This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft File: sWUjiWNgP2LB2SiRbtwbOacuOm4.mft (raw, json) Hash identifier: hooDt3Tx+onKhxbrcQTSm2iIe6PHYA9wZBXRBRe23JI= Subject key identifier: DE:55:11:10:12:E9:D0:12:DA:17:F8:35:85:57:58:C7:34:5A:18:9F Authority key identifier: B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E Certificate issuer: /CN=b165238963603f62c1d928916edc1b39a72e3a6e Certificate serial: 019AF051954789BCBA9C772FDAB6E40CDBCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft Manifest number: 03BA Signing time: Fri 05 Dec 2025 21:01:09 +0000 Manifest this update: Fri 05 Dec 2025 21:01:09 +0000 Manifest next update: Sat 06 Dec 2025 21:01:09 +0000 Files and hashes: 1: sWUjiWNgP2LB2SiRbtwbOacuOm4.crl (hash: +HHAX+LXowgbWbvmZBVvQWeEYtgB0f+WiIgj/bTZOYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:95:47:89:bc:ba:9c:77:2f:da:b6:e4:0c:db:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b165238963603f62c1d928916edc1b39a72e3a6e Validity Not Before: Dec 5 21:01:09 2025 GMT Not After : Dec 6 21:01:09 2025 GMT Subject: CN=de55111012e9d012da17f835855758c7345a189f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:45:64:01:03:3b:78:8e:68:46:42:f0:93: 38:15:b3:ad:40:63:5e:8a:a9:9c:12:a4:58:b5:30: b8:09:c2:18:29:e7:2d:2c:d1:97:5d:39:51:3d:3e: 7c:50:d5:e6:42:8b:21:23:05:59:6f:20:f7:79:ed: 63:db:77:70:a3:15:3f:7b:f2:2c:a0:b8:90:3f:63: f6:b1:d5:56:ba:16:1c:1e:19:3f:63:25:60:4a:5c: 33:53:dc:c8:1e:92:aa:12:c5:47:84:90:12:e3:f6: 99:3d:f1:59:4b:01:f8:ce:03:98:e1:99:51:0e:5b: 68:58:ed:db:e3:3d:3a:1b:a9:75:54:6e:e4:b7:aa: ec:7b:35:3c:d6:f3:ac:df:7a:21:aa:14:53:92:a3: 36:3a:79:d7:13:0e:63:fc:28:ad:5b:f2:ae:57:92: 94:fa:10:15:5e:87:c9:15:c0:df:6a:51:f8:21:2d: 29:9e:0f:c1:24:88:4b:06:6a:58:38:8b:5b:f9:a6: 04:7d:c9:40:ef:23:fb:57:88:61:29:a2:2e:c3:fe: 3e:df:6d:62:56:ba:85:7a:1a:e2:67:c3:61:74:a3: d2:3a:3d:64:f9:c4:33:e5:c2:b9:bf:99:fb:05:e1: 4e:34:5c:f1:23:91:8f:92:ce:a8:2b:75:8f:13:c1: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:55:11:10:12:E9:D0:12:DA:17:F8:35:85:57:58:C7:34:5A:18:9F X509v3 Authority Key Identifier: keyid:B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fd:a7:b4:55:f3:3c:ed:f5:8e:e5:b4:c9:30:16:e0:80:d6: 46:e2:69:1e:a1:71:d5:2a:23:f6:17:47:14:9c:59:fa:ed:46: d1:16:9f:38:a6:7d:d7:5c:1d:85:7c:c1:f5:1f:90:df:0e:7c: 78:57:16:cb:73:09:f0:92:53:cc:eb:75:8b:27:4b:65:77:27: b5:13:f5:63:1c:12:98:fb:9a:b1:44:fa:63:66:57:12:85:f3: 76:cf:22:46:48:e6:b3:02:38:31:92:f9:72:36:ca:bd:81:5c: e8:95:b3:d7:34:17:ec:f1:5e:4c:f5:a7:65:ce:a9:06:af:c2: 8b:f7:4f:5e:0f:49:8a:9a:d1:4a:a1:6f:9e:85:68:94:e0:b5: ec:63:08:ba:8c:ff:5c:a2:13:64:ef:4f:99:e1:dc:ae:37:2f: ac:0a:29:0a:ae:dd:02:05:ef:57:ea:45:94:be:16:0d:af:ec: f7:90:60:f6:6b:c0:50:9d:7c:c1:04:f9:fa:af:e6:74:a7:48: 16:ee:90:c9:96:1f:90:cb:69:e9:12:63:19:57:07:f7:20:70: ad:a9:30:b6:d9:b4:07:f5:64:ef:fd:c5:0c:97:b8:9e:6f:01: ea:5f:26:52:32:1c:97:4d:59:9a:17:8e:8b:8d:24:2e:43:58: 97:70:71:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUZVHiby6nHcv2rbkDNvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjUyMzg5NjM2MDNmNjJjMWQ5Mjg5MTZlZGMxYjM5YTcy ZTNhNmUwHhcNMjUxMjA1MjEwMTA5WhcNMjUxMjA2MjEwMTA5WjAzMTEwLwYDVQQD EyhkZTU1MTExMDEyZTlkMDEyZGExN2Y4MzU4NTU3NThjNzM0NWExODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQNFZAEDO3iOaEZC8JM4FbOtQGNe iqmcEqRYtTC4CcIYKectLNGXXTlRPT58UNXmQoshIwVZbyD3ee1j23dwoxU/e/Is oLiQP2P2sdVWuhYcHhk/YyVgSlwzU9zIHpKqEsVHhJAS4/aZPfFZSwH4zgOY4ZlR DltoWO3b4z06G6l1VG7kt6rsezU81vOs33ohqhRTkqM2OnnXEw5j/CitW/KuV5KU +hAVXofJFcDfalH4IS0png/BJIhLBmpYOItb+aYEfclA7yP7V4hhKaIuw/4+321i VrqFehriZ8NhdKPSOj1k+cQz5cK5v5n7BeFONFzxI5GPks6oK3WPE8F6CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5VERAS6dAS2hf4NYVXWMc0WhifMB8GA1UdIwQY MBaAFLFlI4ljYD9iwdkokW7cGzmnLjpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dVamlXTmdQMkxCMlNpUmJ0d2JPYWN1T200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ZTY0ZTUtZWU0MS00NzZiLWEwMmEt Njc3OTVmN2I2ZDEwLzEvc1dVamlXTmdQMkxCMlNpUmJ0d2JPYWN1T200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80ZTY0ZTUtZWU0MS00NzZiLWEwMmEtNjc3OTVmN2I2ZDEw LzEvc1dVamlXTmdQMkxCMlNpUmJ0d2JPYWN1T200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbP2ntFXz PO31juW0yTAW4IDWRuJpHqFx1Soj9hdHFJxZ+u1G0RafOKZ911wdhXzB9R+Q3w58 eFcWy3MJ8JJTzOt1iydLZXcntRP1YxwSmPuasUT6Y2ZXEoXzds8iRkjmswI4MZL5 cjbKvYFc6JWz1zQX7PFeTPWnZc6pBq/Ci/dPXg9JiprRSqFvnoVolOC17GMIuoz/ XKITZO9PmeHcrjcvrAopCq7dAgXvV+pFlL4WDa/s95Bg9mvAUJ18wQT5+q/mdKdI Fu6QyZYfkMtp6RJjGVcH9yBwrakwttm0B/Vk7/3FDJe4nm8B6l8mUjIcl01ZmheO i40kLkNYl3BxUA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:31 2025 by rpki-client