This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json) Hash identifier: sK4pNqg8+LaC9qbkG6CK3o0k9aKFriaLNTVeK8hMTUo= Subject key identifier: 2A:F6:6B:42:0B:80:2D:5D:AB:4D:AF:E4:22:4A:F6:8A:64:DB:FC:F8 Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed Certificate serial: 019B397D097D050DC682B24F5E83CD930E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft Manifest number: 109A Signing time: Sat 20 Dec 2025 02:00:54 +0000 Manifest this update: Sat 20 Dec 2025 02:00:54 +0000 Manifest next update: Sun 21 Dec 2025 02:00:54 +0000 Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: gdZUnMjB7FH6OaY4uMHnMjV6JvKOI5+qF1OUSc7QXvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:09:7d:05:0d:c6:82:b2:4f:5e:83:cd:93:0e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed Validity Not Before: Dec 20 02:00:54 2025 GMT Not After : Dec 21 02:00:54 2025 GMT Subject: CN=2af66b420b802d5dab4dafe4224af68a64dbfcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1f:5f:69:5e:92:83:26:6e:ca:84:e6:2e:e3: 1c:f8:62:54:66:6e:55:fa:dc:aa:fa:22:02:bc:9d: 01:56:5c:41:b4:09:e3:28:57:d4:df:c7:19:99:83: 54:74:ac:07:9a:15:a5:86:3a:ca:68:b7:11:5d:7a: 0e:96:36:66:02:9f:d0:73:77:46:77:4a:ca:a2:f6: c9:08:9e:5e:ac:69:8f:d7:27:7e:b8:c6:bb:53:83: d9:ea:f2:ac:c1:78:5e:0f:4e:58:af:54:a6:d0:fe: da:86:11:4e:f4:76:e8:29:6e:12:d0:33:52:53:e4: 6c:6e:d1:2c:99:0e:05:63:09:ff:79:14:c4:92:ba: f3:ae:ef:07:62:9e:b2:ee:9a:ce:37:1f:e1:2f:5b: 0c:4c:ea:c2:e6:1f:f7:82:29:0c:42:d0:2f:d1:52: 8c:bd:da:b8:e6:e1:6d:63:74:29:46:14:58:f6:80: 03:4b:de:3f:5f:4c:89:ea:16:b1:0b:bd:61:3e:3c: 96:39:08:49:65:fc:8c:ab:ce:99:73:a5:a1:58:1b: 1d:89:63:a2:9c:92:99:60:ce:57:8b:23:5b:40:aa: 6f:04:02:29:f5:1c:f9:5a:9a:c0:d9:e7:8b:c9:b4: e3:49:b8:13:7a:ab:2f:3c:eb:e3:41:21:2c:b5:e4: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F6:6B:42:0B:80:2D:5D:AB:4D:AF:E4:22:4A:F6:8A:64:DB:FC:F8 X509v3 Authority Key Identifier: keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:07:a2:3b:36:fa:10:14:ef:16:e7:e9:88:3f:51:1c:7b:1a: c3:d0:b1:38:8f:70:cb:96:7f:59:eb:29:87:10:4a:02:0b:bb: e2:3d:bd:48:27:6e:3f:ac:8d:b7:2a:0a:f2:c5:17:c2:55:fe: 27:9c:7a:03:e8:50:97:a9:c4:af:a6:7a:25:d9:8a:db:6d:61: b7:29:89:c2:bc:66:f1:32:2c:95:8a:d4:b8:19:31:93:fa:9f: 2e:2a:ee:57:1a:66:a1:58:2c:96:57:22:69:5e:e1:66:95:05: 12:22:62:12:df:94:b5:8b:42:3c:56:58:9a:07:78:2e:a9:b3: 42:ff:b7:81:24:bd:54:7a:ad:73:59:2f:11:cb:df:75:b1:7c: 6b:f9:45:eb:79:81:45:e6:3b:00:fc:d6:a3:50:a5:2b:75:67: 14:1a:e9:cf:18:f0:d5:bb:5b:d0:90:9e:74:cb:8e:33:ee:ae: 33:82:cf:77:56:c1:d1:b2:ce:75:7f:a1:89:d4:8d:8e:60:c1: 5d:c6:47:63:68:0e:c6:80:8d:d4:82:cd:13:a4:1a:b8:b6:40: f3:39:b3:cd:b3:32:6b:e0:2c:c1:05:5f:39:0e:19:54:82:1e: 84:d1:46:e8:06:a6:6b:5f:4d:63:bc:1b:34:79:49:5d:a3:74: 1a:23:66:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQl9BQ3GgrJPXoPNkw5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzc4N2FlZmNhY2VhNDJhYzY0Mzk5NDlhNTY4ZjBkZmZl Nzc3ZWQwHhcNMjUxMjIwMDIwMDU0WhcNMjUxMjIxMDIwMDU0WjAzMTEwLwYDVQQD EygyYWY2NmI0MjBiODAyZDVkYWI0ZGFmZTQyMjRhZjY4YTY0ZGJmY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B9faV6SgyZuyoTmLuMc+GJUZm5V +tyq+iICvJ0BVlxBtAnjKFfU38cZmYNUdKwHmhWlhjrKaLcRXXoOljZmAp/Qc3dG d0rKovbJCJ5erGmP1yd+uMa7U4PZ6vKswXheD05Yr1Sm0P7ahhFO9HboKW4S0DNS U+RsbtEsmQ4FYwn/eRTEkrrzru8HYp6y7prONx/hL1sMTOrC5h/3gikMQtAv0VKM vdq45uFtY3QpRhRY9oADS94/X0yJ6haxC71hPjyWOQhJZfyMq86Zc6WhWBsdiWOi nJKZYM5XiyNbQKpvBAIp9Rz5WprA2eeLybTjSbgTeqsvPOvjQSEsteSOCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr2a0ILgC1dq02v5CJK9opk2/z4MB8GA1UdIwQY MBaAFLF3h678rOpCrGQ5lJpWjw3/53ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYt M2U4YjVmM2M0YzM2LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYtM2U4YjVmM2M0YzM2 LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbweiOzb6 EBTvFufpiD9RHHsaw9CxOI9wy5Z/WesphxBKAgu74j29SCduP6yNtyoK8sUXwlX+ J5x6A+hQl6nEr6Z6JdmK221htymJwrxm8TIslYrUuBkxk/qfLiruVxpmoVgsllci aV7hZpUFEiJiEt+UtYtCPFZYmgd4LqmzQv+3gSS9VHqtc1kvEcvfdbF8a/lF63mB ReY7APzWo1ClK3VnFBrpzxjw1btb0JCedMuOM+6uM4LPd1bB0bLOdX+hidSNjmDB XcZHY2gOxoCN1ILNE6QauLZA8zmzzbMya+AswQVfOQ4ZVIIehNFG6Aama19NY7wb NHlJXaN0GiNmfA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:52:34 2025 by rpki-client