This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft File: SVfItkDqWWxdEac7PSZu54w_Cds.mft (raw, json) Hash identifier: 4TpsiVL9WthPsS56ET36u8nUbZj80OA+3gtNccwrzWE= Subject key identifier: CA:E7:2A:BA:23:93:54:85:57:1C:C7:3E:E3:F4:15:D7:90:66:0E:54 Authority key identifier: 49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB Certificate issuer: /CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db Certificate serial: 019AF1D186526DF486A06E85F150E2169021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft Manifest number: 09EF Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: SVfItkDqWWxdEac7PSZu54w_Cds.crl (hash: oZ8Y8sVFG1fExQtq/maa3EwVvBxdWmb0pH6FMOGtGWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:86:52:6d:f4:86:a0:6e:85:f1:50:e2:16:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=cae72aba23935485571cc73ee3f415d790660e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:43:0b:e4:e3:6b:35:63:42:d8:d0:a2:59: a2:b1:72:bd:2a:9e:2d:fe:58:6f:ff:3a:2c:bd:e1: c5:b1:b0:80:09:27:ca:92:20:87:c3:a8:a5:f7:ce: 59:d8:82:33:8a:32:74:a2:17:1c:81:dc:dd:81:d3: 39:99:35:c6:33:eb:58:b9:e8:b5:06:40:25:8d:d2: ed:cc:dd:90:ce:1f:58:b6:35:46:eb:78:bf:3a:b9: 8b:85:b7:f1:ba:2a:c8:30:f6:fb:1e:4c:7c:71:ae: ef:c5:4c:b7:2e:24:27:b6:fa:33:04:bf:fe:8b:05: f4:b6:47:1f:19:e3:05:6b:52:ce:cf:5b:b4:5a:98: 98:30:3d:3b:43:61:87:17:5e:36:7b:60:c8:8f:14: a5:5d:01:6c:59:bc:ed:e2:c6:b7:78:2c:cf:15:94: 33:c1:ce:02:05:32:c0:87:4b:14:be:41:67:6b:3d: 59:32:c1:41:84:52:60:5d:03:9c:55:10:fb:a3:b0: b1:d9:2a:7c:65:9a:81:a7:3f:70:0d:9f:88:2f:ef: 62:be:3e:34:2f:a3:bd:d7:0c:ad:67:1e:99:b9:e9: 98:71:d2:35:eb:c7:a2:56:3a:07:15:23:6b:38:92: 9d:d7:d9:5b:62:c7:b6:2c:b2:69:15:96:64:b9:2e: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:2A:BA:23:93:54:85:57:1C:C7:3E:E3:F4:15:D7:90:66:0E:54 X509v3 Authority Key Identifier: keyid:49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:39:f4:da:66:68:f1:2e:3d:4d:f6:0e:d8:cf:e6:5e:02:c9: 7b:21:ac:bd:46:45:26:5d:89:69:d9:f6:6f:c6:34:11:cc:3b: 61:db:27:43:6f:fc:79:f5:55:ef:ff:21:c0:cb:45:8e:ed:48: 6f:2a:82:94:b6:7a:b8:98:d6:66:05:69:61:6b:71:e8:ea:6e: b3:25:5e:9f:c9:ab:ad:3a:6d:29:e2:66:cd:e2:0b:91:91:a3: aa:80:12:c6:ba:11:f9:81:35:a2:07:0f:2f:47:c1:dd:5b:44: da:10:02:ba:40:48:fc:fc:e4:ac:6f:d8:d2:b4:38:bc:c8:db: 97:aa:f5:18:e7:1f:f4:f8:ec:cf:41:8a:50:f7:37:c4:0b:77: bf:ba:43:8a:9a:31:ab:90:86:b6:90:a4:bb:4d:0c:8c:3e:35: 14:58:87:da:17:b7:b2:6a:26:31:84:b2:50:97:11:b2:fa:59: bd:5c:98:1b:fe:89:b0:37:2d:71:01:e5:75:db:de:c6:68:0b: 17:32:74:5f:4b:ec:46:c4:9f:bb:8c:3b:1a:ac:38:f5:4b:96: a3:54:16:4d:25:8c:20:24:c7:2c:79:53:26:4b:b2:c2:16:3e: 97:d1:db:60:0d:38:5a:f0:3d:3f:e6:3c:7f:1a:61:0a:78:b4: 06:88:e7:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YZSbfSGoG6F8VDiFpAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NTdjOGI2NDBlYTU5NmM1ZDExYTczYjNkMjY2ZWU3OGMz ZjA5ZGIwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhjYWU3MmFiYTIzOTM1NDg1NTcxY2M3M2VlM2Y0MTVkNzkwNjYwZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmdDC+TjazVjQtjQolmisXK9Kp4t /lhv/zosveHFsbCACSfKkiCHw6il985Z2IIzijJ0ohccgdzdgdM5mTXGM+tYuei1 BkAljdLtzN2Qzh9YtjVG63i/OrmLhbfxuirIMPb7Hkx8ca7vxUy3LiQntvozBL/+ iwX0tkcfGeMFa1LOz1u0WpiYMD07Q2GHF142e2DIjxSlXQFsWbzt4sa3eCzPFZQz wc4CBTLAh0sUvkFnaz1ZMsFBhFJgXQOcVRD7o7Cx2Sp8ZZqBpz9wDZ+IL+9ivj40 L6O91wytZx6ZuemYcdI168eiVjoHFSNrOJKd19lbYse2LLJpFZZkuS77iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrnKrojk1SFVxzHPuP0FdeQZg5UMB8GA1UdIwQY MBaAFElXyLZA6llsXRGnOz0mbueMPwnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1ZmSXRrRHFXV3hkRWFjN1BTWnU1NHdfQ2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wY2VlYzMtNDgyYS00MWE1LTk3ZWIt YmZlMWUxNzNkOGYwLzEvU1ZmSXRrRHFXV3hkRWFjN1BTWnU1NHdfQ2RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wY2VlYzMtNDgyYS00MWE1LTk3ZWItYmZlMWUxNzNkOGYw LzEvU1ZmSXRrRHFXV3hkRWFjN1BTWnU1NHdfQ2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDn02mZo 8S49TfYO2M/mXgLJeyGsvUZFJl2Jadn2b8Y0Ecw7YdsnQ2/8efVV7/8hwMtFju1I byqClLZ6uJjWZgVpYWtx6OpusyVen8mrrTptKeJmzeILkZGjqoASxroR+YE1ogcP L0fB3VtE2hACukBI/PzkrG/Y0rQ4vMjbl6r1GOcf9Pjsz0GKUPc3xAt3v7pDipox q5CGtpCku00MjD41FFiH2he3smomMYSyUJcRsvpZvVyYG/6JsDctcQHlddvexmgL FzJ0X0vsRsSfu4w7Gqw49UuWo1QWTSWMICTHLHlTJkuywhY+l9HbYA04WvA9P+Y8 fxphCni0Bojn9A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:13 2025 by rpki-client