This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft File: TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft (raw, json) Hash identifier: S8s90V3KuG4O4zzKEIewLWyK5KU163Vtn0PJIzHny3s= Subject key identifier: E7:CD:67:0E:CC:6B:3F:42:69:2A:63:06:36:49:B9:28:53:7D:64:9D Authority key identifier: 4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A Certificate issuer: /CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a Certificate serial: 019AF68A14B02A9F6FA35EF9A4CB5D943680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft Manifest number: 010A Signing time: Sun 07 Dec 2025 02:00:35 +0000 Manifest this update: Sun 07 Dec 2025 02:00:35 +0000 Manifest next update: Mon 08 Dec 2025 02:00:35 +0000 Files and hashes: 1: TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl (hash: tMcvG+KmWeKY3odcJBpI2fQxRPNGRDeqGrPxgt6OnIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:14:b0:2a:9f:6f:a3:5e:f9:a4:cb:5d:94:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a Validity Not Before: Dec 7 02:00:35 2025 GMT Not After : Dec 8 02:00:35 2025 GMT Subject: CN=e7cd670ecc6b3f42692a63063649b928537d649d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:ac:d8:1c:de:07:a4:d1:9b:c2:21:d0:fd: d5:22:6c:66:dd:72:72:ed:33:a9:af:39:63:c0:81: 07:0a:dc:8c:51:b3:c4:ff:85:3d:7d:ae:cb:52:42: c5:c3:b8:da:e3:be:6b:d2:2d:2b:f1:0a:0a:2b:24: 60:66:12:52:51:2c:12:67:18:14:ed:35:0e:d0:64: f2:b6:e1:0e:40:00:78:ec:da:95:e3:42:3f:2c:27: 2c:07:be:e2:5a:24:e4:84:74:71:47:d4:4e:83:7a: 3c:c9:61:6e:63:78:7b:94:e1:f2:35:a8:2f:65:07: 7e:54:62:64:dd:f7:79:e6:4f:c4:5e:2f:d6:94:2c: 77:da:a1:a4:33:b0:a8:75:69:96:79:62:03:43:2a: ec:82:ad:7c:1c:6f:83:ae:f5:44:d1:cb:e8:68:4f: f1:4e:3e:fb:d7:39:2e:40:05:15:8a:18:8b:13:d4: 4a:ba:28:e1:7b:97:c3:13:04:2d:96:56:c5:5d:fc: 81:eb:3e:23:9b:0c:c3:ec:f1:78:75:48:0d:6b:07: 7d:64:9f:6f:c8:ac:3b:e5:15:9c:e9:25:fb:83:c0: 4f:d1:cf:61:e7:87:93:7c:24:77:97:9d:1b:83:b9: 7d:69:11:bc:cb:c7:86:db:72:dd:51:78:a7:91:fb: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:67:0E:CC:6B:3F:42:69:2A:63:06:36:49:B9:28:53:7D:64:9D X509v3 Authority Key Identifier: keyid:4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e5:55:0b:da:5c:d6:fe:69:1d:23:2a:f3:b4:ab:94:a7:e6: 23:39:63:97:7d:01:0f:26:cc:ff:09:d0:85:b8:2e:dd:5a:0e: e2:79:8c:82:e7:5b:6f:6c:c2:c6:c3:77:6d:70:23:44:fc:08: 16:2b:26:f8:59:b4:37:2d:3f:af:6e:52:c6:fd:f5:25:dc:6e: 68:be:16:a5:3b:e6:10:1b:ad:52:8e:7d:c3:5b:95:60:3d:99: 61:37:d4:b5:05:05:11:c2:59:9a:00:61:22:23:29:05:82:17: 31:6e:4b:29:43:9f:13:d6:e1:8b:83:c4:e3:fd:60:5d:d9:fa: 80:4c:51:b2:f4:1a:38:59:c6:d5:f9:0c:9b:21:1b:53:b6:f5: 5f:1f:28:9b:36:22:4d:49:dc:da:8e:af:5d:2c:5c:c9:4e:9a: cf:d3:87:e8:01:1a:1c:8f:d9:2c:e6:6c:67:75:a3:1f:d3:db: 00:4c:f9:fc:d6:1a:06:e2:24:c1:b3:b9:58:52:c6:f6:bb:45: 62:ac:bb:1c:b7:b7:32:ba:9c:05:94:c6:f1:61:bd:d4:17:a6: 40:3a:34:11:cb:38:d8:90:49:10:55:0a:28:fd:d3:bf:18:9e: b1:b7:1d:45:1f:93:89:7a:ef:a3:da:39:f2:5b:03:f7:78:1f: ff:4e:d9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ihSwKp9vo175pMtdlDaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmMyNDUzZDAwNzkxY2ZmMTMzMmZhNzFjZmI1ZGEzNmFh MDBhMGEwHhcNMjUxMjA3MDIwMDM1WhcNMjUxMjA4MDIwMDM1WjAzMTEwLwYDVQQD EyhlN2NkNjcwZWNjNmIzZjQyNjkyYTYzMDYzNjQ5YjkyODUzN2Q2NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Ws2BzeB6TRm8Ih0P3VImxm3XJy 7TOprzljwIEHCtyMUbPE/4U9fa7LUkLFw7ja475r0i0r8QoKKyRgZhJSUSwSZxgU 7TUO0GTytuEOQAB47NqV40I/LCcsB77iWiTkhHRxR9ROg3o8yWFuY3h7lOHyNagv ZQd+VGJk3fd55k/EXi/WlCx32qGkM7CodWmWeWIDQyrsgq18HG+DrvVE0cvoaE/x Tj771zkuQAUVihiLE9RKuijhe5fDEwQtllbFXfyB6z4jmwzD7PF4dUgNawd9ZJ9v yKw75RWc6SX7g8BP0c9h54eTfCR3l50bg7l9aRG8y8eG23LdUXinkfvFOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfNZw7Maz9CaSpjBjZJuShTfWSdMB8GA1UdIwQY MBaAFE0sJFPQB5HP8TMvpxz7XaNqoAoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFN3a1U5QUhrY194TXktbkhQdGRvMnFnQ2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNzM3ZjctMTg3MS00NDJhLThkYmEt ZGMyYWFhYTEyMDAzLzEvVFN3a1U5QUhrY194TXktbkhQdGRvMnFnQ2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zNzM3ZjctMTg3MS00NDJhLThkYmEtZGMyYWFhYTEyMDAz LzEvVFN3a1U5QUhrY194TXktbkhQdGRvMnFnQ2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuVVC9pc 1v5pHSMq87SrlKfmIzljl30BDybM/wnQhbgu3VoO4nmMgudbb2zCxsN3bXAjRPwI Fism+Fm0Ny0/r25Sxv31JdxuaL4WpTvmEButUo59w1uVYD2ZYTfUtQUFEcJZmgBh IiMpBYIXMW5LKUOfE9bhi4PE4/1gXdn6gExRsvQaOFnG1fkMmyEbU7b1Xx8omzYi TUnc2o6vXSxcyU6az9OH6AEaHI/ZLOZsZ3WjH9PbAEz5/NYaBuIkwbO5WFLG9rtF Yqy7HLe3MrqcBZTG8WG91BemQDo0Ecs42JBJEFUKKP3TvxiesbcdRR+TiXrvo9o5 8lsD93gf/07ZTw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:26:09 2025 by rpki-client