This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json) Hash identifier: zfMGxwm102qkonSdlb+aVyw3pg6EXjNQYhnWdUBvMFw= Subject key identifier: CA:01:C3:49:C7:8D:4E:CC:0F:90:AB:B0:12:42:9D:C6:44:B1:77:C9 Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Certificate serial: 019B3DFE9B7D7D920C9C9FC7BF47F4925C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft Manifest number: 14C5 Signing time: Sat 20 Dec 2025 23:00:54 +0000 Manifest this update: Sat 20 Dec 2025 23:00:54 +0000 Manifest next update: Sun 21 Dec 2025 23:00:54 +0000 Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=) 2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: DZ+Rx6KoNZJWoyzEzfd+dkuTiZDu1093emsrblxRvqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:9b:7d:7d:92:0c:9c:9f:c7:bf:47:f4:92:5c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Validity Not Before: Dec 20 23:00:54 2025 GMT Not After : Dec 21 23:00:54 2025 GMT Subject: CN=ca01c349c78d4ecc0f90abb012429dc644b177c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:b1:89:73:43:fa:c7:ed:65:a1:74:f6:98: fc:15:9d:55:ca:13:09:49:58:33:38:ac:23:63:30: 38:0e:55:a1:1a:4c:a3:a9:00:5b:25:d9:40:66:f4: 1f:4c:eb:ec:f2:a4:b0:32:de:cc:91:d4:79:f2:bb: 4b:ee:e4:b6:74:08:c8:31:e4:e1:c7:12:bb:fe:00: 57:73:cb:a4:ed:4d:17:6b:95:79:0a:85:54:b9:22: 8a:1d:db:68:7f:e6:54:5e:2e:ab:f9:61:d0:3c:44: 1d:c5:33:25:62:c7:62:a7:48:9f:0f:0b:1c:05:a1: fa:44:d5:a8:ff:dc:d5:69:61:b2:7c:b5:a3:b5:14: 66:f5:59:c3:e7:da:af:a0:e8:57:ec:cc:77:eb:b2: 9a:c1:30:b0:6f:da:b6:9f:a6:93:b1:c1:28:f6:45: 08:cc:66:17:6c:7d:eb:52:d1:3e:bb:c2:2a:0e:c4: 95:64:65:22:30:45:e5:35:8c:18:b6:94:da:75:a5: 93:6c:2a:fa:d7:8c:1a:77:56:a5:bb:68:c2:f8:84: f4:23:df:14:62:5d:6d:a8:97:35:55:d7:1b:d8:07: 0b:cf:77:21:ef:62:62:df:66:e1:35:b9:04:70:b7: 46:cf:07:cb:2a:94:ca:c6:5f:05:19:50:20:38:b8: 46:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:01:C3:49:C7:8D:4E:CC:0F:90:AB:B0:12:42:9D:C6:44:B1:77:C9 X509v3 Authority Key Identifier: keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:85:86:c6:f7:cc:56:57:ca:22:49:16:bc:7d:a9:39:6f:1a: 0c:74:31:77:6c:d9:47:b6:da:8d:93:89:da:4e:20:44:8a:62: e0:b2:77:b8:28:47:5f:98:48:ef:6a:fe:81:31:b0:df:2c:7a: aa:dd:62:3f:5d:a1:fb:5f:3c:6e:95:31:73:ed:1c:15:4c:66: 73:f8:dc:68:2b:77:c5:02:83:bc:39:c2:2d:90:dd:6d:e3:e3: 78:a0:c8:6d:e4:78:29:b9:14:86:88:85:cd:a8:74:dd:fd:9b: 2e:48:64:0e:65:54:e1:db:d1:c3:3b:5a:87:5e:14:3e:c7:a7: 7c:70:60:9a:dd:63:34:af:66:f1:10:a8:84:0a:f3:6c:d2:ff: 41:89:e2:c7:e0:51:16:2b:77:34:68:c7:54:4d:65:3b:97:28: e9:a2:ab:63:07:82:bc:24:52:19:a0:cd:95:9f:dc:ea:7a:51: 68:78:1b:88:b0:f6:fd:01:18:b0:19:7a:40:6f:4e:bd:ba:f8: fe:02:c3:98:58:ab:19:73:3b:16:fd:a9:1a:c4:8d:e8:f0:f1: d4:27:f5:98:11:2f:ff:fc:38:d1:77:fd:e4:5c:d1:9b:57:1a: 59:8e:4f:b0:6c:8e:4b:e7:33:75:d1:cb:7c:93:50:d7:cc:98: f3:f6:04:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pt9fZIMnJ/Hv0f0klxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4 YWY4ZDkwHhcNMjUxMjIwMjMwMDU0WhcNMjUxMjIxMjMwMDU0WjAzMTEwLwYDVQQD EyhjYTAxYzM0OWM3OGQ0ZWNjMGY5MGFiYjAxMjQyOWRjNjQ0YjE3N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGGxiXND+sftZaF09pj8FZ1VyhMJ SVgzOKwjYzA4DlWhGkyjqQBbJdlAZvQfTOvs8qSwMt7MkdR58rtL7uS2dAjIMeTh xxK7/gBXc8uk7U0Xa5V5CoVUuSKKHdtof+ZUXi6r+WHQPEQdxTMlYsdip0ifDwsc BaH6RNWo/9zVaWGyfLWjtRRm9VnD59qvoOhX7Mx367KawTCwb9q2n6aTscEo9kUI zGYXbH3rUtE+u8IqDsSVZGUiMEXlNYwYtpTadaWTbCr614wad1alu2jC+IT0I98U Yl1tqJc1Vdcb2AcLz3ch72Ji32bhNbkEcLdGzwfLKpTKxl8FGVAgOLhGMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoBw0nHjU7MD5CrsBJCncZEsXfJMB8GA1UdIwQY MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIWGxvfM VlfKIkkWvH2pOW8aDHQxd2zZR7bajZOJ2k4gRIpi4LJ3uChHX5hI72r+gTGw3yx6 qt1iP12h+188bpUxc+0cFUxmc/jcaCt3xQKDvDnCLZDdbePjeKDIbeR4KbkUhoiF zah03f2bLkhkDmVU4dvRwztah14UPsenfHBgmt1jNK9m8RCohArzbNL/QYnix+BR Fit3NGjHVE1lO5co6aKrYweCvCRSGaDNlZ/c6npRaHgbiLD2/QEYsBl6QG9Ovbr4 /gLDmFirGXM7Fv2pGsSN6PDx1Cf1mBEv//w40Xf95FzRm1caWY5PsGyOS+czddHL fJNQ18yY8/YEog== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:03 2025 by rpki-client