This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft File: swLy7pS0Qh7qX5jsD8SRdbubtDY.mft (raw, json) Hash identifier: jSGw+BZ4X+mMc8ybsvGULlJEyZFwjS25uO7SIqxuDug= Subject key identifier: 7B:54:BB:DA:F9:ED:63:3F:7E:CF:C3:0B:8B:F1:49:09:77:C0:F6:0B Authority key identifier: B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36 Certificate issuer: /CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436 Certificate serial: 019B593EEA3EE61F9A8B2C57D8962F39AC33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft Manifest number: 010D Signing time: Fri 26 Dec 2025 06:00:53 +0000 Manifest this update: Fri 26 Dec 2025 06:00:53 +0000 Manifest next update: Sat 27 Dec 2025 06:00:53 +0000 Files and hashes: 1: swLy7pS0Qh7qX5jsD8SRdbubtDY.crl (hash: NEzosfVbTd2pT9QR4vnp+uneFxu0cpCP5eKoNMD2fVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:ea:3e:e6:1f:9a:8b:2c:57:d8:96:2f:39:ac:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436 Validity Not Before: Dec 26 06:00:53 2025 GMT Not After : Dec 27 06:00:53 2025 GMT Subject: CN=7b54bbdaf9ed633f7ecfc30b8bf1490977c0f60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:36:81:81:87:63:21:50:40:72:48:bf:8a:a5: b6:90:15:1f:58:c9:3a:b5:74:fd:1e:0c:f9:aa:ca: 11:39:74:bc:4f:56:cd:7e:73:32:33:d2:eb:cb:dd: e1:79:f7:0a:0f:e8:0d:4c:2f:e0:9b:e9:4f:16:78: c5:d1:dc:52:84:3f:4e:9f:3c:10:39:f3:8c:3a:b9: 5c:ac:42:e6:98:68:2a:17:bc:c0:e7:1a:bf:cb:ed: 57:aa:fa:4f:3f:8b:f0:31:ca:c8:3b:1a:64:93:27: 9c:e8:7a:3e:33:ec:69:26:05:45:c6:41:b9:46:31: 81:a1:4e:8f:15:28:ca:35:02:fa:ab:c3:b2:1e:f7: ab:f6:c7:8c:01:3e:4b:57:31:60:d1:5d:63:70:fa: bd:42:04:d6:82:91:ca:41:74:11:45:36:2e:2f:af: 22:bf:9c:e0:0d:db:13:61:a5:6f:89:26:eb:7a:41: 33:e4:ec:33:01:30:15:f6:52:13:64:b5:ff:a9:8a: 10:53:65:bb:07:1c:df:e5:62:b5:2f:9b:c5:57:bf: a3:e5:6c:b4:2b:e4:35:9e:51:38:54:57:53:44:cd: e0:ea:3c:d9:61:f1:72:01:94:df:4e:9d:e8:13:1c: 02:b4:21:af:75:db:f9:21:2f:94:df:ea:98:83:a1: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:54:BB:DA:F9:ED:63:3F:7E:CF:C3:0B:8B:F1:49:09:77:C0:F6:0B X509v3 Authority Key Identifier: keyid:B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:d0:37:ab:2b:7d:40:c6:42:5b:1c:8a:ba:26:db:04:8c:78: 73:00:d6:62:58:af:d9:b5:da:ab:f0:15:0e:b2:fa:81:f0:59: 8f:2f:17:3d:91:f1:22:60:29:d1:32:a5:1e:b1:5e:41:d6:3c: 2c:c3:c4:e3:f2:c5:13:cd:ee:96:78:ee:e6:2b:10:d2:f0:c3: 9b:56:d4:7d:48:76:4b:84:4f:24:f7:e5:07:49:40:cf:d0:5b: a1:b2:5d:6c:ad:c0:ff:4b:df:dd:4b:eb:ae:06:d2:20:68:57: 54:3a:10:b8:56:a1:6a:d4:f2:38:28:00:67:30:b6:f2:cb:5a: 8d:9a:6e:2a:92:f4:2f:40:b0:db:da:b8:e2:de:97:8e:5f:7f: 60:d0:ae:b6:71:12:58:59:0f:50:ad:9d:b0:64:54:f3:3d:ef: 7b:64:57:e2:42:29:27:7e:34:90:50:61:ee:c2:7b:bb:16:38: 10:a0:a4:f4:97:92:cf:80:f8:61:d1:b3:27:f8:82:ea:f7:c1: 0a:69:fa:fb:0a:e8:dd:18:4b:4b:92:0a:12:ea:fc:26:f7:0e: e4:db:18:af:a3:07:22:1a:9c:8b:a5:8b:e9:53:6d:b9:91:06: 13:7c:f5:d3:88:02:d3:a2:2c:27:42:58:02:28:24:26:5e:92: 64:e8:50:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPuo+5h+aiyxX2JYvOawzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDJmMmVlOTRiNDQyMWVlYTVmOThlYzBmYzQ5MTc1YmI5 YmI0MzYwHhcNMjUxMjI2MDYwMDUzWhcNMjUxMjI3MDYwMDUzWjAzMTEwLwYDVQQD Eyg3YjU0YmJkYWY5ZWQ2MzNmN2VjZmMzMGI4YmYxNDkwOTc3YzBmNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jaBgYdjIVBAcki/iqW2kBUfWMk6 tXT9Hgz5qsoROXS8T1bNfnMyM9Lry93hefcKD+gNTC/gm+lPFnjF0dxShD9OnzwQ OfOMOrlcrELmmGgqF7zA5xq/y+1XqvpPP4vwMcrIOxpkkyec6Ho+M+xpJgVFxkG5 RjGBoU6PFSjKNQL6q8OyHver9seMAT5LVzFg0V1jcPq9QgTWgpHKQXQRRTYuL68i v5zgDdsTYaVviSbrekEz5OwzATAV9lITZLX/qYoQU2W7Bxzf5WK1L5vFV7+j5Wy0 K+Q1nlE4VFdTRM3g6jzZYfFyAZTfTp3oExwCtCGvddv5IS+U3+qYg6HOmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtUu9r57WM/fs/DC4vxSQl3wPYLMB8GA1UdIwQY MBaAFLMC8u6UtEIe6l+Y7A/EkXW7m7Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dMeTdwUzBRaDdxWDVqc0Q4U1JkYnVidERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mNmZmZjAtMTZiNC00MDZmLTlmZDMt YTE4OWFhOTI0OTM4LzEvc3dMeTdwUzBRaDdxWDVqc0Q4U1JkYnVidERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9mNmZmZjAtMTZiNC00MDZmLTlmZDMtYTE4OWFhOTI0OTM4 LzEvc3dMeTdwUzBRaDdxWDVqc0Q4U1JkYnVidERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydA3qyt9 QMZCWxyKuibbBIx4cwDWYliv2bXaq/AVDrL6gfBZjy8XPZHxImAp0TKlHrFeQdY8 LMPE4/LFE83ulnju5isQ0vDDm1bUfUh2S4RPJPflB0lAz9BbobJdbK3A/0vf3Uvr rgbSIGhXVDoQuFahatTyOCgAZzC28stajZpuKpL0L0Cw29q44t6Xjl9/YNCutnES WFkPUK2dsGRU8z3ve2RX4kIpJ340kFBh7sJ7uxY4EKCk9JeSz4D4YdGzJ/iC6vfB Cmn6+wro3RhLS5IKEur8JvcO5NsYr6MHIhqci6WL6VNtuZEGE3z104gC06IsJ0JY AigkJl6SZOhQFw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:17 2025 by rpki-client