This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json) Hash identifier: mDbG08G5kKHBXBW8tPc0x45HM8YWnVS86/TFLtbJvvE= Subject key identifier: 45:E5:BC:4D:0C:F2:4A:AB:A9:D3:74:81:5A:72:5B:62:F7:D9:5A:3D Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d Certificate serial: 019B2553671172B4357C39B46CA295EAAC45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft Manifest number: 04D0 Signing time: Tue 16 Dec 2025 04:03:01 +0000 Manifest this update: Tue 16 Dec 2025 04:03:01 +0000 Manifest next update: Wed 17 Dec 2025 04:03:01 +0000 Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: /KLjNMMOwSRbKlWG/HJYxdaB0er7LP8jC49yuAoEPKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:67:11:72:b4:35:7c:39:b4:6c:a2:95:ea:ac:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d Validity Not Before: Dec 16 04:03:01 2025 GMT Not After : Dec 17 04:03:01 2025 GMT Subject: CN=45e5bc4d0cf24aaba9d374815a725b62f7d95a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:06:47:1b:33:5b:af:e7:08:56:12:94:09: 52:b9:f8:91:6b:6c:19:b6:4e:27:c1:00:e4:f3:c9: 04:86:71:8f:96:9d:a1:f9:b2:09:6a:40:6a:b2:18: 6b:02:55:35:0e:81:9f:60:7d:af:3a:82:49:c6:fe: 87:b9:be:4f:ee:11:d4:b7:2e:90:15:f0:ba:b6:5f: fe:90:ae:b4:9f:4d:bc:a1:9c:60:5c:f6:3e:6a:ce: db:ce:48:39:ac:37:22:a4:2d:01:c5:d6:e4:23:a0: 29:f5:3e:ab:73:d5:8b:df:14:73:e8:c1:8b:12:fb: ce:0b:9a:ef:cf:55:4c:88:f0:f0:a5:38:ce:93:6c: a6:d9:92:f1:da:e8:45:33:19:fd:47:83:c5:b5:05: 9a:d5:cf:e7:b7:98:48:fd:e7:7b:ba:8a:83:72:7c: 52:70:c3:11:ba:bf:8e:50:e5:ab:b2:4d:04:5c:63: 52:a5:33:73:6a:92:37:ce:42:e7:20:e4:82:85:1e: 7d:42:0d:10:ea:46:70:ee:0a:6d:2c:e7:2f:2d:25: 8f:7d:7e:65:66:99:46:9b:03:74:31:f4:71:d4:cd: 11:e7:82:cd:ac:d8:43:55:cd:56:04:94:72:5f:8f: aa:2d:fb:7a:fb:c1:87:46:2b:12:80:6c:bb:e6:ce: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E5:BC:4D:0C:F2:4A:AB:A9:D3:74:81:5A:72:5B:62:F7:D9:5A:3D X509v3 Authority Key Identifier: keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7c:02:b4:34:db:d5:e1:30:1f:ce:cb:c9:7e:a6:2c:f9:c7: 28:9e:9a:83:d9:01:d2:e9:07:c2:b7:4e:60:68:86:ee:ec:c3: 6c:1b:e4:2c:5d:64:06:dc:df:65:75:d9:41:30:eb:ca:14:d0: 58:c7:de:d4:00:1e:cf:74:97:38:86:b6:7f:a8:91:e0:8e:cd: a9:31:77:88:cc:fb:69:8c:76:5f:da:34:d4:ca:44:3a:4a:d1: 97:09:7d:48:97:54:2a:46:77:c3:50:d4:38:50:42:30:e1:c2: 3a:3d:aa:65:8f:7d:f8:7b:18:c7:a7:4f:48:9c:00:4a:e1:0a: 63:40:33:30:bf:98:83:af:4d:ba:c6:c2:0a:89:77:0b:c6:64: a4:f1:cd:99:38:73:92:cc:9c:e2:a5:4f:9a:bc:7d:59:6f:2d: 4a:06:ee:c9:bd:71:56:87:c2:75:0f:03:30:a0:4d:a6:fe:1f: 72:64:cf:bd:0c:7e:81:09:fa:d3:8d:38:50:08:57:28:c3:2e: 1a:bb:66:9e:fe:d2:17:70:27:b8:d5:ff:06:0a:67:8d:7b:9a: 1c:35:8c:11:ef:12:4b:47:04:45:9f:d3:1d:b7:02:ac:30:32: f7:2e:0a:62:fd:ef:1a:d1:83:5b:4c:c7:2a:ea:90:4d:42:fb: db:40:72:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslU2cRcrQ1fDm0bKKV6qxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzJiNWJkYzc1NGQ1ZjY0NGU0MDgxZGJjMDNiMmI0MGE4 OWYxNmQwHhcNMjUxMjE2MDQwMzAxWhcNMjUxMjE3MDQwMzAxWjAzMTEwLwYDVQQD Eyg0NWU1YmM0ZDBjZjI0YWFiYTlkMzc0ODE1YTcyNWI2MmY3ZDk1YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/kGRxszW6/nCFYSlAlSufiRa2wZ tk4nwQDk88kEhnGPlp2h+bIJakBqshhrAlU1DoGfYH2vOoJJxv6Hub5P7hHUty6Q FfC6tl/+kK60n028oZxgXPY+as7bzkg5rDcipC0BxdbkI6Ap9T6rc9WL3xRz6MGL EvvOC5rvz1VMiPDwpTjOk2ym2ZLx2uhFMxn9R4PFtQWa1c/nt5hI/ed7uoqDcnxS cMMRur+OUOWrsk0EXGNSpTNzapI3zkLnIOSChR59Qg0Q6kZw7gptLOcvLSWPfX5l ZplGmwN0MfRx1M0R54LNrNhDVc1WBJRyX4+qLft6+8GHRisSgGy75s7LpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXlvE0M8kqrqdN0gVpyW2L32Vo9MB8GA1UdIwQY MBaAFLFytb3HVNX2ROQIHbwDsrQKifFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMt ZWE1MmFlMDhkZTljLzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MDBiYjctZTU1NC00YjFjLTlmNDMtZWE1MmFlMDhkZTlj LzEvc1hLMXZjZFUxZlpFNUFnZHZBT3l0QXFKOFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3wCtDTb 1eEwH87LyX6mLPnHKJ6ag9kB0ukHwrdOYGiG7uzDbBvkLF1kBtzfZXXZQTDryhTQ WMfe1AAez3SXOIa2f6iR4I7NqTF3iMz7aYx2X9o01MpEOkrRlwl9SJdUKkZ3w1DU OFBCMOHCOj2qZY99+HsYx6dPSJwASuEKY0AzML+Yg69NusbCCol3C8ZkpPHNmThz ksyc4qVPmrx9WW8tSgbuyb1xVofCdQ8DMKBNpv4fcmTPvQx+gQn60404UAhXKMMu Grtmnv7SF3AnuNX/BgpnjXuaHDWMEe8SS0cERZ/THbcCrDAy9y4KYv3vGtGDW0zH KuqQTUL720ByCg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:26:08 2025 by rpki-client