This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json) Hash identifier: aGon250LYb67YX8xbql76ysn22DfC68LAkez7Ntynfg= Subject key identifier: EA:F4:D4:C4:95:99:4D:AE:D8:1A:37:8A:F9:7C:E3:CD:48:A4:71:B1 Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8 Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8 Certificate serial: 019B4A027CD95E5D6547F4C00F1F0BB2C121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft Manifest number: 14CB Signing time: Tue 23 Dec 2025 07:00:35 +0000 Manifest this update: Tue 23 Dec 2025 07:00:35 +0000 Manifest next update: Wed 24 Dec 2025 07:00:35 +0000 Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: nZF+oiiNAGGzgnGgipMMK/2I08zN8Fm4km7T174RskY=) 2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:7c:d9:5e:5d:65:47:f4:c0:0f:1f:0b:b2:c1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8 Validity Not Before: Dec 23 07:00:35 2025 GMT Not After : Dec 24 07:00:35 2025 GMT Subject: CN=eaf4d4c495994daed81a378af97ce3cd48a471b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:8b:39:6c:8f:e1:a4:fb:1a:bb:2b:8e:35: c2:e8:34:29:6d:3d:02:6c:6d:36:ab:c3:2d:4c:ac: 27:9b:a0:ca:13:df:fa:8f:96:ed:da:3a:44:2b:1a: cf:10:41:a2:fb:b4:02:85:29:a4:f6:c9:62:12:ec: e2:7b:d8:ff:af:0b:cb:86:ef:7c:a3:f4:03:15:97: c1:e9:67:1e:a0:1f:ba:b4:6b:67:d8:47:ca:52:4f: 4e:f6:3c:4c:4f:e5:33:2b:ca:dc:f1:84:55:a5:70: 88:98:1f:ae:97:77:3b:99:71:73:cf:77:54:b3:16: 73:4c:53:a5:82:12:4f:59:82:e3:93:5e:e6:68:78: bb:3a:c6:f4:10:83:9c:72:f1:1e:b2:85:97:d7:f1: a2:b5:a2:d6:54:2f:fb:ee:c9:d1:f7:3c:da:e1:44: 96:c2:53:30:6f:9a:32:34:06:61:fc:59:22:fc:a3: af:80:b3:09:6c:ab:bd:48:ed:85:73:7d:bc:1e:e7: 83:c8:0a:06:21:e0:9e:aa:aa:2a:22:3c:fe:38:7b: 58:79:b8:da:a5:e9:d6:98:6d:36:a8:ec:97:2f:16: e0:75:55:2c:dc:57:b2:f8:c9:c0:aa:35:8d:0c:c5: f5:27:86:ba:72:73:2b:1c:20:3a:21:7c:4e:bd:27: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F4:D4:C4:95:99:4D:AE:D8:1A:37:8A:F9:7C:E3:CD:48:A4:71:B1 X509v3 Authority Key Identifier: keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:49:f0:a1:15:bf:21:20:11:f5:f4:ab:7d:5f:20:b9:a2:c9: 22:7c:38:e7:9a:89:cd:36:30:23:e5:55:cc:5d:c5:6e:c0:e6: 2d:f7:8f:3f:6e:01:7f:d2:7c:f4:92:c2:f0:77:12:77:81:c2: 47:42:99:17:13:c8:90:42:9e:9b:71:09:7e:66:9b:3e:1d:98: 07:46:7f:51:9c:f1:dc:18:cf:57:bb:ed:a2:11:6c:46:1b:5c: 5d:a2:ce:b6:af:98:a9:7f:1f:81:c0:d8:3b:f3:c0:b5:9b:f9: 6f:1f:b5:10:6d:df:1c:d7:18:0e:ee:b3:66:73:53:7f:70:5c: 8c:e3:6d:21:63:c7:35:b7:cd:df:42:45:fe:8b:0d:7f:5b:c2: 5d:e7:c8:b0:04:c8:33:bb:99:5a:65:23:25:f6:40:4d:17:ff: 9b:5f:79:bd:b0:7e:b4:40:c2:49:10:af:ec:4f:c7:43:ad:0e: 6b:1f:19:35:ab:cf:c4:41:69:f4:eb:33:06:7c:ac:66:46:a0: 18:96:46:33:48:ec:c1:f8:a8:32:39:ea:ba:a0:c3:81:9b:d1: ce:c3:51:d4:ff:9a:0e:9b:a1:fe:84:4f:4c:7c:1c:de:8a:0f: 65:cb:a6:ea:86:9c:2a:29:e2:39:5e:55:08:54:96:c2:9c:a4: a6:b5:28:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAnzZXl1lR/TADx8LssEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMWNkY2I5MGI5ODMyMDE2NzQ4YTdlMjY4Y2MxZWZmMjM5 MjYyZjgwHhcNMjUxMjIzMDcwMDM1WhcNMjUxMjI0MDcwMDM1WjAzMTEwLwYDVQQD EyhlYWY0ZDRjNDk1OTk0ZGFlZDgxYTM3OGFmOTdjZTNjZDQ4YTQ3MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xqLOWyP4aT7GrsrjjXC6DQpbT0C bG02q8MtTKwnm6DKE9/6j5bt2jpEKxrPEEGi+7QChSmk9sliEuzie9j/rwvLhu98 o/QDFZfB6WceoB+6tGtn2EfKUk9O9jxMT+UzK8rc8YRVpXCImB+ul3c7mXFzz3dU sxZzTFOlghJPWYLjk17maHi7Osb0EIOccvEesoWX1/GitaLWVC/77snR9zza4USW wlMwb5oyNAZh/Fki/KOvgLMJbKu9SO2Fc328HueDyAoGIeCeqqoqIjz+OHtYebja penWmG02qOyXLxbgdVUs3Fey+MnAqjWNDMX1J4a6cnMrHCA6IXxOvSc4nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr01MSVmU2u2Bo3ivl8481IpHGxMB8GA1UdIwQY MBaAFEsc3LkLmDIBZ0in4mjMHv8jkmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgt YWVmYzE4OWZkODUxLzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgtYWVmYzE4OWZkODUx LzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACknwoRW/ ISAR9fSrfV8guaLJInw455qJzTYwI+VVzF3FbsDmLfePP24Bf9J89JLC8HcSd4HC R0KZFxPIkEKem3EJfmabPh2YB0Z/UZzx3BjPV7vtohFsRhtcXaLOtq+YqX8fgcDY O/PAtZv5bx+1EG3fHNcYDu6zZnNTf3BcjONtIWPHNbfN30JF/osNf1vCXefIsATI M7uZWmUjJfZATRf/m195vbB+tEDCSRCv7E/HQ60Oax8ZNavPxEFp9OszBnysZkag GJZGM0jswfioMjnquqDDgZvRzsNR1P+aDpuh/oRPTHwc3ooPZcum6oacKiniOV5V CFSWwpykprUowQ== -----END CERTIFICATE-----Generated at Tue Dec 23 14:32:33 2025 by rpki-client