This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json) Hash identifier: ocfxeOvWTA1aCgsMME/Tp5V7J+i5ZW4vW8Eh2Yt3rJI= Subject key identifier: F2:3A:10:2E:F1:90:60:51:8B:E1:04:E8:8E:D6:40:47:E3:A8:E8:93 Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc Certificate serial: 019B2FD55F024C9E91B6852E7B1578636B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 05:01:11 +0000 Manifest this update: Thu 18 Dec 2025 05:01:11 +0000 Manifest next update: Fri 19 Dec 2025 05:01:11 +0000 Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: lBe1bw0Km+r2FTX/jO4btC58bPidMtmVtamYU1HJWLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:5f:02:4c:9e:91:b6:85:2e:7b:15:78:63:6b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc Validity Not Before: Dec 18 05:01:11 2025 GMT Not After : Dec 19 05:01:11 2025 GMT Subject: CN=f23a102ef19060518be104e88ed64047e3a8e893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:c5:e4:4a:5c:25:89:1b:a5:37:b7:1c:69: b5:a3:5d:6f:60:fe:01:81:cb:f2:fe:b6:64:8d:2b: bf:18:ee:e9:21:f9:88:7c:6f:a6:63:c4:7e:7d:fe: f8:07:4a:30:49:8f:7e:41:b1:63:a0:08:63:63:7a: 2e:c7:99:51:37:2a:d3:7b:49:f0:e4:d3:35:30:8c: 24:32:a5:3c:74:c7:d3:06:ca:bb:49:46:49:cb:d1: 1a:97:9a:a0:d7:c0:62:31:d7:6d:e3:7e:5c:a7:08: 04:38:25:64:51:39:42:e4:15:4e:61:90:02:e6:13: b8:a8:14:b4:95:c1:7f:bb:7f:be:ca:63:08:70:8f: 57:66:eb:e2:85:c5:38:d0:92:4c:f4:f4:0f:c7:b2: a4:c1:1c:d7:f7:49:39:79:ec:0e:27:9e:04:c9:ba: b5:99:61:7a:a2:12:da:07:90:3f:d7:6a:81:f9:97: ab:e3:01:d0:d5:d3:04:4f:95:f9:01:19:df:4d:4e: 7a:ed:0d:b7:2a:0e:db:ea:67:2b:93:7c:ff:82:e1: 2f:1e:b8:18:ab:14:26:a4:7d:87:24:14:54:72:7d: d8:a6:a1:70:50:73:b7:1f:86:e6:a2:e0:9f:f3:7c: 70:bb:3f:38:78:80:f9:44:6e:12:14:73:fb:da:9b: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3A:10:2E:F1:90:60:51:8B:E1:04:E8:8E:D6:40:47:E3:A8:E8:93 X509v3 Authority Key Identifier: keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:49:e7:dd:ef:4c:71:95:84:88:3a:f3:5d:4b:a1:6c:4a:fc: 4e:3a:a0:fe:0a:ed:7b:e4:37:27:5b:39:d7:3e:5b:4d:b6:04: 9d:7a:64:d0:08:e9:3f:a6:e0:62:67:a2:dd:2b:fb:6b:1c:ee: b9:e4:0f:6d:c6:d3:78:fa:3e:3a:4f:db:bc:66:26:59:e5:01: 1c:e8:a2:76:45:7d:66:75:ef:28:1c:80:a9:5b:72:b6:81:b4: 98:38:70:24:41:28:80:7a:0c:ad:53:05:19:00:5e:72:a2:e4: 44:24:1f:77:95:d3:b0:be:60:61:bf:f9:52:ff:55:df:30:7a: b7:f9:ac:45:e6:ea:ab:85:68:5d:04:99:bd:6c:ab:24:13:cc: 41:6e:51:bf:58:2e:ed:b3:92:a9:0b:65:06:51:56:76:5b:74: 5a:f5:10:53:21:2d:b4:8d:29:72:d8:a0:e1:76:8f:30:03:ea: 33:87:7b:d4:d0:b8:d2:c5:be:ba:e4:6e:a3:79:71:e4:22:03: 0a:a7:72:e3:0e:e7:12:59:7d:ff:19:63:31:52:c0:06:ba:af: 34:38:f6:99:9e:fa:26:5a:2c:2c:d8:ba:26:9a:3c:9f:a0:05: f9:a3:97:e1:3f:f8:bb:20:8d:4d:a5:cd:e8:c6:a9:db:a6:94: cd:bb:58:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1V8CTJ6RtoUuexV4Y2uOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmQxNTI3NjA3ZDExODhlOWRiODBjZjE2NDk4YTQxMzgy MDBjZGMwHhcNMjUxMjE4MDUwMTExWhcNMjUxMjE5MDUwMTExWjAzMTEwLwYDVQQD EyhmMjNhMTAyZWYxOTA2MDUxOGJlMTA0ZTg4ZWQ2NDA0N2UzYThlODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjfF5EpcJYkbpTe3HGm1o11vYP4B gcvy/rZkjSu/GO7pIfmIfG+mY8R+ff74B0owSY9+QbFjoAhjY3oux5lRNyrTe0nw 5NM1MIwkMqU8dMfTBsq7SUZJy9Eal5qg18BiMddt435cpwgEOCVkUTlC5BVOYZAC 5hO4qBS0lcF/u3++ymMIcI9XZuvihcU40JJM9PQPx7KkwRzX90k5eewOJ54Eybq1 mWF6ohLaB5A/12qB+Zer4wHQ1dMET5X5ARnfTU567Q23Kg7b6mcrk3z/guEvHrgY qxQmpH2HJBRUcn3YpqFwUHO3H4bmouCf83xwuz84eID5RG4SFHP72pt/NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI6EC7xkGBRi+EE6I7WQEfjqOiTMB8GA1UdIwQY MBaAFP0tFSdgfRGI6duAzxZJikE4IAzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzct ZGMxYWJlYzE2NjZjLzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzctZGMxYWJlYzE2NjZj LzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUnn3e9M cZWEiDrzXUuhbEr8Tjqg/grte+Q3J1s51z5bTbYEnXpk0AjpP6bgYmei3Sv7axzu ueQPbcbTePo+Ok/bvGYmWeUBHOiidkV9ZnXvKByAqVtytoG0mDhwJEEogHoMrVMF GQBecqLkRCQfd5XTsL5gYb/5Uv9V3zB6t/msRebqq4VoXQSZvWyrJBPMQW5Rv1gu 7bOSqQtlBlFWdlt0WvUQUyEttI0pctig4XaPMAPqM4d71NC40sW+uuRuo3lx5CID Cqdy4w7nEll9/xljMVLABrqvNDj2mZ76JlosLNi6Jpo8n6AF+aOX4T/4uyCNTaXN 6Map26aUzbtYlA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:56:51 2025 by rpki-client