This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json) Hash identifier: GwcCBKFFQSHppcn75lSOj+ieBmOeo7UvretAGHNeK8E= Subject key identifier: 62:88:3B:6B:7A:8A:C4:AC:ED:FB:3E:FF:81:10:82:3A:3C:EF:18:14 Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc Certificate serial: 019B30E8009FBB3A13C91AB642AB8C8D77AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft Manifest number: 0B01 Signing time: Thu 18 Dec 2025 10:01:09 +0000 Manifest this update: Thu 18 Dec 2025 10:01:09 +0000 Manifest next update: Fri 19 Dec 2025 10:01:09 +0000 Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=) 2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: f4CZ73GKaIObFnIhnbc6uISsm3Tt+ANoGZZoBJViUY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:00:9f:bb:3a:13:c9:1a:b6:42:ab:8c:8d:77:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc Validity Not Before: Dec 18 10:01:09 2025 GMT Not After : Dec 19 10:01:09 2025 GMT Subject: CN=62883b6b7a8ac4acedfb3eff8110823a3cef1814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:55:b2:bb:dc:44:52:21:58:4f:be:e9:85: 36:b6:fa:d2:cd:bf:a3:9e:a3:e5:fb:c6:fc:38:61: c3:22:ac:9f:f4:aa:24:82:8d:35:3e:7f:21:59:31: 78:79:e5:b6:c0:2b:d7:30:11:6a:76:73:58:1a:50: 44:0a:eb:65:1e:48:23:02:6f:74:c5:70:c9:4d:8c: b0:18:40:28:f5:e5:1b:21:1e:6a:a6:98:ee:43:2a: 13:1e:ab:77:6a:75:f4:83:9f:52:70:b4:b6:0c:7f: aa:cc:03:d9:78:11:da:b0:e4:ba:26:3a:bd:72:0e: 4a:a9:6d:50:76:d4:6b:62:fd:96:3c:06:c1:95:30: b6:86:68:14:0d:fd:f4:22:a8:95:c8:41:e6:40:e6: dc:46:a0:1c:53:fc:40:26:ba:2f:4a:5b:eb:7b:87: 54:a8:01:95:58:ee:c4:c5:bb:75:6d:7d:2b:a3:44: 8b:3b:ea:cf:50:0c:0b:74:9a:d2:ac:30:c6:95:b4: 4f:f7:21:c1:68:5c:62:db:d7:2d:8b:0d:9f:d0:f0: 90:f7:da:02:95:7e:9c:0e:05:f9:f0:c5:0c:ee:7a: 93:9d:4b:21:cf:d8:37:2c:fb:5d:11:b8:2a:d1:45: 74:6d:96:8c:f4:99:76:e6:00:9f:07:b1:7a:a2:e6: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:88:3B:6B:7A:8A:C4:AC:ED:FB:3E:FF:81:10:82:3A:3C:EF:18:14 X509v3 Authority Key Identifier: keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:78:d7:86:38:8f:6f:e1:72:ab:73:82:4e:34:f9:2f:4d:7b: 99:87:d0:74:3b:b4:f3:00:df:ff:24:19:4d:06:66:ec:4c:8d: 0e:2a:08:6c:b8:68:0d:a5:39:8e:26:c1:4e:a9:6d:86:bc:14: 7e:b5:95:2b:ad:ba:79:53:41:e0:ec:b3:fd:12:6a:32:b2:d5: be:f0:19:e8:a8:c2:94:e7:53:09:b1:65:bc:f5:76:0b:3f:61: 75:aa:ba:bc:f5:5b:a5:89:ef:09:02:9a:f5:f8:f5:d2:ec:93: 02:54:41:6f:01:f7:73:a0:a9:8b:ff:b9:2b:c2:94:f6:76:b4: 2d:58:56:78:ea:c5:f6:51:c4:36:4b:f7:7d:74:fb:72:0a:96: c8:7f:f8:44:47:c2:cd:14:18:52:8d:fa:79:b1:76:01:38:1a: b6:2f:35:92:b8:2c:b5:bc:de:89:8a:7e:a5:dd:26:08:6a:88: d5:cb:39:c0:9f:df:77:f2:19:6c:cb:40:d8:58:3a:88:bc:dc: 73:0a:a9:b0:7d:d3:00:4a:bc:96:f4:fe:e5:ec:3b:45:80:e5: c7:d3:66:87:4b:cc:dd:b6:03:ac:33:25:4e:db:c8:37:35:7a: 2e:db:4a:33:8b:29:31:21:c8:ab:4d:fe:6c:6f:99:77:d6:45: c1:cd:37:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ACfuzoTyRq2QquMjXesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFkNDQ5YzdhZTRiZDIyYzZhZWU1ZmJkYzA4MjMwNDJm ZmY4ZmMwHhcNMjUxMjE4MTAwMTA5WhcNMjUxMjE5MTAwMTA5WjAzMTEwLwYDVQQD Eyg2Mjg4M2I2YjdhOGFjNGFjZWRmYjNlZmY4MTEwODIzYTNjZWYxODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfdVsrvcRFIhWE++6YU2tvrSzb+j nqPl+8b8OGHDIqyf9Kokgo01Pn8hWTF4eeW2wCvXMBFqdnNYGlBECutlHkgjAm90 xXDJTYywGEAo9eUbIR5qppjuQyoTHqt3anX0g59ScLS2DH+qzAPZeBHasOS6Jjq9 cg5KqW1QdtRrYv2WPAbBlTC2hmgUDf30IqiVyEHmQObcRqAcU/xAJrovSlvre4dU qAGVWO7Exbt1bX0ro0SLO+rPUAwLdJrSrDDGlbRP9yHBaFxi29ctiw2f0PCQ99oC lX6cDgX58MUM7nqTnUshz9g3LPtdEbgq0UV0bZaM9Jl25gCfB7F6ouZ5LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKIO2t6isSs7fs+/4EQgjo87xgUMB8GA1UdIwQY MBaAFLFq1EnHrkvSLGruX73AgjBC//j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTIt MmI3ODgzMTIxNTFkLzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTItMmI3ODgzMTIxNTFk LzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHjXhjiP b+Fyq3OCTjT5L017mYfQdDu08wDf/yQZTQZm7EyNDioIbLhoDaU5jibBTqlthrwU frWVK626eVNB4Oyz/RJqMrLVvvAZ6KjClOdTCbFlvPV2Cz9hdaq6vPVbpYnvCQKa 9fj10uyTAlRBbwH3c6Cpi/+5K8KU9na0LVhWeOrF9lHENkv3fXT7cgqWyH/4REfC zRQYUo36ebF2ATgati81krgstbzeiYp+pd0mCGqI1cs5wJ/fd/IZbMtA2Fg6iLzc cwqpsH3TAEq8lvT+5ew7RYDlx9Nmh0vM3bYDrDMlTtvINzV6LttKM4spMSHIq03+ bG+Zd9ZFwc03Gw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:06:42 2025 by rpki-client