This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json) Hash identifier: /Z2P6OS6LHoau+h8OyCfYH7f+1bPTT3Bqb0wK50eCss= Subject key identifier: 62:36:DB:34:BF:F4:A1:4F:A9:9A:55:6A:91:0C:53:E8:FC:3A:25:3D Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea Certificate serial: 019B101385D21F38E9E133966EA8A440A83C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft Manifest number: 130A Signing time: Fri 12 Dec 2025 01:01:13 +0000 Manifest this update: Fri 12 Dec 2025 01:01:13 +0000 Manifest next update: Sat 13 Dec 2025 01:01:13 +0000 Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: 4ypH+LCdsD8zF+MRgLct5qRCSnNmHBv4O6qBOmVz82c=) 2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:85:d2:1f:38:e9:e1:33:96:6e:a8:a4:40:a8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea Validity Not Before: Dec 12 01:01:13 2025 GMT Not After : Dec 13 01:01:13 2025 GMT Subject: CN=6236db34bff4a14fa99a556a910c53e8fc3a253d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:3b:f4:da:2c:a4:02:b1:8e:5d:0f:3d:b9: 53:12:7e:a8:54:fb:be:73:1a:f2:e0:fc:a0:0b:e4: c2:54:9f:58:26:a9:a1:30:fb:03:8c:9d:f4:35:b1: 59:5b:47:a8:8d:6c:a4:6e:6f:77:90:03:3b:0d:0e: a3:9c:a7:29:56:b5:28:70:3f:88:72:c0:a4:e5:e8: bc:4e:c1:d1:c8:2a:55:12:37:9c:27:57:e6:d8:46: f9:48:e8:3a:3f:df:82:9e:36:17:fb:21:6b:79:9a: c8:0e:ec:3a:ac:c0:71:d6:20:fc:87:57:23:b2:75: b0:ae:26:f8:e3:74:df:12:fe:37:f9:97:82:c8:fd: df:fb:e7:b9:98:2f:3b:27:3d:73:97:41:19:01:01: 0e:a5:39:f8:d3:4d:c6:74:7b:ed:3a:b2:b0:a6:00: 27:c0:91:a1:7a:dc:b7:4a:50:4e:2b:35:2d:79:3d: af:a1:03:e6:4f:f2:4d:0d:1a:f0:61:6a:2f:21:62: db:01:f5:fe:2d:2d:aa:12:28:44:0a:96:5b:a8:14: 0f:22:50:f9:16:c8:c1:9b:59:d7:95:76:d7:de:35: 83:e5:31:87:c6:9a:37:8c:e3:13:24:db:76:51:da: 95:8e:6b:36:39:4e:8d:a9:a3:b1:fd:39:7a:7e:e3: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:36:DB:34:BF:F4:A1:4F:A9:9A:55:6A:91:0C:53:E8:FC:3A:25:3D X509v3 Authority Key Identifier: keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:74:4d:93:24:0f:97:3d:07:29:13:af:14:70:66:6d:77:93: c6:32:cd:4d:2e:bd:0c:50:53:dd:8e:81:05:17:b2:32:75:c6: 33:cf:8a:59:b1:18:0c:f4:37:c7:2c:a6:72:84:9f:bf:9e:0a: 59:4d:26:23:b6:bb:81:79:4f:bd:ba:57:ee:d7:56:38:99:9b: 85:d4:e8:1d:1b:a3:ad:25:bf:32:0d:fa:98:71:cb:b3:cd:00: 62:85:88:56:a7:31:39:e8:6a:9d:33:3f:2e:92:ed:61:44:6d: d3:55:4f:92:24:d5:24:8b:f1:ce:72:0e:2e:75:3d:43:48:61: 0d:cc:0a:0d:12:76:13:7f:2e:4d:3a:13:51:d6:ad:53:2f:76: 24:8a:42:5c:52:4c:70:f8:97:1e:6f:4e:0f:de:14:8f:18:3f: c8:05:89:a2:f6:2f:94:24:d7:f7:b9:99:d6:00:95:b0:6b:11: 4d:29:ff:27:6d:60:37:12:dc:83:06:ab:4e:4e:d9:bc:ca:ad: f7:9f:49:db:62:3f:7b:78:4f:b1:35:0a:f5:7d:91:31:45:32: ed:4b:25:b9:47:75:0d:d4:a1:67:dd:38:74:ca:71:9c:85:b1: 4d:8d:dc:a4:28:ce:b4:dd:f5:29:6a:29:bf:90:01:93:6f:6d: 86:60:d2:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE4XSHzjp4TOWbqikQKg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZmFjYWQyNzk4ODU2ZjBmMDY1YTI2NWExMDk3MDY5NDFh Y2E4ZWEwHhcNMjUxMjEyMDEwMTEzWhcNMjUxMjEzMDEwMTEzWjAzMTEwLwYDVQQD Eyg2MjM2ZGIzNGJmZjRhMTRmYTk5YTU1NmE5MTBjNTNlOGZjM2EyNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSU79NospAKxjl0PPblTEn6oVPu+ cxry4PygC+TCVJ9YJqmhMPsDjJ30NbFZW0eojWykbm93kAM7DQ6jnKcpVrUocD+I csCk5ei8TsHRyCpVEjecJ1fm2Eb5SOg6P9+CnjYX+yFreZrIDuw6rMBx1iD8h1cj snWwrib443TfEv43+ZeCyP3f++e5mC87Jz1zl0EZAQEOpTn4003GdHvtOrKwpgAn wJGhety3SlBOKzUteT2voQPmT/JNDRrwYWovIWLbAfX+LS2qEihECpZbqBQPIlD5 FsjBm1nXlXbX3jWD5TGHxpo3jOMTJNt2UdqVjms2OU6NqaOx/Tl6fuO16wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGI22zS/9KFPqZpVapEMU+j8OiU9MB8GA1UdIwQY MBaAFEr6ytJ5iFbw8GWiZaEJcGlBrKjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUt NzgzNDY5MjY5YjM1LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUtNzgzNDY5MjY5YjM1 LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvnRNkyQP lz0HKROvFHBmbXeTxjLNTS69DFBT3Y6BBReyMnXGM8+KWbEYDPQ3xyymcoSfv54K WU0mI7a7gXlPvbpX7tdWOJmbhdToHRujrSW/Mg36mHHLs80AYoWIVqcxOehqnTM/ LpLtYURt01VPkiTVJIvxznIOLnU9Q0hhDcwKDRJ2E38uTToTUdatUy92JIpCXFJM cPiXHm9OD94Ujxg/yAWJovYvlCTX97mZ1gCVsGsRTSn/J21gNxLcgwarTk7ZvMqt 959J22I/e3hPsTUK9X2RMUUy7UsluUd1DdShZ904dMpxnIWxTY3cpCjOtN31KWop v5ABk29thmDSOw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:48:10 2025 by rpki-client