This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft File: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json) Hash identifier: X69lb0Z/V/KShb6rTGeW9CpE7coAw37LZ5zNS15MXLA= Subject key identifier: 9C:F9:6B:1D:84:30:94:5B:E5:DA:3B:6B:74:09:1F:45:2B:3E:15:89 Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4 Certificate issuer: /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4 Certificate serial: 019B39465E60F31EFDFC9334A83F984D4D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft Manifest number: 16CC Signing time: Sat 20 Dec 2025 01:01:11 +0000 Manifest this update: Sat 20 Dec 2025 01:01:11 +0000 Manifest next update: Sun 21 Dec 2025 01:01:11 +0000 Files and hashes: 1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=) 2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: NES3luCQ7+lT9Ic6v+H/ltQkLXEs8QUIkiJOtVcrIGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:5e:60:f3:1e:fd:fc:93:34:a8:3f:98:4d:4d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4 Validity Not Before: Dec 20 01:01:11 2025 GMT Not After : Dec 21 01:01:11 2025 GMT Subject: CN=9cf96b1d8430945be5da3b6b74091f452b3e1589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:20:d5:6e:8f:6d:9e:2d:5d:50:ee:8d:5d: a8:4d:52:5f:df:d1:bb:ad:ea:77:db:44:3f:83:9c: 26:88:2e:13:d6:de:28:6d:13:15:eb:81:8c:da:3e: 9e:01:03:d3:18:01:46:a7:b7:e5:98:8a:24:19:71: 33:37:49:33:ce:46:40:10:30:64:a5:47:17:50:c6: 74:6f:7a:cf:f6:87:0f:ab:8d:50:a7:df:ba:1d:65: bc:e2:bc:cb:39:28:9b:df:94:24:d1:aa:39:73:c6: 7c:c5:ee:4a:bf:e4:e7:e2:47:88:f4:68:50:74:9a: 22:6d:7f:e7:e0:5d:c8:53:17:e6:a5:d7:75:ee:78: cd:35:c6:1a:0f:ac:cf:3d:9f:5d:b1:ac:c5:5f:bb: 0e:08:a2:0a:4d:7a:55:48:dc:85:a8:ed:8c:96:9f: 9d:80:c1:8c:86:05:ae:0c:52:ec:cd:a7:69:f3:ed: 4a:3f:a6:90:d5:f1:4d:8c:37:95:6f:13:53:7a:a3: ad:d6:ad:a4:c1:1b:54:09:4d:06:24:48:39:35:97: 55:40:bb:f8:2c:2b:84:76:ef:1e:3a:53:cd:94:34: 44:69:91:2f:a8:46:57:59:00:0e:d8:fc:4b:f0:41: 9a:0a:c4:58:6c:e8:37:d6:1a:b2:34:c0:95:15:d9: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F9:6B:1D:84:30:94:5B:E5:DA:3B:6B:74:09:1F:45:2B:3E:15:89 X509v3 Authority Key Identifier: keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:94:ea:4f:76:1e:8e:81:c3:3a:87:63:29:f9:a7:94:98:7d: f3:33:89:15:33:dd:d7:92:be:d0:55:93:21:42:3b:52:98:fb: c6:b7:bd:a1:c5:7b:f7:e7:cf:22:7f:74:b8:46:26:12:3a:ba: 61:75:1a:1f:81:f4:0a:07:85:40:5a:30:dd:b7:b4:9d:df:bd: 18:de:0a:95:f9:4c:09:e4:7d:7a:df:4f:34:c5:a5:14:d5:87: 40:d3:d0:3c:7d:9d:e6:12:c2:a0:cc:d5:e5:4c:88:4d:62:63: 69:38:7d:e9:e9:ab:cc:6a:1b:e9:88:0f:f4:eb:4a:1c:f0:62: e7:db:ac:35:cd:7e:07:39:96:fd:d6:2d:e5:e4:3a:4f:29:18: d7:6c:95:37:ec:c4:23:13:9c:b2:42:d5:d8:02:f9:63:f6:d5: b4:d1:2e:94:ff:21:a3:05:8c:bf:25:be:7c:05:9b:37:ab:bf: 17:05:12:e6:4a:b0:ec:70:ec:3b:78:79:64:b9:04:3b:77:b7: 8f:8e:92:1d:cb:df:cb:01:88:b4:ce:2c:e1:32:28:ba:c1:30: a7:89:8d:55:9d:14:9f:9c:a6:db:47:53:70:6d:20:a4:e3:72: 5f:6a:5d:89:43:d9:ec:c2:fd:7e:49:b9:73:82:32:44:51:90: 27:01:fd:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rl5g8x79/JM0qD+YTU1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDU5NmZiMWEzZjJmNGIxMjdmYjdjZWMxOWZkOTBiYjk0 YzczYTQwHhcNMjUxMjIwMDEwMTExWhcNMjUxMjIxMDEwMTExWjAzMTEwLwYDVQQD Eyg5Y2Y5NmIxZDg0MzA5NDViZTVkYTNiNmI3NDA5MWY0NTJiM2UxNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuncg1W6PbZ4tXVDujV2oTVJf39G7 rep320Q/g5wmiC4T1t4obRMV64GM2j6eAQPTGAFGp7flmIokGXEzN0kzzkZAEDBk pUcXUMZ0b3rP9ocPq41Qp9+6HWW84rzLOSib35Qk0ao5c8Z8xe5Kv+Tn4keI9GhQ dJoibX/n4F3IUxfmpdd17njNNcYaD6zPPZ9dsazFX7sOCKIKTXpVSNyFqO2Mlp+d gMGMhgWuDFLszadp8+1KP6aQ1fFNjDeVbxNTeqOt1q2kwRtUCU0GJEg5NZdVQLv4 LCuEdu8eOlPNlDREaZEvqEZXWQAO2PxL8EGaCsRYbOg31hqyNMCVFdkXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz5ax2EMJRb5do7a3QJH0UrPhWJMB8GA1UdIwQY MBaAFLHVlvsaPy9LEn+3zsGf2Qu5THOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjIt MWRmNDAxNDViMGJlLzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjItMWRmNDAxNDViMGJl LzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpTqT3Ye joHDOodjKfmnlJh98zOJFTPd15K+0FWTIUI7Upj7xre9ocV79+fPIn90uEYmEjq6 YXUaH4H0CgeFQFow3be0nd+9GN4KlflMCeR9et9PNMWlFNWHQNPQPH2d5hLCoMzV 5UyITWJjaTh96emrzGob6YgP9OtKHPBi59usNc1+BzmW/dYt5eQ6TykY12yVN+zE IxOcskLV2AL5Y/bVtNEulP8howWMvyW+fAWbN6u/FwUS5kqw7HDsO3h5ZLkEO3e3 j46SHcvfywGItM4s4TIousEwp4mNVZ0Un5ym20dTcG0gpONyX2pdiUPZ7ML9fkm5 c4IyRFGQJwH9vA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:43:18 2025 by rpki-client