This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json) Hash identifier: ZfoyXYnmGxA8R1+V8hsBYo8UzkhOYMAj0iTqUuSlJh8= Subject key identifier: 17:9E:5C:BD:23:4B:C3:A4:55:9C:14:11:06:57:CB:95:4D:C8:E7:77 Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4 Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4 Certificate serial: 019B424B00AD8938E3DB41E6BF30308B3CC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft Manifest number: 09A0 Signing time: Sun 21 Dec 2025 19:02:50 +0000 Manifest this update: Sun 21 Dec 2025 19:02:50 +0000 Manifest next update: Mon 22 Dec 2025 19:02:50 +0000 Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: mgHWvwmDc5z5Wl51az8AJjXUquYK1vHSPrNnU7uZhn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4b:00:ad:89:38:e3:db:41:e6:bf:30:30:8b:3c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4 Validity Not Before: Dec 21 19:02:50 2025 GMT Not After : Dec 22 19:02:50 2025 GMT Subject: CN=179e5cbd234bc3a4559c14110657cb954dc8e777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:b8:4c:20:a0:66:01:91:9d:54:0d:f5:15: 75:07:01:55:e1:bf:8c:7c:c7:c6:3d:1d:fa:5b:3b: 52:80:02:97:64:f7:0d:05:bb:35:f9:44:6f:72:e9: 60:c9:8f:00:b4:3c:32:aa:4f:dd:27:8d:3c:af:04: 4e:4e:ba:31:bb:f3:d9:3d:d3:c3:43:55:cc:98:67: 60:24:67:ae:99:c0:5d:30:6c:8f:2e:5e:d8:11:f4: 75:d8:da:fe:07:ef:a5:c8:1f:c6:fe:ab:b6:06:00: b6:93:29:6c:c0:c7:ee:b3:c8:46:51:1d:9d:88:91: 60:d2:30:57:af:0b:ea:c0:f4:0f:b3:f0:52:a7:8a: ad:00:91:54:f5:df:9f:9b:51:61:25:5b:4b:f9:4b: 56:4e:ea:02:48:89:7b:65:dd:c6:a3:d8:56:89:17: 65:12:1e:89:59:65:04:35:7f:b2:89:c9:c1:d7:6e: 1b:17:39:a8:2a:08:23:01:37:5d:1c:aa:91:4c:86: 59:83:75:15:08:b2:58:cf:05:f7:c7:4f:f8:1a:38: d3:85:a5:03:ed:ff:86:d9:0a:eb:c1:79:0d:36:1b: 4c:de:21:23:ff:99:cd:a8:f0:ec:26:02:89:2b:c8: 41:3b:d2:8a:d3:e6:53:8d:39:c0:3d:d2:6f:d0:ad: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:5C:BD:23:4B:C3:A4:55:9C:14:11:06:57:CB:95:4D:C8:E7:77 X509v3 Authority Key Identifier: keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7b:cb:ed:21:20:d4:d4:6b:1a:39:78:45:c1:fc:d4:6e:15: e7:29:f2:d7:92:94:ea:89:04:52:1c:a2:8d:94:67:95:69:ca: 43:29:4b:f1:1a:fa:f7:ac:1b:77:fb:d4:12:c7:52:e3:86:36: 2a:cf:20:23:ef:c9:9b:22:f5:5d:eb:5a:93:c2:4e:6a:02:23: 65:d5:fd:fc:e0:59:33:23:e0:1a:c0:4f:79:e4:89:38:eb:7f: 1c:1b:9a:3d:6d:64:82:7f:79:30:d9:8a:79:99:9c:a6:87:22: 4d:0b:65:3d:5f:83:49:81:22:05:71:34:f6:90:ab:9f:61:de: 02:e0:e1:b3:06:42:38:fc:ce:31:5c:b0:d2:5f:19:20:96:46: c5:14:44:2a:37:66:2e:6a:66:8a:53:53:ab:af:06:ad:82:a3: fd:3c:16:8c:ee:ed:c9:bd:6e:71:91:23:84:9d:b6:83:be:a2: 74:9e:8c:7b:61:e4:c4:2a:42:e2:e8:26:bf:48:2c:0f:df:4f: 83:6b:6d:12:1c:9a:57:e1:9d:fe:06:9c:e3:36:ff:7b:ec:99: 86:67:d4:f4:dd:a5:ec:2f:7b:d2:09:2b:f9:e0:10:aa:90:8e: 9f:aa:a0:0b:a5:16:77:8e:36:5a:3e:1c:98:94:9f:db:ce:1f: 3a:1a:75:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSwCtiTjj20HmvzAwizzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMTUzNmFiZWUzZDdiNTRiODMwM2I5YmM2OWE4YWFiYmU5 NzAwZTQwHhcNMjUxMjIxMTkwMjUwWhcNMjUxMjIyMTkwMjUwWjAzMTEwLwYDVQQD EygxNzllNWNiZDIzNGJjM2E0NTU5YzE0MTEwNjU3Y2I5NTRkYzhlNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlza4TCCgZgGRnVQN9RV1BwFV4b+M fMfGPR36WztSgAKXZPcNBbs1+URvculgyY8AtDwyqk/dJ408rwROTroxu/PZPdPD Q1XMmGdgJGeumcBdMGyPLl7YEfR12Nr+B++lyB/G/qu2BgC2kylswMfus8hGUR2d iJFg0jBXrwvqwPQPs/BSp4qtAJFU9d+fm1FhJVtL+UtWTuoCSIl7Zd3Go9hWiRdl Eh6JWWUENX+yicnB124bFzmoKggjATddHKqRTIZZg3UVCLJYzwX3x0/4GjjThaUD 7f+G2QrrwXkNNhtM3iEj/5nNqPDsJgKJK8hBO9KK0+ZTjTnAPdJv0K1YQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeeXL0jS8OkVZwUEQZXy5VNyOd3MB8GA1UdIwQY MBaAFLMVNqvuPXtUuDA7m8aaiqu+lwDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMt Y2NjODc3YjVhMzc1LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMtY2NjODc3YjVhMzc1 LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnvL7SEg 1NRrGjl4RcH81G4V5yny15KU6okEUhyijZRnlWnKQylL8Rr696wbd/vUEsdS44Y2 Ks8gI+/JmyL1Xetak8JOagIjZdX9/OBZMyPgGsBPeeSJOOt/HBuaPW1kgn95MNmK eZmcpociTQtlPV+DSYEiBXE09pCrn2HeAuDhswZCOPzOMVyw0l8ZIJZGxRREKjdm LmpmilNTq68GrYKj/TwWjO7tyb1ucZEjhJ22g76idJ6Me2HkxCpC4ugmv0gsD99P g2ttEhyaV+Gd/gac4zb/e+yZhmfU9N2l7C970gkr+eAQqpCOn6qgC6UWd442Wj4c mJSf284fOhp1+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 21:16:59 2025 by rpki-client