This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json) Hash identifier: aYgrfv0wY7SNm3HM3I+tipnxaH3eVsV26OOhx9UEJTQ= Subject key identifier: 07:AF:C9:3E:12:E3:48:E3:C5:AE:8F:8C:72:29:9C:A4:A7:E2:8D:F8 Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50 Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550 Certificate serial: 019B5A886C3AD1EE6285D1123442C8BCE396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft Manifest number: 0673 Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=) 2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: 0FOgjrW8NSnZhOIrJn1aWm+oqPlxxNuw+2Ip3KOFm30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6c:3a:d1:ee:62:85:d1:12:34:42:c8:bc:e3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b085804db153eb724c58557c79359c4408205550 Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=07afc93e12e348e3c5ae8f8c72299ca4a7e28df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:c6:07:e2:39:45:47:70:eb:e0:6f:9d:9a: 4d:c8:9d:67:e3:d8:90:db:93:18:83:77:92:13:3e: a8:74:46:b7:56:af:f1:cd:54:b0:a9:5a:c4:2a:4b: 79:f9:e1:ca:e4:b2:fb:d1:ce:07:c2:f8:3f:d4:19: ff:60:07:7d:33:fe:63:5a:9a:87:05:27:8c:72:17: e1:8c:7c:a7:3a:f1:06:61:5e:d5:fe:3b:03:b3:d5: db:70:47:b6:88:21:64:b6:64:86:e1:43:d9:dc:43: 13:81:5a:4b:4c:cc:7c:08:ab:54:a8:98:83:e8:35: 02:55:e0:13:89:62:6c:8e:42:2d:53:72:5a:ef:b1: 25:ae:e4:bc:85:6f:12:68:8a:3f:4e:1b:2d:66:84: 22:f0:0b:50:da:53:e0:e8:a8:4d:5f:dd:81:0b:4f: e1:28:47:01:34:b3:26:c5:9f:90:06:24:eb:01:1e: d4:38:64:d9:0c:1e:b1:93:d3:58:cf:93:03:5b:2d: 3b:6d:5c:b3:c7:31:1e:b4:85:93:0d:69:62:29:28: 90:8f:ba:14:a5:29:b6:bb:15:33:e5:8e:ca:3a:33: 81:0b:fb:4f:94:08:f0:0f:15:f0:4f:a1:e1:e9:e6: cc:9d:3f:37:fb:c0:71:fc:7d:d2:d3:f8:15:7e:9e: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AF:C9:3E:12:E3:48:E3:C5:AE:8F:8C:72:29:9C:A4:A7:E2:8D:F8 X509v3 Authority Key Identifier: keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2b:ab:3e:3d:69:ba:5f:31:e4:06:53:57:ab:bb:8f:40:63: 5b:e2:c7:c1:77:ac:12:a3:3e:99:72:03:f5:15:d2:82:f8:f8: 66:c2:59:14:6f:0d:07:0b:1c:29:0b:b6:68:3b:f8:4c:cf:95: cf:b5:d2:a1:e2:51:db:f1:ad:c6:5f:9c:fd:3d:60:1e:73:4d: a5:cf:a9:4b:da:36:91:45:1d:9a:ed:38:40:de:85:95:49:b3: 55:cb:bb:fc:42:3d:54:19:04:58:c5:0d:91:b3:30:e9:f6:cb: d3:ee:db:d5:5a:e3:e8:b8:fc:df:72:70:21:97:1f:07:fb:a9: 91:26:8b:e3:08:7d:b5:c4:8c:bf:f7:ef:1c:34:33:72:aa:68: 6f:7a:b2:d0:56:50:5f:9a:f8:45:90:84:98:35:89:21:29:cb: b7:51:6d:b7:f4:4b:d7:bd:67:21:13:20:07:b8:10:4c:ab:c0: f3:87:32:9f:4b:3b:ab:c9:43:c6:37:8a:f1:69:b5:51:d1:95: 17:1d:8c:f6:01:72:8f:dc:4c:73:01:4f:ab:54:73:38:a0:4f: ab:78:33:74:db:f1:31:a4:83:72:6a:93:1d:b3:92:e9:ff:a2: f6:45:a1:68:a3:ed:b1:bc:09:f5:3e:0a:00:7f:72:eb:e3:23: 5b:69:e8:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGw60e5ihdESNELIvOOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODU4MDRkYjE1M2ViNzI0YzU4NTU3Yzc5MzU5YzQ0MDgy MDU1NTAwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD EygwN2FmYzkzZTEyZTM0OGUzYzVhZThmOGM3MjI5OWNhNGE3ZTI4ZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IPGB+I5RUdw6+BvnZpNyJ1n49iQ 25MYg3eSEz6odEa3Vq/xzVSwqVrEKkt5+eHK5LL70c4Hwvg/1Bn/YAd9M/5jWpqH BSeMchfhjHynOvEGYV7V/jsDs9XbcEe2iCFktmSG4UPZ3EMTgVpLTMx8CKtUqJiD 6DUCVeATiWJsjkItU3Ja77ElruS8hW8SaIo/ThstZoQi8AtQ2lPg6KhNX92BC0/h KEcBNLMmxZ+QBiTrAR7UOGTZDB6xk9NYz5MDWy07bVyzxzEetIWTDWliKSiQj7oU pSm2uxUz5Y7KOjOBC/tPlAjwDxXwT6Hh6ebMnT83+8Bx/H3S0/gVfp5jYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAevyT4S40jjxa6PjHIpnKSn4o34MB8GA1UdIwQY MBaAFLCFgE2xU+tyTFhVfHk1nEQIIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUt ZDI1YjdjYTNkYjg5LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOWFhOTYtMTIzZi00MGVhLTk1ZDUtZDI1YjdjYTNkYjg5 LzEvc0lXQVRiRlQ2M0pNV0ZWOGVUV2NSQWdnVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyurPj1p ul8x5AZTV6u7j0BjW+LHwXesEqM+mXID9RXSgvj4ZsJZFG8NBwscKQu2aDv4TM+V z7XSoeJR2/Gtxl+c/T1gHnNNpc+pS9o2kUUdmu04QN6FlUmzVcu7/EI9VBkEWMUN kbMw6fbL0+7b1Vrj6Lj833JwIZcfB/upkSaL4wh9tcSMv/fvHDQzcqpob3qy0FZQ X5r4RZCEmDWJISnLt1Ftt/RL171nIRMgB7gQTKvA84cyn0s7q8lDxjeK8Wm1UdGV Fx2M9gFyj9xMcwFPq1RzOKBPq3gzdNvxMaSDcmqTHbOS6f+i9kWhaKPtsbwJ9T4K AH9y6+MjW2nong== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:02 2025 by rpki-client