This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft File: SVx0J6902pRU8eKHwW-aXzp3gx8.mft (raw, json) Hash identifier: 2CQi/Bw66wUMRE3GMn37SgZ8Yd0oCKBro2Fu5z6H/HI= Subject key identifier: 0D:01:43:B2:7B:5C:5A:34:4F:2C:C9:CF:BD:B6:FF:09:0E:DC:6A:A7 Authority key identifier: 49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F Certificate issuer: /CN=495c7427af74da9454f1e287c16f9a5f3a77831f Certificate serial: 019B4BF1F78DCC714886C5DC6B14260F71A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft Manifest number: 1598 Signing time: Tue 23 Dec 2025 16:01:47 +0000 Manifest this update: Tue 23 Dec 2025 16:01:47 +0000 Manifest next update: Wed 24 Dec 2025 16:01:47 +0000 Files and hashes: 1: SVx0J6902pRU8eKHwW-aXzp3gx8.crl (hash: ZKAJWPb9SCqy9i24ncQoACf0zgS61hfyTgRTZFb7ER0=) 2: yGC5sIb3srVUEq8Qa2rFq7sGg3Y.roa (hash: C8hFdKgoa42ll+QkfetAIjLLM5z2fVcdANN2iM3elfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 16:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:f7:8d:cc:71:48:86:c5:dc:6b:14:26:0f:71:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495c7427af74da9454f1e287c16f9a5f3a77831f Validity Not Before: Dec 23 16:01:47 2025 GMT Not After : Dec 24 16:01:47 2025 GMT Subject: CN=0d0143b27b5c5a344f2cc9cfbdb6ff090edc6aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:21:4b:12:e4:02:23:7a:ae:3b:8b:be:29: 74:c6:0d:c1:dd:79:da:81:a1:55:1d:d8:29:81:ee: c0:ab:dd:79:cc:d1:42:42:f1:9f:ef:d0:27:07:d7: 0b:09:92:ce:94:f5:d6:13:6c:25:c2:84:1d:b6:79: e9:bd:b0:8a:4a:e4:8b:37:bd:d6:a0:24:29:29:6c: 50:67:05:e8:b8:16:6e:e5:9f:6d:d7:a0:3f:3c:f7: d8:a7:98:58:16:b7:c2:6c:c9:22:12:28:5d:b1:01: cc:33:c4:e3:47:18:88:65:7c:e3:05:6f:56:34:cd: 4c:ad:c9:79:d4:0a:f6:1a:82:5c:de:18:c0:e1:8d: 23:0f:08:03:50:66:d7:26:7a:6b:06:c8:84:6c:68: 45:96:a6:10:a8:e3:47:25:fb:8a:7a:72:a6:96:60: b6:05:ba:fc:0a:28:a3:54:aa:be:4c:d8:fc:73:31: 0d:f0:93:95:97:ab:08:2b:77:a7:7c:30:d3:24:70: 0a:1e:d6:a4:5f:ea:7e:5f:00:bc:e2:e9:91:df:49: d5:54:dc:84:e7:5f:03:55:d6:18:89:93:60:b9:7d: f0:55:95:d0:dd:50:fe:1d:3c:b1:7b:1d:1c:1d:dc: 1a:05:15:ae:ba:07:14:10:76:56:69:fb:55:68:54: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:01:43:B2:7B:5C:5A:34:4F:2C:C9:CF:BD:B6:FF:09:0E:DC:6A:A7 X509v3 Authority Key Identifier: keyid:49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6c:82:ef:e1:05:14:62:e4:7b:82:81:2d:52:bb:8c:a7:cd: c6:20:9d:71:b3:07:b7:1d:bc:e7:96:67:ea:e6:13:91:c8:07: 4d:34:0f:4a:4b:08:18:05:67:0f:c1:03:ad:b1:65:08:6f:92: 8e:65:85:bc:2d:3a:a5:30:f7:ab:8f:ff:bc:07:fb:19:6b:2b: 14:2c:33:9c:7f:83:63:15:c7:e6:07:84:34:05:fa:e7:d7:26: c0:d4:98:e7:03:83:c3:2a:82:58:d0:94:cb:01:fd:13:a2:6c: f8:6d:aa:7b:4d:a9:8d:a3:d5:1c:10:51:e4:88:af:00:72:d8: 76:4b:0b:4c:ba:a7:27:30:4e:61:a7:af:22:75:43:3c:2f:4c: e1:21:aa:3b:fc:d5:cf:03:04:8d:23:ae:9e:4f:b3:84:86:e9: b3:e7:96:90:e6:b9:c9:b8:af:59:1e:10:ee:a4:47:eb:be:a6: b8:1a:54:be:2e:ea:64:31:ab:37:a6:f7:0e:f8:6b:79:59:a4: b1:b2:8c:2b:a6:60:b5:00:c4:cf:7d:6a:10:3f:6e:3f:8b:2d: 37:5d:ad:91:80:e3:2c:c9:67:ec:a1:56:b0:d3:1a:d7:96:21: e4:b2:40:a6:64:3c:73:90:20:5d:dd:68:c6:da:69:66:49:6f: 72:74:b6:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8feNzHFIhsXcaxQmD3GkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NWM3NDI3YWY3NGRhOTQ1NGYxZTI4N2MxNmY5YTVmM2E3 NzgzMWYwHhcNMjUxMjIzMTYwMTQ3WhcNMjUxMjI0MTYwMTQ3WjAzMTEwLwYDVQQD EygwZDAxNDNiMjdiNWM1YTM0NGYyY2M5Y2ZiZGI2ZmYwOTBlZGM2YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l8hSxLkAiN6rjuLvil0xg3B3Xna gaFVHdgpge7Aq915zNFCQvGf79AnB9cLCZLOlPXWE2wlwoQdtnnpvbCKSuSLN73W oCQpKWxQZwXouBZu5Z9t16A/PPfYp5hYFrfCbMkiEihdsQHMM8TjRxiIZXzjBW9W NM1Mrcl51Ar2GoJc3hjA4Y0jDwgDUGbXJnprBsiEbGhFlqYQqONHJfuKenKmlmC2 Bbr8CiijVKq+TNj8czEN8JOVl6sIK3enfDDTJHAKHtakX+p+XwC84umR30nVVNyE 518DVdYYiZNguX3wVZXQ3VD+HTyxex0cHdwaBRWuugcUEHZWaftVaFS0HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0BQ7J7XFo0TyzJz722/wkO3GqnMB8GA1UdIwQY MBaAFElcdCevdNqUVPHih8Fvml86d4MfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMt MDhkOGU1MGZjOWM1LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMtMDhkOGU1MGZjOWM1 LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWyC7+EF FGLke4KBLVK7jKfNxiCdcbMHtx2855Zn6uYTkcgHTTQPSksIGAVnD8EDrbFlCG+S jmWFvC06pTD3q4//vAf7GWsrFCwznH+DYxXH5geENAX659cmwNSY5wODwyqCWNCU ywH9E6Js+G2qe02pjaPVHBBR5IivAHLYdksLTLqnJzBOYaevInVDPC9M4SGqO/zV zwMEjSOunk+zhIbps+eWkOa5ybivWR4Q7qRH676muBpUvi7qZDGrN6b3DvhreVmk sbKMK6ZgtQDEz31qED9uP4stN12tkYDjLMln7KFWsNMa15Yh5LJApmQ8c5AgXd1o xtppZklvcnS2Eg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:15:10 2025 by rpki-client