This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft File: MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft (raw, json) Hash identifier: 37q5O+dgA2kOJ4puFTujbe3WHkjHbQ6pUqlrNRsIo6c= Subject key identifier: 03:7B:A1:8C:C8:63:E8:4E:62:C8:8E:F7:74:32:27:43:6A:FF:3F:A9 Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F Certificate issuer: /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f Certificate serial: 019AF19B28C1ADFE713831B583D00B437AFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft Manifest number: 56 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl (hash: pFHXPbrprk7JDasOMgtggXejGw4W8rDdHVS+gGGyyUo=) 2: eNWnwqIDMEiQxfYhNRHjW54poNY.roa (hash: ycpxV8nYGU8l1ZJlM7ZM3skLLwnEhIqNMh55U8iJWmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:28:c1:ad:fe:71:38:31:b5:83:d0:0b:43:7a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=037ba18cc863e84e62c88ef7743227436aff3fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:2c:47:ec:7b:6f:9f:23:ee:aa:05:66:7f: ef:6d:93:08:1d:92:b5:f6:45:f6:80:13:bb:c9:1e: 84:8f:26:5b:e6:d6:94:e3:1f:56:3f:4c:41:d5:8c: 8c:d7:e8:d6:3d:40:42:ed:60:7a:85:bc:f6:04:d9: 94:43:8b:b0:62:7f:46:96:36:4e:8d:60:79:8b:49: f9:a4:ed:a6:9e:14:a6:51:71:81:8c:57:e7:c9:fb: 47:55:fd:83:2e:44:3c:2b:ef:44:fc:2b:09:2a:06: 08:4f:1d:dc:02:5e:16:f9:a9:d3:03:22:2c:21:2d: b4:e9:92:1b:60:ee:1a:8c:4e:af:23:f0:5f:bc:2d: 1e:37:92:a0:c2:58:99:b2:ac:ba:cb:4c:9e:2f:d7: b7:d4:f1:b8:45:31:bc:73:8d:88:e0:c2:fe:6b:d0: 38:49:47:1a:14:06:f3:1d:c9:61:43:6c:b7:c3:78: ed:d0:ff:37:a8:fa:f3:cb:13:1f:b4:82:38:fd:3e: 43:23:39:54:28:76:58:27:1f:1f:38:95:fe:4f:11: 39:67:be:7e:84:55:d4:0b:37:f2:82:4f:a8:dd:fc: b2:86:b0:6d:54:cc:c1:2f:d4:65:0a:4d:b6:cd:7a: 08:82:cd:bc:cf:65:5f:11:fc:9b:e1:6d:59:f5:6f: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7B:A1:8C:C8:63:E8:4E:62:C8:8E:F7:74:32:27:43:6A:FF:3F:A9 X509v3 Authority Key Identifier: keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b5:cb:fe:9d:fb:31:d7:0b:e7:a3:de:8d:c1:26:54:f2:86: b0:8f:49:2b:57:c8:19:53:a7:7d:48:30:3c:14:73:99:ae:61: 30:5c:60:72:c8:2d:ca:32:0a:2e:38:c4:49:30:eb:65:11:f2: d8:66:cc:a3:ec:bc:70:c6:d7:65:a2:21:c9:74:7f:eb:63:22: a2:c6:e9:6a:45:7a:a7:5b:37:77:bb:8e:8b:20:a7:7d:d1:46: f6:a7:d8:83:6d:ec:6a:d2:f9:b0:06:81:4d:ae:97:6f:8b:a3: 10:3e:49:24:44:33:35:4c:d9:13:85:66:7e:6b:46:9d:21:98: a1:59:63:68:5f:64:00:1c:13:38:4d:46:3e:ba:85:0a:03:42: 4e:00:d2:ec:3c:72:a9:00:25:a2:ab:f2:58:15:03:a6:62:fb: a7:31:ee:21:d6:3f:43:11:2a:44:74:e1:ae:ab:2e:23:24:e0: 78:78:98:a1:54:1c:6f:bb:36:a4:22:f9:12:04:3b:ec:e4:23: 77:3c:22:73:35:82:ec:e6:f7:10:eb:5d:3c:54:05:92:35:20: e3:d4:4c:59:7b:60:88:d7:c4:8f:14:27:ff:38:45:6a:8e:87: 51:3d:a2:4e:d5:c5:39:b8:21:1c:01:1b:21:43:38:63:54:1c: 15:15:75:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyjBrf5xODG1g9ALQ3r8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDRiMDI4MWM0YTU2YjI3NmZhZjQ2ZjI4NTBmZTBjZjRl MWNjNGYwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EygwMzdiYTE4Y2M4NjNlODRlNjJjODhlZjc3NDMyMjc0MzZhZmYzZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rQsR+x7b58j7qoFZn/vbZMIHZK1 9kX2gBO7yR6EjyZb5taU4x9WP0xB1YyM1+jWPUBC7WB6hbz2BNmUQ4uwYn9GljZO jWB5i0n5pO2mnhSmUXGBjFfnyftHVf2DLkQ8K+9E/CsJKgYITx3cAl4W+anTAyIs IS206ZIbYO4ajE6vI/BfvC0eN5KgwliZsqy6y0yeL9e31PG4RTG8c42I4ML+a9A4 SUcaFAbzHclhQ2y3w3jt0P83qPrzyxMftII4/T5DIzlUKHZYJx8fOJX+TxE5Z75+ hFXUCzfygk+o3fyyhrBtVMzBL9RlCk22zXoIgs28z2VfEfyb4W1Z9W+NNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAN7oYzIY+hOYsiO93QyJ0Nq/z+pMB8GA1UdIwQY MBaAFDLUsCgcSlaydvr0byhQ/gz04cxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRTd0tCeEtWckoyLXZSdktGRC1EUFRoekU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8wMGViZjItZWJlYi00ZTQ2LTg3NmMt MmQ5Y2Q1ZjI1MTQ1LzEvTXRTd0tCeEtWckoyLXZSdktGRC1EUFRoekU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8wMGViZjItZWJlYi00ZTQ2LTg3NmMtMmQ5Y2Q1ZjI1MTQ1 LzEvTXRTd0tCeEtWckoyLXZSdktGRC1EUFRoekU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLXL/p37 MdcL56PejcEmVPKGsI9JK1fIGVOnfUgwPBRzma5hMFxgcsgtyjIKLjjESTDrZRHy 2GbMo+y8cMbXZaIhyXR/62MiosbpakV6p1s3d7uOiyCnfdFG9qfYg23satL5sAaB Ta6Xb4ujED5JJEQzNUzZE4VmfmtGnSGYoVljaF9kABwTOE1GPrqFCgNCTgDS7Dxy qQAloqvyWBUDpmL7pzHuIdY/QxEqRHThrqsuIyTgeHiYoVQcb7s2pCL5EgQ77OQj dzwiczWC7Ob3EOtdPFQFkjUg49RMWXtgiNfEjxQn/zhFao6HUT2iTtXFObghHAEb IUM4Y1QcFRV1Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:33 2025 by rpki-client