This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json) Hash identifier: troWi4TEdSFzF2Rk1mnEBshRRAt9f+zdHdv2rIrZGI0= Subject key identifier: DD:E4:FC:1D:EB:0F:3C:12:A3:21:D5:A8:5B:D8:C4:1E:74:BE:BE:02 Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Certificate serial: 019AFEB26B72B344F3BEA9E89DE0318570AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft Manifest number: 16FB Signing time: Mon 08 Dec 2025 16:01:36 +0000 Manifest this update: Mon 08 Dec 2025 16:01:36 +0000 Manifest next update: Tue 09 Dec 2025 16:01:36 +0000 Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=) 2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=) 3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: BfpPMM9r0O3RFbtttkP+9NYvYzbAWf2sID6weh8QduQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:b2:6b:72:b3:44:f3:be:a9:e8:9d:e0:31:85:70:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Validity Not Before: Dec 8 16:01:36 2025 GMT Not After : Dec 9 16:01:36 2025 GMT Subject: CN=dde4fc1deb0f3c12a321d5a85bd8c41e74bebe02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:13:21:81:bb:50:11:b0:c5:bf:a5:b1:7e: 29:22:a0:4a:26:71:a1:01:ff:19:59:c1:15:20:bb: b3:dc:b4:23:b1:7c:9b:bc:49:e3:38:2a:4f:82:ad: 92:fd:93:b4:36:91:8d:1b:12:68:da:2d:46:2e:37: 51:4c:a6:37:ac:aa:d5:18:78:40:fe:7e:6d:fe:36: bd:27:d7:46:ec:6b:bb:4c:80:64:cb:b8:27:2c:3b: 20:38:ef:02:3c:1a:6d:2b:e7:a9:fc:4d:9b:d4:3a: dd:41:51:00:66:b1:44:d3:1b:23:6e:e9:93:f3:53: 3a:32:b6:fe:91:b0:09:05:d0:2d:e2:c6:bb:3f:33: 97:de:d6:e4:61:03:c5:3b:29:0c:eb:72:f8:b8:6f: 17:73:f9:3a:58:f5:b0:90:d2:15:e1:05:5b:36:dd: fa:aa:7d:a4:23:32:98:0e:f8:18:3c:b0:cf:0d:a0: b3:9d:b8:90:e2:58:5f:58:7b:2b:ec:36:e3:8c:6b: 92:69:74:8e:38:3d:51:2f:ad:c0:b0:47:4d:21:67: 9d:56:53:6b:35:ee:24:89:a1:6e:01:0c:4a:47:8b: a9:f1:50:d0:b1:d4:87:b6:e2:cc:9a:5c:57:a0:e6: 3a:30:0d:a3:4b:c9:f4:cd:84:9c:ff:be:cc:af:ae: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E4:FC:1D:EB:0F:3C:12:A3:21:D5:A8:5B:D8:C4:1E:74:BE:BE:02 X509v3 Authority Key Identifier: keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3d:78:34:ac:ad:9d:d0:3a:dd:21:fa:0a:f9:71:e4:c6:d6: a0:a8:56:e4:b4:f0:df:5b:86:b1:4c:26:a8:85:b0:1c:f9:10: 83:bc:49:4f:79:a4:ad:5b:bd:ee:64:a6:52:85:e6:b7:8d:34: 1e:c8:f6:ae:ad:ba:b1:43:2f:c0:ed:e4:56:aa:c0:3c:02:fa: 12:21:13:c7:0d:16:e5:7b:23:01:eb:2b:d1:6b:bd:71:5d:5f: 0b:b4:9d:d0:89:09:9b:3c:8e:6d:e7:0b:b7:29:12:c1:22:0a: 63:8f:46:fc:1a:7e:d6:85:ff:0e:ea:c6:52:17:a9:ec:d0:58: 54:1c:d4:ba:d7:7f:bc:5e:f1:82:b8:c8:a9:cd:70:2f:cb:d2: cd:22:7c:6a:90:73:9b:3c:a8:a9:9c:33:5b:e5:96:45:fa:bd: dc:6b:1c:62:54:2c:38:97:24:bc:22:40:f8:79:3c:63:ed:c2: 91:93:69:d3:d5:85:f0:45:b8:a8:15:33:b9:97:da:3a:19:69: 9a:f1:ce:b7:e6:9f:c2:03:5f:c6:3c:fc:b3:08:25:d9:98:f6: 67:3a:d6:61:6c:04:ee:8c:b9:ba:8d:4b:29:44:7d:f9:7f:45: ae:2f:48:78:a2:4c:aa:8f:87:a5:b0:7c:dd:7b:f3:d3:56:1e: 10:99:06:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+smtys0TzvqnoneAxhXCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjkzZjFiZTY1N2ZiOGM3MWJjYmI5Yzc3YmU1NGE5Mzcy ZGIwNDUwHhcNMjUxMjA4MTYwMTM2WhcNMjUxMjA5MTYwMTM2WjAzMTEwLwYDVQQD EyhkZGU0ZmMxZGViMGYzYzEyYTMyMWQ1YTg1YmQ4YzQxZTc0YmViZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDATIYG7UBGwxb+lsX4pIqBKJnGh Af8ZWcEVILuz3LQjsXybvEnjOCpPgq2S/ZO0NpGNGxJo2i1GLjdRTKY3rKrVGHhA /n5t/ja9J9dG7Gu7TIBky7gnLDsgOO8CPBptK+ep/E2b1DrdQVEAZrFE0xsjbumT 81M6Mrb+kbAJBdAt4sa7PzOX3tbkYQPFOykM63L4uG8Xc/k6WPWwkNIV4QVbNt36 qn2kIzKYDvgYPLDPDaCznbiQ4lhfWHsr7DbjjGuSaXSOOD1RL63AsEdNIWedVlNr Ne4kiaFuAQxKR4up8VDQsdSHtuLMmlxXoOY6MA2jS8n0zYSc/77Mr66nEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3k/B3rDzwSoyHVqFvYxB50vr4CMB8GA1UdIwQY MBaAFLFpPxvmV/uMcby7nHe+VKk3LbBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMt N2NkMTQ2NTAwYjJkLzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMtN2NkMTQ2NTAwYjJk LzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT14NKyt ndA63SH6Cvlx5MbWoKhW5LTw31uGsUwmqIWwHPkQg7xJT3mkrVu97mSmUoXmt400 Hsj2rq26sUMvwO3kVqrAPAL6EiETxw0W5XsjAesr0Wu9cV1fC7Sd0IkJmzyObecL tykSwSIKY49G/Bp+1oX/DurGUhep7NBYVBzUutd/vF7xgrjIqc1wL8vSzSJ8apBz mzyoqZwzW+WWRfq93GscYlQsOJckvCJA+Hk8Y+3CkZNp09WF8EW4qBUzuZfaOhlp mvHOt+afwgNfxjz8swgl2Zj2ZzrWYWwE7oy5uo1LKUR9+X9Fri9IeKJMqo+HpbB8 3Xvz01YeEJkGNg== -----END CERTIFICATE-----Generated at Mon Dec 8 22:07:21 2025 by rpki-client