This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft File: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json) Hash identifier: V7CZDlgfvxCEjo/J1cDrDhEPrGHtbOswx51pCUHmig8= Subject key identifier: 32:DA:DE:A1:B4:7E:78:E5:C3:4F:74:71:A4:E7:CD:00:30:4E:35:13 Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4 Certificate issuer: /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4 Certificate serial: 019B1C4E132ABB9B0CD7B63713FB01CF1F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft Manifest number: 16BD Signing time: Sun 14 Dec 2025 10:00:37 +0000 Manifest this update: Sun 14 Dec 2025 10:00:37 +0000 Manifest next update: Mon 15 Dec 2025 10:00:37 +0000 Files and hashes: 1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=) 2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: EBLm2xiq6HKD2t69PiqdHkCqWLTNYlf9NDraNkO7XfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:13:2a:bb:9b:0c:d7:b6:37:13:fb:01:cf:1f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4 Validity Not Before: Dec 14 10:00:37 2025 GMT Not After : Dec 15 10:00:37 2025 GMT Subject: CN=32dadea1b47e78e5c34f7471a4e7cd00304e3513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9e:eb:26:32:09:eb:fb:c8:9d:0a:24:ea:00: 14:86:50:cc:2b:50:fb:01:93:67:b4:ac:15:a8:92: f7:3f:ce:e5:d4:dc:7b:59:cc:d4:5b:3f:59:8d:bb: f3:23:67:2f:e5:ea:36:52:6a:71:99:d6:aa:18:78: 8b:a7:0a:ab:e6:70:8d:7e:06:76:2a:b1:75:ca:5b: ed:c9:62:96:bb:ab:1a:2f:49:16:a4:9b:bf:ae:c9: 2a:13:8e:8f:df:15:9b:40:d7:13:d2:82:76:e5:c5: 58:23:df:5f:1e:7b:60:50:b0:df:76:42:75:82:64: a9:be:7c:f5:26:20:3f:c2:76:3c:03:61:1c:d0:42: f5:dd:bd:54:75:d1:23:cc:b7:36:36:31:ce:f1:e3: c1:8f:02:ed:ec:df:4c:62:5a:7a:7d:b5:bd:c1:af: 65:7c:da:03:9b:0f:f7:ae:47:3e:e8:40:97:37:97: d5:74:ff:69:42:32:d5:0f:20:fc:82:b7:59:96:c5: 76:1a:fb:6d:00:5f:0f:28:65:7e:d5:2b:dd:d2:93: eb:f2:0c:a8:a1:96:31:4e:c1:dd:8b:18:ce:6c:d7: 25:93:bd:89:eb:35:dd:00:dc:05:04:d5:29:92:5d: ce:33:af:a2:61:b3:bf:56:45:e5:09:18:32:5d:0f: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DA:DE:A1:B4:7E:78:E5:C3:4F:74:71:A4:E7:CD:00:30:4E:35:13 X509v3 Authority Key Identifier: keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ba:a0:88:93:1a:89:3a:93:7a:e7:0e:85:36:a1:4f:47:2c: 49:aa:53:58:d2:19:53:92:96:bc:b5:ad:5f:63:21:b7:a1:8c: 33:be:1e:b2:41:07:45:c3:c9:04:10:1e:1d:4d:6f:f0:03:5f: 48:01:58:8d:6a:23:0a:e5:81:24:7d:a1:2a:61:88:ac:7c:21: 89:69:70:50:7b:af:bc:21:64:96:79:1e:05:16:71:fb:2a:12: bb:16:1c:34:59:37:cf:bf:e8:cd:79:f6:36:86:cf:3b:dc:85: 99:30:58:8e:b7:14:30:1a:aa:40:2c:65:37:ea:6b:89:3d:00: 1f:40:f7:40:1f:2b:f7:dd:51:2a:52:bc:0b:92:d9:68:94:b9: 16:77:81:5c:43:9a:35:67:97:a0:f2:f6:e5:a8:40:a2:f7:2a: 68:51:77:e0:cd:05:96:58:08:67:66:97:83:5c:10:12:4c:03: 11:f2:86:9c:23:66:db:c7:e4:ad:09:e6:5e:57:d7:bb:79:9a: 76:83:f1:f1:3d:6f:c9:d9:a7:90:a7:65:f3:de:b3:2d:e1:e8: 93:57:4e:c1:08:4b:6d:47:b2:92:6f:97:78:42:40:20:c7:91: 28:0b:28:15:4c:6b:b2:2f:cb:2d:eb:da:e6:e7:2f:f6:be:47: f5:77:88:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscThMqu5sM17Y3E/sBzx+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDU5NmZiMWEzZjJmNGIxMjdmYjdjZWMxOWZkOTBiYjk0 YzczYTQwHhcNMjUxMjE0MTAwMDM3WhcNMjUxMjE1MTAwMDM3WjAzMTEwLwYDVQQD EygzMmRhZGVhMWI0N2U3OGU1YzM0Zjc0NzFhNGU3Y2QwMDMwNGUzNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J7rJjIJ6/vInQok6gAUhlDMK1D7 AZNntKwVqJL3P87l1Nx7WczUWz9ZjbvzI2cv5eo2UmpxmdaqGHiLpwqr5nCNfgZ2 KrF1ylvtyWKWu6saL0kWpJu/rskqE46P3xWbQNcT0oJ25cVYI99fHntgULDfdkJ1 gmSpvnz1JiA/wnY8A2Ec0EL13b1UddEjzLc2NjHO8ePBjwLt7N9MYlp6fbW9wa9l fNoDmw/3rkc+6ECXN5fVdP9pQjLVDyD8grdZlsV2GvttAF8PKGV+1Svd0pPr8gyo oZYxTsHdixjObNclk72J6zXdANwFBNUpkl3OM6+iYbO/VkXlCRgyXQ8pEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLa3qG0fnjlw090caTnzQAwTjUTMB8GA1UdIwQY MBaAFLHVlvsaPy9LEn+3zsGf2Qu5THOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjIt MWRmNDAxNDViMGJlLzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjItMWRmNDAxNDViMGJl LzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrqgiJMa iTqTeucOhTahT0csSapTWNIZU5KWvLWtX2Mht6GMM74eskEHRcPJBBAeHU1v8ANf SAFYjWojCuWBJH2hKmGIrHwhiWlwUHuvvCFklnkeBRZx+yoSuxYcNFk3z7/ozXn2 NobPO9yFmTBYjrcUMBqqQCxlN+priT0AH0D3QB8r991RKlK8C5LZaJS5FneBXEOa NWeXoPL25ahAovcqaFF34M0FllgIZ2aXg1wQEkwDEfKGnCNm28fkrQnmXlfXu3ma doPx8T1vydmnkKdl896zLeHok1dOwQhLbUeykm+XeEJAIMeRKAsoFUxrsi/LLeva 5ucv9r5H9XeIIg== -----END CERTIFICATE-----Generated at Sun Dec 14 17:24:25 2025 by rpki-client