This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft File: sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json) Hash identifier: y4W+D7CEG+jVZyYWpAncGBc37iaybaJU815X3u7uIUY= Subject key identifier: 54:3A:37:00:32:F3:75:46:4A:CF:80:FD:CE:59:08:16:3A:A7:BB:52 Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18 Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18 Certificate serial: 019AF42E586E879DBB258423E1FB05AB3CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft Manifest number: 0712 Signing time: Sat 06 Dec 2025 15:01:09 +0000 Manifest this update: Sat 06 Dec 2025 15:01:09 +0000 Manifest next update: Sun 07 Dec 2025 15:01:09 +0000 Files and hashes: 1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=) 2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: +V3Nx/FKPIN7XCyNAm+JpfHs2B0gMy97+lMXG0SF1rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:58:6e:87:9d:bb:25:84:23:e1:fb:05:ab:3c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18 Validity Not Before: Dec 6 15:01:09 2025 GMT Not After : Dec 7 15:01:09 2025 GMT Subject: CN=543a370032f375464acf80fdce5908163aa7bb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:6f:88:6e:46:b6:71:8d:73:f4:50:5d:46: 74:94:ff:f9:01:a5:95:2c:15:e5:20:17:a3:5c:a9: 19:a3:5a:93:65:fa:c8:fa:ac:78:93:38:c6:dc:1e: a0:fa:92:bb:32:ba:14:ae:8c:a9:6c:f5:44:20:0e: 38:74:aa:f0:75:3c:e8:35:fb:ed:1f:6a:87:eb:71: 0b:1b:4f:b8:14:fb:03:ad:8b:12:cc:50:3f:a4:24: 5c:27:d4:57:19:ef:b9:2b:f5:3f:35:19:90:c7:8b: 42:2b:1c:97:bc:4c:d0:38:74:b0:31:02:8f:2f:ad: b7:0f:44:16:4e:44:4a:00:63:19:27:92:69:4a:a7: df:8c:3c:2d:88:d5:a9:9e:8a:7b:62:14:af:bc:03: 7e:ef:5c:f2:ef:d6:7c:19:77:48:8a:21:b0:03:ea: 21:e0:3e:64:bb:a6:8d:2a:ee:b7:44:51:2b:74:5e: 29:88:b2:7f:20:11:08:a8:c6:84:85:7c:4d:e1:d0: 98:59:dd:ec:3e:50:56:6f:20:25:f9:81:d4:dc:0f: 99:7f:8a:6e:73:a4:87:44:46:a8:b5:3d:f1:5b:84: b9:fd:a6:cf:99:72:2c:12:d6:c5:84:01:8d:43:1c: ce:ec:57:30:8b:78:7f:cb:3d:6a:71:fa:5c:68:ac: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3A:37:00:32:F3:75:46:4A:CF:80:FD:CE:59:08:16:3A:A7:BB:52 X509v3 Authority Key Identifier: keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f0:02:93:a3:47:03:df:66:a4:ca:56:5e:78:68:1a:72:d5: ff:a6:73:a1:ce:51:e9:ec:48:66:86:f6:bc:61:a2:fb:c3:f6: 42:30:11:e4:b3:3d:c7:64:c0:42:de:b1:e2:a6:9c:0d:81:85: 2b:f8:62:f0:ca:94:77:4a:8a:9c:80:55:bb:01:a4:2a:8f:c9: fb:b0:5b:e7:46:cd:40:37:01:ef:9a:17:80:eb:dd:b6:40:e3: 21:f0:12:d9:1b:e2:73:1d:e0:00:1d:5e:57:68:ad:14:15:a1: d5:04:6e:64:04:4d:c5:a7:11:2e:af:a2:ed:2c:7a:5e:e4:72: 17:6b:e7:a2:4e:3c:35:23:be:8f:92:af:d5:fc:66:9b:05:ba: 28:4d:78:87:66:6b:f5:36:27:07:5e:f7:4d:0e:d6:bc:bb:e5: 1f:ef:ae:1d:86:d4:ca:8b:ab:f0:45:ab:ea:7f:61:05:13:60: fc:45:a9:0d:a0:06:dc:d5:d2:11:c7:c4:b4:4c:7b:1e:8b:84: ac:6c:bc:c1:ea:e8:d7:d6:46:0a:53:2b:db:72:2b:16:27:fd: d1:8e:e0:22:40:64:4b:04:41:78:5c:c5:34:e4:36:2a:8e:40: 17:5d:1b:79:33:8a:3d:7b:96:8b:a3:4d:22:dc:aa:f5:d0:43: 6b:0d:c4:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Llhuh527JYQj4fsFqzy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjIxNTZmNTljZmM3OTM5NmU2NGYzMzQyZGU2NGRlM2Y4 OGVlMTgwHhcNMjUxMjA2MTUwMTA5WhcNMjUxMjA3MTUwMTA5WjAzMTEwLwYDVQQD Eyg1NDNhMzcwMDMyZjM3NTQ2NGFjZjgwZmRjZTU5MDgxNjNhYTdiYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKNviG5GtnGNc/RQXUZ0lP/5AaWV LBXlIBejXKkZo1qTZfrI+qx4kzjG3B6g+pK7MroUroypbPVEIA44dKrwdTzoNfvt H2qH63ELG0+4FPsDrYsSzFA/pCRcJ9RXGe+5K/U/NRmQx4tCKxyXvEzQOHSwMQKP L623D0QWTkRKAGMZJ5JpSqffjDwtiNWpnop7YhSvvAN+71zy79Z8GXdIiiGwA+oh 4D5ku6aNKu63RFErdF4piLJ/IBEIqMaEhXxN4dCYWd3sPlBWbyAl+YHU3A+Zf4pu c6SHREaotT3xW4S5/abPmXIsEtbFhAGNQxzO7Fcwi3h/yz1qcfpcaKwIqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ6NwAy83VGSs+A/c5ZCBY6p7tSMB8GA1UdIwQY MBaAFLFiFW9Zz8eTluZPM0LeZN4/iO4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85NjU3YTUtOGNlMi00MDVlLWFjOGMt ZGQyYWNjYWNmY2NjLzEvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85NjU3YTUtOGNlMi00MDVlLWFjOGMtZGQyYWNjYWNmY2Nj LzEvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvACk6NH A99mpMpWXnhoGnLV/6Zzoc5R6exIZob2vGGi+8P2QjAR5LM9x2TAQt6x4qacDYGF K/hi8MqUd0qKnIBVuwGkKo/J+7Bb50bNQDcB75oXgOvdtkDjIfAS2Rvicx3gAB1e V2itFBWh1QRuZARNxacRLq+i7Sx6XuRyF2vnok48NSO+j5Kv1fxmmwW6KE14h2Zr 9TYnB173TQ7WvLvlH++uHYbUyour8EWr6n9hBRNg/EWpDaAG3NXSEcfEtEx7HouE rGy8wero19ZGClMr23IrFif90Y7gIkBkSwRBeFzFNOQ2Ko5AF10beTOKPXuWi6NN Ityq9dBDaw3EUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:49 2025 by rpki-client