This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json) Hash identifier: VNfkTPT3MRNrUCb5X5I6THeMvVjk1gjQdj5e5stTy3E= Subject key identifier: ED:19:13:A0:07:43:8F:59:CA:26:E8:13:1E:16:9B:17:64:B7:A7:E9 Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Certificate serial: 019B3268935E6E5241BDA124049DE72081D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft Manifest number: 14BF Signing time: Thu 18 Dec 2025 17:01:12 +0000 Manifest this update: Thu 18 Dec 2025 17:01:12 +0000 Manifest next update: Fri 19 Dec 2025 17:01:12 +0000 Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=) 2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: 7X6gp9ExVl/nWjqTUi0LS3Zx2LpPIg/yvBWNvgyNG0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:93:5e:6e:52:41:bd:a1:24:04:9d:e7:20:81:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Validity Not Before: Dec 18 17:01:12 2025 GMT Not After : Dec 19 17:01:12 2025 GMT Subject: CN=ed1913a007438f59ca26e8131e169b1764b7a7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:6b:7b:30:cc:ad:23:67:d3:2f:59:02:23: 48:7e:68:69:a0:53:4e:13:4c:df:50:a2:c8:9b:23: bf:49:62:c7:f4:19:55:13:99:67:6b:28:d5:61:f0: ef:c2:78:3a:f1:94:f3:d3:61:00:0d:9e:d5:e8:49: 0e:45:a8:69:88:49:82:43:c9:e6:63:a0:5a:0b:a8: be:56:d0:b3:9d:b6:05:ab:e5:10:61:85:aa:52:78: 7f:11:28:d8:18:9e:a8:a7:fe:2b:af:38:7f:a1:56: 00:6d:3b:10:2d:ec:b9:2f:68:6d:39:1d:95:2d:6a: 4a:53:10:50:c0:d7:76:1e:4c:2a:77:4e:ce:61:8b: c9:d5:34:35:82:29:45:a7:db:c2:90:84:1f:dd:68: 36:c8:1f:e1:ca:0f:84:2c:17:55:fb:e2:c4:6b:4e: 68:72:3f:52:9a:5c:60:be:ba:df:f9:50:59:4b:38: 0c:3e:5f:73:78:54:2e:d0:ed:c4:f1:7d:89:da:0d: 83:89:1a:a5:da:8c:38:94:6b:df:ae:e0:3e:49:4e: db:55:05:bf:3a:09:6a:db:60:1c:4c:23:03:57:9a: 7e:22:26:54:70:e3:7c:8a:45:93:4c:0c:09:f3:0d: 42:1c:f3:a5:3e:72:c3:98:d7:23:89:02:ca:26:fb: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:19:13:A0:07:43:8F:59:CA:26:E8:13:1E:16:9B:17:64:B7:A7:E9 X509v3 Authority Key Identifier: keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ff:e8:55:25:78:6a:b0:b3:96:27:6b:d4:38:17:f4:94:48: 92:60:ba:7e:73:09:20:72:8c:dd:e6:ef:c4:e4:5a:55:3c:48: 1f:9e:54:9a:c6:56:a4:df:d6:80:de:4f:04:02:e0:7c:bd:af: 6f:c9:a4:d2:5c:ed:fb:bd:ac:c3:e4:92:e1:31:75:b9:4a:ee: 16:8a:1c:46:13:05:38:43:61:be:53:af:3e:b0:a9:ba:be:b4: 9b:4a:0b:03:03:49:67:9d:18:c9:9a:c1:01:5a:05:f8:4f:12: a8:53:74:60:4f:ae:2f:cf:2f:5f:f8:e5:15:e7:fa:84:da:d8: 58:43:29:be:62:76:cd:fb:89:2a:3a:77:3a:62:de:cb:3b:fe: fc:84:2c:3a:71:8a:3d:80:c5:d6:61:85:a9:da:39:1b:c4:ff: af:79:92:52:83:de:3c:fc:f9:ff:b6:4c:54:3e:ee:64:a3:27: e1:5b:63:7e:c7:64:a3:ae:37:3c:c3:b6:5b:91:3b:50:1f:aa: bc:fd:db:b3:89:56:31:ad:1b:5e:03:46:24:00:c2:3d:27:84: 06:de:ad:04:99:0a:85:d2:4e:58:75:4a:4d:d4:0e:c6:21:55: 0a:1c:9e:98:87:74:58:e4:3c:9f:fd:e6:3a:50:63:4c:5f:76: 91:8f:34:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaJNeblJBvaEkBJ3nIIHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4 YWY4ZDkwHhcNMjUxMjE4MTcwMTEyWhcNMjUxMjE5MTcwMTEyWjAzMTEwLwYDVQQD EyhlZDE5MTNhMDA3NDM4ZjU5Y2EyNmU4MTMxZTE2OWIxNzY0YjdhN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDJrezDMrSNn0y9ZAiNIfmhpoFNO E0zfUKLImyO/SWLH9BlVE5lnayjVYfDvwng68ZTz02EADZ7V6EkORahpiEmCQ8nm Y6BaC6i+VtCznbYFq+UQYYWqUnh/ESjYGJ6op/4rrzh/oVYAbTsQLey5L2htOR2V LWpKUxBQwNd2Hkwqd07OYYvJ1TQ1gilFp9vCkIQf3Wg2yB/hyg+ELBdV++LEa05o cj9Smlxgvrrf+VBZSzgMPl9zeFQu0O3E8X2J2g2DiRql2ow4lGvfruA+SU7bVQW/ Oglq22AcTCMDV5p+IiZUcON8ikWTTAwJ8w1CHPOlPnLDmNcjiQLKJvsTYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0ZE6AHQ49ZyiboEx4Wmxdkt6fpMB8GA1UdIwQY MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHv/oVSV4 arCzlidr1DgX9JRIkmC6fnMJIHKM3ebvxORaVTxIH55UmsZWpN/WgN5PBALgfL2v b8mk0lzt+72sw+SS4TF1uUruFoocRhMFOENhvlOvPrCpur60m0oLAwNJZ50YyZrB AVoF+E8SqFN0YE+uL88vX/jlFef6hNrYWEMpvmJ2zfuJKjp3OmLeyzv+/IQsOnGK PYDF1mGFqdo5G8T/r3mSUoPePPz5/7ZMVD7uZKMn4Vtjfsdko643PMO2W5E7UB+q vP3bs4lWMa0bXgNGJADCPSeEBt6tBJkKhdJOWHVKTdQOxiFVChyemId0WOQ8n/3m OlBjTF92kY80qw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:50:59 2025 by rpki-client