This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json) Hash identifier: npXCLCLZguztaTSBJWHhRljSyGv6AivtbZQr0Z2/IC0= Subject key identifier: 45:DE:B0:FC:A1:52:06:CE:CA:EA:69:B9:F5:C6:34:AA:A8:D3:EA:4E Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50 Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550 Certificate serial: 019AF23FF9A85F9CD776322564F1AB3F8FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft Manifest number: 063D Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=) 2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: OcGGf7xtRlKWIsEaX66qb32YJlvIsLl8MQ7Yb34jdDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f9:a8:5f:9c:d7:76:32:25:64:f1:ab:3f:8f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b085804db153eb724c58557c79359c4408205550 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=45deb0fca15206cecaea69b9f5c634aaa8d3ea4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b8:91:33:58:70:cd:1c:3e:fb:2a:01:9f:04: 04:66:8b:8f:3e:50:f3:3b:f2:91:66:3e:36:a1:af: 30:ce:d8:d6:ef:f6:38:22:20:0d:86:6c:fa:1b:85: 71:cf:8b:21:d3:ff:33:9a:b2:73:d9:42:fb:59:4d: a4:ba:9e:82:dd:0a:6b:23:3d:fb:ea:62:ad:86:67: 80:44:a8:42:e7:a8:f8:3a:49:a0:4c:37:5e:20:13: ea:ab:f7:5a:1f:99:fb:ed:10:4d:59:53:2b:bf:2c: e3:22:46:3f:3a:30:27:ae:e1:61:19:b2:34:0d:bb: 11:f1:de:e5:55:fe:00:0a:66:66:ff:f9:f8:85:6e: f5:76:39:7c:d8:44:e2:69:78:5e:09:78:d4:f3:8d: 41:22:91:ef:c1:df:a5:2c:b1:f2:94:27:49:8a:0c: 71:e5:35:40:3f:85:59:ec:33:4c:5c:72:bd:2e:26: 61:c7:5b:0c:db:73:4c:6e:ef:02:71:bf:fd:c1:e9: cc:af:94:40:80:7e:bf:9b:b7:3c:1a:e1:eb:80:c5: e3:98:0f:5b:10:aa:bd:50:a3:e8:e1:d8:ab:0b:6b: 86:eb:35:22:ce:38:fd:39:3f:26:b0:3d:95:71:76: 35:0c:aa:ff:0f:7a:bc:3b:16:60:cc:4c:df:66:6f: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DE:B0:FC:A1:52:06:CE:CA:EA:69:B9:F5:C6:34:AA:A8:D3:EA:4E X509v3 Authority Key Identifier: keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f9:66:8e:cd:b5:e2:c3:04:aa:9c:3c:3f:2c:9c:81:77:55: 5c:a5:08:cf:6d:33:0f:bc:a5:90:f2:d7:0f:f4:27:c3:c8:78: ff:e8:56:9d:5c:21:cd:d3:0d:d2:f6:61:0b:3d:76:3b:9c:6b: d2:42:e4:de:57:3b:25:b7:1a:05:d1:22:cd:7a:aa:de:6a:c0: 49:93:87:2d:a4:79:61:79:2f:5b:e3:0e:67:b4:8a:c3:db:51: fd:1e:96:3a:da:4c:05:7d:e3:c4:bb:23:21:92:15:a0:30:a5: 30:3b:d7:66:ce:f2:8c:6c:94:04:d4:47:68:a2:d9:38:dc:e8: 1a:e4:24:24:31:e0:f1:63:90:77:5e:dd:ed:47:0d:8f:81:45: 69:74:71:a2:e7:a5:04:bf:19:3c:81:c6:c2:de:7f:4b:b5:9d: 3f:73:b5:88:31:10:51:5a:b6:a7:c4:15:a4:e8:ed:aa:ec:ca: ea:54:11:e5:c1:6f:b4:04:29:69:55:f6:1b:9f:91:af:c6:fb: c5:c2:ae:bc:99:e0:6e:9a:03:bd:30:ed:d2:ab:b9:ae:bf:8a: ae:f9:00:94:7e:bd:cb:e5:02:04:b3:40:58:8a:67:4d:3e:71: 20:e4:b2:5d:bf:b3:72:bc:2f:f4:78:dd:00:4d:74:8c:7f:70: d4:8b:8f:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/moX5zXdjIlZPGrP4/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODU4MDRkYjE1M2ViNzI0YzU4NTU3Yzc5MzU5YzQ0MDgy MDU1NTAwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD Eyg0NWRlYjBmY2ExNTIwNmNlY2FlYTY5YjlmNWM2MzRhYWE4ZDNlYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LiRM1hwzRw++yoBnwQEZouPPlDz O/KRZj42oa8wztjW7/Y4IiANhmz6G4Vxz4sh0/8zmrJz2UL7WU2kup6C3QprIz37 6mKthmeARKhC56j4OkmgTDdeIBPqq/daH5n77RBNWVMrvyzjIkY/OjAnruFhGbI0 DbsR8d7lVf4ACmZm//n4hW71djl82ETiaXheCXjU841BIpHvwd+lLLHylCdJigxx 5TVAP4VZ7DNMXHK9LiZhx1sM23NMbu8Ccb/9wenMr5RAgH6/m7c8GuHrgMXjmA9b EKq9UKPo4dirC2uG6zUizjj9OT8msD2VcXY1DKr/D3q8OxZgzEzfZm/fDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXesPyhUgbOyuppufXGNKqo0+pOMB8GA1UdIwQY MBaAFLCFgE2xU+tyTFhVfHk1nEQIIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUt ZDI1YjdjYTNkYjg5LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUtZDI1YjdjYTNkYjg5 LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXflmjs21 4sMEqpw8PyycgXdVXKUIz20zD7ylkPLXD/Qnw8h4/+hWnVwhzdMN0vZhCz12O5xr 0kLk3lc7JbcaBdEizXqq3mrASZOHLaR5YXkvW+MOZ7SKw9tR/R6WOtpMBX3jxLsj IZIVoDClMDvXZs7yjGyUBNRHaKLZONzoGuQkJDHg8WOQd17d7UcNj4FFaXRxouel BL8ZPIHGwt5/S7WdP3O1iDEQUVq2p8QVpOjtquzK6lQR5cFvtAQpaVX2G5+Rr8b7 xcKuvJngbpoDvTDt0qu5rr+KrvkAlH69y+UCBLNAWIpnTT5xIOSyXb+zcrwv9Hjd AE10jH9w1IuPhA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:57 2025 by rpki-client