This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft File: swLy7pS0Qh7qX5jsD8SRdbubtDY.mft (raw, json) Hash identifier: eLuyWJfvh0XvU62J3RBltoTDqtAa49HeXZ/MJHGNZ/8= Subject key identifier: A7:75:D2:59:DA:B9:5B:52:23:F2:66:BF:FE:80:D8:02:48:AE:DF:15 Authority key identifier: B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36 Certificate issuer: /CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436 Certificate serial: 019AF0F5F035EF2D02DB52F873341C56DAB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft Manifest number: D7 Signing time: Sat 06 Dec 2025 00:00:40 +0000 Manifest this update: Sat 06 Dec 2025 00:00:40 +0000 Manifest next update: Sun 07 Dec 2025 00:00:40 +0000 Files and hashes: 1: swLy7pS0Qh7qX5jsD8SRdbubtDY.crl (hash: J993NBnRB+S0UTf3XZeQFwA40viDl3KK8bnR2FsTS4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f0:35:ef:2d:02:db:52:f8:73:34:1c:56:da:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436 Validity Not Before: Dec 6 00:00:40 2025 GMT Not After : Dec 7 00:00:40 2025 GMT Subject: CN=a775d259dab95b5223f266bffe80d80248aedf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:2e:e8:bb:23:38:b0:fe:c0:65:13:e7:e6: 60:b5:8c:78:49:d8:82:aa:9e:28:4b:39:46:fe:f5: e6:63:69:44:05:75:4e:92:2e:b3:3f:73:4f:a0:5d: 40:0b:f2:2d:fd:19:02:4d:02:37:8e:f2:02:db:d1: 2a:e5:23:81:83:5c:42:87:6b:d9:ea:1c:22:74:a5: bf:fe:e3:ae:80:46:02:68:31:51:d3:a0:df:55:e7: 22:d8:74:f4:ac:15:fb:83:d2:87:3c:c3:ab:b1:34: 9c:0b:8b:bd:1f:0d:bc:64:a5:cf:6d:bd:60:72:2a: ba:f0:13:c2:b9:61:96:75:f1:95:b4:2a:23:56:57: 06:5d:53:c6:eb:8b:b3:d0:0a:84:68:04:c1:be:90: d4:e6:b3:a9:03:19:41:26:71:0c:f1:e3:9f:bb:17: 0c:9d:56:4e:21:98:83:c3:bf:e1:6c:92:1c:b3:a7: 53:fb:9e:7a:d1:a7:5c:c4:fd:e5:ec:50:11:b0:02: d9:be:71:f2:85:18:bb:70:5c:e1:9e:33:f3:72:cd: eb:46:bb:10:79:c6:52:f4:a4:e6:ab:cc:50:64:f1: f2:f8:4a:e5:ac:04:e8:44:04:c2:8c:18:43:25:59: ad:62:c0:3d:a2:5b:72:9b:87:1a:0d:43:75:85:7a: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:75:D2:59:DA:B9:5B:52:23:F2:66:BF:FE:80:D8:02:48:AE:DF:15 X509v3 Authority Key Identifier: keyid:B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:37:ef:85:d3:fa:24:2a:be:f5:9a:d8:27:a1:ae:92:2f:8a: f7:71:f1:b5:13:e3:3c:37:ac:16:52:43:d2:f3:8e:d7:76:a1: 7d:0d:c5:e1:fc:50:e5:18:e9:46:1a:60:6d:e5:5f:e5:f2:53: 7a:39:df:d5:f4:56:c0:be:a2:32:c4:65:a0:fc:8b:7e:ba:8b: c9:34:86:42:86:2c:80:38:a9:18:fd:67:23:f2:aa:c3:8f:8e: 89:95:14:e4:50:f2:34:f7:b9:28:f1:14:53:06:a1:d3:fc:ae: 4e:f0:37:28:4b:11:ea:92:31:cd:97:33:53:c7:eb:ff:ce:d7: 08:0f:e6:81:0d:6a:6a:9f:59:c4:ca:7f:5a:d3:37:c4:7a:e6: f7:db:75:82:54:28:8b:a9:d8:b8:32:60:83:f0:57:38:57:4e: 2c:24:d7:bf:78:25:0c:11:5d:39:e0:8f:02:bc:03:dc:af:b4: 65:16:89:b0:c4:90:af:e1:b0:c2:3c:4a:63:15:11:b4:8b:9e: 6d:f6:f7:f8:6a:26:b3:b7:ca:81:f6:b5:01:fc:98:5c:8a:45: 54:30:4e:34:e5:4d:fd:4d:1d:d3:e2:ab:c4:53:c6:27:b9:11: f3:15:dc:16:fa:a7:9b:f8:5c:92:87:9d:71:b5:01:2c:08:0f: 46:9d:45:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fA17y0C21L4czQcVtq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDJmMmVlOTRiNDQyMWVlYTVmOThlYzBmYzQ5MTc1YmI5 YmI0MzYwHhcNMjUxMjA2MDAwMDQwWhcNMjUxMjA3MDAwMDQwWjAzMTEwLwYDVQQD EyhhNzc1ZDI1OWRhYjk1YjUyMjNmMjY2YmZmZTgwZDgwMjQ4YWVkZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthIu6LsjOLD+wGUT5+ZgtYx4SdiC qp4oSzlG/vXmY2lEBXVOki6zP3NPoF1AC/It/RkCTQI3jvIC29Eq5SOBg1xCh2vZ 6hwidKW//uOugEYCaDFR06DfVeci2HT0rBX7g9KHPMOrsTScC4u9Hw28ZKXPbb1g ciq68BPCuWGWdfGVtCojVlcGXVPG64uz0AqEaATBvpDU5rOpAxlBJnEM8eOfuxcM nVZOIZiDw7/hbJIcs6dT+5560adcxP3l7FARsALZvnHyhRi7cFzhnjPzcs3rRrsQ ecZS9KTmq8xQZPHy+ErlrAToRATCjBhDJVmtYsA9oltym4caDUN1hXqlAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd10lnauVtSI/Jmv/6A2AJIrt8VMB8GA1UdIwQY MBaAFLMC8u6UtEIe6l+Y7A/EkXW7m7Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dMeTdwUzBRaDdxWDVqc0Q4U1JkYnVidERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mNmZmZjAtMTZiNC00MDZmLTlmZDMt YTE4OWFhOTI0OTM4LzEvc3dMeTdwUzBRaDdxWDVqc0Q4U1JkYnVidERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9mNmZmZjAtMTZiNC00MDZmLTlmZDMtYTE4OWFhOTI0OTM4 LzEvc3dMeTdwUzBRaDdxWDVqc0Q4U1JkYnVidERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzfvhdP6 JCq+9ZrYJ6Guki+K93HxtRPjPDesFlJD0vOO13ahfQ3F4fxQ5RjpRhpgbeVf5fJT ejnf1fRWwL6iMsRloPyLfrqLyTSGQoYsgDipGP1nI/Kqw4+OiZUU5FDyNPe5KPEU Uwah0/yuTvA3KEsR6pIxzZczU8fr/87XCA/mgQ1qap9ZxMp/WtM3xHrm99t1glQo i6nYuDJgg/BXOFdOLCTXv3glDBFdOeCPArwD3K+0ZRaJsMSQr+GwwjxKYxURtIue bfb3+Goms7fKgfa1AfyYXIpFVDBONOVN/U0d0+KrxFPGJ7kR8xXcFvqnm/hckoed cbUBLAgPRp1FyA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:03 2025 by rpki-client