This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json) Hash identifier: UtAECuEh821OlcrMMgaho2OV1etr758S+Ce81xhva6o= Subject key identifier: 48:86:CF:70:B0:88:4B:37:55:29:B5:B6:D6:AB:F9:B1:A7:96:EF:88 Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Certificate serial: 019B3CB51EB0F5B1F09A13D78ED1C6EDB19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft Manifest number: 0C43 Signing time: Sat 20 Dec 2025 17:01:01 +0000 Manifest this update: Sat 20 Dec 2025 17:01:01 +0000 Manifest next update: Sun 21 Dec 2025 17:01:01 +0000 Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: nRbVy1b0rJ/m1gYnGMdoKlRXFuFZp8lB5QOxHMxy8P0=) 2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:1e:b0:f5:b1:f0:9a:13:d7:8e:d1:c6:ed:b1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70 Validity Not Before: Dec 20 17:01:01 2025 GMT Not After : Dec 21 17:01:01 2025 GMT Subject: CN=4886cf70b0884b375529b5b6d6abf9b1a796ef88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:c6:6a:b5:57:dd:64:bc:04:f0:cd:3f:31: fb:f1:ef:67:02:f0:b8:79:d8:57:fb:32:51:48:29: 29:6b:77:c9:bc:46:0b:83:04:b2:91:a3:71:3d:76: 67:5f:7f:e5:66:31:4a:9f:5a:25:90:9e:8f:f4:12: 92:0b:78:96:4d:97:40:75:4f:bb:a2:4f:ae:9d:5a: 57:8e:2c:aa:05:22:7a:c3:56:7e:5f:ab:0d:28:52: 58:da:3b:60:93:db:b2:00:83:79:20:e2:0b:c2:20: e3:b5:84:26:a7:21:14:73:40:ca:ec:12:07:b7:64: 50:3f:fd:8a:ce:21:34:11:e1:0f:eb:a4:af:63:5c: 16:fe:72:79:3b:33:c0:fa:4c:73:83:7f:62:74:27: 66:7b:41:f1:d9:71:f6:65:40:69:c5:e3:16:5d:06: 32:c3:c6:a1:5d:be:20:6b:38:fc:b3:03:45:72:ff: f2:04:46:ab:b4:13:1d:1f:7f:09:d1:6b:75:35:90: a6:94:2d:e9:83:4b:db:8c:e2:22:d7:3d:e9:96:f0: d3:f3:07:75:3e:7d:d6:6b:3c:ff:1d:70:6a:19:37: 93:2c:51:46:28:95:64:c9:6b:c3:38:5a:5f:e3:ec: 22:ad:7f:36:df:f2:dc:25:6f:bb:01:f5:19:b2:78: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:CF:70:B0:88:4B:37:55:29:B5:B6:D6:AB:F9:B1:A7:96:EF:88 X509v3 Authority Key Identifier: keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e2:88:cc:d5:74:ce:ad:43:dc:b4:f3:35:aa:b8:ff:53:9d: 73:34:61:b8:8b:6b:98:43:90:b3:05:00:8b:2a:72:b6:47:c6: 75:bd:19:e2:e5:a4:24:dd:2b:a5:95:bd:40:a1:36:29:b6:49: 42:3d:21:03:79:17:ef:fb:64:71:61:a4:25:e4:54:c6:19:1e: 84:32:22:17:24:34:5c:35:a4:5a:5d:a7:4a:48:10:58:2f:bb: 71:4e:e9:06:ed:9c:02:82:b0:c0:34:60:4c:d6:fc:6d:18:b9: ab:aa:23:9c:aa:cb:58:af:c5:43:55:a7:b9:f6:a0:4a:b3:1b: f2:a1:3e:1d:f7:94:1b:25:f4:db:0e:96:ae:54:f6:8f:ae:f7: 86:1e:00:5d:cf:0c:51:bb:65:cf:8d:21:dd:5e:c4:f0:22:e4: 97:f9:28:da:f0:0e:4e:22:5b:bd:e5:c3:d5:15:af:c9:0c:83: fb:7a:2c:5c:96:3e:6e:a6:40:bd:c1:01:7c:e4:9e:23:c2:2b: 48:af:1c:a2:b0:f4:3b:fe:bc:06:0f:cc:d7:8b:eb:d2:b3:85: 07:f3:68:f3:d0:16:f4:b7:b7:f6:a5:72:b4:ad:3b:fa:3d:54: 60:f9:36:58:b0:d0:bd:5d:f4:e5:d0:c4:3a:1a:f0:da:70:8c: 9f:6e:7f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tR6w9bHwmhPXjtHG7bGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWUzZGMwZWJmYjEwZWJiOTQxOTc0NTQ3MzJlZjc4NmFj NzViNzAwHhcNMjUxMjIwMTcwMTAxWhcNMjUxMjIxMTcwMTAxWjAzMTEwLwYDVQQD Eyg0ODg2Y2Y3MGIwODg0YjM3NTUyOWI1YjZkNmFiZjliMWE3OTZlZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10DGarVX3WS8BPDNPzH78e9nAvC4 edhX+zJRSCkpa3fJvEYLgwSykaNxPXZnX3/lZjFKn1olkJ6P9BKSC3iWTZdAdU+7 ok+unVpXjiyqBSJ6w1Z+X6sNKFJY2jtgk9uyAIN5IOILwiDjtYQmpyEUc0DK7BIH t2RQP/2KziE0EeEP66SvY1wW/nJ5OzPA+kxzg39idCdme0Hx2XH2ZUBpxeMWXQYy w8ahXb4gazj8swNFcv/yBEartBMdH38J0Wt1NZCmlC3pg0vbjOIi1z3plvDT8wd1 Pn3Wazz/HXBqGTeTLFFGKJVkyWvDOFpf4+wirX823/LcJW+7AfUZsngkxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiGz3CwiEs3VSm1ttar+bGnlu+IMB8GA1UdIwQY MBaAFLFePcDr+xDruUGXRUcy73hqx1twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYt MWQwMDdiZTljZGQ4LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80YWRjM2ItM2JkMy00NTQ3LTgwMDYtMWQwMDdiZTljZGQ4 LzEvc1Y0OXdPdjdFT3U1UVpkRlJ6THZlR3JIVzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+KIzNV0 zq1D3LTzNaq4/1OdczRhuItrmEOQswUAiypytkfGdb0Z4uWkJN0rpZW9QKE2KbZJ Qj0hA3kX7/tkcWGkJeRUxhkehDIiFyQ0XDWkWl2nSkgQWC+7cU7pBu2cAoKwwDRg TNb8bRi5q6ojnKrLWK/FQ1WnufagSrMb8qE+HfeUGyX02w6WrlT2j673hh4AXc8M Ubtlz40h3V7E8CLkl/ko2vAOTiJbveXD1RWvyQyD+3osXJY+bqZAvcEBfOSeI8Ir SK8corD0O/68Bg/M14vr0rOFB/No89AW9Le39qVytK07+j1UYPk2WLDQvV305dDE Ohrw2nCMn25/DQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:32 2025 by rpki-client