This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft File: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json) Hash identifier: Gf+0EQnD+mOrenUAanPOyW0Vnf+KmWaMZu6wI2hpqsI= Subject key identifier: 89:BE:CF:7C:F4:06:4E:6D:45:AA:02:83:04:AB:12:3A:61:8C:9B:AE Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4 Certificate issuer: /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4 Certificate serial: 019AF1D23332D5D4446E0993D1B65A022751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft Manifest number: 16A7 Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=) 2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: /4ljrQS1t36IZWdQ9PeQZj/6hiUH1SG6BxfagZ18FQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:33:32:d5:d4:44:6e:09:93:d1:b6:5a:02:27:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4 Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=89becf7cf4064e6d45aa028304ab123a618c9bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7c:1c:33:10:fe:65:71:82:d3:40:8e:68:50: 6d:37:6e:d5:f2:84:18:52:ea:27:ee:a0:86:c8:63: 74:20:06:d7:87:1c:5f:90:05:8c:9c:b8:a4:c1:8f: 00:6b:da:26:15:92:30:b3:e1:0c:9b:cb:82:d7:28: 0a:de:a0:1b:b2:ee:42:cb:82:30:27:f6:fe:60:3e: d1:70:7d:52:d0:93:cb:89:04:cc:14:57:0b:1f:a7: 0f:4e:ba:47:75:8a:38:21:02:b9:b6:1e:c4:16:12: eb:25:5a:cf:fc:83:c1:d2:25:cf:a0:7e:55:bf:ab: bf:e0:9d:57:7b:47:fb:10:5d:08:bf:d4:d5:a6:43: bd:c3:bb:7e:c2:1b:90:4f:53:e9:83:8c:0d:64:b6: 67:63:bf:d2:8b:fd:2d:96:0f:3b:cc:9e:d0:d9:9b: 68:19:e6:d1:3f:07:0f:dc:94:f9:9e:72:ec:8a:ca: 74:26:07:39:8c:33:55:85:bf:d4:a0:a8:81:78:87: df:01:65:fb:d2:15:81:55:19:98:02:55:c2:b7:91: 03:c5:bf:25:15:80:c7:f1:1a:b5:5e:0d:e6:fc:be: ff:e6:77:ca:39:5a:a6:2e:f9:73:03:1a:0e:47:92: 3c:ad:0b:16:c0:49:b6:e9:42:5f:3b:a5:ba:79:c6: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BE:CF:7C:F4:06:4E:6D:45:AA:02:83:04:AB:12:3A:61:8C:9B:AE X509v3 Authority Key Identifier: keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d9:42:a2:0a:fe:f4:60:8b:ed:4e:fb:43:34:ce:5d:e3:85: f8:90:58:4e:e4:5d:a3:38:dd:85:a6:02:15:66:05:46:ce:58: 09:4f:96:e0:16:8f:c7:7d:a3:5f:48:c3:f9:17:03:27:7a:22: 97:a3:dc:ea:ef:f5:93:41:39:d7:92:62:72:69:7a:fc:a0:f7: 66:95:6e:0a:1e:33:4c:17:1f:c0:29:1a:da:93:80:2d:aa:50: 82:02:16:18:41:7d:26:95:e9:95:20:c0:06:1c:f5:ae:e2:69: 62:60:1e:f1:9a:ee:4e:a7:dc:86:d8:c3:3e:2d:b1:1e:9b:71: e3:8a:f4:10:8a:20:d4:eb:64:13:55:f8:be:d4:65:9d:64:f7: 71:23:dd:46:7c:13:85:27:66:e3:2b:0f:91:32:4e:f4:ef:6e: 9d:5b:34:7f:cc:11:c9:9e:83:ed:6b:53:54:e7:9f:27:00:d6: 7d:06:88:a1:5f:43:c4:ef:a0:fe:76:d1:16:2b:05:b4:66:c7: e0:c0:bc:54:b6:16:6b:60:36:cc:0d:ce:20:e2:4d:7d:26:49: 9e:24:f7:3d:79:b3:3d:6b:a3:80:c6:19:66:23:33:06:d0:7d: 87:3b:f0:7a:cc:83:ec:0e:da:74:53:a1:b9:84:83:e4:7a:65: 3c:18:52:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jMy1dREbgmT0bZaAidRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDU5NmZiMWEzZjJmNGIxMjdmYjdjZWMxOWZkOTBiYjk0 YzczYTQwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD Eyg4OWJlY2Y3Y2Y0MDY0ZTZkNDVhYTAyODMwNGFiMTIzYTYxOGM5YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HwcMxD+ZXGC00COaFBtN27V8oQY Uuon7qCGyGN0IAbXhxxfkAWMnLikwY8Aa9omFZIws+EMm8uC1ygK3qAbsu5Cy4Iw J/b+YD7RcH1S0JPLiQTMFFcLH6cPTrpHdYo4IQK5th7EFhLrJVrP/IPB0iXPoH5V v6u/4J1Xe0f7EF0Iv9TVpkO9w7t+whuQT1Ppg4wNZLZnY7/Si/0tlg87zJ7Q2Zto GebRPwcP3JT5nnLsisp0Jgc5jDNVhb/UoKiBeIffAWX70hWBVRmYAlXCt5EDxb8l FYDH8Rq1Xg3m/L7/5nfKOVqmLvlzAxoOR5I8rQsWwEm26UJfO6W6ecbdowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIm+z3z0Bk5tRaoCgwSrEjphjJuuMB8GA1UdIwQY MBaAFLHVlvsaPy9LEn+3zsGf2Qu5THOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjIt MWRmNDAxNDViMGJlLzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjItMWRmNDAxNDViMGJl LzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNlCogr+ 9GCL7U77QzTOXeOF+JBYTuRdozjdhaYCFWYFRs5YCU+W4BaPx32jX0jD+RcDJ3oi l6Pc6u/1k0E515Jicml6/KD3ZpVuCh4zTBcfwCka2pOALapQggIWGEF9JpXplSDA Bhz1ruJpYmAe8ZruTqfchtjDPi2xHptx44r0EIog1OtkE1X4vtRlnWT3cSPdRnwT hSdm4ysPkTJO9O9unVs0f8wRyZ6D7WtTVOefJwDWfQaIoV9DxO+g/nbRFisFtGbH 4MC8VLYWa2A2zA3OIOJNfSZJniT3PXmzPWujgMYZZiMzBtB9hzvwesyD7A7adFOh uYSD5HplPBhSCw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:09 2025 by rpki-client