This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft File: d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json) Hash identifier: scMEumTyHqSGRhaU6Ooz11xTZnlRSZgFzhXfk2B1Q+g= Subject key identifier: 94:2E:BC:E9:F9:9E:29:31:6B:EB:3E:64:EA:38:D1:0C:49:AE:E0:D4 Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5 Certificate issuer: /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5 Certificate serial: 019B36E9A8A22FEED5531707ACF98860607C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft Manifest number: 05F1 Signing time: Fri 19 Dec 2025 14:00:41 +0000 Manifest this update: Fri 19 Dec 2025 14:00:41 +0000 Manifest next update: Sat 20 Dec 2025 14:00:41 +0000 Files and hashes: 1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: 2DL8w9S/xiA/xJPnjCAmINQd1NdE2x4u5oK9kMFWOpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:a8:a2:2f:ee:d5:53:17:07:ac:f9:88:60:60:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5 Validity Not Before: Dec 19 14:00:41 2025 GMT Not After : Dec 20 14:00:41 2025 GMT Subject: CN=942ebce9f99e29316beb3e64ea38d10c49aee0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:ed:9d:1e:f8:2c:0d:b3:d6:17:53:c3:fb: 83:2b:36:e1:9b:ef:8d:4b:16:61:9b:76:2e:e4:eb: 7a:dc:c3:f6:79:ab:41:ac:f7:3b:fd:bf:70:6d:4e: 28:63:6b:bc:3e:bb:c0:73:84:0c:25:28:00:6e:97: ac:65:38:94:81:30:08:38:ac:0b:7b:a4:8c:f9:dc: b8:cf:91:40:97:82:ee:8d:9d:04:d9:25:15:19:60: ab:a9:04:cd:cf:19:9c:72:46:95:6a:87:00:61:35: 8c:28:d9:da:6e:14:ba:09:6d:f8:cf:72:2a:77:41: 91:0f:a2:9b:0e:cd:bd:7e:67:33:c2:58:8a:26:89: 7f:9b:99:2c:31:c5:2d:e2:31:83:ad:1b:d8:1c:32: 3c:8b:12:11:8b:63:02:3b:4b:73:fb:c3:fa:e5:97: 6a:3f:0a:7e:61:64:59:1c:12:96:60:3e:82:f8:17: 7f:2d:9c:b9:e5:53:44:0b:79:a6:58:8a:8e:1a:65: 56:51:32:08:2d:c1:e2:d9:b0:16:a7:dd:d1:bd:94: 41:7b:a7:66:12:f9:d5:e6:33:75:09:1a:78:3f:66: 4d:a0:e0:36:e5:17:fa:3d:54:b7:a5:fb:4e:79:97: 24:56:ce:f7:70:92:27:20:ba:ea:fd:82:58:24:3d: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2E:BC:E9:F9:9E:29:31:6B:EB:3E:64:EA:38:D1:0C:49:AE:E0:D4 X509v3 Authority Key Identifier: keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:cb:55:8f:33:32:b2:cb:7a:fb:20:36:8e:d8:7f:ad:2f:6b: 28:93:db:14:a9:f4:4e:9d:87:46:9a:6f:95:ba:99:6b:0b:f9: f1:6b:a1:f1:a0:08:2c:a5:ba:ee:9b:ab:56:a5:34:29:64:21: f4:09:d0:1c:45:93:f7:13:d8:84:81:77:fa:60:af:3c:e7:3d: fd:76:1e:db:6f:41:af:a4:d8:51:4b:a6:ce:42:13:0c:6b:f1: 2d:dd:ab:a7:9b:b1:05:e3:0f:96:ce:42:eb:d8:60:b0:a4:9a: 0b:d9:5f:ac:f3:67:2d:28:29:11:81:36:fe:ac:aa:b0:43:3d: ae:fb:bd:fc:fc:d0:f7:fd:65:da:da:c5:7f:ea:cc:03:d1:61: a3:92:11:2c:49:93:8b:7d:99:a6:ec:34:fa:92:28:56:76:3a: 02:5a:5e:34:54:8d:21:26:47:96:6c:93:d4:f2:83:c8:49:c4: ef:a1:56:d7:c4:d2:a1:a6:54:75:d6:14:b2:53:69:4e:f9:9c: e8:f3:0a:d5:33:18:ec:f2:60:11:e7:79:b0:06:e3:9e:5f:38: d2:d2:bf:01:02:87:b1:8c:1d:e1:08:3b:f3:59:55:a4:f1:e6: 44:a3:c3:d6:bc:99:80:95:38:1b:b9:8d:09:e8:fb:b1:57:d6: c0:56:2c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26aiiL+7VUxcHrPmIYGB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjQ5YWY4NGMwYjhhMDlhN2IzYjRmMWYyNzE0NGViMjU5 MTBmYjUwHhcNMjUxMjE5MTQwMDQxWhcNMjUxMjIwMTQwMDQxWjAzMTEwLwYDVQQD Eyg5NDJlYmNlOWY5OWUyOTMxNmJlYjNlNjRlYTM4ZDEwYzQ5YWVlMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ7tnR74LA2z1hdTw/uDKzbhm++N SxZhm3Yu5Ot63MP2eatBrPc7/b9wbU4oY2u8PrvAc4QMJSgAbpesZTiUgTAIOKwL e6SM+dy4z5FAl4LujZ0E2SUVGWCrqQTNzxmcckaVaocAYTWMKNnabhS6CW34z3Iq d0GRD6KbDs29fmczwliKJol/m5ksMcUt4jGDrRvYHDI8ixIRi2MCO0tz+8P65Zdq Pwp+YWRZHBKWYD6C+Bd/LZy55VNEC3mmWIqOGmVWUTIILcHi2bAWp93RvZRBe6dm EvnV5jN1CRp4P2ZNoOA25Rf6PVS3pftOeZckVs73cJInILrq/YJYJD1t4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQuvOn5nikxa+s+ZOo40QxJruDUMB8GA1UdIwQY MBaAFHf0mvhMC4oJp7O08fJxROslkQ+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgt MzU2YzQxMWI0MzBlLzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgtMzU2YzQxMWI0MzBl LzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxstVjzMy sst6+yA2jth/rS9rKJPbFKn0Tp2HRppvlbqZawv58Wuh8aAILKW67purVqU0KWQh 9AnQHEWT9xPYhIF3+mCvPOc9/XYe229Br6TYUUumzkITDGvxLd2rp5uxBeMPls5C 69hgsKSaC9lfrPNnLSgpEYE2/qyqsEM9rvu9/PzQ9/1l2trFf+rMA9Fho5IRLEmT i32Zpuw0+pIoVnY6AlpeNFSNISZHlmyT1PKDyEnE76FW18TSoaZUddYUslNpTvmc 6PMK1TMY7PJgEed5sAbjnl840tK/AQKHsYwd4Qg781lVpPHmRKPD1ryZgJU4G7mN Cej7sVfWwFYsMw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:17 2025 by rpki-client