This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json) Hash identifier: 5h3Wg/TVQF6qwvcE05W4wzx46YpicQOGwNRyMd5LsFw= Subject key identifier: AD:5D:32:4E:0D:95:BE:0E:9F:D5:26:87:8F:07:75:53:F2:10:BE:A5 Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f Certificate serial: 019B0D80E1E917C73B36067D6950B4EE0646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 13:01:48 +0000 Manifest this update: Thu 11 Dec 2025 13:01:48 +0000 Manifest next update: Fri 12 Dec 2025 13:01:48 +0000 Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: B725HuaPwwiai/VzczpYhxq8w3g+CPfWa/TDsP4fvY4=) 2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:e1:e9:17:c7:3b:36:06:7d:69:50:b4:ee:06:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f Validity Not Before: Dec 11 13:01:48 2025 GMT Not After : Dec 12 13:01:48 2025 GMT Subject: CN=ad5d324e0d95be0e9fd526878f077553f210bea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:4e:1d:cb:ce:d3:40:0f:7c:ba:e4:25:45: 47:02:6f:a1:f5:57:57:96:ab:02:5b:9a:0c:18:5a: 1e:7d:2e:37:f2:95:f1:2d:18:56:8e:d3:65:e5:52: 89:2e:4f:ae:a7:77:3c:cf:05:51:78:25:8a:45:e2: 01:4e:b5:b2:dd:39:cf:35:a0:71:44:7f:37:32:48: 65:7c:1f:e9:17:4b:2f:00:24:8e:5e:3f:f4:fe:76: 32:dc:47:f2:f5:45:a8:69:be:36:bf:79:5d:55:74: 46:f6:e6:f5:cd:89:63:5b:07:76:99:b0:e6:27:71: 61:07:7a:43:9e:2e:d4:ff:58:c5:7f:5d:93:71:a8: 3b:72:8a:29:3c:8b:de:7f:4c:79:ee:f1:ab:4b:d3: 29:c4:da:e1:12:27:ed:60:fd:c5:b8:47:6c:3c:b4: 2b:2a:48:a7:cc:c0:8e:d0:12:a5:88:08:0b:a5:c9: e7:f2:2c:63:21:24:2d:a3:2d:1c:d9:1b:a6:a3:9c: d0:6a:93:7b:e8:c0:90:5b:79:e8:9f:a5:a6:c2:d3: d5:a7:93:15:5d:a9:e5:53:4c:bb:7d:e2:a0:39:91: 20:b7:e4:fd:cb:5f:41:4b:42:1a:cb:70:e4:65:4e: 10:cd:d1:e3:21:78:b9:0b:5a:62:63:7e:0e:b6:3e: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5D:32:4E:0D:95:BE:0E:9F:D5:26:87:8F:07:75:53:F2:10:BE:A5 X509v3 Authority Key Identifier: keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:94:90:56:48:b4:e1:90:b9:ee:45:3d:fd:87:ce:5f:6f:7c: 7e:ca:1d:4b:a5:08:69:cf:d8:91:a4:06:39:43:f4:81:d1:92: 0f:f4:cb:b4:05:fa:ef:c2:f6:a5:e3:7d:48:03:05:6a:52:2a: a0:50:43:55:33:50:82:69:3a:55:e7:07:73:d2:97:21:81:93: 01:19:7a:c3:17:a6:32:a7:38:74:30:51:e4:5d:43:61:45:1b: 90:bf:56:dc:92:9a:1d:fc:d6:f2:07:31:c9:ab:44:73:c7:61: 7b:ac:c4:f9:5a:de:22:3a:52:82:f2:7f:17:81:b4:fd:d8:58: fe:c7:cc:0b:4b:90:fb:d4:af:cc:59:dc:ff:34:6d:c5:b6:66: 8d:15:0b:bd:51:55:08:26:4a:73:26:5a:af:db:f4:b0:82:cd: 61:5c:b4:3b:f8:8a:6b:5a:b3:d0:8e:3d:7e:a8:46:92:b6:d7: fc:14:37:2d:78:60:b5:e1:ab:ff:a4:7a:80:54:c4:aa:1d:37: 32:82:7f:c9:be:4a:57:37:bd:ce:26:1b:01:28:cd:4c:9e:7e: 35:e0:43:f7:2f:10:43:31:3c:40:20:be:91:26:82:f1:68:76: 37:c4:34:5e:7c:40:d3:c7:ba:da:35:ac:2d:9f:0f:8b:c8:b0: 39:14:d2:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgOHpF8c7NgZ9aVC07gZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTRiMGNjMmMzZjZiNzU3ZmY1MmNiYTE2NWQ5ZmZhODhj ZWQzMGYwHhcNMjUxMjExMTMwMTQ4WhcNMjUxMjEyMTMwMTQ4WjAzMTEwLwYDVQQD EyhhZDVkMzI0ZTBkOTViZTBlOWZkNTI2ODc4ZjA3NzU1M2YyMTBiZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxpOHcvO00APfLrkJUVHAm+h9VdX lqsCW5oMGFoefS438pXxLRhWjtNl5VKJLk+up3c8zwVReCWKReIBTrWy3TnPNaBx RH83MkhlfB/pF0svACSOXj/0/nYy3Efy9UWoab42v3ldVXRG9ub1zYljWwd2mbDm J3FhB3pDni7U/1jFf12Tcag7coopPIvef0x57vGrS9MpxNrhEiftYP3FuEdsPLQr KkinzMCO0BKliAgLpcnn8ixjISQtoy0c2Rumo5zQapN76MCQW3non6WmwtPVp5MV XanlU0y7feKgOZEgt+T9y19BS0Iay3DkZU4QzdHjIXi5C1piY34Otj7bxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1dMk4Nlb4On9Umh48HdVPyEL6lMB8GA1UdIwQY MBaAFHZUsMwsP2t1f/UsuhZdn/qIztMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEt OGIxNTZkYjRmZjM1LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEtOGIxNTZkYjRmZjM1 LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZSQVki0 4ZC57kU9/YfOX298fsodS6UIac/YkaQGOUP0gdGSD/TLtAX678L2peN9SAMFalIq oFBDVTNQgmk6VecHc9KXIYGTARl6wxemMqc4dDBR5F1DYUUbkL9W3JKaHfzW8gcx yatEc8dhe6zE+VreIjpSgvJ/F4G0/dhY/sfMC0uQ+9SvzFnc/zRtxbZmjRULvVFV CCZKcyZar9v0sILNYVy0O/iKa1qz0I49fqhGkrbX/BQ3LXhgteGr/6R6gFTEqh03 MoJ/yb5KVze9ziYbASjNTJ5+NeBD9y8QQzE8QCC+kSaC8Wh2N8Q0XnxA08e62jWs LZ8Pi8iwORTSLA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:53 2025 by rpki-client