This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json) Hash identifier: QtiN32/9KaHkBw0KOfKTn77ST523yJ4IvJf490ayGWA= Subject key identifier: 8F:2B:E3:49:27:03:22:7C:D2:7B:EB:2D:BE:41:DB:6D:46:12:71:A8 Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Certificate serial: 019B2D0B94006C7538765D97943128CF5246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft Manifest number: 1713 Signing time: Wed 17 Dec 2025 16:01:31 +0000 Manifest this update: Wed 17 Dec 2025 16:01:31 +0000 Manifest next update: Thu 18 Dec 2025 16:01:31 +0000 Files and hashes: 1: LCLdln04vZQC1VrtG1fTPHEb70Q.roa (hash: oudWmt2A+UBjTTJVpYPeyxclYRpQQ+QQ+KUoZ4KwoZ0=) 2: nsMiMZPA9gAx5-3WroCpND5hgHk.roa (hash: LGSjiJkAkGJ/PXxonpdneeIWsA2TPApQ0M2tU2szz2w=) 3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: U2D0qBwj7JQmnvvjUIH3sWOgs6RKk29iRv8fjFGm3Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:94:00:6c:75:38:76:5d:97:94:31:28:cf:52:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045 Validity Not Before: Dec 17 16:01:31 2025 GMT Not After : Dec 18 16:01:31 2025 GMT Subject: CN=8f2be3492703227cd27beb2dbe41db6d461271a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:56:49:59:77:83:3d:10:c1:d5:c4:71:82: 17:16:f5:1f:08:4d:18:aa:1a:c7:a0:90:e3:28:86: fe:75:ae:22:b1:71:18:51:aa:47:a4:68:ae:aa:9c: e7:b6:75:4d:23:e0:7e:69:69:07:6d:a6:b2:82:ce: 24:76:51:6b:30:40:58:37:ea:16:d6:2a:fd:64:51: b0:d0:63:28:54:20:fe:6b:87:ca:84:81:26:a6:f4: 38:5f:39:57:11:b0:b6:5a:25:ba:e0:14:35:1b:0f: 6a:9e:be:2d:1e:91:48:90:9b:03:d0:a9:52:94:46: c3:5b:76:1c:63:71:fe:85:f8:8d:f8:dc:6b:bd:06: f1:49:a6:7a:81:fa:6b:3b:12:1f:b3:5f:8f:f8:29: 12:d6:6f:c6:d6:ad:74:08:33:27:2c:92:05:e8:e9: fd:6a:b5:c1:1a:b5:cd:33:e9:75:35:63:91:b4:48: 8a:50:98:f4:02:7e:1a:94:29:3e:3a:9a:8e:97:2e: 94:47:35:c8:29:2f:48:0d:62:12:54:f5:77:f8:74: 8d:9e:3e:52:34:00:5c:73:42:9c:66:42:f7:d5:5c: 79:ad:20:88:e7:c9:f6:77:90:74:da:7e:7c:76:77: 9d:ff:65:bb:3e:7e:ec:44:24:97:c5:9a:64:b5:88: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:E3:49:27:03:22:7C:D2:7B:EB:2D:BE:41:DB:6D:46:12:71:A8 X509v3 Authority Key Identifier: keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4e:6c:43:17:9f:2c:bc:97:75:eb:57:e6:b5:b9:57:3b:8c: d3:52:fd:31:dd:0e:5d:13:f2:34:d2:f3:d9:80:68:63:15:b1: 81:02:1d:90:24:54:5d:fb:95:a4:57:e2:2c:f6:eb:4f:59:6d: dc:ba:2c:a2:dd:11:f1:b8:1c:13:0d:9f:79:ad:ea:65:86:86: a4:9e:74:8d:bb:2e:ea:55:e3:b7:eb:1f:3d:fb:67:a4:54:a6: fd:2f:4f:d5:26:82:b1:6a:c2:4c:b2:98:27:b9:e1:48:3d:cc: c8:bc:3d:bc:1b:ef:6d:f6:3f:da:12:a3:bd:c4:c5:fa:00:63: 28:83:10:ed:71:bf:c6:b3:62:e5:32:d0:dd:c9:09:ea:28:17: 02:b4:ca:70:09:81:c9:8d:45:97:17:4f:1b:d7:af:06:25:30: 0a:86:11:8d:dd:f7:08:2b:d1:ed:02:4d:0b:fd:eb:a6:38:a9: 63:20:e2:61:5f:c4:7c:ab:d5:81:5a:f2:a6:dd:fc:48:62:6e: 59:ff:93:79:31:38:d3:a1:b5:0d:31:c9:e4:67:18:1b:a5:c5: 3c:4c:6a:4d:45:03:01:61:5e:c0:5e:c7:e8:3f:e1:a0:5b:dc: e0:f7:a0:64:a4:a1:47:74:f1:a0:99:41:33:98:e2:df:47:cf: e3:3d:78:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC5QAbHU4dl2XlDEoz1JGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjkzZjFiZTY1N2ZiOGM3MWJjYmI5Yzc3YmU1NGE5Mzcy ZGIwNDUwHhcNMjUxMjE3MTYwMTMxWhcNMjUxMjE4MTYwMTMxWjAzMTEwLwYDVQQD Eyg4ZjJiZTM0OTI3MDMyMjdjZDI3YmViMmRiZTQxZGI2ZDQ2MTI3MWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsVWSVl3gz0QwdXEcYIXFvUfCE0Y qhrHoJDjKIb+da4isXEYUapHpGiuqpzntnVNI+B+aWkHbaaygs4kdlFrMEBYN+oW 1ir9ZFGw0GMoVCD+a4fKhIEmpvQ4XzlXEbC2WiW64BQ1Gw9qnr4tHpFIkJsD0KlS lEbDW3YcY3H+hfiN+NxrvQbxSaZ6gfprOxIfs1+P+CkS1m/G1q10CDMnLJIF6On9 arXBGrXNM+l1NWORtEiKUJj0An4alCk+OpqOly6URzXIKS9IDWISVPV3+HSNnj5S NABcc0KcZkL31Vx5rSCI58n2d5B02n58dned/2W7Pn7sRCSXxZpktYigqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8r40knAyJ80nvrLb5B221GEnGoMB8GA1UdIwQY MBaAFLFpPxvmV/uMcby7nHe+VKk3LbBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMt N2NkMTQ2NTAwYjJkLzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84MGY5MWYtMWU0Yi00OWU2LThkMTMtN2NkMTQ2NTAwYjJk LzEvc1drX0ctWlgtNHh4dkx1Y2Q3NVVxVGN0c0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU5sQxef LLyXdetX5rW5VzuM01L9Md0OXRPyNNLz2YBoYxWxgQIdkCRUXfuVpFfiLPbrT1lt 3Losot0R8bgcEw2fea3qZYaGpJ50jbsu6lXjt+sfPftnpFSm/S9P1SaCsWrCTLKY J7nhSD3MyLw9vBvvbfY/2hKjvcTF+gBjKIMQ7XG/xrNi5TLQ3ckJ6igXArTKcAmB yY1FlxdPG9evBiUwCoYRjd33CCvR7QJNC/3rpjipYyDiYV/EfKvVgVrypt38SGJu Wf+TeTE406G1DTHJ5GcYG6XFPExqTUUDAWFewF7H6D/hoFvc4PegZKShR3TxoJlB M5ji30fP4z143w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:56 2025 by rpki-client