This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft File: SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json) Hash identifier: ctRP1gjo0jL2CMZmITNyAcAG30tB7RLiZ2iPMa+w8PE= Subject key identifier: 4D:09:0F:3B:ED:80:D6:98:28:22:7D:2E:37:65:8F:44:2A:A7:D0:26 Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97 Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097 Certificate serial: 019B3CB512B493A53D2CF4E4B6ED9BCA1866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 17:00:58 +0000 Manifest this update: Sat 20 Dec 2025 17:00:58 +0000 Manifest next update: Sun 21 Dec 2025 17:00:58 +0000 Files and hashes: 1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=) 2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=) 3: JyWaH8R7Bb18Hp5FODhCm0Qm4yk.roa (hash: 3YUqJIFeG4oViBaCgEnkhKEkkHy1Sj0m4RpDsg9NjFo=) 4: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=) 5: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: za+ZIdmLIA7GEeyDFNcdaDdAmYVX13MzUI+wsutfrlE=) 6: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=) 7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:12:b4:93:a5:3d:2c:f4:e4:b6:ed:9b:ca:18:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097 Validity Not Before: Dec 20 17:00:58 2025 GMT Not After : Dec 21 17:00:58 2025 GMT Subject: CN=4d090f3bed80d69828227d2e37658f442aa7d026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:8f:e8:2a:a4:14:fa:f8:4b:fe:1f:9f:81: ec:82:39:10:ab:d2:3e:4c:b1:63:49:72:a9:f1:2b: b9:e6:61:9e:4e:ca:5a:cf:2f:95:9e:95:15:d1:cc: e0:a0:ab:37:49:1e:6c:72:98:0a:fe:12:c5:7a:f3: 39:86:dc:de:85:2d:e6:f9:83:09:4d:bd:70:9a:f5: 60:30:51:de:6e:df:22:9f:2d:59:f0:8b:34:f5:a3: f0:ff:71:e3:29:42:56:70:37:16:d1:16:e7:d7:2e: c3:74:ef:7f:2c:0e:d0:ab:51:54:cc:44:97:34:db: 69:0f:c2:9a:57:00:82:f3:1e:70:57:a0:90:23:7f: 41:50:c8:59:82:66:50:a0:bd:f1:c4:65:28:a8:33: 0c:0c:a3:29:03:dc:7d:00:ce:31:a4:6e:de:8f:f0: 1b:49:af:84:4e:b5:7d:1e:b3:dd:01:c0:f5:62:41: cb:5e:67:3c:bd:db:ea:f6:81:6d:b0:f6:18:8f:9b: 8b:9f:78:44:1a:f3:1e:18:a9:db:d6:f2:f8:33:11: 01:78:85:1f:05:5a:1f:1c:bc:7a:e8:e6:77:cd:e6: cf:94:bb:d1:7b:1b:cb:3b:7c:5d:8a:1b:c2:d4:70: 44:17:0c:75:ab:ac:c9:e2:97:1e:fc:ad:c1:d9:89: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:0F:3B:ED:80:D6:98:28:22:7D:2E:37:65:8F:44:2A:A7:D0:26 X509v3 Authority Key Identifier: keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6a:6c:80:d9:e8:83:39:98:fa:d1:50:bc:21:c9:40:95:7e: e0:bc:71:6e:24:ef:08:21:6a:90:bb:82:63:d4:e0:79:29:d7: e0:88:08:42:79:1a:ad:20:54:ac:cf:38:27:a8:83:4c:84:03: 5a:b0:f0:d0:b3:47:15:84:97:4b:42:bd:62:52:8a:bc:0f:81: f7:40:6d:0d:15:f7:03:c8:6b:fd:d0:55:34:f3:b1:d4:b5:dc: a2:7a:ce:7f:c3:b3:b5:8c:4d:91:21:c2:e3:3e:58:bb:f3:9e: da:a9:c3:a0:8c:04:87:38:41:df:25:9c:4c:d0:dc:fa:de:04: 43:d0:63:c2:ae:9c:4a:b5:52:d8:7c:cf:b2:88:a4:01:89:4d: 7f:39:eb:f1:70:d6:6b:9f:5c:63:32:78:f0:22:65:b8:47:40: 78:8a:79:94:9b:49:ad:6f:ce:39:d7:18:a1:4c:44:e5:b3:1f: 5c:93:40:34:96:4e:6d:06:c0:0f:55:3b:14:a4:a3:14:fc:7f: 4d:2c:e7:c5:fc:09:8d:6d:6b:89:17:d7:be:92:cf:b3:dd:7c: a9:30:01:cb:a1:14:65:d4:7b:a1:3c:6e:8a:69:d6:eb:c6:33: b9:fc:f6:bc:3a:11:d6:df:9e:b2:c3:42:d0:6a:cf:a5:c7:8a: 6d:0b:14:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRK0k6U9LPTktu2byhhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl YTUwOTcwHhcNMjUxMjIwMTcwMDU4WhcNMjUxMjIxMTcwMDU4WjAzMTEwLwYDVQQD Eyg0ZDA5MGYzYmVkODBkNjk4MjgyMjdkMmUzNzY1OGY0NDJhYTdkMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtOP6CqkFPr4S/4fn4HsgjkQq9I+ TLFjSXKp8Su55mGeTspazy+VnpUV0czgoKs3SR5scpgK/hLFevM5htzehS3m+YMJ Tb1wmvVgMFHebt8iny1Z8Is09aPw/3HjKUJWcDcW0Rbn1y7DdO9/LA7Qq1FUzESX NNtpD8KaVwCC8x5wV6CQI39BUMhZgmZQoL3xxGUoqDMMDKMpA9x9AM4xpG7ej/Ab Sa+ETrV9HrPdAcD1YkHLXmc8vdvq9oFtsPYYj5uLn3hEGvMeGKnb1vL4MxEBeIUf BVofHLx66OZ3zebPlLvRexvLO3xdihvC1HBEFwx1q6zJ4pce/K3B2YmkhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0JDzvtgNaYKCJ9Ljdlj0Qqp9AmMB8GA1UdIwQY MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt ODk3ZDAwOTc3ZmYyLzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2psgNno gzmY+tFQvCHJQJV+4LxxbiTvCCFqkLuCY9TgeSnX4IgIQnkarSBUrM84J6iDTIQD WrDw0LNHFYSXS0K9YlKKvA+B90BtDRX3A8hr/dBVNPOx1LXconrOf8OztYxNkSHC 4z5Yu/Oe2qnDoIwEhzhB3yWcTNDc+t4EQ9Bjwq6cSrVS2HzPsoikAYlNfznr8XDW a59cYzJ48CJluEdAeIp5lJtJrW/OOdcYoUxE5bMfXJNANJZObQbAD1U7FKSjFPx/ TSznxfwJjW1riRfXvpLPs918qTABy6EUZdR7oTxuimnW68Yzufz2vDoR1t+essNC 0GrPpceKbQsU6g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:09:43 2025 by rpki-client