This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json) Hash identifier: rydouLVO3DOJZ/YhBb9lSy6FgErveUei97BiNSrtZDw= Subject key identifier: 4F:CE:F5:D0:35:2B:34:08:44:18:F9:01:9A:73:63:8E:2C:13:AA:C7 Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Certificate serial: 019B3F11892EEAE8C711C79CABB15EC372D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft Manifest number: 1119 Signing time: Sun 21 Dec 2025 04:01:12 +0000 Manifest this update: Sun 21 Dec 2025 04:01:12 +0000 Manifest next update: Mon 22 Dec 2025 04:01:12 +0000 Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=) 2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=) 3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: KazTp6YKLtWj9fp+0TOv9G33ZeXFtlb467Gug7k/AUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:89:2e:ea:e8:c7:11:c7:9c:ab:b1:5e:c3:72:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Validity Not Before: Dec 21 04:01:12 2025 GMT Not After : Dec 22 04:01:12 2025 GMT Subject: CN=4fcef5d0352b34084418f9019a73638e2c13aac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:36:52:c1:33:f4:71:21:90:ac:f1:d5:74: fc:93:f4:28:9e:1c:75:d7:be:26:5c:da:41:86:41: 75:a6:23:88:ff:f7:18:8f:49:df:8d:dd:d4:56:b6: 79:49:9e:fb:d1:a4:81:3b:c1:2b:de:fa:04:5e:8b: cd:40:dc:7e:80:92:ca:2e:ad:f6:d1:3f:6e:83:eb: a4:c3:67:4f:d1:e5:1b:6d:cd:b8:7f:45:44:a0:e2: 66:d7:11:8f:2e:a3:dd:a2:6f:ca:e7:1d:38:34:3a: bb:43:35:69:60:da:88:86:d4:30:70:46:e4:3f:31: 84:3d:84:4d:0b:84:61:ec:b1:b8:70:2f:35:fc:ce: 35:e8:08:b0:6a:9c:61:08:28:2d:1b:d0:c1:7d:33: e3:7b:8f:f9:7a:fb:06:ac:01:00:da:95:8e:10:a9: a8:26:07:e4:09:41:22:6c:fc:ab:54:7d:1e:cb:c4: 67:2c:14:8e:1e:12:42:a5:43:37:a1:2a:31:89:a0: aa:3d:a9:7c:0e:13:d4:3e:45:ec:7e:b2:8d:f8:97: e3:93:e8:9b:e2:ce:90:ec:6b:83:f1:73:85:41:3f: 4d:1a:ee:49:2c:48:90:8c:80:da:98:ad:a4:e5:93: 96:51:a2:f3:c1:db:99:83:92:90:48:33:0d:1f:54: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CE:F5:D0:35:2B:34:08:44:18:F9:01:9A:73:63:8E:2C:13:AA:C7 X509v3 Authority Key Identifier: keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6a:58:26:41:90:58:54:b3:ff:6d:40:b6:8d:de:5e:07:09: e1:cd:3e:98:53:2e:ad:6d:16:71:e4:7c:49:ab:ae:7d:16:98: a5:3f:19:e7:6a:bc:f9:aa:ea:58:55:85:d8:17:41:76:7c:94: ab:6e:64:1d:1b:94:08:4b:4e:94:e7:e4:83:0f:9d:7d:10:58: 3d:94:a8:dd:79:c7:7a:22:e0:25:f1:b9:7d:5d:53:42:5b:d2: fb:1a:f3:b6:e5:97:bf:66:42:56:12:e0:c9:56:03:64:b1:95: 30:be:e4:f7:de:1d:a7:ac:df:a9:30:c3:16:45:e4:ce:77:f2: 81:e6:ea:71:18:1a:7f:c6:39:72:9b:bd:b9:3d:31:8a:f9:80: fc:7f:12:04:26:07:8a:4a:4d:20:3f:e6:94:73:7c:ec:03:34: 92:49:1b:97:34:a3:09:12:dc:7b:82:64:06:54:88:f6:f1:f7: f2:98:4c:bc:40:27:ef:52:47:a1:04:f2:5a:61:54:a5:31:18: ad:3f:7e:9e:53:6d:15:4d:2e:0d:cc:52:73:ab:78:75:db:f3: c0:cc:84:1d:96:55:0a:25:c9:3c:49:14:be:cd:f0:8b:33:5b: 63:de:cd:9e:4e:9b:bf:87:db:cf:11:9e:b5:e5:3d:1e:54:33: 98:cf:81:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYku6ujHEcecq7Few3LQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli YjYzZjgwHhcNMjUxMjIxMDQwMTEyWhcNMjUxMjIyMDQwMTEyWjAzMTEwLwYDVQQD Eyg0ZmNlZjVkMDM1MmIzNDA4NDQxOGY5MDE5YTczNjM4ZTJjMTNhYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMA2UsEz9HEhkKzx1XT8k/Qonhx1 174mXNpBhkF1piOI//cYj0nfjd3UVrZ5SZ770aSBO8Er3voEXovNQNx+gJLKLq32 0T9ug+ukw2dP0eUbbc24f0VEoOJm1xGPLqPdom/K5x04NDq7QzVpYNqIhtQwcEbk PzGEPYRNC4Rh7LG4cC81/M416AiwapxhCCgtG9DBfTPje4/5evsGrAEA2pWOEKmo JgfkCUEibPyrVH0ey8RnLBSOHhJCpUM3oSoxiaCqPal8DhPUPkXsfrKN+Jfjk+ib 4s6Q7GuD8XOFQT9NGu5JLEiQjIDamK2k5ZOWUaLzwduZg5KQSDMNH1SxVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/O9dA1KzQIRBj5AZpzY44sE6rHMB8GA1UdIwQY MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt ZmI0Y2YxMzdjMWU5LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5 LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmpYJkGQ WFSz/21Ato3eXgcJ4c0+mFMurW0WceR8SauufRaYpT8Z52q8+arqWFWF2BdBdnyU q25kHRuUCEtOlOfkgw+dfRBYPZSo3XnHeiLgJfG5fV1TQlvS+xrztuWXv2ZCVhLg yVYDZLGVML7k994dp6zfqTDDFkXkznfygebqcRgaf8Y5cpu9uT0xivmA/H8SBCYH ikpNID/mlHN87AM0kkkblzSjCRLce4JkBlSI9vH38phMvEAn71JHoQTyWmFUpTEY rT9+nlNtFU0uDcxSc6t4ddvzwMyEHZZVCiXJPEkUvs3wizNbY97Nnk6bv4fbzxGe teU9HlQzmM+Bmw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:39 2025 by rpki-client