This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json) Hash identifier: W398byz9tJDQLY72JiMCfO+IRLLvJtpIYYiZmNxNetc= Subject key identifier: 8C:7E:B4:D8:C3:06:23:D0:D5:B2:1B:A0:57:61:45:2F:0B:3B:F1:BD Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f Certificate serial: 019AF088A1AC533D300C019B1E7A4378D4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 22:01:17 +0000 Manifest this update: Fri 05 Dec 2025 22:01:17 +0000 Manifest next update: Sat 06 Dec 2025 22:01:17 +0000 Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: q5LccHYAOkTYsfQ8Lzdw0I80qrWrD5/1gn9LrQLyP5k=) 2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a1:ac:53:3d:30:0c:01:9b:1e:7a:43:78:d4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f Validity Not Before: Dec 5 22:01:17 2025 GMT Not After : Dec 6 22:01:17 2025 GMT Subject: CN=8c7eb4d8c30623d0d5b21ba05761452f0b3bf1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:a7:7f:8a:92:0c:15:07:3c:32:62:c8:1c: 02:d8:b6:19:32:9e:f1:52:c4:81:cf:83:d9:39:6b: 7c:4a:88:ba:8f:77:f5:d0:50:f7:f3:07:f7:58:97: 69:6a:6a:b5:c7:d9:d0:41:bd:cd:72:9b:23:f9:a1: b0:ad:58:27:27:46:c2:92:f7:c9:72:35:4a:8f:69: 10:15:31:31:63:69:e6:9e:fe:37:0c:f3:19:95:26: bb:76:96:85:fd:6f:71:f4:10:1f:7c:45:4a:49:3a: cb:44:18:71:3e:09:e9:58:bd:b0:e2:63:08:f7:af: cc:85:3f:94:a1:f2:ac:53:65:b7:95:5c:69:c9:e1: 71:ef:32:46:4f:79:be:d2:4f:17:ce:a4:d2:04:f3: 85:17:40:7b:bc:f1:7e:c4:7a:47:ed:1d:b4:b5:61: cb:e6:fd:7f:03:4a:07:01:fd:90:d5:c4:3e:24:9d: 87:dc:13:f0:a9:44:28:90:2e:5d:b9:57:49:50:eb: 71:85:5c:33:58:8c:64:45:23:98:e1:e8:f3:d5:26: 2b:29:4f:c0:57:60:90:11:28:a3:7a:ff:84:d9:22: 12:b6:a1:98:65:4c:19:64:dd:81:c7:19:d4:bd:70: 5a:d6:5b:f3:33:8b:3a:0b:a1:87:06:77:07:84:7d: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:B4:D8:C3:06:23:D0:D5:B2:1B:A0:57:61:45:2F:0B:3B:F1:BD X509v3 Authority Key Identifier: keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9d:55:d5:9d:e4:db:f6:a6:29:74:fe:db:c4:8e:f3:f7:93: 51:f5:14:6b:7c:11:ab:71:ce:5f:df:1b:ec:7d:a9:72:5f:90: 66:83:fb:4e:fe:a1:f9:04:ed:0c:34:2a:5e:ea:17:c8:1f:13: 0d:e1:f4:74:5c:45:6a:1c:0c:ce:61:5a:ba:a5:d9:78:83:25: 7f:12:23:ad:10:68:06:32:36:ac:1b:04:2c:19:ba:60:e6:33: 33:9e:d0:d9:1c:2a:90:a3:56:3b:96:b9:59:8c:05:c5:99:b6: 81:e9:09:72:9d:26:0e:1d:31:90:10:b3:be:f1:e2:c7:42:b7: a8:a2:75:30:9b:25:d2:e9:20:38:4d:c6:db:78:8e:e6:ee:dc: e6:8c:b5:2a:cc:29:3f:c9:42:ae:b5:ae:76:91:7b:26:4d:f5: 16:c6:b1:4f:2f:25:f0:dc:8d:9d:ef:4a:04:45:cb:71:93:a1: 74:88:c7:9e:56:3a:fe:72:a0:72:98:e0:5a:4a:ca:ee:64:70: 73:e6:2e:5d:4a:b4:1d:7f:6a:11:6a:39:80:c3:e9:7a:5b:21: 43:ab:cd:24:54:02:1e:b1:96:05:16:2c:7a:1a:97:71:bd:cf: 95:5c:85:3d:3b:9f:fe:e1:86:df:4f:c0:88:c6:fd:49:0c:17: 8e:3b:16:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKGsUz0wDAGbHnpDeNT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTRiMGNjMmMzZjZiNzU3ZmY1MmNiYTE2NWQ5ZmZhODhj ZWQzMGYwHhcNMjUxMjA1MjIwMTE3WhcNMjUxMjA2MjIwMTE3WjAzMTEwLwYDVQQD Eyg4YzdlYjRkOGMzMDYyM2QwZDViMjFiYTA1NzYxNDUyZjBiM2JmMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdGnf4qSDBUHPDJiyBwC2LYZMp7x UsSBz4PZOWt8Soi6j3f10FD38wf3WJdpamq1x9nQQb3Ncpsj+aGwrVgnJ0bCkvfJ cjVKj2kQFTExY2nmnv43DPMZlSa7dpaF/W9x9BAffEVKSTrLRBhxPgnpWL2w4mMI 96/MhT+UofKsU2W3lVxpyeFx7zJGT3m+0k8XzqTSBPOFF0B7vPF+xHpH7R20tWHL 5v1/A0oHAf2Q1cQ+JJ2H3BPwqUQokC5duVdJUOtxhVwzWIxkRSOY4ejz1SYrKU/A V2CQESijev+E2SIStqGYZUwZZN2BxxnUvXBa1lvzM4s6C6GHBncHhH34MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx+tNjDBiPQ1bIboFdhRS8LO/G9MB8GA1UdIwQY MBaAFHZUsMwsP2t1f/UsuhZdn/qIztMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEt OGIxNTZkYjRmZjM1LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEtOGIxNTZkYjRmZjM1 LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJ1V1Z3k 2/amKXT+28SO8/eTUfUUa3wRq3HOX98b7H2pcl+QZoP7Tv6h+QTtDDQqXuoXyB8T DeH0dFxFahwMzmFauqXZeIMlfxIjrRBoBjI2rBsELBm6YOYzM57Q2RwqkKNWO5a5 WYwFxZm2gekJcp0mDh0xkBCzvvHix0K3qKJ1MJsl0ukgOE3G23iO5u7c5oy1Kswp P8lCrrWudpF7Jk31FsaxTy8l8NyNne9KBEXLcZOhdIjHnlY6/nKgcpjgWkrK7mRw c+YuXUq0HX9qEWo5gMPpelshQ6vNJFQCHrGWBRYsehqXcb3PlVyFPTuf/uGG30/A iMb9SQwXjjsWTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:40 2025 by rpki-client