This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json) Hash identifier: Dyz5HmhG8oTu1Rmq5e1gJFf/MWRW6Swjk18FBy5bH1w= Subject key identifier: A2:AA:9C:E3:F2:CB:2F:3C:9E:5F:CE:FB:1A:4F:42:55:EF:6B:AA:2B Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36 Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636 Certificate serial: 019AF19B43636C5B2D8E00EBFA472A6DF295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft Manifest number: 01B2 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: 8YjVWmpInoV5NetDwmu3tl1zTxdjQbShg6Vt3QVLB8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:43:63:6c:5b:2d:8e:00:eb:fa:47:2a:6d:f2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911c4809872294be5817b159e59f29e50609636 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=a2aa9ce3f2cb2f3c9e5fcefb1a4f4255ef6baa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:03:8c:69:b7:66:10:5f:68:20:eb:c2:05: 34:9a:ec:42:94:b7:b2:3e:3e:48:6e:71:68:13:c5: ec:e5:8b:5b:a6:1b:74:0d:34:18:a8:ad:d0:87:83: b9:0a:03:d3:37:4f:e6:9a:40:d0:aa:8b:bb:84:e5: e1:41:f3:48:f2:f0:c3:59:78:09:d8:24:77:21:23: 4c:fc:d3:0c:40:40:69:ba:20:0b:11:6b:35:a5:d2: 98:f6:e4:a9:b4:19:1f:2e:62:21:4e:11:e9:20:5e: 70:73:15:2e:48:78:6c:37:76:0e:b7:a5:c3:fc:8f: ef:9b:3a:76:ab:a0:5a:81:10:1a:92:1e:c8:16:31: 64:93:7f:b1:35:9d:29:ae:86:4f:72:7f:e6:d8:57: 08:da:fd:1d:90:5a:9d:2d:f3:c1:4b:d5:82:7a:d4: ef:83:d0:47:82:8e:a1:db:f6:29:53:0a:07:68:d9: 06:69:e5:62:51:d8:32:4b:fa:cd:3d:7d:19:94:1d: cb:94:32:60:85:fe:1b:1b:b0:de:44:de:7a:3e:21: cd:bb:92:0a:ca:bd:af:f3:7f:e0:93:f3:94:c9:f3: 8f:c4:16:7e:e3:f5:af:52:ee:e9:13:36:ac:61:61: a8:16:15:c3:95:cc:d7:65:27:e1:4f:b7:7e:44:0c: 85:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:9C:E3:F2:CB:2F:3C:9E:5F:CE:FB:1A:4F:42:55:EF:6B:AA:2B X509v3 Authority Key Identifier: keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:c4:ec:40:6f:c9:48:40:ff:2b:53:1b:34:14:cd:e3:6a:b1: ff:df:76:df:94:0a:df:5f:a5:ad:0b:49:c3:cd:ae:c4:5f:82: 1b:4e:f4:28:82:c7:8f:c2:9d:9a:a6:1a:38:60:63:77:5d:58: 6f:d9:81:28:b9:af:fb:4b:d7:ca:aa:a4:8d:59:19:25:5d:78: b6:a9:d5:79:85:09:97:80:d2:f5:e5:25:e9:3c:fd:27:d6:62: 1d:29:8a:d8:62:29:7c:d9:c2:8f:88:bb:d7:1f:6a:6f:c4:2a: 7d:38:47:07:2d:f0:d6:ef:d9:92:73:8e:c4:73:8e:93:42:6b: 63:f1:73:62:99:2d:e1:16:5a:0a:62:0c:5b:e6:cb:0b:5f:bb: 6e:e7:d3:92:f3:75:cc:1b:ca:d6:53:f9:30:c3:87:9a:03:e2: 08:9c:fb:11:83:9d:fb:1e:8d:2b:83:b6:8c:a0:6a:67:d0:6f: fd:ba:d5:69:c4:63:fd:d4:0e:38:32:4f:fc:c2:a4:4b:a7:b1: c9:5d:22:4f:f0:27:90:a5:e9:63:c6:8d:40:fa:d0:39:0c:25: f8:22:f7:cc:b1:a8:6a:cf:9d:03:bd:c5:67:62:73:b0:9e:e5: a5:fc:b1:89:7e:7b:9f:b6:02:f5:06:57:76:a0:8c:3d:65:26: a0:6c:c5:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0NjbFstjgDr+kcqbfKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTFjNDgwOTg3MjI5NGJlNTgxN2IxNTllNTlmMjllNTA2 MDk2MzYwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhhMmFhOWNlM2YyY2IyZjNjOWU1ZmNlZmIxYTRmNDI1NWVmNmJhYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjEDjGm3ZhBfaCDrwgU0muxClLey Pj5IbnFoE8Xs5Ytbpht0DTQYqK3Qh4O5CgPTN0/mmkDQqou7hOXhQfNI8vDDWXgJ 2CR3ISNM/NMMQEBpuiALEWs1pdKY9uSptBkfLmIhThHpIF5wcxUuSHhsN3YOt6XD /I/vmzp2q6BagRAakh7IFjFkk3+xNZ0proZPcn/m2FcI2v0dkFqdLfPBS9WCetTv g9BHgo6h2/YpUwoHaNkGaeViUdgyS/rNPX0ZlB3LlDJghf4bG7DeRN56PiHNu5IK yr2v83/gk/OUyfOPxBZ+4/WvUu7pEzasYWGoFhXDlczXZSfhT7d+RAyFeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKqnOPyyy88nl/O+xpPQlXva6orMB8GA1UdIwQY MBaAFEkRxICYcilL5YF7FZ5Z8p5QYJY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83OWI3OTctMDkyMi00ZGY2LTgyN2Qt MzY4MWY1YjdmODZiLzEvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS83OWI3OTctMDkyMi00ZGY2LTgyN2QtMzY4MWY1YjdmODZi LzEvU1JIRWdKaHlLVXZsZ1hzVm5sbnlubEJnbGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsTsQG/J SED/K1MbNBTN42qx/99235QK31+lrQtJw82uxF+CG070KILHj8KdmqYaOGBjd11Y b9mBKLmv+0vXyqqkjVkZJV14tqnVeYUJl4DS9eUl6Tz9J9ZiHSmK2GIpfNnCj4i7 1x9qb8QqfThHBy3w1u/ZknOOxHOOk0JrY/FzYpkt4RZaCmIMW+bLC1+7bufTkvN1 zBvK1lP5MMOHmgPiCJz7EYOd+x6NK4O2jKBqZ9Bv/brVacRj/dQOODJP/MKkS6ex yV0iT/AnkKXpY8aNQPrQOQwl+CL3zLGoas+dA73FZ2JzsJ7lpfyxiX57n7YC9QZX dqCMPWUmoGzFSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:38 2025 by rpki-client