This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft File: sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json) Hash identifier: PoE9/GpNt6PGj0vCDJNynxQUb7I5gcXI4osi36clRXA= Subject key identifier: DE:C0:14:40:A8:37:6E:FD:0B:C2:FA:5F:79:F0:F0:92:A2:14:77:11 Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Certificate serial: 019AF2767F582C5B750F71EE54868F94203E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft Manifest number: 0DEB Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=) 2: RkflmKMTMUrJqHaFUNJeUbhKC-I.roa (hash: orUHP/pEtKksjdbFiXyWrXrjXHxmT0wSFykk83oMEWs=) 3: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=) 4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: kUbq6nEWoh6UNrq0QSm5jPmgbUlMcnZ45j/WJRjoJJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7f:58:2c:5b:75:0f:71:ee:54:86:8f:94:20:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=dec01440a8376efd0bc2fa5f79f0f092a2147711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:86:9a:ec:e1:f6:3a:60:a8:d5:93:a9:ba: 91:30:e9:75:e9:8d:ec:c9:37:11:14:e2:c2:1a:b0: e9:89:ac:e6:e6:7d:52:3d:51:ca:a8:b9:a1:2f:d8: d5:4e:00:b2:47:9b:de:7f:1a:de:f3:7a:8c:27:e0: 3e:84:09:3f:3e:58:5f:ce:63:a8:04:0d:4f:11:6a: 86:09:91:2e:22:41:3d:77:47:07:a3:8a:6a:9d:7e: 0c:a4:7f:2c:1b:f0:9e:ad:53:a7:d4:40:c6:73:a7: 8e:f5:a9:87:fc:ed:70:e7:6e:09:d0:88:33:09:d9: 5b:d8:bf:38:c0:44:2d:0f:22:86:b3:e2:95:63:f8: 09:a0:13:fc:18:2c:5b:1b:c1:df:9b:00:cf:f6:01: 67:7f:1e:b2:6d:74:f3:c9:0b:75:f6:f7:68:e5:06: 36:06:50:f6:36:b6:ad:cb:0f:46:1b:ca:36:3d:74: 92:c7:bd:a3:f6:14:99:42:c5:d5:e0:b3:9e:51:d1: 6e:8c:0e:6b:25:65:6a:64:28:25:6c:b5:7d:50:38: 77:d7:d4:d5:4d:4b:f8:9e:2b:40:d0:5b:de:0f:f0: 9d:15:80:b5:f2:da:3f:a6:5c:42:17:1b:14:77:1f: 0b:41:01:65:43:7c:1a:1c:f2:35:aa:73:04:ce:67: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:14:40:A8:37:6E:FD:0B:C2:FA:5F:79:F0:F0:92:A2:14:77:11 X509v3 Authority Key Identifier: keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ae:1a:4f:75:6f:e3:80:5e:6f:90:a4:10:e0:fa:ac:5b:69: 7c:98:e9:20:50:07:12:cd:ef:66:b4:57:44:70:4c:3b:b2:46: 4a:58:2b:72:a9:70:0f:0f:7c:4c:ce:43:56:d5:52:ea:2a:55: e6:2d:4f:9b:12:d0:4d:c5:39:b4:2e:1a:89:f8:32:72:ea:0c: df:80:2a:1f:74:22:81:1c:12:98:c5:6e:a3:2f:41:3c:e4:bd: 53:ff:fd:a6:38:5c:e4:4c:4a:9d:84:f5:12:b0:aa:76:79:e4: 4e:36:33:cd:8c:8d:56:dd:ae:0f:41:15:06:71:e4:35:9c:26: 4b:26:95:38:d7:a4:44:82:37:6e:8c:46:9e:0d:d7:39:d1:5e: aa:69:8d:55:a5:5c:f5:78:ef:b9:9c:35:7f:b2:07:ce:9f:0d: 86:77:98:ff:4a:13:65:fa:fc:56:b7:64:20:f2:ed:05:d1:1b: 16:ee:e5:b1:08:80:7f:2f:b3:f6:04:da:85:de:7f:cf:ad:21: 26:10:a4:6b:19:a9:01:38:49:28:20:a6:bd:b0:3f:d9:9a:d8: 40:58:34:7e:13:cb:f7:37:fe:7f:e5:78:9f:5e:ee:65:d1:ce: 27:81:dd:74:e9:4c:59:54:23:d5:79:65:d3:7b:94:e8:d1:34: c9:b8:ec:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn9YLFt1D3HuVIaPlCA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw ZDc3ODcwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EyhkZWMwMTQ0MGE4Mzc2ZWZkMGJjMmZhNWY3OWYwZjA5MmEyMTQ3NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtWGmuzh9jpgqNWTqbqRMOl16Y3s yTcRFOLCGrDpiazm5n1SPVHKqLmhL9jVTgCyR5vefxre83qMJ+A+hAk/PlhfzmOo BA1PEWqGCZEuIkE9d0cHo4pqnX4MpH8sG/CerVOn1EDGc6eO9amH/O1w524J0Igz Cdlb2L84wEQtDyKGs+KVY/gJoBP8GCxbG8HfmwDP9gFnfx6ybXTzyQt19vdo5QY2 BlD2Nratyw9GG8o2PXSSx72j9hSZQsXV4LOeUdFujA5rJWVqZCglbLV9UDh319TV TUv4nitA0FveD/CdFYC18to/plxCFxsUdx8LQQFlQ3waHPI1qnMEzmclTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7AFECoN279C8L6X3nw8JKiFHcRMB8GA1UdIwQY MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3 LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha4aT3Vv 44Beb5CkEOD6rFtpfJjpIFAHEs3vZrRXRHBMO7JGSlgrcqlwDw98TM5DVtVS6ipV 5i1PmxLQTcU5tC4aifgycuoM34AqH3QigRwSmMVuoy9BPOS9U//9pjhc5ExKnYT1 ErCqdnnkTjYzzYyNVt2uD0EVBnHkNZwmSyaVONekRII3boxGng3XOdFeqmmNVaVc 9XjvuZw1f7IHzp8NhneY/0oTZfr8VrdkIPLtBdEbFu7lsQiAfy+z9gTahd5/z60h JhCkaxmpAThJKCCmvbA/2ZrYQFg0fhPL9zf+f+V4n17uZdHOJ4HddOlMWVQj1Xll 03uU6NE0ybjsww== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:38 2025 by rpki-client