This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json) Hash identifier: /IYlSBUBp2VlZ5TVd+9N2p/IBoR37VTw5mJ/w1nYNF8= Subject key identifier: DA:5D:20:6F:6B:F1:95:98:6A:9F:E1:85:4B:CF:A0:88:AA:C2:5C:12 Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d Certificate serial: 019B5AF609558B9A4B7C1205727433511704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft Manifest number: 015B Signing time: Fri 26 Dec 2025 14:00:32 +0000 Manifest this update: Fri 26 Dec 2025 14:00:32 +0000 Manifest next update: Sat 27 Dec 2025 14:00:32 +0000 Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: hxGqNo8ZfanKl4OT+QApqqBazR+XcukqxVBA+qnDMHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:09:55:8b:9a:4b:7c:12:05:72:74:33:51:17:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d Validity Not Before: Dec 26 14:00:32 2025 GMT Not After : Dec 27 14:00:32 2025 GMT Subject: CN=da5d206f6bf195986a9fe1854bcfa088aac25c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:57:8e:30:b0:27:bf:ac:2d:d2:c3:07:b4:da: dc:78:0b:ba:4b:85:9b:03:32:1f:1d:1c:84:f7:21: 27:fc:85:53:4f:f1:eb:2a:fa:5b:65:e4:09:e7:73: 04:41:ba:54:2b:82:23:ca:20:be:6d:65:e6:f1:ed: 46:18:1a:10:11:53:91:08:53:55:c1:ba:7b:31:59: 85:cc:be:db:61:45:b2:10:7b:89:8f:3c:1e:bb:af: f0:d3:00:62:8a:4f:4b:d9:38:da:1f:08:04:64:e4: e7:8e:4f:7b:2c:7b:65:09:41:ff:1a:a7:dc:ff:42: c1:9e:78:58:f6:c5:fc:1d:d2:64:1e:12:7f:3e:25: aa:c8:91:e3:56:16:3a:83:07:f5:62:0c:24:7b:da: d6:b1:40:64:d9:13:2e:52:e6:1a:33:a8:21:af:b4: 3d:1a:07:39:5f:4f:36:95:9a:4a:cc:c5:03:e4:9e: 88:8f:38:10:9f:b0:42:b0:80:7d:7a:e0:68:e3:12: f8:3d:ba:2e:b6:5a:c9:98:cc:80:38:73:6e:91:bc: 71:83:71:4f:2e:c7:94:13:75:a9:ba:88:f9:8a:7c: 04:ba:4f:55:00:55:a4:9f:b9:02:ef:c1:0b:f1:94: 08:a9:38:18:4c:fb:b4:0c:fb:96:7f:b2:95:bd:8e: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5D:20:6F:6B:F1:95:98:6A:9F:E1:85:4B:CF:A0:88:AA:C2:5C:12 X509v3 Authority Key Identifier: keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c7:e7:35:1d:31:c2:dc:a4:19:1c:08:1d:da:1e:04:32:2e: 19:3c:6f:33:3e:64:e4:a6:46:1b:75:7d:32:31:7f:ba:f0:f9: c5:93:6d:ec:91:60:ab:a6:59:5b:45:a4:52:21:bd:fd:8b:19: c1:45:d7:1b:ce:a9:b5:32:9b:82:e8:ce:97:42:af:c5:06:dc: 31:10:5c:5b:41:be:4c:bd:74:b5:a0:03:1b:75:44:d8:b1:ad: 35:aa:b6:ca:7d:14:1f:84:ce:3c:3e:58:51:be:52:bd:8c:b2: 7a:20:ef:c1:b7:3b:2c:65:60:f8:44:ea:52:c0:27:36:2b:f5: ac:cb:f1:70:ed:76:9b:c6:78:a2:f3:67:e7:2a:0d:df:0b:91: 8c:37:7b:4c:64:6d:c7:42:1e:ca:c2:4f:7a:66:5e:28:d3:e9: d0:0c:5d:72:11:ac:89:97:95:53:b8:fa:c8:c3:47:d5:76:d0: 7e:6a:9b:8a:f7:2b:cc:17:44:ab:a5:8a:a5:69:d2:04:75:86: ab:3c:77:ce:78:25:58:58:9b:db:0b:e4:85:a5:2d:ae:2c:df: fe:46:70:13:8d:eb:32:7b:34:e3:1b:06:5c:4c:8a:97:dc:d8: 71:91:e5:9c:6b:d4:3a:6b:42:0b:3f:e2:18:06:68:a8:a5:36: 53:12:e3:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9glVi5pLfBIFcnQzURcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MmJmZjM2YmY5NTdhOTE2N2VlM2YwZmE0YTY0ZDg3MjUx NmU3MmQwHhcNMjUxMjI2MTQwMDMyWhcNMjUxMjI3MTQwMDMyWjAzMTEwLwYDVQQD EyhkYTVkMjA2ZjZiZjE5NTk4NmE5ZmUxODU0YmNmYTA4OGFhYzI1YzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71eOMLAnv6wt0sMHtNrceAu6S4Wb AzIfHRyE9yEn/IVTT/HrKvpbZeQJ53MEQbpUK4IjyiC+bWXm8e1GGBoQEVORCFNV wbp7MVmFzL7bYUWyEHuJjzweu6/w0wBiik9L2TjaHwgEZOTnjk97LHtlCUH/Gqfc /0LBnnhY9sX8HdJkHhJ/PiWqyJHjVhY6gwf1Ygwke9rWsUBk2RMuUuYaM6ghr7Q9 Ggc5X082lZpKzMUD5J6IjzgQn7BCsIB9euBo4xL4PboutlrJmMyAOHNukbxxg3FP LseUE3Wpuoj5inwEuk9VAFWkn7kC78EL8ZQIqTgYTPu0DPuWf7KVvY7vVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpdIG9r8ZWYap/hhUvPoIiqwlwSMB8GA1UdIwQY MBaAFNkr/za/lXqRZ+4/D6SmTYclFuctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjct NWRmZWI5NzgyY2ZiLzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjctNWRmZWI5NzgyY2Zi LzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8fnNR0x wtykGRwIHdoeBDIuGTxvMz5k5KZGG3V9MjF/uvD5xZNt7JFgq6ZZW0WkUiG9/YsZ wUXXG86ptTKbgujOl0KvxQbcMRBcW0G+TL10taADG3VE2LGtNaq2yn0UH4TOPD5Y Ub5SvYyyeiDvwbc7LGVg+ETqUsAnNiv1rMvxcO12m8Z4ovNn5yoN3wuRjDd7TGRt x0IeysJPemZeKNPp0AxdchGsiZeVU7j6yMNH1XbQfmqbivcrzBdEq6WKpWnSBHWG qzx3znglWFib2wvkhaUtrizf/kZwE43rMns04xsGXEyKl9zYcZHlnGvUOmtCCz/i GAZoqKU2UxLjxQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:30 2025 by rpki-client