This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json) Hash identifier: SNPsetR9z/zSXSSINE6douORzQW/cL0fJIHbx8WhCDc= Subject key identifier: 96:04:57:4A:E8:55:E8:97:CE:59:49:59:D2:0B:E7:2A:65:82:BF:2A Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50 Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550 Certificate serial: 019B6053ED4713DD82A2A77A69D89C173FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft Manifest number: 0676 Signing time: Sat 27 Dec 2025 15:01:11 +0000 Manifest this update: Sat 27 Dec 2025 15:01:11 +0000 Manifest next update: Sun 28 Dec 2025 15:01:11 +0000 Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=) 2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: HtM0Z6YCFvAoNCQwrk2t0UOkGpV0qWIRcYg9VENE3cU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:ed:47:13:dd:82:a2:a7:7a:69:d8:9c:17:3f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b085804db153eb724c58557c79359c4408205550 Validity Not Before: Dec 27 15:01:11 2025 GMT Not After : Dec 28 15:01:11 2025 GMT Subject: CN=9604574ae855e897ce594959d20be72a6582bf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:15:bd:83:36:d6:ae:8b:11:40:0b:04:cc: 7f:54:6c:31:cb:d2:d9:a8:b9:3d:fd:7f:ea:9c:6e: e0:15:6b:c1:40:36:78:bb:48:b7:17:39:66:89:fc: c0:30:83:13:9d:77:54:e5:97:38:9e:dc:e8:b7:8e: 91:34:e3:a7:e3:62:1a:e3:4d:cc:f1:6c:68:79:a3: 81:ff:4d:9c:6b:3d:51:7b:4b:df:5e:30:1a:df:89: ef:f5:71:0e:86:c5:17:e4:c1:66:ea:d6:8f:66:1c: c8:0f:61:e8:e3:58:5c:65:d4:99:eb:8a:11:d6:c8: 7f:ee:05:b1:ca:cf:60:ef:cc:2f:4f:34:8d:1a:47: a5:33:95:4d:8b:10:ae:aa:91:d2:a8:23:20:4a:7e: de:05:f6:06:bb:5b:dc:16:2a:cd:38:5a:d7:fd:86: 67:22:3c:ac:f8:7a:73:a4:41:e0:b1:dd:e8:41:7f: 54:9c:3b:f2:41:cf:cd:6c:3b:7a:ac:a9:de:ae:6a: d9:f0:59:96:c1:6d:b5:75:07:76:25:65:46:d4:2b: 40:9c:d1:28:e2:76:79:c8:25:a4:2e:60:75:d8:1c: cb:8b:7d:1a:7f:e8:92:d4:82:aa:88:93:6f:61:cd: d8:6d:18:96:b2:b1:af:73:36:e3:f0:5e:99:17:fd: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:57:4A:E8:55:E8:97:CE:59:49:59:D2:0B:E7:2A:65:82:BF:2A X509v3 Authority Key Identifier: keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6a:ed:ad:3a:b7:75:c5:52:b3:32:b9:46:10:33:73:96:c0: 38:3e:85:c5:28:e9:19:1a:1c:1c:f4:e1:22:3e:e0:3e:63:6d: 79:a2:1d:73:0c:a6:31:51:a0:09:dc:eb:dc:17:76:c8:ff:9e: 22:39:89:57:96:35:25:f9:52:8a:1c:97:b7:20:48:5b:55:6f: af:c1:1e:9e:8d:f6:bb:9f:15:11:be:20:86:49:a7:2d:cd:2c: ac:ef:41:7f:5c:65:5d:68:99:fc:2d:ad:93:48:82:1c:5a:fc: 03:33:1d:21:20:81:cb:45:c6:cc:86:44:6f:a4:05:6a:02:03: 4c:b1:62:93:74:3e:db:23:9b:b3:ce:0f:2e:8d:f2:2e:34:f4: 27:b6:3c:ae:5d:f6:d6:43:98:d2:a2:4c:f7:82:10:09:ee:73: 16:70:ed:15:88:25:11:dd:97:5e:d8:cf:59:ce:da:1f:3c:c0: 23:5d:c2:61:55:13:9a:bf:8c:f7:b4:9e:ca:ab:5c:76:a7:d2: cf:49:e1:ff:61:fb:fa:63:ee:12:30:f8:02:3c:90:aa:79:f1: f2:85:f9:7a:ac:c3:f6:bf:ea:c8:4a:a9:fc:9b:8c:81:49:d8: 72:44:62:93:9e:50:f8:5e:7d:14:54:27:51:f2:06:de:5f:b0: f6:8d:12:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgU+1HE92Coqd6adicFz+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODU4MDRkYjE1M2ViNzI0YzU4NTU3Yzc5MzU5YzQ0MDgy MDU1NTAwHhcNMjUxMjI3MTUwMTExWhcNMjUxMjI4MTUwMTExWjAzMTEwLwYDVQQD Eyg5NjA0NTc0YWU4NTVlODk3Y2U1OTQ5NTlkMjBiZTcyYTY1ODJiZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK0VvYM21q6LEUALBMx/VGwxy9LZ qLk9/X/qnG7gFWvBQDZ4u0i3FzlmifzAMIMTnXdU5Zc4ntzot46RNOOn42Ia403M 8WxoeaOB/02caz1Re0vfXjAa34nv9XEOhsUX5MFm6taPZhzID2Ho41hcZdSZ64oR 1sh/7gWxys9g78wvTzSNGkelM5VNixCuqpHSqCMgSn7eBfYGu1vcFirNOFrX/YZn Ijys+HpzpEHgsd3oQX9UnDvyQc/NbDt6rKnermrZ8FmWwW21dQd2JWVG1CtAnNEo 4nZ5yCWkLmB12BzLi30af+iS1IKqiJNvYc3YbRiWsrGvczbj8F6ZF/21yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYEV0roVeiXzllJWdIL5yplgr8qMB8GA1UdIwQY MBaAFLCFgE2xU+tyTFhVfHk1nEQIIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUt ZDI1YjdjYTNkYjg5LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUtZDI1YjdjYTNkYjg5 LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGrtrTq3 dcVSszK5RhAzc5bAOD6FxSjpGRocHPThIj7gPmNteaIdcwymMVGgCdzr3Bd2yP+e IjmJV5Y1JflSihyXtyBIW1Vvr8Eeno32u58VEb4ghkmnLc0srO9Bf1xlXWiZ/C2t k0iCHFr8AzMdISCBy0XGzIZEb6QFagIDTLFik3Q+2yObs84PLo3yLjT0J7Y8rl32 1kOY0qJM94IQCe5zFnDtFYglEd2XXtjPWc7aHzzAI13CYVUTmr+M97SeyqtcdqfS z0nh/2H7+mPuEjD4AjyQqnnx8oX5eqzD9r/qyEqp/JuMgUnYckRik55Q+F59FFQn UfIG3l+w9o0SkQ== -----END CERTIFICATE-----Generated at Sat Dec 27 19:23:36 2025 by rpki-client