4ZT7DJLy3bqMB8GA1UdIwQY MBaAFEsRBIoaSRbhMbjOCI4tb+TlxePbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjIt ZTQ4NDYxMWE5NjIxLzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kM2EyMjgtZmM0Zi00MGIyLTg4YjItZTQ4NDYxMWE5NjIx LzEvU3hFRWlocEpGdUV4dU00SWppMXY1T1hGNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU56HMn34 gQ3ZNBV46dQfOL1NVKBz1pLJHWwfDinUOxkCaa63rVazRHlRh3EINXZTan3uOCNW S/4u4TELlhD//LtLWDRQ2qCjZ44h74bxDQw4CywCV1Phnxwpe2fs9QKpzpcomGfU 9WTjI70NY8Hru7AtszzujlD5hvQQJZPH/+bnutpca/41oU8MOq/TgDrRZfXVxN7t DCvS7CT02ORW7tfFrIpBTFN94w5/7zd3WcibH/3PvkLOoPg2PSTCI4Y85HANtNPH p6t/ea345PCNAXlk5JZsM8DTCdGmMRSmx13uwUnWQOyPVA07bbS87DJ/0ny1t5ER Y9XI7GAYx30osQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:42 2025 by rpki-client