This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json) Hash identifier: lSCTswK2QDOfreYZaoMzS7ttCElBBemQH+FjfOPnuCc= Subject key identifier: 62:0E:13:E3:10:AF:BD:F5:BD:91:40:48:3D:D7:A0:E6:C4:BF:89:DF Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Certificate serial: 019B0DB6A07F11FDDCC035C19B6DC6F6B4DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft Manifest number: 14AC Signing time: Thu 11 Dec 2025 14:00:30 +0000 Manifest this update: Thu 11 Dec 2025 14:00:30 +0000 Manifest next update: Fri 12 Dec 2025 14:00:30 +0000 Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=) 2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: aOOqWovZObu1hFXh015mBl78NOMrc12Wz3f8vSLyN5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:a0:7f:11:fd:dc:c0:35:c1:9b:6d:c6:f6:b4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9 Validity Not Before: Dec 11 14:00:30 2025 GMT Not After : Dec 12 14:00:30 2025 GMT Subject: CN=620e13e310afbdf5bd9140483dd7a0e6c4bf89df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:04:aa:59:b5:2b:f3:b6:dd:ef:6a:95:29: d7:ba:da:4e:f9:80:2c:1f:8a:10:0a:f8:25:89:81: bf:11:9f:31:40:f3:bc:bb:e8:5d:cc:54:29:4d:f4: 9f:52:c6:11:a9:99:2b:bb:26:9f:21:f7:02:01:c2: 52:69:d4:2e:54:3a:76:42:1b:3c:c4:30:01:0d:29: 45:77:8f:fe:33:77:f4:03:59:c2:a3:44:3f:54:13: 8e:af:ec:99:1d:fd:ca:3e:b7:b2:e4:e1:38:22:a2: 63:87:75:11:4d:a5:69:05:de:91:34:55:15:2a:4b: 8c:8d:10:4f:ab:dd:67:19:46:aa:3a:46:c1:37:ae: 71:91:bc:5a:76:03:cb:f4:48:6b:49:7d:54:e1:bb: 10:ac:21:d6:10:66:35:f6:9a:52:f4:29:98:0f:0e: 49:79:0b:d8:b0:ae:45:92:71:ba:eb:2a:72:41:ee: 8c:19:52:3f:7d:35:dd:f4:ee:f6:ed:a2:c2:66:de: c1:81:06:35:bc:0f:00:22:a2:db:63:4b:2d:d8:a8: 2c:d3:2f:42:e4:b6:af:35:18:c0:63:15:0e:84:66: cb:4e:7d:03:4f:75:bc:43:59:8c:12:bd:b7:d9:4a: a4:79:f9:f4:fb:2d:ac:dd:06:4a:ec:ab:82:f5:8f: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0E:13:E3:10:AF:BD:F5:BD:91:40:48:3D:D7:A0:E6:C4:BF:89:DF X509v3 Authority Key Identifier: keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d8:89:4c:1c:2d:b8:0e:89:18:e9:aa:e1:69:66:99:70:58: 56:04:3e:89:27:e0:95:93:d3:ee:fd:7c:91:0d:c1:f8:88:81: 0c:db:71:d9:ca:8e:7b:bb:e3:81:70:f8:8b:22:5d:6f:41:17: 4e:99:f2:54:40:fa:39:01:3d:05:95:1f:33:08:13:90:97:8a: 4c:ac:72:8b:af:b1:e7:b6:74:69:b0:f8:a1:67:e8:a3:e0:a9: 7c:40:28:d6:e6:0e:95:fd:01:0a:36:bf:92:10:58:52:18:30: b8:dc:0c:81:b1:6b:d1:dd:db:b1:0a:eb:3b:46:50:e7:08:44: d5:05:97:1d:d1:82:59:19:5a:71:53:b2:92:a8:4a:6a:7c:c0: a1:f7:71:2d:23:20:69:e8:84:da:5a:15:c3:94:30:88:e7:7a: 0c:32:ce:f4:5a:09:45:5c:8a:fe:f9:db:0c:2b:4a:5d:c3:5f: 6e:02:fc:81:c3:ba:97:76:51:87:6c:be:c4:30:cb:cc:4c:93: 73:33:1f:e4:45:c0:29:56:53:3c:5f:2f:13:06:1a:4b:4a:93: 2c:cf:d2:70:79:45:5f:d3:ad:5c:e5:28:89:91:d8:5e:1d:8b: 98:69:ae:4e:0e:db:cf:1e:7d:65:36:e3:e6:59:c6:ae:59:f9: 8b:f1:b1:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtqB/Ef3cwDXBm23G9rTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4 YWY4ZDkwHhcNMjUxMjExMTQwMDMwWhcNMjUxMjEyMTQwMDMwWjAzMTEwLwYDVQQD Eyg2MjBlMTNlMzEwYWZiZGY1YmQ5MTQwNDgzZGQ3YTBlNmM0YmY4OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi68Eqlm1K/O23e9qlSnXutpO+YAs H4oQCvgliYG/EZ8xQPO8u+hdzFQpTfSfUsYRqZkruyafIfcCAcJSadQuVDp2Qhs8 xDABDSlFd4/+M3f0A1nCo0Q/VBOOr+yZHf3KPrey5OE4IqJjh3URTaVpBd6RNFUV KkuMjRBPq91nGUaqOkbBN65xkbxadgPL9EhrSX1U4bsQrCHWEGY19ppS9CmYDw5J eQvYsK5FknG66ypyQe6MGVI/fTXd9O727aLCZt7BgQY1vA8AIqLbY0st2Kgs0y9C 5LavNRjAYxUOhGbLTn0DT3W8Q1mMEr232Uqkefn0+y2s3QZK7KuC9Y/XUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIOE+MQr731vZFASD3XoObEv4nfMB8GA1UdIwQY MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActiJTBwt uA6JGOmq4WlmmXBYVgQ+iSfglZPT7v18kQ3B+IiBDNtx2cqOe7vjgXD4iyJdb0EX TpnyVED6OQE9BZUfMwgTkJeKTKxyi6+x57Z0abD4oWfoo+CpfEAo1uYOlf0BCja/ khBYUhgwuNwMgbFr0d3bsQrrO0ZQ5whE1QWXHdGCWRlacVOykqhKanzAofdxLSMg aeiE2loVw5QwiOd6DDLO9FoJRVyK/vnbDCtKXcNfbgL8gcO6l3ZRh2y+xDDLzEyT czMf5EXAKVZTPF8vEwYaS0qTLM/ScHlFX9OtXOUoiZHYXh2LmGmuTg7bzx59ZTbj 5lnGrln5i/Gxkg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:07 2025 by rpki-client