This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json) Hash identifier: MMJ0MiTWhefr9jFFzIvmeXi6aGTdPMx9uQ9UGMHp9w8= Subject key identifier: C9:26:10:58:36:BC:DA:5F:CD:12:EA:92:53:1A:B3:58:BB:60:CA:44 Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Certificate serial: 019B4F60195C8B94CD7D58D7482D6CDF1AA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft Manifest number: 14CE Signing time: Wed 24 Dec 2025 08:00:56 +0000 Manifest this update: Wed 24 Dec 2025 08:00:56 +0000 Manifest next update: Thu 25 Dec 2025 08:00:56 +0000 Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=) 2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: xEp/DJHt2uDC2iERV1IHc+l4Ei8pZfWw3VS5js8FrkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:19:5c:8b:94:cd:7d:58:d7:48:2d:6c:df:1a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Validity Not Before: Dec 24 08:00:56 2025 GMT Not After : Dec 25 08:00:56 2025 GMT Subject: CN=c926105836bcda5fcd12ea92531ab358bb60ca44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:98:35:2c:82:65:b1:64:d6:60:68:40:2e: b8:4e:2f:7b:ff:2f:f9:26:43:93:2f:fd:cb:cc:db: 92:81:ef:29:24:95:bd:f9:2b:d6:dd:94:e4:b2:b3: a9:04:20:6d:9d:b5:00:85:11:47:9e:23:5e:73:3a: 88:65:bb:a1:e0:dd:29:f2:10:d0:0d:ff:9e:ff:a5: 07:86:66:20:43:01:93:73:3d:8c:91:ea:de:fd:08: 7b:48:21:f3:77:5f:4e:d1:e2:c0:d5:ad:f7:1d:55: 56:dd:81:97:43:62:79:65:91:6d:a0:ba:28:58:53: e3:19:9e:12:53:06:79:8c:7b:07:35:94:63:64:25: 6b:eb:38:d8:9f:63:01:d8:6b:3b:38:e7:5e:df:38: a7:8e:c5:80:24:cb:48:a9:9d:1f:19:d2:08:02:89: 9c:78:e6:66:6b:1b:72:4b:07:70:e9:e3:f7:5c:14: d9:a2:a1:2b:3d:a5:2b:a1:5f:ec:b6:4a:f4:03:70: de:8a:56:df:54:52:72:a9:60:6b:d7:31:91:c0:68: da:23:44:c9:a3:d3:86:d4:fe:52:c4:8e:64:fb:66: d6:3e:fc:24:d8:6f:99:64:86:ac:5a:1e:7e:ac:ba: b5:37:93:f5:0e:f7:7b:0f:18:b6:fb:ca:98:5e:25: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:26:10:58:36:BC:DA:5F:CD:12:EA:92:53:1A:B3:58:BB:60:CA:44 X509v3 Authority Key Identifier: keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:00:26:1a:9c:73:31:c6:04:b8:2a:de:5e:ed:9f:57:87:62: b2:9c:89:5b:8d:17:1e:7d:7f:7a:da:c4:09:05:36:a7:5b:11: 5a:56:d4:7a:65:32:dd:7e:c0:6e:bc:89:b6:fa:63:d2:0e:72: cb:b9:5e:7b:ba:ea:69:9c:75:2c:d0:a8:d1:40:1a:e8:03:36: d2:b3:ea:05:23:8f:dc:cf:07:25:2f:9b:a8:23:3c:0d:18:83: e3:aa:5e:30:24:c5:b5:2f:df:0e:33:a1:8a:0b:57:ba:e6:8b: fa:76:0e:7e:49:30:00:7b:6d:27:e5:3b:d7:ce:48:20:a1:25: c8:9b:bc:5c:0c:d8:a9:72:9f:17:3c:19:cc:7e:26:b8:8d:e5: 9e:ff:cf:52:35:fc:97:da:e4:05:45:4c:be:1c:81:d5:e3:20: d4:a0:82:ba:d7:38:e4:bd:a3:57:ea:4e:da:69:b4:2d:9c:88: 75:e3:d5:44:a3:df:49:85:1a:c7:36:d2:9a:b5:39:e2:9a:9b: c3:0f:86:8d:39:bf:5e:2d:d6:e2:4f:b7:17:0c:5a:68:e4:f4: 89:60:7f:6e:93:f8:50:96:47:36:7e:13:89:68:27:47:87:6e: 41:a8:1f:cc:7e:6c:6b:c8:40:fb:c4:04:b1:c7:d5:ea:bc:8a: c3:cd:d3:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYBlci5TNfVjXSC1s3xqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4 YWY4ZDkwHhcNMjUxMjI0MDgwMDU2WhcNMjUxMjI1MDgwMDU2WjAzMTEwLwYDVQQD EyhjOTI2MTA1ODM2YmNkYTVmY2QxMmVhOTI1MzFhYjM1OGJiNjBjYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CSYNSyCZbFk1mBoQC64Ti97/y/5 JkOTL/3LzNuSge8pJJW9+SvW3ZTksrOpBCBtnbUAhRFHniNeczqIZbuh4N0p8hDQ Df+e/6UHhmYgQwGTcz2Mkere/Qh7SCHzd19O0eLA1a33HVVW3YGXQ2J5ZZFtoLoo WFPjGZ4SUwZ5jHsHNZRjZCVr6zjYn2MB2Gs7OOde3zinjsWAJMtIqZ0fGdIIAomc eOZmaxtySwdw6eP3XBTZoqErPaUroV/stkr0A3DeilbfVFJyqWBr1zGRwGjaI0TJ o9OG1P5SxI5k+2bWPvwk2G+ZZIasWh5+rLq1N5P1Dvd7Dxi2+8qYXiWo9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkmEFg2vNpfzRLqklMas1i7YMpEMB8GA1UdIwQY MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQAmGpxz McYEuCreXu2fV4dispyJW40XHn1/etrECQU2p1sRWlbUemUy3X7AbryJtvpj0g5y y7lee7rqaZx1LNCo0UAa6AM20rPqBSOP3M8HJS+bqCM8DRiD46peMCTFtS/fDjOh igtXuuaL+nYOfkkwAHttJ+U7185IIKElyJu8XAzYqXKfFzwZzH4muI3lnv/PUjX8 l9rkBUVMvhyB1eMg1KCCutc45L2jV+pO2mm0LZyIdePVRKPfSYUaxzbSmrU54pqb ww+GjTm/Xi3W4k+3FwxaaOT0iWB/bpP4UJZHNn4TiWgnR4duQagfzH5sa8hA+8QE scfV6ryKw83Tvg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:06:41 2025 by rpki-client