This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json) Hash identifier: I6ehAMhpnPVM+hfBR7jl4qmJbHXvsY0MWaUcJfbQFbA= Subject key identifier: A4:8F:EF:D6:FE:DF:2D:EB:B3:4E:3F:3A:65:13:D1:6B:9C:D1:49:BB Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d Certificate serial: 019B3C7E985E9EB7750E8CBDBEA7ED2193DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft Manifest number: 04DC Signing time: Sat 20 Dec 2025 16:01:28 +0000 Manifest this update: Sat 20 Dec 2025 16:01:28 +0000 Manifest next update: Sun 21 Dec 2025 16:01:28 +0000 Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: xkwhOkz6ttK9VSdmfUtiklmZnAghOSwpN29rVBHEvMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:98:5e:9e:b7:75:0e:8c:bd:be:a7:ed:21:93:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d Validity Not Before: Dec 20 16:01:28 2025 GMT Not After : Dec 21 16:01:28 2025 GMT Subject: CN=a48fefd6fedf2debb34e3f3a6513d16b9cd149bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:61:44:f6:f0:63:a5:78:35:4a:92:fc:68: b9:a1:fc:b2:95:86:ee:6c:6f:3e:34:f1:42:6e:7c: 04:29:d4:42:9a:ec:cc:66:2f:41:e9:0a:3f:07:6d: 66:94:25:ee:89:35:4a:f3:c5:9b:1c:32:85:59:b1: d9:a4:20:ca:78:c5:d4:c6:44:43:bf:21:41:73:4e: 08:c7:ec:e9:f5:89:c3:bb:1c:32:04:99:22:ba:9d: 49:05:18:25:58:f9:21:31:21:44:5b:ea:85:eb:98: be:6a:d2:60:06:af:1d:05:0a:c9:eb:5d:86:4b:05: 13:82:79:b2:aa:ff:72:a4:ea:0d:9f:5f:e6:46:37: 3c:c2:a4:d7:da:94:61:7f:9f:95:d6:f5:92:bb:cc: e5:18:ad:1d:07:51:22:6a:65:a5:ac:16:9a:3d:3c: ba:c6:2e:02:e3:91:d4:b6:fa:5e:85:77:a9:3d:41: cc:f7:9c:88:4d:cc:c1:3e:64:5f:13:0a:fa:12:fd: 87:17:52:ad:f6:ee:eb:1e:e6:a1:89:99:4a:89:8c: 92:19:d3:ca:17:30:39:7f:70:24:2e:e4:be:e1:3c: 2f:73:ee:83:c4:4d:ed:5d:e8:1a:a3:57:a3:f5:80: 8f:e3:c1:1a:61:fc:1e:e8:48:8a:45:89:f5:48:86: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8F:EF:D6:FE:DF:2D:EB:B3:4E:3F:3A:65:13:D1:6B:9C:D1:49:BB X509v3 Authority Key Identifier: keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:01:e7:96:b3:63:4e:f1:c7:48:5c:a5:73:0c:ea:01:ac:6e: 11:ec:29:46:63:d2:91:42:c7:d6:28:e5:76:bc:c7:e5:17:bc: cb:bf:a7:5f:b7:0a:d7:eb:63:df:d0:eb:d7:98:ea:a2:de:86: d5:de:da:66:ad:ed:eb:3b:8b:93:77:b3:5b:b3:2a:16:e7:ee: f9:c6:10:77:8d:87:a0:e1:47:72:ea:dd:56:4d:f0:16:fd:45: b5:e1:22:d8:27:ba:02:19:0c:66:91:59:dc:b4:78:22:9f:ba: 27:8a:05:48:1a:58:a0:1a:7d:00:fc:8c:8b:e5:7f:26:83:56: d4:e5:72:08:11:e5:69:d0:9c:6c:fd:c1:24:f8:bc:46:da:ec: 06:56:e7:3a:56:98:5b:40:91:00:90:20:17:3b:11:a2:1e:e1: 69:18:d3:90:59:7d:30:98:03:6c:ec:23:08:41:8d:d8:53:27: 94:1d:76:a7:df:55:1b:e2:b1:82:da:d6:07:75:4b:84:53:0e: 46:2f:a2:72:40:67:c5:db:52:33:12:5b:34:1a:b0:47:c4:1e: 69:6f:9e:f2:5f:bf:7a:10:c3:bd:0b:f4:83:17:37:62:a0:55: b0:00:2e:a1:c4:a4:b5:1a:2c:1f:08:65:77:71:51:20:aa:f1: d5:4e:b0:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fphenrd1Doy9vqftIZPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzJiNWJkYzc1NGQ1ZjY0NGU0MDgxZGJjMDNiMmI0MGE4 OWYxNmQwHhcNMjUxMjIwMTYwMTI4WhcNMjUxMjIxMTYwMTI4WjAzMTEwLwYDVQQD EyhhNDhmZWZkNmZlZGYyZGViYjM0ZTNmM2E2NTEzZDE2YjljZDE0OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq15hRPbwY6V4NUqS/Gi5ofyylYbu bG8+NPFCbnwEKdRCmuzMZi9B6Qo/B21mlCXuiTVK88WbHDKFWbHZpCDKeMXUxkRD vyFBc04Ix+zp9YnDuxwyBJkiup1JBRglWPkhMSFEW+qF65i+atJgBq8dBQrJ612G SwUTgnmyqv9ypOoNn1/mRjc8wqTX2pRhf5+V1vWSu8zlGK0dB1EiamWlrBaaPTy6 xi4C45HUtvpehXepPUHM95yITczBPmRfEwr6Ev2HF1Kt9u7rHuahiZlKiYySGdPK FzA5f3AkLuS+4Twvc+6DxE3tXegao1ej9YCP48EaYfwe6EiKRYn1SIagcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSP79b+3y3rs04/OmUT0Wuc0Um7MB8GA1UdIwQY MBaAFLFytb3HVNX2ROQIHbwDsrQKifFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMt ZWE1MmFlMDhkZTljLzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMtZWE1MmFlMDhkZTlj LzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgHnlrNj TvHHSFylcwzqAaxuEewpRmPSkULH1ijldrzH5Re8y7+nX7cK1+tj39Dr15jqot6G 1d7aZq3t6zuLk3ezW7MqFufu+cYQd42HoOFHcurdVk3wFv1FteEi2Ce6AhkMZpFZ 3LR4Ip+6J4oFSBpYoBp9APyMi+V/JoNW1OVyCBHladCcbP3BJPi8RtrsBlbnOlaY W0CRAJAgFzsRoh7haRjTkFl9MJgDbOwjCEGN2FMnlB12p99VG+KxgtrWB3VLhFMO Ri+ickBnxdtSMxJbNBqwR8QeaW+e8l+/ehDDvQv0gxc3YqBVsAAuocSktRosHwhl d3FRIKrx1U6wQA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:46 2025 by rpki-client