This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json) Hash identifier: 5POFHJE2m5MYscsvKy8p3WremdWdT2lvtIHPHkCWwH0= Subject key identifier: 68:58:D3:B1:6B:8C:EC:5C:1C:E9:B8:7A:BD:F6:90:25:A9:C5:47:89 Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc Certificate serial: 019B59772B6E6689C99FD8273A64EC3A31CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft Manifest number: 0B16 Signing time: Fri 26 Dec 2025 07:02:20 +0000 Manifest this update: Fri 26 Dec 2025 07:02:20 +0000 Manifest next update: Sat 27 Dec 2025 07:02:20 +0000 Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=) 2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: c0WTdpwlqnxlZD4WeEx+BLFrSN0VBH34eac2xz+qW/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:2b:6e:66:89:c9:9f:d8:27:3a:64:ec:3a:31:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc Validity Not Before: Dec 26 07:02:20 2025 GMT Not After : Dec 27 07:02:20 2025 GMT Subject: CN=6858d3b16b8cec5c1ce9b87abdf69025a9c54789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:22:48:2a:4f:c5:a4:b9:b6:38:4f:d0:14: e2:6f:f2:b9:3e:50:f8:af:b4:f0:a1:3b:c7:b3:04: c5:a5:e5:37:84:d9:a7:a6:0a:df:37:d5:71:b4:5b: c8:6a:43:71:6e:34:cb:f0:45:d1:ae:12:bf:96:d9: a4:da:7e:9b:94:0a:c6:a4:a8:16:49:71:a1:c7:0d: df:8d:4d:93:e9:83:6a:aa:c0:81:25:c8:b5:28:93: 20:cf:c1:7d:d1:d3:87:c8:98:ee:25:24:f1:a7:52: cf:bd:2f:f2:a2:a6:14:23:e5:98:bf:75:23:f7:82: 08:05:6d:d7:8f:53:e0:fd:1d:8b:aa:03:7e:d3:df: 44:9c:c6:e7:29:51:e3:fe:83:1c:8c:58:ac:ec:9d: fe:19:48:dc:79:39:2a:04:c1:68:4d:7d:d7:a3:35: 60:00:42:39:02:c1:be:2b:4a:67:de:bd:69:6e:56: e1:ae:3b:22:f4:1d:e5:f2:ff:e2:8d:f7:c1:1d:60: 6c:64:5a:6b:15:77:ea:34:b2:eb:00:54:f7:95:55: 59:bc:5e:b4:06:eb:b6:c6:9b:fa:24:96:2a:ea:94: 68:87:6b:af:ac:c2:96:d5:97:c8:e1:f7:85:e4:cc: 52:46:93:88:b7:18:ff:fb:1b:c2:34:b6:47:d6:c9: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:58:D3:B1:6B:8C:EC:5C:1C:E9:B8:7A:BD:F6:90:25:A9:C5:47:89 X509v3 Authority Key Identifier: keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:55:ec:e7:34:1b:45:79:50:49:8f:a1:93:a7:6f:a2:a3:0e: 01:39:38:21:f4:0f:b9:28:c5:dd:4b:08:c3:b0:33:8a:b0:5c: 65:51:76:54:2b:39:4b:cf:73:bd:45:84:47:58:7a:b4:b6:82: 3a:ba:e6:a9:8c:05:4e:05:c7:e2:ea:39:1b:9c:03:be:47:48: e2:ef:8c:a6:cf:e9:a9:78:f9:b4:51:50:c9:c4:0f:bf:40:a5: e3:24:b0:c3:59:c0:e5:03:35:e4:8a:49:49:7a:57:3e:35:e3: 80:6b:fd:ea:76:44:bc:6b:2e:46:42:89:84:03:07:1a:28:4a: ec:a6:1b:5e:7f:66:8b:75:79:4a:11:46:e1:65:a1:47:a5:2c: de:75:72:0f:37:89:39:54:7b:bf:77:68:cd:e0:e8:d5:77:44: 4d:d1:4b:e8:7c:43:81:9e:50:0b:fa:aa:69:f5:cb:e0:c1:39: 15:9f:68:6d:2b:96:77:71:b8:23:41:ec:e9:f0:a1:a1:72:76: ac:10:e5:45:c4:e0:bf:fa:52:4a:53:51:e9:eb:4b:64:c8:e0: 0a:16:f8:2b:eb:fe:bf:3a:ff:b8:2a:73:14:dc:57:51:46:20: 76:5f:28:d1:ea:30:92:3b:ca:56:c8:d9:a0:0e:37:5f:4f:c8: bc:b2:1f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdytuZonJn9gnOmTsOjHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFkNDQ5YzdhZTRiZDIyYzZhZWU1ZmJkYzA4MjMwNDJm ZmY4ZmMwHhcNMjUxMjI2MDcwMjIwWhcNMjUxMjI3MDcwMjIwWjAzMTEwLwYDVQQD Eyg2ODU4ZDNiMTZiOGNlYzVjMWNlOWI4N2FiZGY2OTAyNWE5YzU0Nzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwekiSCpPxaS5tjhP0BTib/K5PlD4 r7TwoTvHswTFpeU3hNmnpgrfN9VxtFvIakNxbjTL8EXRrhK/ltmk2n6blArGpKgW SXGhxw3fjU2T6YNqqsCBJci1KJMgz8F90dOHyJjuJSTxp1LPvS/yoqYUI+WYv3Uj 94IIBW3Xj1Pg/R2LqgN+099EnMbnKVHj/oMcjFis7J3+GUjceTkqBMFoTX3XozVg AEI5AsG+K0pn3r1pblbhrjsi9B3l8v/ijffBHWBsZFprFXfqNLLrAFT3lVVZvF60 Buu2xpv6JJYq6pRoh2uvrMKW1ZfI4feF5MxSRpOItxj/+xvCNLZH1skXJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhY07FrjOxcHOm4er32kCWpxUeJMB8GA1UdIwQY MBaAFLFq1EnHrkvSLGruX73AgjBC//j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTIt MmI3ODgzMTIxNTFkLzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTItMmI3ODgzMTIxNTFk LzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1Xs5zQb RXlQSY+hk6dvoqMOATk4IfQPuSjF3UsIw7AzirBcZVF2VCs5S89zvUWER1h6tLaC OrrmqYwFTgXH4uo5G5wDvkdI4u+Mps/pqXj5tFFQycQPv0Cl4ySww1nA5QM15IpJ SXpXPjXjgGv96nZEvGsuRkKJhAMHGihK7KYbXn9mi3V5ShFG4WWhR6Us3nVyDzeJ OVR7v3dozeDo1XdETdFL6HxDgZ5QC/qqafXL4ME5FZ9obSuWd3G4I0Hs6fChoXJ2 rBDlRcTgv/pSSlNR6etLZMjgChb4K+v+vzr/uCpzFNxXUUYgdl8o0eowkjvKVsjZ oA43X0/IvLIfdQ== -----END CERTIFICATE-----Generated at Fri Dec 26 09:36:05 2025 by rpki-client