This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json) Hash identifier: 9j2lv+HkP129v1M2ku2Cm07eXlTuHRoGJP61CdTHPrM= Subject key identifier: 48:D2:37:D1:D7:EE:53:77:6B:8D:D7:48:8B:40:22:27:E4:7A:60:D5 Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed Certificate serial: 019B5A516B7480E22F753C369D3990C57BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft Manifest number: 10AB Signing time: Fri 26 Dec 2025 11:00:43 +0000 Manifest this update: Fri 26 Dec 2025 11:00:43 +0000 Manifest next update: Sat 27 Dec 2025 11:00:43 +0000 Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: mMjO6w5kJmcNMExU6qpYLnNS5O24H2lxaOA1D3QqWd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6b:74:80:e2:2f:75:3c:36:9d:39:90:c5:7b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed Validity Not Before: Dec 26 11:00:43 2025 GMT Not After : Dec 27 11:00:43 2025 GMT Subject: CN=48d237d1d7ee53776b8dd7488b402227e47a60d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:51:60:11:3f:f4:e7:4f:03:8d:1e:64:15: 1b:2a:58:a2:aa:a7:2b:15:c3:e9:97:fd:a7:bc:ae: ef:5c:1e:c8:ec:4b:9a:3a:2e:fe:38:a7:58:01:72: 3d:82:4e:e8:fe:43:91:39:38:fd:8f:46:fc:bb:de: 4d:5e:b3:69:43:96:27:bf:bc:a6:56:76:06:99:ce: c3:35:98:36:5b:79:79:23:4a:45:bd:13:3c:77:fa: 9d:1c:43:70:7c:99:48:d3:ef:d7:f6:2c:71:76:5f: 7f:5f:88:27:2b:30:50:4f:02:cd:51:3d:49:31:38: 07:9d:42:c6:20:c0:55:29:ab:f2:c7:ea:a6:f1:b4: d8:f1:dd:ab:6a:84:e2:8c:d5:93:89:95:9a:fc:3e: 61:96:89:71:fd:58:c7:f4:38:5b:0e:9e:59:0d:14: fe:b8:60:4e:dc:fa:eb:ba:54:be:88:e8:66:73:6f: b3:55:92:dd:4a:b1:88:83:20:0f:51:fe:e9:d1:19: d2:95:e8:11:26:a0:80:a3:ac:fc:e2:23:a0:31:7e: 47:74:4e:ae:74:70:98:65:f8:76:01:5e:fc:3c:c5: 02:b5:60:2c:e9:5e:80:98:e0:31:23:d1:77:08:90: 88:08:e1:93:ea:3b:11:9c:d7:04:99:15:d3:f4:2b: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D2:37:D1:D7:EE:53:77:6B:8D:D7:48:8B:40:22:27:E4:7A:60:D5 X509v3 Authority Key Identifier: keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c1:6c:bb:d4:f5:a2:e2:1a:61:11:92:70:6f:ac:17:31:ce: a7:6c:61:48:54:50:1f:e3:34:35:3e:8c:e9:c8:77:78:34:e5: e8:24:18:4f:d2:5e:dc:20:c2:05:ab:fc:e6:48:11:0f:63:16: 59:ce:9c:bc:88:77:b7:34:cd:12:18:3f:c2:95:5c:1f:4c:9a: e9:9b:20:25:7c:50:3f:20:ef:96:90:82:99:99:38:9e:03:17: cb:66:f4:5b:85:54:cf:73:32:fe:72:d1:d8:0f:86:62:dd:d8: e0:81:61:ce:31:17:26:23:08:d4:af:44:9e:cd:54:64:5f:8d: fc:89:f9:f8:c8:7f:b9:f6:8a:f5:c6:6e:db:47:a7:f5:68:ed: 93:5d:bf:4a:bc:f2:cd:78:0c:e3:3c:46:14:9b:ac:98:b2:b3: 40:bf:87:5f:4d:10:69:a9:26:de:f0:39:84:dc:58:4a:57:1d: 70:ee:c1:f4:c9:dd:eb:01:25:8f:60:3b:69:33:69:e8:8f:5d: 72:59:3d:12:ee:f8:c2:b9:30:46:f3:9a:59:9f:f4:80:cf:55: 4f:05:d6:d9:4f:31:92:f8:1e:a8:f3:fb:f0:04:f1:7d:da:4c: f8:14:3f:97:b0:68:2e:6b:ba:86:33:0f:7a:d2:c8:f5:b9:ad: c0:76:bb:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWt0gOIvdTw2nTmQxXv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzc4N2FlZmNhY2VhNDJhYzY0Mzk5NDlhNTY4ZjBkZmZl Nzc3ZWQwHhcNMjUxMjI2MTEwMDQzWhcNMjUxMjI3MTEwMDQzWjAzMTEwLwYDVQQD Eyg0OGQyMzdkMWQ3ZWU1Mzc3NmI4ZGQ3NDg4YjQwMjIyN2U0N2E2MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmShRYBE/9OdPA40eZBUbKliiqqcr FcPpl/2nvK7vXB7I7EuaOi7+OKdYAXI9gk7o/kOROTj9j0b8u95NXrNpQ5Ynv7ym VnYGmc7DNZg2W3l5I0pFvRM8d/qdHENwfJlI0+/X9ixxdl9/X4gnKzBQTwLNUT1J MTgHnULGIMBVKavyx+qm8bTY8d2raoTijNWTiZWa/D5hlolx/VjH9DhbDp5ZDRT+ uGBO3PrrulS+iOhmc2+zVZLdSrGIgyAPUf7p0RnSlegRJqCAo6z84iOgMX5HdE6u dHCYZfh2AV78PMUCtWAs6V6AmOAxI9F3CJCICOGT6jsRnNcEmRXT9CvLAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjSN9HX7lN3a43XSItAIifkemDVMB8GA1UdIwQY MBaAFLF3h678rOpCrGQ5lJpWjw3/53ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYt M2U4YjVmM2M0YzM2LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80YzZlYmYtYWExYS00ZjFhLWIxOGYtM2U4YjVmM2M0YzM2 LzEvc1hlSHJ2eXM2a0tzWkRtVW1sYVBEZl9uZC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8Fsu9T1 ouIaYRGScG+sFzHOp2xhSFRQH+M0NT6M6ch3eDTl6CQYT9Je3CDCBav85kgRD2MW Wc6cvIh3tzTNEhg/wpVcH0ya6ZsgJXxQPyDvlpCCmZk4ngMXy2b0W4VUz3My/nLR 2A+GYt3Y4IFhzjEXJiMI1K9Ens1UZF+N/In5+Mh/ufaK9cZu20en9Wjtk12/Srzy zXgM4zxGFJusmLKzQL+HX00Qaakm3vA5hNxYSlcdcO7B9Mnd6wElj2A7aTNp6I9d clk9Eu74wrkwRvOaWZ/0gM9VTwXW2U8xkvgeqPP78ATxfdpM+BQ/l7BoLmu6hjMP etLI9bmtwHa7IA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:35 2025 by rpki-client