This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json) Hash identifier: 1NRBwpk+LLWZkvfoxTSVGfWyLEC780OXPL+acxQw0xA= Subject key identifier: FF:91:43:22:91:27:05:DB:E7:4C:C5:22:51:DD:85:F1:E8:4F:D0:FD Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae Certificate serial: 019B366FCEE2EE8F4FFB155A0F76AAA35941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft Manifest number: 0896 Signing time: Fri 19 Dec 2025 11:47:35 +0000 Manifest this update: Fri 19 Dec 2025 11:47:35 +0000 Manifest next update: Sat 20 Dec 2025 11:47:35 +0000 Files and hashes: 1: 7LQsU_KV_tIcLIU7dA9rtZKLMTM.roa (hash: xrcsphxK2D1Xb5MVHaZbEUvUpb1Tm02Ld1ztT+1vkjw=) 2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: +c5UCgXJNHkhNhEWx4buajNJB/kxR4c0zB7yAiWXmhU=) 3: dBWqqX7TUpjmbRpfXp44YLDQQKo.roa (hash: AVnu+TRmBANWXBo+f7zIG17k48ory+VgROMrgBy0M0A=) 4: l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa (hash: BmB8JatQfp2mQ4vWr7Bgl6YeJ1OakzxtLlN1iSUDIbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:6f:ce:e2:ee:8f:4f:fb:15:5a:0f:76:aa:a3:59:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae Validity Not Before: Dec 19 11:47:35 2025 GMT Not After : Dec 20 11:47:35 2025 GMT Subject: CN=ff914322912705dbe74cc52251dd85f1e84fd0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:69:9b:44:88:4e:7d:15:64:50:14:80:40: 57:8c:79:92:9f:ff:dc:ed:c1:28:98:f0:2f:fa:6f: 63:89:2b:1e:4f:59:f4:85:d3:3b:d2:91:f2:2d:5c: f0:27:be:2a:fc:8a:3a:d2:32:d6:a8:c5:a2:d5:1c: 65:4f:be:b5:4e:dd:66:59:73:f2:09:6b:cc:b3:4f: f4:fe:43:d0:81:bd:20:85:f4:9c:a2:2d:1d:2f:9a: 80:83:d7:23:6f:16:9c:7c:79:51:db:8a:d7:78:6a: 32:5e:11:d8:d8:22:2f:66:e1:cb:9c:a0:be:ff:05: ab:3d:1a:9c:e7:0b:0a:b3:e0:fa:b0:3f:9e:39:2f: fa:71:fd:34:ca:c2:5c:24:59:d5:38:5c:16:18:d2: 14:91:79:0e:82:25:76:bf:74:69:4f:11:2f:5c:37: cb:31:f6:2a:04:18:10:b1:a0:cf:89:3d:1d:12:8c: 2b:23:16:7e:f0:06:4f:c5:c4:77:01:3e:8b:58:69: fc:90:09:ee:d7:07:9e:18:29:fb:67:30:b5:58:12: a5:e4:f1:59:c4:6d:9f:7f:b4:5b:72:c2:97:ce:4b: fa:b4:59:4d:47:29:9f:4f:d4:f5:c2:fa:a6:86:5c: c1:49:f0:e9:91:36:74:59:c8:a8:5e:ee:e2:85:58: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:91:43:22:91:27:05:DB:E7:4C:C5:22:51:DD:85:F1:E8:4F:D0:FD X509v3 Authority Key Identifier: keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3e:82:fe:6a:a5:5a:7e:53:94:52:7b:09:37:40:8a:fc:df: 0c:65:5d:4d:04:dd:09:37:22:c4:be:b8:8c:f5:7b:dc:6b:9f: 52:30:a8:9f:bf:2f:53:68:8d:b5:4b:7a:20:0b:ac:ce:e7:b1: 49:88:fe:c3:a2:3d:8b:94:1c:33:05:a0:e2:87:04:7b:7e:d7: a4:29:62:f1:9e:a0:ce:62:52:05:8b:5c:d2:bc:38:37:f9:99: 56:f3:c4:9f:45:1a:76:10:b8:41:a3:f5:e1:a6:5a:95:57:ed: 04:ba:1b:ad:18:32:34:64:41:28:3e:f3:cc:02:89:78:a9:7b: b1:1a:1b:48:1f:40:99:df:77:aa:65:20:5c:6f:07:d2:70:ad: 40:c0:3a:f1:20:de:91:a3:ee:f2:89:1f:19:cc:f8:4f:05:1e: 40:98:e5:36:94:05:05:44:a9:63:a4:15:20:71:00:8e:48:6d: 26:c4:a9:fa:29:b5:db:e4:be:3b:60:97:68:48:69:f5:69:1d: e7:a0:cd:41:4a:1c:f3:cd:59:44:5c:c6:8b:47:72:73:ce:14: 10:b4:2d:68:f2:60:02:85:e3:a9:dc:69:e2:30:e5:21:c0:d3: f2:6d:eb:db:5a:01:3f:63:2b:c4:4c:35:32:89:8a:0a:fc:68: cd:be:8a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2b87i7o9P+xVaD3aqo1lBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw MTU4YWUwHhcNMjUxMjE5MTE0NzM1WhcNMjUxMjIwMTE0NzM1WjAzMTEwLwYDVQQD EyhmZjkxNDMyMjkxMjcwNWRiZTc0Y2M1MjI1MWRkODVmMWU4NGZkMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU1pm0SITn0VZFAUgEBXjHmSn//c 7cEomPAv+m9jiSseT1n0hdM70pHyLVzwJ74q/Io60jLWqMWi1RxlT761Tt1mWXPy CWvMs0/0/kPQgb0ghfScoi0dL5qAg9cjbxacfHlR24rXeGoyXhHY2CIvZuHLnKC+ /wWrPRqc5wsKs+D6sD+eOS/6cf00ysJcJFnVOFwWGNIUkXkOgiV2v3RpTxEvXDfL MfYqBBgQsaDPiT0dEowrIxZ+8AZPxcR3AT6LWGn8kAnu1weeGCn7ZzC1WBKl5PFZ xG2ff7RbcsKXzkv6tFlNRymfT9T1wvqmhlzBSfDpkTZ0WcioXu7ihVhIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+RQyKRJwXb50zFIlHdhfHoT9D9MB8GA1UdIwQY MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAz6C/mql Wn5TlFJ7CTdAivzfDGVdTQTdCTcixL64jPV73GufUjCon78vU2iNtUt6IAuszuex SYj+w6I9i5QcMwWg4ocEe37XpCli8Z6gzmJSBYtc0rw4N/mZVvPEn0UadhC4QaP1 4aZalVftBLobrRgyNGRBKD7zzAKJeKl7sRobSB9Amd93qmUgXG8H0nCtQMA68SDe kaPu8okfGcz4TwUeQJjlNpQFBUSpY6QVIHEAjkhtJsSp+im12+S+O2CXaEhp9Wkd 56DNQUoc881ZRFzGi0dyc84UELQtaPJgAoXjqdxp4jDlIcDT8m3r21oBP2MrxEw1 MomKCvxozb6K4w== -----END CERTIFICATE-----Generated at Fri Dec 19 16:00:51 2025 by rpki-client