This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json) Hash identifier: 9yn5LrPBcjRBjEf8/KBPCE2NGTQcWSWw5MxpHePw55I= Subject key identifier: 0C:C1:E9:0B:07:06:F5:B6:E0:15:CF:25:2A:D1:1C:A7:DD:24:07:86 Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Certificate serial: 019AF0BF3E4303B1D249EAFC71722679CD6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft Manifest number: 149D Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=) 2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: f/G1JRrO5UcmJhGKuCc/uxo/os8UXeRjq9ZcPVSLD1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3e:43:03:b1:d2:49:ea:fc:71:72:26:79:cd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=0cc1e90b0706f5b6e015cf252ad11ca7dd240786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:57:1c:b4:b9:be:b5:ad:64:71:36:30:32: c2:e2:9a:bd:a2:22:f6:6b:5a:b1:d5:21:71:b2:ac: 91:45:fa:fa:0f:cb:cb:08:14:f9:5f:7c:31:0f:97: ed:e1:b8:a2:e9:cd:16:8a:a9:2a:f8:a1:88:95:00: 04:0c:ba:a0:7f:e0:e5:a2:e1:07:d8:68:d7:da:22: f5:c1:a2:4e:fd:5d:93:1f:ea:a4:62:39:b7:f5:82: f2:bb:04:c0:ec:4a:57:e3:dc:bf:7f:c3:62:10:c7: 94:3e:d8:b7:a1:db:7f:db:e7:99:02:88:a2:28:8d: eb:c7:51:7c:70:51:a7:4b:76:87:5f:d6:f3:ae:4f: 91:05:9d:be:0c:be:1c:92:f8:42:20:8b:a3:7f:9d: b5:52:87:c1:52:d9:cc:31:63:9a:1b:0a:b7:2f:e2: 49:51:70:d2:cc:6c:57:d2:7a:2d:fa:13:20:57:4d: 4d:f6:ea:bf:79:3c:4d:d3:8d:9f:5a:dd:50:31:e7: 27:e4:00:ae:97:83:83:1b:a8:55:f7:de:7c:3e:a3: 7e:3d:a3:f2:cf:95:43:f3:16:f5:4b:63:5a:a8:17: ad:5e:dd:15:1a:45:55:f6:48:72:0c:6f:6c:c6:2d: fc:16:49:85:40:be:21:7b:1e:c1:6d:f2:85:7f:a0: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C1:E9:0B:07:06:F5:B6:E0:15:CF:25:2A:D1:1C:A7:DD:24:07:86 X509v3 Authority Key Identifier: keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b3:4e:d5:b5:77:a2:6e:10:16:06:e9:92:6e:76:19:de:4c: 6d:12:84:91:4b:cb:a1:be:fa:24:6f:f4:39:1d:bb:38:03:25: 11:6a:be:11:8f:d2:07:18:fe:98:c8:4b:7f:01:14:95:38:6e: 32:ea:f7:37:60:41:4a:14:0d:9d:0e:95:76:e5:39:ed:df:97: e7:e9:e8:6d:6f:25:af:04:73:75:09:ea:a6:54:ee:4f:e0:ec: b5:72:f4:22:e4:29:fc:39:8c:4d:a9:30:23:6c:5e:e9:34:ea: 98:9b:63:8d:16:81:2c:98:71:95:9c:78:45:98:01:a9:5c:0e: e5:5f:b1:42:df:40:97:b9:fe:35:81:96:0f:57:6d:ea:a0:b3: 9d:09:92:99:5d:f6:56:0e:ea:7d:dc:49:58:59:99:09:c7:10: 40:03:34:67:72:82:37:18:dc:39:0f:c3:6f:71:4b:bf:61:2d: 88:1e:52:29:36:69:6f:86:43:9c:94:c5:e2:8d:e9:ae:e5:ef: 2e:60:5e:e1:3c:5b:b7:65:ea:19:70:4f:2c:fa:02:6f:86:cb: 3d:c8:e2:fd:a5:4c:e5:c0:9d:78:95:33:5b:ab:1a:02:b0:86: 51:75:89:96:fb:75:67:0f:96:59:31:3e:52:a1:d5:67:ae:fa: f7:47:3e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvz5DA7HSSer8cXImec1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4 YWY4ZDkwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD EygwY2MxZTkwYjA3MDZmNWI2ZTAxNWNmMjUyYWQxMWNhN2RkMjQwNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YtXHLS5vrWtZHE2MDLC4pq9oiL2 a1qx1SFxsqyRRfr6D8vLCBT5X3wxD5ft4bii6c0Wiqkq+KGIlQAEDLqgf+DlouEH 2GjX2iL1waJO/V2TH+qkYjm39YLyuwTA7EpX49y/f8NiEMeUPti3odt/2+eZAoii KI3rx1F8cFGnS3aHX9bzrk+RBZ2+DL4ckvhCIIujf521UofBUtnMMWOaGwq3L+JJ UXDSzGxX0not+hMgV01N9uq/eTxN042fWt1QMecn5ACul4ODG6hV9958PqN+PaPy z5VD8xb1S2NaqBetXt0VGkVV9khyDG9sxi38FkmFQL4hex7BbfKFf6BshQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzB6QsHBvW24BXPJSrRHKfdJAeGMB8GA1UdIwQY MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLNO1bV3 om4QFgbpkm52Gd5MbRKEkUvLob76JG/0OR27OAMlEWq+EY/SBxj+mMhLfwEUlThu Mur3N2BBShQNnQ6VduU57d+X5+nobW8lrwRzdQnqplTuT+DstXL0IuQp/DmMTakw I2xe6TTqmJtjjRaBLJhxlZx4RZgBqVwO5V+xQt9Al7n+NYGWD1dt6qCznQmSmV32 Vg7qfdxJWFmZCccQQAM0Z3KCNxjcOQ/Db3FLv2EtiB5SKTZpb4ZDnJTF4o3pruXv LmBe4Txbt2XqGXBPLPoCb4bLPcji/aVM5cCdeJUzW6saArCGUXWJlvt1Zw+WWTE+ UqHVZ67690c+2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:05 2025 by rpki-client