This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft File: _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json) Hash identifier: 99lu4qdAwV7ohj9dLRmsOVrHPtnD/iBsJTUCNLsUdEs= Subject key identifier: 71:1F:0C:52:12:21:2F:02:65:E7:A8:83:77:93:44:31:72:31:E1:02 Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE Certificate issuer: /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde Certificate serial: 019AF20999245C2002FA26B66DE4E6022128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft Manifest number: 14 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: BFpPIBS3b17MccDzrx892veO4m/BaANJ5OsTvd+HKTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:99:24:5c:20:02:fa:26:b6:6d:e4:e6:02:21:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=711f0c5212212f0265e7a883779344317231e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:11:d4:1e:80:fb:de:b1:c3:c5:21:db:98: 3c:4d:9f:70:18:11:d3:fd:44:be:88:4f:a5:13:1f: 64:bf:40:7e:f7:84:79:19:b7:32:c9:9c:4e:1e:76: 9c:63:b6:c7:4d:e6:37:81:cf:6b:e2:66:e7:10:a2: e1:dc:c8:75:03:f3:72:3b:10:d4:15:bb:38:b3:92: 65:f4:db:b5:57:62:9b:cc:ba:49:c6:c2:e6:14:7f: 9d:4c:cf:da:a4:29:de:7c:32:db:8c:84:d7:6b:4b: 89:f8:d9:b5:fd:f9:8a:4b:ed:82:0c:c5:31:a1:bc: ce:25:7c:68:6f:b6:86:43:d5:3c:9e:98:7e:8c:af: 03:bb:8a:ae:8c:d4:b1:74:ae:7d:14:c1:58:e8:47: 86:29:72:a3:4b:fc:02:5b:da:9c:97:ef:7f:cf:d2: 90:57:a0:5f:c2:0e:a7:27:1c:f7:18:eb:5e:70:c0: de:85:2f:43:23:95:b8:9c:c0:ce:61:30:c3:51:a7: 73:b8:d7:bf:80:30:b3:db:b9:82:9f:23:e0:28:e1: 66:ad:53:fb:c7:63:16:02:71:4c:a9:09:42:9c:60: dd:b1:5b:a3:19:34:6f:bc:ab:1e:6c:41:7b:e6:f8: bf:bc:46:1a:4b:36:5c:90:02:a6:c4:6d:32:24:84: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1F:0C:52:12:21:2F:02:65:E7:A8:83:77:93:44:31:72:31:E1:02 X509v3 Authority Key Identifier: keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:17:ac:19:1d:61:7d:7c:f5:d8:9e:6e:e2:6f:e1:e2:4c:77: 23:06:72:c2:f1:0f:7c:b3:72:54:c4:a4:e6:c7:b5:9f:04:41: b8:94:81:c7:b4:31:55:d4:7a:2f:be:f7:27:fc:e2:25:ea:49: 62:63:e7:28:ca:ee:4c:80:44:77:89:f9:b8:8c:15:e4:4f:9c: da:cd:d9:27:9c:fe:90:93:2d:c3:f6:0e:58:18:ce:ea:0a:1a: 3c:35:9c:6b:ac:73:ec:cf:4b:cd:e8:4d:b0:81:8e:a1:55:67: b6:72:ee:fd:38:e7:6b:22:26:e9:ac:8d:99:d5:79:92:c8:cc: 21:5a:ff:2f:cf:ad:f0:ce:dd:03:eb:28:7e:83:ca:96:99:c5: 10:1e:bc:eb:75:bd:81:6b:fa:30:7f:34:06:65:ee:62:48:f4: 32:92:9c:8c:57:07:f3:87:39:25:53:82:53:0a:d6:e7:91:c1: 76:a8:10:c0:fc:cc:e1:47:89:40:46:e6:a4:50:8b:e7:71:ef: 26:c7:33:56:07:95:16:cf:d7:24:d9:17:4e:8d:02:c0:f1:cb: af:c8:81:84:03:5d:12:e4:2d:41:8e:60:4e:90:07:ba:8a:08: 88:0e:e4:75:c1:2d:cb:20:38:9d:5e:a7:77:b5:64:7a:f2:2e: e8:63:53:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZkkXCAC+ia2beTmAiEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2MwYmYzOTE5MzM5Mjc3ZWFkNmJhMWQ5NTVjYjVmNmMz OThkZGUwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD Eyg3MTFmMGM1MjEyMjEyZjAyNjVlN2E4ODM3NzkzNDQzMTcyMzFlMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3cR1B6A+96xw8Uh25g8TZ9wGBHT /US+iE+lEx9kv0B+94R5GbcyyZxOHnacY7bHTeY3gc9r4mbnEKLh3Mh1A/NyOxDU Fbs4s5Jl9Nu1V2KbzLpJxsLmFH+dTM/apCnefDLbjITXa0uJ+Nm1/fmKS+2CDMUx obzOJXxob7aGQ9U8nph+jK8Du4qujNSxdK59FMFY6EeGKXKjS/wCW9qcl+9/z9KQ V6Bfwg6nJxz3GOtecMDehS9DI5W4nMDOYTDDUadzuNe/gDCz27mCnyPgKOFmrVP7 x2MWAnFMqQlCnGDdsVujGTRvvKsebEF75vi/vEYaSzZckAKmxG0yJIQhrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEfDFISIS8CZeeog3eTRDFyMeECMB8GA1UdIwQY MBaAFP7MC/ORkzknfq1rodlVy19sOY3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUt ZTFlNmU5NWI0YjdjLzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUtZTFlNmU5NWI0Yjdj LzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxesGR1h fXz12J5u4m/h4kx3IwZywvEPfLNyVMSk5se1nwRBuJSBx7QxVdR6L773J/ziJepJ YmPnKMruTIBEd4n5uIwV5E+c2s3ZJ5z+kJMtw/YOWBjO6goaPDWca6xz7M9LzehN sIGOoVVntnLu/TjnayIm6ayNmdV5ksjMIVr/L8+t8M7dA+sofoPKlpnFEB6863W9 gWv6MH80BmXuYkj0MpKcjFcH84c5JVOCUwrW55HBdqgQwPzM4UeJQEbmpFCL53Hv JsczVgeVFs/XJNkXTo0CwPHLr8iBhANdEuQtQY5gTpAHuooIiA7kdcEtyyA4nV6n d7VkevIu6GNTPg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:03 2025 by rpki-client