This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft File: SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json) Hash identifier: EC/jqmWLZfLktBMHnNn3cGD6IJEPt465ZLapnCivZ6A= Subject key identifier: B7:FB:F4:A4:06:8B:59:5F:28:42:6C:86:00:ED:BA:86:4A:06:9C:79 Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3 Certificate issuer: /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3 Certificate serial: 019AF31B2881496EF3855AB7D870A5FDE871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft Manifest number: 0D83 Signing time: Sat 06 Dec 2025 10:00:34 +0000 Manifest this update: Sat 06 Dec 2025 10:00:34 +0000 Manifest next update: Sun 07 Dec 2025 10:00:34 +0000 Files and hashes: 1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: XFVMs2xDfx+sqn6wv0hsfGiUVwxe1Cie3QU2mwRRaM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:28:81:49:6e:f3:85:5a:b7:d8:70:a5:fd:e8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3 Validity Not Before: Dec 6 10:00:34 2025 GMT Not After : Dec 7 10:00:34 2025 GMT Subject: CN=b7fbf4a4068b595f28426c8600edba864a069c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:45:b7:6e:c2:10:7a:48:1d:33:ca:13:7b: 16:aa:ef:4f:3b:61:68:8c:24:42:db:32:75:ca:20: db:b9:99:15:d2:81:03:d4:74:23:8b:52:3d:44:03: 74:8c:ee:a3:17:92:3a:bf:72:73:98:1b:9e:67:34: 92:1f:06:5f:44:ac:58:77:d7:3b:6c:9b:8e:33:65: 82:50:38:1b:bb:86:c1:f5:d7:9f:61:68:92:e9:5a: 9b:6d:09:36:a0:dc:5a:86:3c:a8:42:33:02:65:fe: 83:13:70:de:95:87:45:dd:a1:d0:c1:d9:13:f6:f2: 23:b0:1c:11:b4:c3:9f:d1:cd:e2:29:a0:0e:26:ef: e7:51:e7:7c:96:f9:e1:33:96:ca:a2:3e:7e:da:c1: 8d:1d:58:3d:e2:12:3c:90:d6:e5:3c:80:d5:42:e5: 85:1a:c3:60:09:88:eb:30:4f:99:0e:7b:19:79:07: 1a:28:81:c3:a9:cb:6c:69:0d:82:61:44:cd:cc:a4: 50:99:b7:b6:d9:16:7a:4c:34:16:0d:4b:92:ec:37: 7b:17:d3:34:4e:77:a0:90:69:38:b5:6c:f1:ce:1c: 09:75:c2:f4:1e:e1:9f:93:9d:7f:ce:4a:a6:73:1f: 76:b6:bb:2f:ad:55:51:5c:89:a4:58:db:b0:ae:90: 72:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:F4:A4:06:8B:59:5F:28:42:6C:86:00:ED:BA:86:4A:06:9C:79 X509v3 Authority Key Identifier: keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1f:e8:c9:be:be:a0:1d:42:3c:9d:ab:f0:ba:7d:fb:64:7c: b1:f8:7a:95:3e:9a:52:8f:c7:e1:24:53:40:69:7f:24:7c:6b: 0a:4d:a7:93:28:f9:99:ad:a6:a6:20:ff:ea:43:57:01:01:33: 7f:cb:d6:c3:97:f4:f8:62:ae:72:0e:cd:c2:b6:21:5c:e5:f6: c4:5b:60:9a:6c:cd:e6:40:eb:3a:db:45:0a:36:dd:d5:8d:be: 12:5d:03:b0:02:38:29:ed:09:05:1f:63:39:f1:e8:14:32:45: c4:33:4a:bc:77:bb:d6:04:20:97:a5:26:ca:43:b2:23:5f:c9: 45:a9:03:f4:81:22:69:02:21:c7:29:8f:4c:a6:fd:0f:d4:69: 3c:97:a3:ab:58:b9:47:20:21:56:30:3a:aa:ec:8e:d8:f8:22: df:1a:07:78:43:b4:0e:e8:de:7a:20:32:f9:68:73:ed:a0:32: 37:88:2f:1f:71:84:d8:64:ad:33:0f:00:40:46:ba:f8:3d:b9: 6d:d6:e1:5e:a8:90:e7:54:94:90:9c:a1:23:13:49:92:1f:91: a1:61:ba:41:56:19:13:43:b4:bf:6c:98:d9:01:4b:1c:76:09: 95:90:fd:08:50:21:2d:d5:df:ef:e9:44:3b:47:53:39:14:e1: e4:40:5b:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyiBSW7zhVq32HCl/ehxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDAzOGQ0ZDNhNzViYmY5ZWJmZWEzMDY0Njg3YjVlM2Iz NDZmZTMwHhcNMjUxMjA2MTAwMDM0WhcNMjUxMjA3MTAwMDM0WjAzMTEwLwYDVQQD EyhiN2ZiZjRhNDA2OGI1OTVmMjg0MjZjODYwMGVkYmE4NjRhMDY5Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMBFt27CEHpIHTPKE3sWqu9PO2Fo jCRC2zJ1yiDbuZkV0oED1HQji1I9RAN0jO6jF5I6v3JzmBueZzSSHwZfRKxYd9c7 bJuOM2WCUDgbu4bB9defYWiS6VqbbQk2oNxahjyoQjMCZf6DE3DelYdF3aHQwdkT 9vIjsBwRtMOf0c3iKaAOJu/nUed8lvnhM5bKoj5+2sGNHVg94hI8kNblPIDVQuWF GsNgCYjrME+ZDnsZeQcaKIHDqctsaQ2CYUTNzKRQmbe22RZ6TDQWDUuS7Dd7F9M0 TnegkGk4tWzxzhwJdcL0HuGfk51/zkqmcx92trsvrVVRXImkWNuwrpByFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf79KQGi1lfKEJshgDtuoZKBpx5MB8GA1UdIwQY MBaAFEnQONTTp1u/nr/qMGRoe147NG/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MzU3NTYtODg1Ny00MjRkLTk1MjQt MjBmNTMxMTIyYjU3LzEvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC83MzU3NTYtODg1Ny00MjRkLTk1MjQtMjBmNTMxMTIyYjU3 LzEvU2RBNDFOT25XNy1ldi1vd1pHaDdYanMwYi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGx/oyb6+ oB1CPJ2r8Lp9+2R8sfh6lT6aUo/H4SRTQGl/JHxrCk2nkyj5ma2mpiD/6kNXAQEz f8vWw5f0+GKucg7NwrYhXOX2xFtgmmzN5kDrOttFCjbd1Y2+El0DsAI4Ke0JBR9j OfHoFDJFxDNKvHe71gQgl6UmykOyI1/JRakD9IEiaQIhxymPTKb9D9RpPJejq1i5 RyAhVjA6quyO2Pgi3xoHeEO0DujeeiAy+Whz7aAyN4gvH3GE2GStMw8AQEa6+D25 bdbhXqiQ51SUkJyhIxNJkh+RoWG6QVYZE0O0v2yY2QFLHHYJlZD9CFAhLdXf7+lE O0dTORTh5EBbIg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:55 2025 by rpki-client