This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json) Hash identifier: J+QUhKmdSyQ0jkctUtO+/Krb/CsfuDk2roBw/M2UWN4= Subject key identifier: 37:5F:FF:32:03:28:11:B6:BC:E8:6E:7F:E0:53:C5:F5:E8:DF:6D:50 Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57 Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257 Certificate serial: 019B18036A1A18B74A31D4B6DA930DB46713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft Manifest number: 1233 Signing time: Sat 13 Dec 2025 14:00:35 +0000 Manifest this update: Sat 13 Dec 2025 14:00:35 +0000 Manifest next update: Sun 14 Dec 2025 14:00:35 +0000 Files and hashes: 1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=) 2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: qsohlHT8OxCwIvg7ZOKfKhq4SCTcSby0jpBui6rX5oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:03:6a:1a:18:b7:4a:31:d4:b6:da:93:0d:b4:67:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257 Validity Not Before: Dec 13 14:00:35 2025 GMT Not After : Dec 14 14:00:35 2025 GMT Subject: CN=375fff32032811b6bce86e7fe053c5f5e8df6d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:e3:0b:44:40:70:c8:73:e7:ed:db:9d:b6: 34:aa:70:73:6b:e7:b7:3d:60:09:42:15:c1:c3:f7: e6:df:8e:c4:6b:a0:42:7d:b9:17:37:69:75:54:2b: 89:98:8a:bf:de:75:96:6f:c4:5c:d0:df:46:ad:48: df:ab:3a:a5:5a:37:88:c9:67:45:67:94:b1:f2:6f: e3:79:ca:31:4c:a9:42:9e:a0:31:20:13:dd:c4:50: 74:ae:fa:56:05:ff:04:2e:ca:f2:73:33:16:dd:f0: c9:73:0a:b2:72:dd:02:d1:b7:d2:c8:4f:95:7c:96: 5f:a4:c4:13:3c:78:d8:64:76:26:d4:ec:2a:2b:6e: b6:7e:69:62:8d:69:bb:bc:8d:57:5c:28:cf:6b:19: 5d:7e:2d:89:33:db:3c:8f:c0:b9:6f:16:ae:93:b0: 53:41:2d:46:47:f5:fd:57:63:2e:eb:ff:5b:ac:e7: 9c:64:d7:26:19:26:67:48:df:67:7e:7e:fc:50:5e: db:77:27:3d:92:43:8b:1a:50:37:2c:a3:45:69:cb: 39:4f:b9:ed:56:fa:37:4f:b1:ff:2e:1f:fb:41:88: 54:f0:64:3d:ea:2d:ca:76:ab:6c:ea:82:ee:e5:e8: 2f:f7:57:fe:bb:0a:86:49:e8:bb:36:e1:70:87:a1: 59:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5F:FF:32:03:28:11:B6:BC:E8:6E:7F:E0:53:C5:F5:E8:DF:6D:50 X509v3 Authority Key Identifier: keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:81:10:6e:8c:1a:32:6e:66:3f:e9:c3:7b:b4:2e:15:1b:33: 90:fa:ce:1d:c5:76:e6:2d:f1:11:01:9f:4b:87:e5:f2:49:72: 49:a1:b3:a9:8c:85:2d:e4:35:c3:fd:32:f1:dd:6a:50:83:fc: e7:38:01:4b:30:79:ee:a6:02:0f:f6:97:ab:e4:73:9a:4a:94: 62:2c:3c:cd:91:da:d0:32:0a:f5:73:3f:07:d8:47:75:df:2b: cc:1c:87:da:94:bb:6f:dc:91:75:f2:92:d7:c6:52:da:6e:0a: dc:9c:f3:bc:40:b9:ff:cc:13:da:32:31:f9:2b:d8:d1:20:5f: 21:1b:84:07:b5:b9:43:e0:1b:cd:ee:bc:be:0c:4f:11:44:b2: 62:16:fc:49:90:fd:d7:58:a9:a9:05:a5:52:2c:8b:42:79:40: 45:b1:3a:5e:0f:77:e6:de:33:78:91:86:9a:ab:8d:cc:cf:5e: 18:6c:e7:f0:ff:e9:c4:c8:88:3e:91:e0:a4:a6:5b:ee:49:5e: 9d:c8:f3:32:ef:c3:01:e9:b2:57:3c:db:9c:d0:38:a3:5a:6e: ba:70:f6:8c:0c:94:91:b3:7a:d6:9c:f5:30:84:1a:69:37:45: 6f:f3:3f:79:d1:92:a2:53:ce:f9:9a:d8:21:37:a0:cf:fe:d7: 85:91:ef:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYA2oaGLdKMdS22pMNtGcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMjViZTcwNDA2ZDM4MWU3MjVkM2UyYmVmMTJmNmE4ZjNk ZDgyNTcwHhcNMjUxMjEzMTQwMDM1WhcNMjUxMjE0MTQwMDM1WjAzMTEwLwYDVQQD EygzNzVmZmYzMjAzMjgxMWI2YmNlODZlN2ZlMDUzYzVmNWU4ZGY2ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41jjC0RAcMhz5+3bnbY0qnBza+e3 PWAJQhXBw/fm347Ea6BCfbkXN2l1VCuJmIq/3nWWb8Rc0N9GrUjfqzqlWjeIyWdF Z5Sx8m/jecoxTKlCnqAxIBPdxFB0rvpWBf8ELsryczMW3fDJcwqyct0C0bfSyE+V fJZfpMQTPHjYZHYm1OwqK262fmlijWm7vI1XXCjPaxldfi2JM9s8j8C5bxauk7BT QS1GR/X9V2Mu6/9brOecZNcmGSZnSN9nfn78UF7bdyc9kkOLGlA3LKNFacs5T7nt Vvo3T7H/Lh/7QYhU8GQ96i3Kdqts6oLu5egv91f+uwqGSei7NuFwh6FZTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdf/zIDKBG2vOhuf+BTxfXo321QMB8GA1UdIwQY MBaAFH0lvnBAbTgecl0+K+8S9qjz3YJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2Ut ZWI2NWYxZjQ2ZTBiLzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2UtZWI2NWYxZjQ2ZTBi LzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYEQbowa Mm5mP+nDe7QuFRszkPrOHcV25i3xEQGfS4fl8klySaGzqYyFLeQ1w/0y8d1qUIP8 5zgBSzB57qYCD/aXq+RzmkqUYiw8zZHa0DIK9XM/B9hHdd8rzByH2pS7b9yRdfKS 18ZS2m4K3JzzvEC5/8wT2jIx+SvY0SBfIRuEB7W5Q+Abze68vgxPEUSyYhb8SZD9 11ipqQWlUiyLQnlARbE6Xg935t4zeJGGmquNzM9eGGzn8P/pxMiIPpHgpKZb7kle ncjzMu/DAemyVzzbnNA4o1puunD2jAyUkbN61pz1MIQaaTdFb/M/edGSolPO+ZrY ITegz/7XhZHv8Q== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:53 2025 by rpki-client