This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft File: sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json) Hash identifier: B908bHDlOr5BFrIh6iAHTFjQbVI9bnesrdr2p8WC04s= Subject key identifier: 5E:1A:FC:AD:46:BA:EB:12:AF:F5:EA:6A:BA:71:CE:F8:D1:4B:3D:35 Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Certificate serial: 019B288931F73485182FA8CB9E0B5278D890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft Manifest number: 0E07 Signing time: Tue 16 Dec 2025 19:00:38 +0000 Manifest this update: Tue 16 Dec 2025 19:00:38 +0000 Manifest next update: Wed 17 Dec 2025 19:00:38 +0000 Files and hashes: 1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=) 2: RkflmKMTMUrJqHaFUNJeUbhKC-I.roa (hash: orUHP/pEtKksjdbFiXyWrXrjXHxmT0wSFykk83oMEWs=) 3: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=) 4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: xIVGzvyQ8QskN1ZSZCIH4jVNzgDiVNVvw+NP2O+PBFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:31:f7:34:85:18:2f:a8:cb:9e:0b:52:78:d8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Validity Not Before: Dec 16 19:00:38 2025 GMT Not After : Dec 17 19:00:38 2025 GMT Subject: CN=5e1afcad46baeb12aff5ea6aba71cef8d14b3d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f4:3e:f2:79:e7:b2:e5:2a:64:63:59:95:39: 49:bb:e1:25:af:6b:dd:5b:40:72:ce:f7:51:d4:50: 52:44:66:e6:bb:c0:12:a6:53:44:7a:b4:f6:ec:fd: ca:5d:7e:7d:ea:03:ae:65:99:12:ed:13:2b:14:4f: 33:ea:6c:a4:4d:8b:38:23:97:8d:65:5a:90:91:7e: 8d:9a:91:57:8b:28:b0:3a:84:31:ec:1c:b7:27:11: d9:2c:37:c6:65:1a:1b:aa:ce:6b:1b:2e:06:8c:e8: 66:21:b8:74:2b:21:e2:0d:92:96:7e:42:79:0e:99: e0:e2:fd:66:e1:6b:ed:d5:e9:81:9a:e6:26:ee:12: 40:95:f3:37:9b:e5:20:cd:e3:f2:52:fc:4e:47:d0: f1:9d:7a:d1:ed:6f:ea:57:02:b0:bc:9a:8c:3e:13: 92:f6:24:d3:20:c9:e6:82:6a:90:4e:e5:d1:28:8e: 33:ad:bd:64:43:9f:c7:1a:59:db:0d:f7:d5:bd:63: 12:5b:55:d2:5a:c4:e8:fd:4d:af:a0:de:95:99:75: 8f:c9:6f:63:49:8e:b1:5f:bd:48:25:7f:0c:02:a8: 3e:11:0b:0f:58:0a:21:3e:a8:49:e0:9d:f6:cd:44: b3:ef:44:1d:05:ec:5a:e8:8f:ad:98:94:ac:21:ca: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1A:FC:AD:46:BA:EB:12:AF:F5:EA:6A:BA:71:CE:F8:D1:4B:3D:35 X509v3 Authority Key Identifier: keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d9:e9:73:5d:42:e4:f9:0f:a9:6c:2d:a8:74:d0:81:ff:ff: 84:06:cb:52:3d:64:c1:3c:ae:a8:da:65:1c:0c:01:e3:55:aa: e0:82:11:8d:be:49:47:d6:55:e7:e4:f4:c2:ef:fb:c8:1f:9a: b0:82:3c:0c:4a:7d:c7:d9:ad:bd:46:27:2c:31:4c:10:fe:85: 44:d3:cb:af:6f:03:e2:21:4c:6b:15:b5:5d:85:7b:95:9a:ab: c2:aa:20:3f:a5:60:dc:07:32:a6:a2:ed:8e:c0:0f:49:97:ff: 6c:01:9d:ee:04:bc:cd:d0:96:25:aa:b6:8d:ea:57:03:88:51: 51:4d:85:b1:11:8a:07:f1:5a:6a:13:73:8d:5e:e7:f1:d7:b8: 43:d0:bf:4b:62:8b:c4:fb:2f:e8:fe:07:46:3d:11:74:ad:23: 88:d0:5d:5f:ad:10:1b:de:99:27:d3:cb:45:71:c0:17:8b:e8: 45:c0:08:04:ba:c6:f0:ee:57:4c:2e:b9:5a:ad:54:cf:88:ea: 40:80:67:30:81:35:b9:34:25:82:84:d5:4e:cf:0e:b2:9f:8e: c6:71:8e:96:ba:bf:bb:cb:b7:bf:19:ec:9e:77:73:54:89:c5: 0e:9e:18:88:ef:0b:1c:1b:fc:54:6e:29:eb:c2:7f:cd:27:2b: d2:3d:29:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoiTH3NIUYL6jLngtSeNiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw ZDc3ODcwHhcNMjUxMjE2MTkwMDM4WhcNMjUxMjE3MTkwMDM4WjAzMTEwLwYDVQQD Eyg1ZTFhZmNhZDQ2YmFlYjEyYWZmNWVhNmFiYTcxY2VmOGQxNGIzZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPQ+8nnnsuUqZGNZlTlJu+Elr2vd W0ByzvdR1FBSRGbmu8ASplNEerT27P3KXX596gOuZZkS7RMrFE8z6mykTYs4I5eN ZVqQkX6NmpFXiyiwOoQx7By3JxHZLDfGZRobqs5rGy4GjOhmIbh0KyHiDZKWfkJ5 Dpng4v1m4Wvt1emBmuYm7hJAlfM3m+UgzePyUvxOR9DxnXrR7W/qVwKwvJqMPhOS 9iTTIMnmgmqQTuXRKI4zrb1kQ5/HGlnbDffVvWMSW1XSWsTo/U2voN6VmXWPyW9j SY6xX71IJX8MAqg+EQsPWAohPqhJ4J32zUSz70QdBexa6I+tmJSsIcpZAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4a/K1GuusSr/XqarpxzvjRSz01MB8GA1UdIwQY MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3 LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNnpc11C 5PkPqWwtqHTQgf//hAbLUj1kwTyuqNplHAwB41Wq4IIRjb5JR9ZV5+T0wu/7yB+a sII8DEp9x9mtvUYnLDFMEP6FRNPLr28D4iFMaxW1XYV7lZqrwqogP6Vg3AcypqLt jsAPSZf/bAGd7gS8zdCWJaq2jepXA4hRUU2FsRGKB/FaahNzjV7n8de4Q9C/S2KL xPsv6P4HRj0RdK0jiNBdX60QG96ZJ9PLRXHAF4voRcAIBLrG8O5XTC65Wq1Uz4jq QIBnMIE1uTQlgoTVTs8Osp+OxnGOlrq/u8u3vxnsnndzVInFDp4YiO8LHBv8VG4p 68J/zScr0j0pCQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:17:45 2025 by rpki-client