This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft File: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft (raw, json) Hash identifier: XgaAIdy5iNmBbA+zYwq1Dy+42ipW7PrPnrM7q1/ELlw= Subject key identifier: 1E:8D:DE:EE:09:42:EE:C3:C1:7A:6C:07:94:EC:5D:AC:6A:B7:C2:15 Authority key identifier: 4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E Certificate issuer: /CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e Certificate serial: 019B41DB140E2C6E6361D9713B007D0DA4CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft Manifest number: 0E4D Signing time: Sun 21 Dec 2025 17:00:35 +0000 Manifest this update: Sun 21 Dec 2025 17:00:35 +0000 Manifest next update: Mon 22 Dec 2025 17:00:35 +0000 Files and hashes: 1: NZZp83GD9DMoLhn3D9M5XusFTxI.roa (hash: OiMifk7R6FismqZrdc/pOMDrQLzXG34BDoHmuCJQZZM=) 2: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl (hash: MMvoSLibQqwinDgxctObHFRY/vgklj7yn98bNUcPgvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:14:0e:2c:6e:63:61:d9:71:3b:00:7d:0d:a4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e Validity Not Before: Dec 21 17:00:35 2025 GMT Not After : Dec 22 17:00:35 2025 GMT Subject: CN=1e8ddeee0942eec3c17a6c0794ec5dac6ab7c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:e2:5a:54:11:a6:ce:7e:ed:31:54:02:83: 38:32:d4:d9:15:18:56:20:b0:95:91:d5:eb:ad:8f: 81:8e:86:bd:4f:a4:ff:b3:6e:63:6e:49:63:3e:59: 7b:dd:49:fc:61:b4:29:d9:b8:10:83:5d:e2:00:88: 35:e7:d2:fc:dc:88:c6:ee:49:43:4a:7a:56:87:6e: 8d:31:10:df:a7:de:11:3c:ea:85:f8:1d:13:7e:ef: 24:43:bf:61:9b:73:dc:54:90:a0:2f:65:f8:8e:7d: f5:69:45:ec:c2:88:af:8c:28:63:e7:08:aa:fc:62: 9d:18:c7:ae:1f:8a:df:bb:a5:c5:61:08:ce:ea:62: f7:52:a4:42:e7:44:60:5e:58:72:3a:61:e0:c9:70: 19:87:94:55:ed:e1:98:94:a4:5a:41:90:db:68:c2: 98:6b:6c:18:db:45:33:da:81:a3:3d:3a:7e:c7:02: 06:7c:75:63:e5:b3:f7:f9:03:0f:c3:c2:74:f6:e0: d2:cb:40:28:6e:35:87:93:60:b9:ea:48:a5:9d:f2: 6e:2f:8f:e2:0f:e1:3b:26:ca:90:c3:98:9a:23:57: 97:9e:44:46:d6:26:46:b1:7a:a4:b0:b3:3c:2c:71: 69:6a:5d:8b:58:d7:dc:05:3f:86:e5:6b:3a:21:c6: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8D:DE:EE:09:42:EE:C3:C1:7A:6C:07:94:EC:5D:AC:6A:B7:C2:15 X509v3 Authority Key Identifier: keyid:4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4d:10:89:f9:29:a8:d7:58:7d:53:68:7e:bd:36:7e:f1:00: 7f:47:bc:20:53:0b:34:80:42:3f:61:8a:81:51:41:94:2f:1e: 71:0b:4d:37:ca:e0:b5:22:3e:d9:9e:21:ca:f1:4f:f1:18:fc: 6a:25:00:7c:c2:4e:6f:6b:86:52:b8:46:f7:cb:38:10:09:77: 0c:0b:7c:0d:f6:b0:1d:ab:7a:4a:04:95:18:89:6d:eb:a9:9d: a8:3a:63:c7:82:4d:59:73:bb:4d:bb:78:05:dd:e8:d5:43:11: 45:55:b6:35:23:85:3f:03:ec:a8:8b:cf:6d:6c:5e:94:34:5f: 89:52:b3:8c:54:e4:9b:4a:4e:74:1b:53:f7:3f:39:c9:b7:ae: ef:b0:26:73:38:90:54:38:da:18:0c:c7:f9:98:58:a0:ef:5b: 34:c7:cd:01:5d:ff:93:e2:30:98:64:6a:ba:48:b5:d0:ea:50: f2:1d:40:22:20:c4:60:08:43:fb:d7:e2:c0:2b:f9:67:eb:66: 49:56:76:50:98:3f:02:6b:73:53:f7:7d:ae:56:43:38:de:c8: 25:dd:f3:38:32:61:6b:33:e4:79:63:3b:98:a7:e0:c6:e6:64: 7d:f2:17:fd:fd:79:5e:0c:9b:d5:24:89:f1:1e:ba:52:0b:83: 41:d8:0d:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2xQOLG5jYdlxOwB9DaTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZmM3ZjBiZWFjMjI2MDcwMmQwNWI2OWRkN2I3YTNmYjJk ZGQ2OWUwHhcNMjUxMjIxMTcwMDM1WhcNMjUxMjIyMTcwMDM1WjAzMTEwLwYDVQQD EygxZThkZGVlZTA5NDJlZWMzYzE3YTZjMDc5NGVjNWRhYzZhYjdjMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7TiWlQRps5+7TFUAoM4MtTZFRhW ILCVkdXrrY+Bjoa9T6T/s25jbkljPll73Un8YbQp2bgQg13iAIg159L83IjG7klD SnpWh26NMRDfp94RPOqF+B0Tfu8kQ79hm3PcVJCgL2X4jn31aUXswoivjChj5wiq /GKdGMeuH4rfu6XFYQjO6mL3UqRC50RgXlhyOmHgyXAZh5RV7eGYlKRaQZDbaMKY a2wY20Uz2oGjPTp+xwIGfHVj5bP3+QMPw8J09uDSy0AobjWHk2C56kilnfJuL4/i D+E7JsqQw5iaI1eXnkRG1iZGsXqksLM8LHFpal2LWNfcBT+G5Ws6IcaqzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6N3u4JQu7DwXpsB5TsXaxqt8IVMB8GA1UdIwQY MBaAFEr8fwvqwiYHAtBbad17ej+y3daeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Z4X0MtckNKZ2NDMEZ0cDNYdDZQN0xkMXA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZjQwNmEtMjk4MS00YWFmLThiNjEt ZjRjZTIyZWNhZTM0LzEvU3Z4X0MtckNKZ2NDMEZ0cDNYdDZQN0xkMXA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80ZjQwNmEtMjk4MS00YWFmLThiNjEtZjRjZTIyZWNhZTM0 LzEvU3Z4X0MtckNKZ2NDMEZ0cDNYdDZQN0xkMXA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS00Qifkp qNdYfVNofr02fvEAf0e8IFMLNIBCP2GKgVFBlC8ecQtNN8rgtSI+2Z4hyvFP8Rj8 aiUAfMJOb2uGUrhG98s4EAl3DAt8DfawHat6SgSVGIlt66mdqDpjx4JNWXO7Tbt4 Bd3o1UMRRVW2NSOFPwPsqIvPbWxelDRfiVKzjFTkm0pOdBtT9z85ybeu77AmcziQ VDjaGAzH+ZhYoO9bNMfNAV3/k+IwmGRquki10OpQ8h1AIiDEYAhD+9fiwCv5Z+tm SVZ2UJg/AmtzU/d9rlZDON7IJd3zODJhazPkeWM7mKfgxuZkffIX/f15Xgyb1SSJ 8R66UguDQdgNEw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:50:01 2025 by rpki-client