This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json) Hash identifier: LLwz6FYNyasFlhvMscJi6l2z9BxsKESKX13yO8GNZ64= Subject key identifier: 90:3A:56:E0:FB:C9:06:EB:CA:EC:5C:BE:62:78:A0:AE:CE:60:31:51 Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5 Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5 Certificate serial: 019B58D1698AC9B7E0E0CF46E6CD036536F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft Manifest number: 056D Signing time: Fri 26 Dec 2025 04:01:17 +0000 Manifest this update: Fri 26 Dec 2025 04:01:17 +0000 Manifest next update: Sat 27 Dec 2025 04:01:17 +0000 Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: vU6hhrghOrB86zVuIwe/hgu8hCUETY9/QrReHzwX1Po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:69:8a:c9:b7:e0:e0:cf:46:e6:cd:03:65:36:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5 Validity Not Before: Dec 26 04:01:17 2025 GMT Not After : Dec 27 04:01:17 2025 GMT Subject: CN=903a56e0fbc906ebcaec5cbe6278a0aece603151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:e4:e2:99:1f:5b:75:07:34:11:00:e2:11: 71:0f:bc:3c:28:b6:be:98:80:31:7c:a9:06:6c:2e: 7a:a7:f7:63:bf:0a:33:69:bb:ff:bc:63:3c:cf:42: ce:2d:b5:9d:2c:80:99:7d:d7:b4:40:dc:bb:32:ab: e0:71:03:40:b4:c9:46:29:ce:cb:bb:5c:f4:39:5f: 82:92:06:8f:62:d8:a9:ae:9c:a0:35:69:a0:0f:95: 6e:28:ea:c3:27:3e:9a:b9:9c:ea:92:38:ee:a9:36: 3e:bc:77:fc:1e:45:2a:bc:66:09:73:1f:8f:3c:81: 21:47:91:76:65:f8:d6:f7:0d:37:51:81:12:66:37: 81:af:7b:c8:0f:26:4c:1f:6e:df:31:7f:fe:03:34: 46:61:b7:8a:64:87:e3:7e:f3:2c:c5:66:1c:68:6e: 9b:d9:08:b9:77:92:64:0d:b8:72:0a:f0:72:db:a6: 66:4c:61:7f:bb:21:8c:0c:2f:cf:6b:2a:0c:4e:68: 01:10:3c:e3:a8:51:ff:93:83:c9:23:2f:98:c6:cf: ff:d8:0c:7a:06:6b:4a:a5:d8:09:f1:44:60:f9:fa: bd:ef:e4:42:8a:45:9e:91:88:3a:f0:b6:fa:f4:e9: 6d:04:b5:c5:5f:a1:70:2d:4e:70:d7:be:82:e6:0e: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3A:56:E0:FB:C9:06:EB:CA:EC:5C:BE:62:78:A0:AE:CE:60:31:51 X509v3 Authority Key Identifier: keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b6:fd:47:1b:58:29:05:20:ea:89:fc:49:2d:65:2d:92:36: 1e:d9:18:ca:c2:d3:5b:79:a2:38:cc:4d:5b:52:a0:96:30:38: 81:8c:0b:3f:7f:db:b0:67:c1:34:67:ee:39:3e:1e:a2:10:d3: 86:c1:1e:75:83:8d:a5:09:55:53:78:e8:89:be:ba:73:3c:52: 6c:30:57:39:65:de:2d:66:11:dc:c9:b3:f8:4a:73:ee:81:5e: f1:68:a8:49:a4:79:80:38:34:83:48:85:b8:2f:95:02:66:cb: fe:42:d7:0d:1e:11:47:f4:38:3b:ae:f7:c7:c0:9e:ed:56:21: e9:5b:8f:66:ce:e0:7d:9e:a1:65:2b:10:e3:6a:3e:d4:88:90: 1b:ab:bc:66:f6:4c:00:68:39:98:78:7e:84:8b:f8:11:38:aa: 31:11:6a:59:66:ed:af:52:4a:33:d7:62:d4:22:d5:6a:82:72: 57:da:0d:da:ea:15:2d:6f:8a:f9:7b:56:d5:9b:2b:bc:26:34: 99:7c:68:c8:28:06:b4:9d:f3:ea:3a:2a:09:3d:af:a3:d3:3b: 5b:2b:e9:37:9e:07:4d:73:65:a5:03:12:4d:cb:cd:3c:34:78: 27:18:08:fe:84:a6:1b:3b:a7:ec:dd:8a:30:1f:a9:06:c1:e8: d3:1b:72:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0WmKybfg4M9G5s0DZTbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWJlNzNmZmRhZDZmODYyYjBiZGQ4OTRkNDQzMjdjMmM5 NGE3ZDUwHhcNMjUxMjI2MDQwMTE3WhcNMjUxMjI3MDQwMTE3WjAzMTEwLwYDVQQD Eyg5MDNhNTZlMGZiYzkwNmViY2FlYzVjYmU2Mjc4YTBhZWNlNjAzMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD7k4pkfW3UHNBEA4hFxD7w8KLa+ mIAxfKkGbC56p/djvwozabv/vGM8z0LOLbWdLICZfde0QNy7MqvgcQNAtMlGKc7L u1z0OV+CkgaPYtiprpygNWmgD5VuKOrDJz6auZzqkjjuqTY+vHf8HkUqvGYJcx+P PIEhR5F2ZfjW9w03UYESZjeBr3vIDyZMH27fMX/+AzRGYbeKZIfjfvMsxWYcaG6b 2Qi5d5JkDbhyCvBy26ZmTGF/uyGMDC/PayoMTmgBEDzjqFH/k4PJIy+Yxs//2Ax6 BmtKpdgJ8URg+fq97+RCikWekYg68Lb69OltBLXFX6FwLU5w176C5g4IQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA6VuD7yQbryuxcvmJ4oK7OYDFRMB8GA1UdIwQY MBaAFLGr5z/9rW+GKwvdiU1EMnwslKfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYt ZTkxOWMzN2U0ZWJjLzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYtZTkxOWMzN2U0ZWJj LzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLb9RxtY KQUg6on8SS1lLZI2HtkYysLTW3miOMxNW1KgljA4gYwLP3/bsGfBNGfuOT4eohDT hsEedYONpQlVU3joib66czxSbDBXOWXeLWYR3Mmz+Epz7oFe8WioSaR5gDg0g0iF uC+VAmbL/kLXDR4RR/Q4O673x8Ce7VYh6VuPZs7gfZ6hZSsQ42o+1IiQG6u8ZvZM AGg5mHh+hIv4ETiqMRFqWWbtr1JKM9di1CLVaoJyV9oN2uoVLW+K+XtW1ZsrvCY0 mXxoyCgGtJ3z6joqCT2vo9M7WyvpN54HTXNlpQMSTcvNPDR4JxgI/oSmGzun7N2K MB+pBsHo0xty9w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client