This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json) Hash identifier: Q3hennOzl4KSc5vrV+LbX+4uzNcqZW93LGVfCBbdzjs= Subject key identifier: 3C:9D:7F:D5:E8:14:A9:52:97:33:FF:FA:39:1E:EE:B4:B5:BB:04:B3 Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Certificate serial: 019B3A90579F529C84062339901F6D2364B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 07:01:36 +0000 Manifest this update: Sat 20 Dec 2025 07:01:36 +0000 Manifest next update: Sun 21 Dec 2025 07:01:36 +0000 Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=) 2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=) 3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: kRPhBWK8t2G4ySFkWf2/rGX8cOWGAiILL8+olsK9WVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:57:9f:52:9c:84:06:23:39:90:1f:6d:23:64:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Validity Not Before: Dec 20 07:01:36 2025 GMT Not After : Dec 21 07:01:36 2025 GMT Subject: CN=3c9d7fd5e814a9529733fffa391eeeb4b5bb04b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:fb:fc:85:4a:96:d8:86:0b:d5:d9:d2:01: ce:c9:7a:98:4a:c0:fd:54:e4:ca:95:d1:75:00:6e: 45:92:a4:89:54:61:d1:66:3c:00:61:2e:7c:a7:33: 9c:76:22:cd:a4:ed:33:49:92:0a:36:ad:c1:07:91: 0a:2a:3f:22:a5:12:42:ef:0c:be:1c:e3:ab:f7:b7: 4b:e7:04:63:dd:cd:51:58:49:02:d3:5c:bd:35:8c: 09:6b:37:aa:14:6e:59:56:45:2d:3e:ea:84:e7:64: d4:3f:cb:4e:05:14:64:c9:2e:67:59:96:68:2d:f9: 85:e0:6b:cf:78:50:86:31:04:1d:fb:49:b6:1d:b8: ef:ff:9a:78:41:45:3f:4c:5c:c4:65:6f:b5:27:d5: cc:45:b1:eb:3a:a8:d8:f3:e6:16:a2:6b:8b:44:f1: 8a:a2:06:72:b5:f1:41:dc:95:b6:bf:f6:be:4d:0c: 94:42:76:54:3a:39:2b:ff:4e:35:85:6e:f3:08:38: f5:54:a4:93:ed:7f:36:93:6a:b0:af:cb:21:5c:89: a9:35:67:f4:99:81:87:0b:3b:bb:e8:14:80:3c:95: df:f3:99:30:b5:1b:52:f4:5f:05:4a:6e:ea:48:f4: 25:24:9d:f0:f2:b4:6f:75:07:65:0c:ce:0e:ca:32: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:7F:D5:E8:14:A9:52:97:33:FF:FA:39:1E:EE:B4:B5:BB:04:B3 X509v3 Authority Key Identifier: keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e9:55:87:39:86:6f:4c:71:23:a2:28:12:61:fc:6d:4d:0b: 83:1e:1a:a6:b7:78:19:38:5b:b0:d1:7b:8d:f5:f9:f1:17:6b: 05:c8:b7:b4:82:df:b8:8d:85:97:51:8b:71:03:4f:88:46:19: cb:48:ac:b1:f0:b4:07:2b:6c:89:4f:bb:e5:89:31:20:3c:53: c6:70:0a:cd:2f:2f:56:d5:dd:20:28:03:72:ae:cb:3d:d0:b1: 11:de:8a:c8:4f:fe:53:31:42:9d:d6:0a:2f:98:22:8a:34:14: b4:60:dd:1b:b7:b9:03:e4:34:28:ff:01:2c:da:cb:e8:78:ab: 5d:55:65:4c:4b:28:e7:ca:ef:1e:8d:c3:16:72:a6:ed:96:ec: c9:5b:6d:41:c4:62:a3:63:e0:57:7f:68:07:4a:11:ed:68:90: ee:39:f3:c5:b1:8d:19:eb:be:10:06:0d:03:f8:10:a5:ad:08: 7a:7b:e4:7d:0b:d7:06:3f:84:ef:8e:0a:d6:dc:51:85:4e:f9: 11:0c:6e:2f:f7:83:49:4e:ef:f2:ff:e6:d3:c2:e1:22:18:ce: de:4d:3e:04:78:03:ad:6c:f4:96:74:1b:5d:33:3a:ff:30:d0: 94:60:7c:02:46:aa:a1:77:c2:9e:e6:92:6c:f1:e1:99:ca:d1: 92:53:16:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kFefUpyEBiM5kB9tI2S5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjkzZjFiZTY1N2ZiOGM3MWJjYmI5Yzc3YmU1NGE5Mzcy ZGIwNDUwHhcNMjUxMjIwMDcwMTM2WhcNMjUxMjIxMDcwMTM2WjAzMTEwLwYDVQQD EygzYzlkN2ZkNWU4MTRhOTUyOTczM2ZmZmEzOTFlZWViNGI1YmIwNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVv7/IVKltiGC9XZ0gHOyXqYSsD9 VOTKldF1AG5FkqSJVGHRZjwAYS58pzOcdiLNpO0zSZIKNq3BB5EKKj8ipRJC7wy+ HOOr97dL5wRj3c1RWEkC01y9NYwJazeqFG5ZVkUtPuqE52TUP8tOBRRkyS5nWZZo LfmF4GvPeFCGMQQd+0m2Hbjv/5p4QUU/TFzEZW+1J9XMRbHrOqjY8+YWomuLRPGK ogZytfFB3JW2v/a+TQyUQnZUOjkr/041hW7zCDj1VKST7X82k2qwr8shXImpNWf0 mYGHCzu76BSAPJXf85kwtRtS9F8FSm7qSPQlJJ3w8rRvdQdlDM4OyjLy+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDydf9XoFKlSlzP/+jke7rS1uwSzMB8GA1UdIwQY MBaAFLFpPxvmV/uMcby7nHe+VKk3LbBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMt N2NkMTQ2NTAwYjJkLzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMtN2NkMTQ2NTAwYjJk LzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhelVhzmG b0xxI6IoEmH8bU0Lgx4aprd4GThbsNF7jfX58RdrBci3tILfuI2Fl1GLcQNPiEYZ y0issfC0BytsiU+75YkxIDxTxnAKzS8vVtXdICgDcq7LPdCxEd6KyE/+UzFCndYK L5giijQUtGDdG7e5A+Q0KP8BLNrL6HirXVVlTEso58rvHo3DFnKm7ZbsyVttQcRi o2PgV39oB0oR7WiQ7jnzxbGNGeu+EAYNA/gQpa0IenvkfQvXBj+E744K1txRhU75 EQxuL/eDSU7v8v/m08LhIhjO3k0+BHgDrWz0lnQbXTM6/zDQlGB8AkaqoXfCnuaS bPHhmcrRklMWyA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:58 2025 by rpki-client