This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft File: sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json) Hash identifier: s4jDSjln9+MkbNX8A5r18MsGUb2WkKFxsKHMkthgoK8= Subject key identifier: E3:01:C7:8B:2E:15:F0:29:A9:BF:5D:EB:53:DA:34:F8:92:96:8D:B5 Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18 Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18 Certificate serial: 019B2852ABDC61B4892C4534462253C6317B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft Manifest number: 072D Signing time: Tue 16 Dec 2025 18:01:05 +0000 Manifest this update: Tue 16 Dec 2025 18:01:05 +0000 Manifest next update: Wed 17 Dec 2025 18:01:05 +0000 Files and hashes: 1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=) 2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: MziN8BybixW99AUN6k4gyObhLel5+oMIjt9EYQXRKhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:ab:dc:61:b4:89:2c:45:34:46:22:53:c6:31:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18 Validity Not Before: Dec 16 18:01:05 2025 GMT Not After : Dec 17 18:01:05 2025 GMT Subject: CN=e301c78b2e15f029a9bf5deb53da34f892968db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:19:51:8f:2b:61:26:93:60:5c:97:37:4c:ef: 3c:df:14:72:56:29:bf:6a:8c:28:ab:64:61:3d:7a: c3:65:59:94:d7:c5:e8:1f:88:8c:4a:ff:ec:00:02: ff:1a:72:91:19:a8:14:bb:14:a2:c2:65:d8:f3:64: 10:fd:cc:ca:1e:1f:16:cc:23:8e:cf:b2:3a:c3:44: 4d:2f:ff:3d:e7:f4:5f:41:18:27:00:a0:4a:84:74: 88:92:04:0a:65:95:66:5a:e7:c3:14:82:17:00:e6: 4a:a1:d3:fa:41:b4:80:97:73:1b:a0:ec:46:c1:41: 9f:37:98:ae:02:e1:36:7a:23:8b:ae:5f:3d:b6:b3: 08:92:e7:9e:dd:6d:cc:eb:9c:28:03:39:87:03:0e: 70:21:92:1f:e3:63:4d:8d:42:20:9c:ac:b0:70:cc: 83:05:ed:1a:4c:c7:37:bc:4d:8b:25:bd:fd:30:68: 48:5f:63:97:44:40:d2:ec:56:52:be:12:df:bf:8a: 89:e7:00:1c:b1:c8:92:be:fd:57:12:69:25:a3:0a: 57:ab:aa:f9:5f:d0:64:4e:d0:40:e8:9f:79:e0:59: 6b:ee:5f:af:34:ef:2b:62:02:f6:c0:b0:c8:cd:f2: 1d:93:af:3d:59:da:96:18:72:fb:5f:71:14:09:af: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:01:C7:8B:2E:15:F0:29:A9:BF:5D:EB:53:DA:34:F8:92:96:8D:B5 X509v3 Authority Key Identifier: keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:14:f9:ff:b9:b9:84:5e:d8:48:99:7a:da:a0:af:c7:7c:75: 14:ca:4a:85:59:45:31:98:08:93:25:f1:2e:8a:7f:9d:60:0d: b9:96:8c:b9:6a:3e:0b:51:68:9f:51:f8:ff:40:7f:f1:31:0d: 2d:86:06:00:5f:d3:b8:42:cb:ce:18:b1:2d:bf:81:39:b7:aa: d3:7e:b7:19:8f:6e:e7:3f:53:28:ac:f1:47:69:52:d1:4d:05: c2:ad:d5:c3:5f:2b:6d:13:72:41:2c:df:df:14:12:31:2d:72: b7:b9:98:24:f5:66:6b:49:9b:5e:99:3b:b1:a3:65:9c:9d:21: 3b:fa:3f:15:09:15:57:59:a8:76:dc:fc:77:ed:1a:be:25:5f: 0c:5c:10:8d:bc:71:0c:4e:c4:a0:9a:21:29:3c:d9:33:45:d9: 4b:1e:86:30:b8:5c:39:c5:a6:12:41:a0:1b:90:29:ad:83:b5: 94:32:58:f5:56:a6:a4:78:23:da:65:74:7e:c5:4e:c5:a6:2d: 20:4c:ec:a1:36:1a:fe:0e:63:1f:7f:4d:9f:90:f6:f2:aa:b8: af:58:26:23:60:7f:3c:40:cb:d4:a9:65:cc:60:4b:93:46:4e: be:48:ab:54:bc:df:ca:74:a4:57:a3:55:09:dc:93:ef:b7:4f: 5b:00:cb:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUqvcYbSJLEU0RiJTxjF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjIxNTZmNTljZmM3OTM5NmU2NGYzMzQyZGU2NGRlM2Y4 OGVlMTgwHhcNMjUxMjE2MTgwMTA1WhcNMjUxMjE3MTgwMTA1WjAzMTEwLwYDVQQD EyhlMzAxYzc4YjJlMTVmMDI5YTliZjVkZWI1M2RhMzRmODkyOTY4ZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BlRjythJpNgXJc3TO883xRyVim/ aowoq2RhPXrDZVmU18XoH4iMSv/sAAL/GnKRGagUuxSiwmXY82QQ/czKHh8WzCOO z7I6w0RNL/895/RfQRgnAKBKhHSIkgQKZZVmWufDFIIXAOZKodP6QbSAl3MboOxG wUGfN5iuAuE2eiOLrl89trMIkuee3W3M65woAzmHAw5wIZIf42NNjUIgnKywcMyD Be0aTMc3vE2LJb39MGhIX2OXREDS7FZSvhLfv4qJ5wAcsciSvv1XEmklowpXq6r5 X9BkTtBA6J954Flr7l+vNO8rYgL2wLDIzfIdk689WdqWGHL7X3EUCa+hqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMBx4suFfApqb9d61PaNPiSlo21MB8GA1UdIwQY MBaAFLFiFW9Zz8eTluZPM0LeZN4/iO4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85NjU3YTUtOGNlMi00MDVlLWFjOGMt ZGQyYWNjYWNmY2NjLzEvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85NjU3YTUtOGNlMi00MDVlLWFjOGMtZGQyYWNjYWNmY2Nj LzEvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxT5/7m5 hF7YSJl62qCvx3x1FMpKhVlFMZgIkyXxLop/nWANuZaMuWo+C1Fon1H4/0B/8TEN LYYGAF/TuELLzhixLb+BObeq0363GY9u5z9TKKzxR2lS0U0Fwq3Vw18rbRNyQSzf 3xQSMS1yt7mYJPVma0mbXpk7saNlnJ0hO/o/FQkVV1modtz8d+0aviVfDFwQjbxx DE7EoJohKTzZM0XZSx6GMLhcOcWmEkGgG5AprYO1lDJY9VampHgj2mV0fsVOxaYt IEzsoTYa/g5jH39Nn5D28qq4r1gmI2B/PEDL1KllzGBLk0ZOvkirVLzfynSkV6NV CdyT77dPWwDLqQ== -----END CERTIFICATE-----Generated at Tue Dec 16 22:31:12 2025 by rpki-client