This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json) Hash identifier: 69JNBW5P/jgNdYG/s18BMuOpaL2dtUUfYr6UI6S0IDU= Subject key identifier: 5C:A4:3F:39:AE:16:E2:56:EF:3C:71:84:2D:25:CC:C9:A3:60:D1:31 Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed Certificate serial: 019AF208D7440ED14400369F509FB775EB33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft Manifest number: 1075 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: a4jW1MSPyBc003WSqi29UKoU+64jJ2pNx4yKdE/u3VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d7:44:0e:d1:44:00:36:9f:50:9f:b7:75:eb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=5ca43f39ae16e256ef3c71842d25ccc9a360d131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:a1:cd:07:9e:93:a4:0d:24:9d:64:ec:0e: 2b:60:12:62:8c:d1:09:57:39:7a:2c:1c:ec:37:c8: 0e:92:96:3e:4d:51:97:ac:00:ea:10:ff:aa:2f:34: 27:fd:80:bc:2b:a0:87:73:61:3c:32:9b:36:a6:b2: 8e:d2:86:3f:98:b9:42:ee:cd:04:57:23:dc:0f:11: 2d:9b:8e:f5:0a:64:0e:7f:b2:e7:3c:21:a7:10:c4: d5:df:66:ae:99:ed:9d:34:7e:ce:db:e4:e8:ac:0e: 01:1f:f8:7a:cf:1f:19:ee:e9:37:7f:63:73:eb:2f: 05:ef:44:ee:6d:b9:f6:dd:b0:50:98:6a:60:62:27: 10:ef:87:95:63:0e:ce:8e:f4:2d:dc:32:fb:05:47: 15:0e:83:91:32:3e:0a:3b:1f:2a:30:83:81:c7:76: 8c:e0:8d:70:fc:e4:54:a5:82:5c:4c:58:77:5d:a3: fc:0b:ae:80:a5:3b:b7:0a:e9:ff:84:91:20:7b:7e: 37:67:fc:b7:b3:b1:fc:5f:09:89:7b:01:f4:b3:7e: b5:bb:91:c8:d0:26:38:1e:34:ab:98:c0:5f:83:97: 52:b5:f5:41:45:a5:83:c7:ac:db:cf:1f:d8:e9:dd: 57:3e:7f:7b:ea:1c:9e:80:44:d0:0f:72:49:cd:fd: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A4:3F:39:AE:16:E2:56:EF:3C:71:84:2D:25:CC:C9:A3:60:D1:31 X509v3 Authority Key Identifier: keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:bc:6a:ae:9f:27:68:70:70:bf:a3:12:71:f0:d0:9e:22: f9:ae:77:e5:11:6f:8f:d3:b1:25:e3:a4:a0:fa:02:9b:10:38: b0:8d:e8:10:a6:f4:c9:2d:4c:d8:62:80:fc:0b:4a:d2:45:93: fa:28:29:d0:60:38:26:71:a8:d1:ae:e0:f4:21:58:be:94:0a: e9:b3:de:bd:2c:e9:9d:2c:76:d5:16:9d:9a:a3:6d:ac:16:26: 1b:6e:f6:c7:93:f7:58:f0:f6:aa:c7:cb:4a:ac:28:3c:06:81: b9:ed:03:8a:22:9b:c8:ae:a1:42:05:66:2e:3f:3e:ff:58:04: 1f:d5:e6:34:60:bb:03:1c:09:59:ed:65:bd:5c:a2:87:ac:e7: da:b2:24:c6:a8:8e:f5:85:6b:2c:42:09:e4:01:f2:16:df:29: f1:a7:cd:d8:5f:13:df:02:47:15:51:44:a8:78:47:e9:55:87: 3a:f1:81:c9:c5:8f:49:e1:f1:38:4e:4c:76:f5:43:bc:60:77: b3:cf:f1:ce:19:ba:3d:af:51:b1:d7:8f:ee:aa:a9:eb:f4:94: f6:46:bf:ba:66:d3:56:54:57:34:e1:c9:b6:50:7d:8f:4f:77: 33:34:cb:60:f4:c4:ce:b8:46:eb:11:32:4c:50:f7:b1:35:ab: 20:96:56:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNdEDtFEADafUJ+3deszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzc4N2FlZmNhY2VhNDJhYzY0Mzk5NDlhNTY4ZjBkZmZl Nzc3ZWQwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD Eyg1Y2E0M2YzOWFlMTZlMjU2ZWYzYzcxODQyZDI1Y2NjOWEzNjBkMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DmhzQeek6QNJJ1k7A4rYBJijNEJ Vzl6LBzsN8gOkpY+TVGXrADqEP+qLzQn/YC8K6CHc2E8Mps2prKO0oY/mLlC7s0E VyPcDxEtm471CmQOf7LnPCGnEMTV32aume2dNH7O2+TorA4BH/h6zx8Z7uk3f2Nz 6y8F70Tubbn23bBQmGpgYicQ74eVYw7OjvQt3DL7BUcVDoORMj4KOx8qMIOBx3aM 4I1w/ORUpYJcTFh3XaP8C66ApTu3Cun/hJEge343Z/y3s7H8XwmJewH0s361u5HI 0CY4HjSrmMBfg5dStfVBRaWDx6zbzx/Y6d1XPn976hyegETQD3JJzf1VvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFykPzmuFuJW7zxxhC0lzMmjYNExMB8GA1UdIwQY MBaAFLF3h678rOpCrGQ5lJpWjw3/53ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYt M2U4YjVmM2M0YzM2LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYtM2U4YjVmM2M0YzM2 LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZ28aq6f J2hwcL+jEnHw0J4i+a535RFvj9OxJeOkoPoCmxA4sI3oEKb0yS1M2GKA/AtK0kWT +igp0GA4JnGo0a7g9CFYvpQK6bPevSzpnSx21RadmqNtrBYmG272x5P3WPD2qsfL SqwoPAaBue0DiiKbyK6hQgVmLj8+/1gEH9XmNGC7AxwJWe1lvVyih6zn2rIkxqiO 9YVrLEIJ5AHyFt8p8afN2F8T3wJHFVFEqHhH6VWHOvGBycWPSeHxOE5MdvVDvGB3 s8/xzhm6Pa9RsdeP7qqp6/SU9ka/umbTVlRXNOHJtlB9j093MzTLYPTEzrhG6xEy TFD3sTWrIJZWUg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:57 2025 by rpki-client