This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json) Hash identifier: JnV7Oz9Kj6gSLSRVjFM6VR88fF2E9gN+eUc5Z68ltWI= Subject key identifier: 98:F1:F0:34:B8:C2:57:0F:C0:AB:AB:61:98:13:4D:B2:58:7E:29:68 Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e Certificate serial: 019AF12D49C475BDB22A99940D6CAB94B4E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=) 2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: X0FjoRGedHaFzYgVs1gfDU+Wu0BX8BNfu19qQtCD62Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:49:c4:75:bd:b2:2a:99:94:0d:6c:ab:94:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=98f1f034b8c2570fc0abab6198134db2587e2968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:67:0b:34:dd:00:d9:e5:73:0b:24:4b:b1: 04:e5:a8:7f:ea:23:bc:db:97:97:28:ae:02:28:08: 1f:76:05:a8:2d:17:22:5e:9a:e0:37:f9:96:46:14: 2b:6f:86:26:a1:e5:54:a6:c3:81:53:b7:64:1c:1b: af:52:87:00:a8:13:67:10:fb:df:c0:5b:4a:6e:7d: 08:4c:cd:83:61:35:f8:2c:6a:30:78:de:e8:e2:62: 22:76:04:43:e8:2c:33:9b:ac:1a:24:f3:2d:b7:18: d1:0d:19:ac:37:c1:5f:83:83:f9:70:d3:d6:4b:30: c5:9a:ef:78:f3:be:c3:1c:85:f1:59:f3:77:ca:7b: 9e:df:04:69:b5:e0:43:19:3c:b0:42:ce:7e:94:98: 43:6b:a1:ee:78:a2:b4:b2:4b:b1:90:f0:0f:eb:00: e4:dd:d0:e6:02:8b:46:27:8d:28:5a:63:af:b5:00: 93:dd:77:82:4e:b6:4d:45:17:1a:e4:a2:56:9b:f8: b9:a2:d9:73:bf:72:17:0b:c7:29:45:0a:37:35:b5: 52:33:4a:29:35:fd:f6:e7:8d:c6:fd:22:2f:83:2e: e7:87:a8:e2:c8:a0:f9:cc:d5:00:6c:34:bc:4f:33: 93:54:bb:73:cc:0f:59:26:b8:7d:56:89:05:fe:6f: 5c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F1:F0:34:B8:C2:57:0F:C0:AB:AB:61:98:13:4D:B2:58:7E:29:68 X509v3 Authority Key Identifier: keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:df:6a:1b:20:ac:30:97:dd:35:98:04:c7:18:9d:50:16:48: 0c:a5:0e:54:5e:17:71:13:2a:8d:53:7b:6a:83:48:7c:9b:34: ed:09:99:01:73:ea:75:0e:0b:fa:23:08:59:21:3f:70:07:f9: 4c:02:7e:6a:fb:c0:05:40:52:15:10:fd:a9:d6:2b:3f:ff:65: 5e:72:0d:a3:87:57:8d:80:96:ef:1a:29:27:64:f0:d3:4c:a3: b2:7d:56:d4:d6:cc:ba:ed:5d:2c:59:38:00:19:a8:4e:ab:99: 71:8b:8d:5c:28:eb:0b:97:ec:53:5f:8d:cc:a8:c6:66:60:40: 48:03:42:5f:76:9d:d3:3b:ed:4c:78:c6:51:3c:e1:0f:75:dc: 14:76:15:9e:56:54:39:e1:a0:58:35:f3:39:b0:f9:cd:24:8a: a9:75:08:38:6e:b6:4e:62:4d:cd:7b:78:12:6b:a7:99:6b:61: e1:4c:ab:d0:2e:2d:3b:0b:67:12:c8:ae:e8:cf:01:55:af:7e: 27:63:d6:6b:f7:5f:00:92:cc:0e:7e:05:cf:12:a1:81:f0:4d: f0:98:a9:56:83:42:5b:3f:4d:31:97:00:17:dd:07:84:f3:5a: a1:d0:de:ae:46:29:a5:d4:b7:3a:2e:ca:d3:8b:aa:e3:e2:87: ca:e2:24:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUnEdb2yKpmUDWyrlLTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NTZmMzA4NGQ5MzEwZWZhMWJjMDdlZjMxZjkzNGIyOTQx ZjEwM2UwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD Eyg5OGYxZjAzNGI4YzI1NzBmYzBhYmFiNjE5ODEzNGRiMjU4N2UyOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLlnCzTdANnlcwskS7EE5ah/6iO8 25eXKK4CKAgfdgWoLRciXprgN/mWRhQrb4YmoeVUpsOBU7dkHBuvUocAqBNnEPvf wFtKbn0ITM2DYTX4LGoweN7o4mIidgRD6Cwzm6waJPMttxjRDRmsN8Ffg4P5cNPW SzDFmu94877DHIXxWfN3ynue3wRpteBDGTywQs5+lJhDa6HueKK0skuxkPAP6wDk 3dDmAotGJ40oWmOvtQCT3XeCTrZNRRca5KJWm/i5otlzv3IXC8cpRQo3NbVSM0op Nf32543G/SIvgy7nh6jiyKD5zNUAbDS8TzOTVLtzzA9ZJrh9VokF/m9cOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjx8DS4wlcPwKurYZgTTbJYfiloMB8GA1UdIwQY MBaAFElW8whNkxDvobwH7zH5NLKUHxA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80YWY4OTgtMjFjYi00ZDhkLWE2M2Yt MWRjOTY3ZDU2NDA5LzEvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80YWY4OTgtMjFjYi00ZDhkLWE2M2YtMWRjOTY3ZDU2NDA5 LzEvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcN9qGyCs MJfdNZgExxidUBZIDKUOVF4XcRMqjVN7aoNIfJs07QmZAXPqdQ4L+iMIWSE/cAf5 TAJ+avvABUBSFRD9qdYrP/9lXnINo4dXjYCW7xopJ2Tw00yjsn1W1NbMuu1dLFk4 ABmoTquZcYuNXCjrC5fsU1+NzKjGZmBASANCX3ad0zvtTHjGUTzhD3XcFHYVnlZU OeGgWDXzObD5zSSKqXUIOG62TmJNzXt4EmunmWth4Uyr0C4tOwtnEsiu6M8BVa9+ J2PWa/dfAJLMDn4FzxKhgfBN8JipVoNCWz9NMZcAF90HhPNaodDerkYppdS3Oi7K 04uq4+KHyuIkoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:08 2025 by rpki-client