This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft File: _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json) Hash identifier: mBkvuVfF+V8meYrP0Y3zAiMGiT3HYdZ4o5My7Du0gcc= Subject key identifier: 9B:D4:E7:2C:29:4A:9D:6B:63:43:1E:6E:DE:B8:D4:5D:F7:FC:A8:F1 Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE Certificate issuer: /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde Certificate serial: 019B5A51F18C913AA195AA1DEF962A44FD95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft Manifest number: 4A Signing time: Fri 26 Dec 2025 11:01:18 +0000 Manifest this update: Fri 26 Dec 2025 11:01:18 +0000 Manifest next update: Sat 27 Dec 2025 11:01:18 +0000 Files and hashes: 1: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: Y0XiT1lgayfeTYYHpyCLgI4h6MsPhl3KklUUfRL54cU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:f1:8c:91:3a:a1:95:aa:1d:ef:96:2a:44:fd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde Validity Not Before: Dec 26 11:01:18 2025 GMT Not After : Dec 27 11:01:18 2025 GMT Subject: CN=9bd4e72c294a9d6b63431e6edeb8d45df7fca8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:3d:28:7e:fb:ad:82:b3:91:1c:cc:6b:43: 04:4c:b4:d8:fc:b4:75:36:93:13:d8:b5:f8:ef:89: 53:b4:eb:52:ec:7e:a2:10:65:72:97:22:d2:a5:95: ab:34:ad:78:78:23:7a:a2:a3:64:0e:1d:9c:08:61: 2c:36:86:a5:1c:55:8e:75:c1:ae:d2:78:6a:91:f6: 31:58:a8:98:92:44:29:10:9a:0d:aa:1f:84:a6:12: 53:82:a9:63:21:08:d4:5b:c8:16:8e:61:39:e6:57: 1f:67:03:a3:aa:66:50:01:2c:cb:87:f0:ca:e3:33: a6:fc:28:47:3e:e3:56:6a:6d:5e:29:39:d9:f9:96: 90:98:4c:6c:df:97:2b:6b:fa:22:a7:73:50:15:ea: 39:76:82:58:38:49:84:76:53:12:5f:90:1d:ae:db: 61:f3:9d:03:38:e0:43:c2:b7:8c:01:1c:89:16:e4: 6f:ce:8d:ce:0f:0c:0f:6f:e5:67:0a:3b:c6:bc:ef: 28:30:38:ab:1d:48:e3:e4:70:6e:08:c3:b3:88:09: 12:7a:10:d9:48:d8:3c:2d:56:29:39:1e:03:2e:86: 7d:1f:51:ff:79:0b:20:d6:d5:c6:9d:c7:fb:a3:b8: 90:20:8f:55:35:a5:26:8d:26:01:60:1e:50:aa:0b: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D4:E7:2C:29:4A:9D:6B:63:43:1E:6E:DE:B8:D4:5D:F7:FC:A8:F1 X509v3 Authority Key Identifier: keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e8:64:cc:1d:5e:d7:59:3d:9f:39:d0:2d:d2:bd:d5:cb:d6: bc:26:5e:41:6c:90:e9:5b:7f:4c:c7:95:c0:a1:e4:0e:ed:c0: 95:a6:5e:77:38:fa:10:9c:0f:f2:83:21:93:58:bb:d5:0f:13: 5c:67:2b:45:b1:5a:07:ea:0e:b6:51:bf:4e:2d:f8:d9:3b:82: 1d:a2:69:e9:e7:fc:de:c6:23:0e:63:8b:24:49:32:ee:8c:42: 4f:c9:a8:23:a6:49:49:5e:b6:ec:71:37:57:da:c6:d6:59:0b: c6:1f:9f:8f:01:b1:01:a3:04:01:cd:2b:4c:0c:ea:4b:38:c9: 66:a8:0c:d5:36:17:6f:3a:19:c8:4d:8a:a7:48:ff:85:33:f6: 6c:03:51:25:10:cd:3b:86:a7:01:a2:8e:93:9d:a1:98:d2:4d: 87:77:10:a4:32:5b:9b:9b:dd:40:69:cf:92:94:53:ef:ee:bc: c4:ba:99:7c:d3:db:35:4a:73:a2:68:27:d1:0c:85:b5:a0:af: b1:1f:02:77:a8:26:85:c3:e5:87:bf:2b:2a:ea:2c:bd:c9:7f: f0:23:7a:b8:82:57:b3:3c:26:69:95:f6:5e:64:37:a1:c6:d3: 3c:bb:6b:49:25:4f:66:18:8e:ca:3c:23:2a:a5:82:42:68:4e: 12:78:b1:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUfGMkTqhlaod75YqRP2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2MwYmYzOTE5MzM5Mjc3ZWFkNmJhMWQ5NTVjYjVmNmMz OThkZGUwHhcNMjUxMjI2MTEwMTE4WhcNMjUxMjI3MTEwMTE4WjAzMTEwLwYDVQQD Eyg5YmQ0ZTcyYzI5NGE5ZDZiNjM0MzFlNmVkZWI4ZDQ1ZGY3ZmNhOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszw9KH77rYKzkRzMa0METLTY/LR1 NpMT2LX474lTtOtS7H6iEGVylyLSpZWrNK14eCN6oqNkDh2cCGEsNoalHFWOdcGu 0nhqkfYxWKiYkkQpEJoNqh+EphJTgqljIQjUW8gWjmE55lcfZwOjqmZQASzLh/DK 4zOm/ChHPuNWam1eKTnZ+ZaQmExs35cra/oip3NQFeo5doJYOEmEdlMSX5Adrtth 850DOOBDwreMARyJFuRvzo3ODwwPb+VnCjvGvO8oMDirHUjj5HBuCMOziAkSehDZ SNg8LVYpOR4DLoZ9H1H/eQsg1tXGncf7o7iQII9VNaUmjSYBYB5QqguFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvU5ywpSp1rY0Mebt641F33/KjxMB8GA1UdIwQY MBaAFP7MC/ORkzknfq1rodlVy19sOY3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUt ZTFlNmU5NWI0YjdjLzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUtZTFlNmU5NWI0Yjdj LzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOhkzB1e 11k9nznQLdK91cvWvCZeQWyQ6Vt/TMeVwKHkDu3AlaZedzj6EJwP8oMhk1i71Q8T XGcrRbFaB+oOtlG/Ti342TuCHaJp6ef83sYjDmOLJEky7oxCT8moI6ZJSV627HE3 V9rG1lkLxh+fjwGxAaMEAc0rTAzqSzjJZqgM1TYXbzoZyE2Kp0j/hTP2bANRJRDN O4anAaKOk52hmNJNh3cQpDJbm5vdQGnPkpRT7+68xLqZfNPbNUpzomgn0QyFtaCv sR8Cd6gmhcPlh78rKuosvcl/8CN6uIJXszwmaZX2XmQ3ocbTPLtrSSVPZhiOyjwj KqWCQmhOEnixrw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:22 2025 by rpki-client