This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft File: SVx0J6902pRU8eKHwW-aXzp3gx8.mft (raw, json) Hash identifier: vHJ8oMqpbJhjeGtU3EOBv9YZjjU4RAuMwqykjKPr7cI= Subject key identifier: E9:90:83:A7:F6:A9:00:37:9E:68:16:CF:4C:29:7B:C3:7B:32:93:A0 Authority key identifier: 49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F Certificate issuer: /CN=495c7427af74da9454f1e287c16f9a5f3a77831f Certificate serial: 019B48161707D9710B1281C3962385F5EC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft Manifest number: 1596 Signing time: Mon 22 Dec 2025 22:02:45 +0000 Manifest this update: Mon 22 Dec 2025 22:02:45 +0000 Manifest next update: Tue 23 Dec 2025 22:02:45 +0000 Files and hashes: 1: SVx0J6902pRU8eKHwW-aXzp3gx8.crl (hash: 5Swtgh7LCG4P27v9C+PvAgEQCsL6IYmu13B9UX0I22s=) 2: yGC5sIb3srVUEq8Qa2rFq7sGg3Y.roa (hash: C8hFdKgoa42ll+QkfetAIjLLM5z2fVcdANN2iM3elfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:17:07:d9:71:0b:12:81:c3:96:23:85:f5:ec:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495c7427af74da9454f1e287c16f9a5f3a77831f Validity Not Before: Dec 22 22:02:45 2025 GMT Not After : Dec 23 22:02:45 2025 GMT Subject: CN=e99083a7f6a900379e6816cf4c297bc37b3293a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:87:fc:ed:0a:2e:e7:d9:35:6f:25:33:12: d6:1a:ce:ec:5b:ac:5a:0e:12:b7:ad:c4:f0:9d:9f: 00:ed:b2:98:fc:35:b3:23:c2:98:65:d6:a6:2d:1b: 4b:d3:7b:a1:f3:10:0c:ab:d6:3e:1e:f4:3a:ba:3b: 6d:e8:13:cd:48:d6:dd:b4:86:af:96:5a:7d:57:7a: 5e:cb:a1:cf:16:9c:26:b1:25:af:70:af:b2:70:5b: 98:29:c1:4e:c9:97:db:c1:cb:d0:b6:54:c9:b3:5d: 03:b6:64:7e:f7:be:1c:24:37:20:a5:fe:60:9d:bc: 12:11:a3:bd:32:b3:8b:a7:90:57:38:66:31:36:c0: d7:fc:7c:19:00:45:10:b9:30:fc:8f:84:12:ce:6c: 08:3f:2b:fc:b2:ed:39:f1:22:5f:fd:f8:15:c4:c1: 22:10:5a:46:c9:5f:f8:85:4a:79:24:06:07:c7:5b: 59:3b:28:e8:e4:4a:79:1b:9b:a4:6e:79:ec:0c:57: ff:68:e8:53:54:96:61:32:cc:ae:4a:3f:b3:f9:bf: c6:a9:b9:a4:34:54:61:d7:6b:2a:fe:00:a5:53:62: 74:9f:a2:4e:ca:9b:fb:f4:73:97:7e:b0:60:05:f6: 1a:36:38:8d:25:79:c5:e3:f9:c5:84:7d:84:8c:3e: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:83:A7:F6:A9:00:37:9E:68:16:CF:4C:29:7B:C3:7B:32:93:A0 X509v3 Authority Key Identifier: keyid:49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:16:b2:05:db:b2:5d:b2:59:c4:b2:d1:23:b6:b9:f9:e0:0b: 02:e3:e3:5e:f7:fc:c1:b1:b3:03:35:de:f7:ad:00:f8:09:d4: d3:f3:36:63:d4:3e:1b:82:21:47:dc:52:99:89:7b:9a:0f:3f: 87:8d:04:15:cd:df:51:51:d3:41:26:83:7a:a4:cb:73:c8:4e: ef:9b:d8:89:1a:1b:7a:ff:2d:c8:2f:e4:89:7b:b9:13:29:1a: 32:72:fe:33:23:6e:0e:ac:34:0a:4a:d1:a3:54:6f:31:7d:ee: 6b:9e:c2:c4:4e:80:24:f7:20:35:f1:4d:23:5e:3e:52:1a:85: b1:24:eb:78:3a:dd:3f:21:cb:fa:ac:dd:54:c6:f0:84:36:24: f5:5b:11:e6:d6:d8:7e:fa:54:fa:f7:52:60:30:c3:25:55:c7: 0c:39:cf:75:ad:22:f3:24:67:ba:08:fb:f1:29:54:45:4e:24: 0b:e2:3b:fa:ad:fd:f4:c9:77:d7:c6:56:e4:69:80:17:8e:76: b8:55:38:d9:37:f3:58:21:d9:7a:f8:39:2e:83:2c:23:fe:d5: a3:9f:a2:c8:0d:86:eb:7b:7b:03:58:90:2a:4c:b3:5b:11:24: 13:52:3b:94:f0:41:28:97:25:a4:4a:af:1b:c2:22:e2:e7:f9: c7:98:85:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFhcH2XELEoHDliOF9ewrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NWM3NDI3YWY3NGRhOTQ1NGYxZTI4N2MxNmY5YTVmM2E3 NzgzMWYwHhcNMjUxMjIyMjIwMjQ1WhcNMjUxMjIzMjIwMjQ1WjAzMTEwLwYDVQQD EyhlOTkwODNhN2Y2YTkwMDM3OWU2ODE2Y2Y0YzI5N2JjMzdiMzI5M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYCH/O0KLufZNW8lMxLWGs7sW6xa DhK3rcTwnZ8A7bKY/DWzI8KYZdamLRtL03uh8xAMq9Y+HvQ6ujtt6BPNSNbdtIav llp9V3pey6HPFpwmsSWvcK+ycFuYKcFOyZfbwcvQtlTJs10DtmR+974cJDcgpf5g nbwSEaO9MrOLp5BXOGYxNsDX/HwZAEUQuTD8j4QSzmwIPyv8su058SJf/fgVxMEi EFpGyV/4hUp5JAYHx1tZOyjo5Ep5G5ukbnnsDFf/aOhTVJZhMsyuSj+z+b/Gqbmk NFRh12sq/gClU2J0n6JOypv79HOXfrBgBfYaNjiNJXnF4/nFhH2EjD6PFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmQg6f2qQA3nmgWz0wpe8N7MpOgMB8GA1UdIwQY MBaAFElcdCevdNqUVPHih8Fvml86d4MfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMt MDhkOGU1MGZjOWM1LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMtMDhkOGU1MGZjOWM1 LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxayBduy XbJZxLLRI7a5+eALAuPjXvf8wbGzAzXe960A+AnU0/M2Y9Q+G4IhR9xSmYl7mg8/ h40EFc3fUVHTQSaDeqTLc8hO75vYiRobev8tyC/kiXu5EykaMnL+MyNuDqw0CkrR o1RvMX3ua57CxE6AJPcgNfFNI14+UhqFsSTreDrdPyHL+qzdVMbwhDYk9VsR5tbY fvpU+vdSYDDDJVXHDDnPda0i8yRnugj78SlURU4kC+I7+q399Ml318ZW5GmAF452 uFU42TfzWCHZevg5LoMsI/7Vo5+iyA2G63t7A1iQKkyzWxEkE1I7lPBBKJclpEqv G8Ii4uf5x5iFwQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:23:31 2025 by rpki-client