This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json) Hash identifier: CK6/HgXGTw9brfkgkeerQMiexBcd9+vO4WX8R4blsC8= Subject key identifier: 5C:E2:F9:7C:A5:E2:4F:35:42:0D:9C:3B:CE:80:AB:6B:07:F3:E2:88 Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5 Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5 Certificate serial: 019AF088C00D7296D88B3D8E8077664D1F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft Manifest number: 0537 Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: C6ChLlUt1MXvtYqWc5HF1U43vLIJ7Ffzug+DuPuXPeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c0:0d:72:96:d8:8b:3d:8e:80:77:66:4d:1f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5 Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=5ce2f97ca5e24f35420d9c3bce80ab6b07f3e288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:68:3d:dc:69:48:35:a4:16:0a:22:ad:d3: 66:98:e7:3e:86:31:8d:ec:dd:81:d1:28:38:ca:fe: c1:b8:27:ca:8d:23:7a:bc:ae:21:65:2d:e3:4d:3a: 2a:61:ca:ed:4a:41:da:89:36:79:95:1c:35:05:97: ed:4e:e5:53:db:35:88:db:7c:23:27:c0:0b:f3:25: f5:af:e6:77:19:d2:86:8b:1c:d9:c1:e7:73:72:11: 4c:b0:63:62:88:00:4c:23:50:f8:c1:57:ae:9a:f6: b1:c1:f6:2e:af:d8:75:f5:97:9f:fe:dc:b7:70:00: 64:d9:53:fe:3b:04:06:c7:4f:e1:64:a9:83:32:2c: 79:ba:c1:71:cc:15:f8:98:8f:40:b2:d3:01:dc:c7: b9:69:56:43:04:8f:bb:3b:24:7d:71:80:91:61:b0: d5:70:78:c1:61:98:06:19:fd:53:96:99:10:30:32: 0e:85:00:64:ba:cf:7d:80:c9:d4:2c:99:51:04:77: 23:2e:69:89:38:3b:de:5a:b4:fe:67:e3:a8:46:fc: d2:5b:a6:68:d9:15:a8:0a:86:4a:f4:d4:1a:7f:70: aa:2f:ef:80:9b:ba:7c:c2:07:d2:80:18:c6:6c:2b: 32:34:74:28:fb:67:25:3a:0e:58:c6:48:53:db:6a: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E2:F9:7C:A5:E2:4F:35:42:0D:9C:3B:CE:80:AB:6B:07:F3:E2:88 X509v3 Authority Key Identifier: keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2a:28:cf:91:13:77:5f:12:22:88:5f:f3:5b:37:cd:72:a6: e9:73:75:63:d8:57:50:85:7c:86:30:a7:4d:e4:17:e2:f4:00: a9:96:1d:e0:24:19:62:20:22:10:4c:90:7f:84:4a:60:b7:28: 86:be:19:11:0a:9d:02:e4:80:72:0c:26:c9:f8:9c:a5:99:4e: ca:04:6b:87:16:7b:7a:29:d2:0b:0b:68:28:c2:4c:e6:90:7d: 37:33:58:9b:24:f8:c9:67:ed:0b:1c:4a:84:2d:58:79:7a:d8: 85:cb:76:a2:28:a2:82:60:c2:d6:b6:f7:6f:93:fd:25:7a:8a: 35:eb:e1:03:67:e2:2b:c4:b4:5f:9e:03:8a:bc:fc:2c:16:40: 5b:fe:38:19:3b:54:49:14:f3:1f:ab:36:b3:6e:26:ab:d1:c3: 24:3e:7e:21:ea:87:7d:7b:bc:69:cf:b0:4a:83:7c:f1:bb:0c: 23:e7:e5:56:69:61:1b:fb:10:2d:ea:ee:3a:e9:fd:5a:46:d7: 8c:d7:ec:7d:c9:e8:d2:d9:a1:f8:45:ab:48:d1:d7:6e:ea:47: 2b:1f:67:6c:0a:25:8b:a4:b8:ed:6a:32:65:29:a2:45:11:1e: c0:53:84:c4:69:ae:0c:60:30:56:fe:fc:68:9c:99:14:17:a6: 83:7e:16:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMANcpbYiz2OgHdmTR9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWJlNzNmZmRhZDZmODYyYjBiZGQ4OTRkNDQzMjdjMmM5 NGE3ZDUwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD Eyg1Y2UyZjk3Y2E1ZTI0ZjM1NDIwZDljM2JjZTgwYWI2YjA3ZjNlMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDtoPdxpSDWkFgoirdNmmOc+hjGN 7N2B0Sg4yv7BuCfKjSN6vK4hZS3jTToqYcrtSkHaiTZ5lRw1BZftTuVT2zWI23wj J8AL8yX1r+Z3GdKGixzZwedzchFMsGNiiABMI1D4wVeumvaxwfYur9h19Zef/ty3 cABk2VP+OwQGx0/hZKmDMix5usFxzBX4mI9AstMB3Me5aVZDBI+7OyR9cYCRYbDV cHjBYZgGGf1TlpkQMDIOhQBkus99gMnULJlRBHcjLmmJODveWrT+Z+OoRvzSW6Zo 2RWoCoZK9NQaf3CqL++Am7p8wgfSgBjGbCsyNHQo+2clOg5YxkhT22pH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzi+Xyl4k81Qg2cO86Aq2sH8+KIMB8GA1UdIwQY MBaAFLGr5z/9rW+GKwvdiU1EMnwslKfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYt ZTkxOWMzN2U0ZWJjLzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYtZTkxOWMzN2U0ZWJj LzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyooz5ET d18SIohf81s3zXKm6XN1Y9hXUIV8hjCnTeQX4vQAqZYd4CQZYiAiEEyQf4RKYLco hr4ZEQqdAuSAcgwmyficpZlOygRrhxZ7einSCwtoKMJM5pB9NzNYmyT4yWftCxxK hC1YeXrYhct2oiiigmDC1rb3b5P9JXqKNevhA2fiK8S0X54Dirz8LBZAW/44GTtU SRTzH6s2s24mq9HDJD5+IeqHfXu8ac+wSoN88bsMI+flVmlhG/sQLeruOun9WkbX jNfsfcno0tmh+EWrSNHXbupHKx9nbAoli6S47WoyZSmiRREewFOExGmuDGAwVv78 aJyZFBemg34W6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:49 2025 by rpki-client