This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft File: SwGEomKzUJ4aumGpC-yrMrACVUw.mft (raw, json) Hash identifier: Qr3Nej8eeAa0juaNKTJAGZNGOxXDy8mZt7gKuejpdIY= Subject key identifier: 79:BE:26:57:D3:56:EF:45:74:1B:84:BC:3D:48:46:23:72:3D:93:C2 Authority key identifier: 4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C Certificate issuer: /CN=4b0184a262b3509e1aba61a90becab32b002554c Certificate serial: 019B3A906B72922CD2C30420F05E25BC7977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft Manifest number: 1716 Signing time: Sat 20 Dec 2025 07:01:41 +0000 Manifest this update: Sat 20 Dec 2025 07:01:41 +0000 Manifest next update: Sun 21 Dec 2025 07:01:41 +0000 Files and hashes: 1: SwGEomKzUJ4aumGpC-yrMrACVUw.crl (hash: cS685WYk8fZErRGjB+FwDKfPzko1lFMfHJbbMmDjv3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:6b:72:92:2c:d2:c3:04:20:f0:5e:25:bc:79:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b0184a262b3509e1aba61a90becab32b002554c Validity Not Before: Dec 20 07:01:41 2025 GMT Not After : Dec 21 07:01:41 2025 GMT Subject: CN=79be2657d356ef45741b84bc3d484623723d93c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:91:5b:ce:7d:3f:ed:83:1b:47:63:4a:30:8f: d5:bb:23:ac:45:e9:94:de:bb:98:cd:72:a0:88:d8: 00:8f:74:67:73:b7:70:2a:9f:ce:4b:23:bc:b7:f8: 02:a0:9d:61:44:97:d6:12:80:48:ea:1c:f6:88:22: c1:18:94:6e:e2:fc:2c:2f:93:d7:0b:55:e7:f5:84: 3b:f6:3e:0a:56:8f:1e:92:86:62:17:e2:05:73:96: da:e4:b7:88:8a:91:80:b0:0c:e1:f1:9b:c5:e0:ad: d2:f3:ae:7c:9b:58:be:ad:fd:59:2e:14:d6:3c:c8: bf:e5:33:6c:3e:4f:d8:b3:a3:41:1e:2b:4c:57:6d: d8:cf:25:f0:a5:de:7e:d7:b4:a7:83:6c:7b:cf:6e: ba:54:4e:0e:26:10:f3:46:5b:d1:5e:ae:84:e9:3d: 3a:7f:64:2f:13:28:3d:e2:53:c0:3d:9f:c2:53:5b: 21:7a:65:64:35:de:bc:38:fd:d5:fb:47:09:54:35: c7:d8:37:f8:84:bc:70:a2:1e:9b:78:44:b5:b3:ea: 97:2d:d1:54:5f:f3:71:b2:54:c7:eb:ac:54:c7:3f: d8:6e:dc:2b:f9:6b:6c:b7:37:af:c6:de:62:38:99: 1c:e2:76:ad:61:15:7a:d5:b1:bc:a6:d7:36:bc:53: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:26:57:D3:56:EF:45:74:1B:84:BC:3D:48:46:23:72:3D:93:C2 X509v3 Authority Key Identifier: keyid:4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2e:c8:b8:a1:44:6c:ae:bb:1a:52:a0:77:3f:4e:c5:34:8e: 6f:ed:fb:0f:7f:05:78:e4:97:bd:6d:f6:77:2d:31:e8:50:16: e9:da:3b:3f:40:74:35:d7:5c:5b:ca:f4:43:bb:9f:3a:2a:96: 10:cd:a0:9e:a1:9a:a7:6b:11:0f:3f:05:22:c5:5f:3d:e3:63: 69:87:cc:da:b6:1b:91:d7:3f:b8:e0:44:99:f7:c9:3d:57:68: c3:97:aa:10:f2:e4:77:16:49:45:1c:fd:d6:b5:af:c0:ad:43: 99:47:f9:f1:02:5b:5a:e0:4f:47:a7:01:93:a2:51:fb:df:3b: 86:2a:24:d0:ab:f1:2d:a5:18:3f:54:57:2c:71:cf:bf:90:df: 75:4e:ec:9a:61:28:d1:95:80:ec:04:35:93:6b:f2:11:b7:3a: d0:1a:5d:57:d6:89:a2:fe:70:47:b5:49:44:f3:4a:54:cb:8d: dd:0d:cc:b7:95:c7:c7:22:71:0e:83:a0:24:b6:6a:db:76:65: 46:82:d0:80:76:1c:1e:9f:e8:24:4c:99:6c:2c:d8:6a:99:7a: 89:15:26:d4:6e:76:88:4b:84:d8:26:3c:de:48:f3:27:33:b7: 60:7d:d8:06:0d:0c:34:72:c1:cc:d9:10:63:b9:0a:fa:b8:1f: 7d:17:d1:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kGtykizSwwQg8F4lvHl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMDE4NGEyNjJiMzUwOWUxYWJhNjFhOTBiZWNhYjMyYjAw MjU1NGMwHhcNMjUxMjIwMDcwMTQxWhcNMjUxMjIxMDcwMTQxWjAzMTEwLwYDVQQD Eyg3OWJlMjY1N2QzNTZlZjQ1NzQxYjg0YmMzZDQ4NDYyMzcyM2Q5M2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pFbzn0/7YMbR2NKMI/VuyOsRemU 3ruYzXKgiNgAj3Rnc7dwKp/OSyO8t/gCoJ1hRJfWEoBI6hz2iCLBGJRu4vwsL5PX C1Xn9YQ79j4KVo8ekoZiF+IFc5ba5LeIipGAsAzh8ZvF4K3S8658m1i+rf1ZLhTW PMi/5TNsPk/Ys6NBHitMV23YzyXwpd5+17Sng2x7z266VE4OJhDzRlvRXq6E6T06 f2QvEyg94lPAPZ/CU1shemVkNd68OP3V+0cJVDXH2Df4hLxwoh6beES1s+qXLdFU X/NxslTH66xUxz/Ybtwr+Wtstzevxt5iOJkc4natYRV61bG8ptc2vFPPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm+JlfTVu9FdBuEvD1IRiNyPZPCMB8GA1UdIwQY MBaAFEsBhKJis1CeGrphqQvsqzKwAlVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjRhZDQtYWExYi00NmUzLTk0YjIt ZTM1YWZhMzZhNDI4LzEvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNjRhZDQtYWExYi00NmUzLTk0YjItZTM1YWZhMzZhNDI4 LzEvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALC7IuKFE bK67GlKgdz9OxTSOb+37D38FeOSXvW32dy0x6FAW6do7P0B0NddcW8r0Q7ufOiqW EM2gnqGap2sRDz8FIsVfPeNjaYfM2rYbkdc/uOBEmffJPVdow5eqEPLkdxZJRRz9 1rWvwK1DmUf58QJbWuBPR6cBk6JR+987hiok0KvxLaUYP1RXLHHPv5DfdU7smmEo 0ZWA7AQ1k2vyEbc60BpdV9aJov5wR7VJRPNKVMuN3Q3Mt5XHxyJxDoOgJLZq23Zl RoLQgHYcHp/oJEyZbCzYapl6iRUm1G52iEuE2CY83kjzJzO3YH3YBg0MNHLBzNkQ Y7kK+rgffRfR2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:36 2025 by rpki-client