This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json) Hash identifier: bMcRsZW2+BCdr4f+dPPhj/siqkVivaTfQRcLlZO0V64= Subject key identifier: 95:B1:DA:53:DC:2D:D3:11:FF:C5:DE:9B:CF:DA:EE:81:26:2E:3B:17 Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Certificate serial: 019B40FFAE8636DA09933C864E1EC86573F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 13:00:56 +0000 Manifest this update: Sun 21 Dec 2025 13:00:56 +0000 Manifest next update: Mon 22 Dec 2025 13:00:56 +0000 Files and hashes: 1: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (hash: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=) 2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: UXqQzqyHxDpaAprHarVu//kuehI5dFLyHHhvXWg48eA=) 3: o_-CPWekkGbizNj3OifTY4NJDPc.roa (hash: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=) 4: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (hash: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:ae:86:36:da:09:93:3c:86:4e:1e:c8:65:73:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Validity Not Before: Dec 21 13:00:56 2025 GMT Not After : Dec 22 13:00:56 2025 GMT Subject: CN=95b1da53dc2dd311ffc5de9bcfdaee81262e3b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:87:56:91:f5:45:d3:3d:00:5d:d4:c2:cd: 11:a0:01:85:07:38:13:42:94:f8:0d:cc:04:9a:98: f8:87:dc:c9:56:c0:24:af:7d:ad:68:64:c4:33:e8: fc:79:1d:62:ca:f7:cd:a9:e1:43:59:f7:df:89:7d: 5e:a9:28:e9:e2:b3:b8:7a:da:02:6a:56:57:9f:ed: 8d:f2:da:cc:41:e8:3d:4a:f8:a2:2f:08:49:fa:b9: 9c:79:28:01:8e:ed:ae:2b:49:e7:f4:8a:d4:29:25: e8:34:62:44:ab:7b:a0:bf:bd:bb:b4:84:52:c7:44: 43:80:67:87:c3:26:73:fa:f1:31:ea:a1:d4:4b:f0: fa:e0:4a:b7:0e:6c:b7:4c:2d:fb:4e:93:63:85:d9: 59:54:05:81:ef:f0:85:ae:0b:43:23:1d:3f:58:e2: 24:c1:43:b7:f3:94:db:07:64:a0:69:5c:63:d6:a8: 4c:bf:e9:35:f1:97:cd:f7:fd:33:e9:45:41:99:65: f0:33:a1:c0:e5:0c:7f:c2:0c:63:f9:ea:fd:46:a6: 51:33:8f:14:61:36:77:50:53:8c:24:6a:d6:ec:95: 9b:06:57:2a:71:fe:51:c0:ac:82:10:20:68:a4:ba: 59:53:06:e1:be:f3:19:39:8b:8f:88:3b:cb:e8:65: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B1:DA:53:DC:2D:D3:11:FF:C5:DE:9B:CF:DA:EE:81:26:2E:3B:17 X509v3 Authority Key Identifier: keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ae:ce:7a:37:3d:62:69:54:48:89:a0:4c:93:3e:f8:c8:20: 6b:bf:6a:03:bc:8b:2d:e1:5c:d6:53:12:19:cd:f4:f0:c9:bd: 11:d1:c9:8e:38:24:4a:c9:69:0d:e1:f5:67:79:1e:bb:87:98: 0b:35:93:bd:97:b4:62:ad:6c:44:50:a0:a6:47:df:e3:ba:3c: 52:0d:d6:4f:67:74:5f:55:a1:9f:28:45:6c:ad:a9:44:30:6a: ee:11:09:65:9b:d0:9a:be:db:5e:0a:45:a3:8a:01:29:08:5e: 1e:92:38:53:5d:ec:74:a1:dd:29:46:a2:14:a4:b7:ca:4c:e1: c0:80:07:62:f0:ca:cc:d7:90:85:37:5e:f1:5a:18:3c:a9:61: e3:7c:ba:74:68:cf:b6:0a:52:07:60:40:3c:aa:10:65:07:26: c1:a8:24:72:24:d2:cc:81:02:78:35:4b:90:c0:85:c4:14:37: 0e:2c:9f:7f:94:db:f1:af:48:3f:56:10:aa:48:d2:fd:47:78: 37:00:df:8c:65:b8:f2:9e:c9:d6:09:9c:66:98:10:6c:2b:15: c3:9c:05:5a:e5:26:64:83:2d:3d:a1:e0:9e:f5:ee:15:35:01: dc:e5:5d:b4:fb:fd:13:47:9f:45:bf:a9:8b:95:f8:f4:c8:1d: 69:61:6e:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/66GNtoJkzyGTh7IZXPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi NWQ1YzkwHhcNMjUxMjIxMTMwMDU2WhcNMjUxMjIyMTMwMDU2WjAzMTEwLwYDVQQD Eyg5NWIxZGE1M2RjMmRkMzExZmZjNWRlOWJjZmRhZWU4MTI2MmUzYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi2HVpH1RdM9AF3Uws0RoAGFBzgT QpT4DcwEmpj4h9zJVsAkr32taGTEM+j8eR1iyvfNqeFDWfffiX1eqSjp4rO4etoC alZXn+2N8trMQeg9SviiLwhJ+rmceSgBju2uK0nn9IrUKSXoNGJEq3ugv727tIRS x0RDgGeHwyZz+vEx6qHUS/D64Eq3Dmy3TC37TpNjhdlZVAWB7/CFrgtDIx0/WOIk wUO385TbB2SgaVxj1qhMv+k18ZfN9/0z6UVBmWXwM6HA5Qx/wgxj+er9RqZRM48U YTZ3UFOMJGrW7JWbBlcqcf5RwKyCECBopLpZUwbhvvMZOYuPiDvL6GU69wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWx2lPcLdMR/8Xem8/a7oEmLjsXMB8GA1UdIwQY MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt NDljNmZkYmJhZmI3LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3 LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApq7Oejc9 YmlUSImgTJM++Mgga79qA7yLLeFc1lMSGc308Mm9EdHJjjgkSslpDeH1Z3keu4eY CzWTvZe0Yq1sRFCgpkff47o8Ug3WT2d0X1WhnyhFbK2pRDBq7hEJZZvQmr7bXgpF o4oBKQheHpI4U13sdKHdKUaiFKS3ykzhwIAHYvDKzNeQhTde8VoYPKlh43y6dGjP tgpSB2BAPKoQZQcmwagkciTSzIECeDVLkMCFxBQ3Diyff5Tb8a9IP1YQqkjS/Ud4 NwDfjGW48p7J1gmcZpgQbCsVw5wFWuUmZIMtPaHgnvXuFTUB3OVdtPv9E0efRb+p i5X49MgdaWFuqg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:37:48 2025 by rpki-client