This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json) Hash identifier: RByzQJsBUfQ+SWom3afGBK4cGR4hZsRCsNsK+os8DDI= Subject key identifier: F4:DE:6B:1F:AD:1A:6A:85:07:1F:C0:04:08:3E:93:2A:DF:47:4C:4E Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a Certificate serial: 019B3EDA513158D3F7BA09B0C6AF37568292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft Manifest number: 03F9 Signing time: Sun 21 Dec 2025 03:00:53 +0000 Manifest this update: Sun 21 Dec 2025 03:00:53 +0000 Manifest next update: Mon 22 Dec 2025 03:00:53 +0000 Files and hashes: 1: 8D4_cs3El7iMnocmOE0P9fDWbGM.roa (hash: EF6oh36rQUWBSR4sj1xINR215tCyltEhPZYCKNWyilI=) 2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: Gfw4QXH+55aZxFDms8AKzSlOETVYwUd9kw/u1eXPVUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:51:31:58:d3:f7:ba:09:b0:c6:af:37:56:82:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a Validity Not Before: Dec 21 03:00:53 2025 GMT Not After : Dec 22 03:00:53 2025 GMT Subject: CN=f4de6b1fad1a6a85071fc004083e932adf474c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:43:38:a1:27:64:c3:e9:4c:a4:01:3e:ef: af:84:5c:da:42:b2:d0:5d:f3:60:a5:7b:1a:7b:8b: 7f:c3:57:50:92:8a:6a:17:c8:66:e3:02:8c:b8:f5: dd:86:ea:f3:74:e2:be:19:1d:60:f6:7f:38:0b:b5: 40:e6:0d:02:fb:4d:bb:9f:59:e1:37:cf:57:09:4b: c6:f6:19:27:19:5e:2f:0a:9c:ad:bd:2c:d3:55:1e: 0f:0c:ae:fd:b3:53:25:70:24:7d:fd:c6:79:57:8a: 97:e3:7a:e5:22:36:c6:32:2a:d6:77:c3:12:c3:57: d9:34:17:6e:23:da:90:eb:3e:9c:60:4c:18:f4:63: 3c:0a:ef:ae:4d:f9:78:0c:2f:be:45:da:47:b4:5a: ba:d5:e2:aa:e4:c7:1b:bc:44:96:bb:a9:f0:53:35: 39:1d:3e:1f:f4:52:d3:59:31:cf:6e:82:68:07:92: fb:94:8d:72:ea:d7:48:ec:dc:79:0f:6f:2f:4d:b8: 9f:a2:9a:86:a2:4c:49:85:a4:08:14:f2:09:69:2e: 7a:42:c0:0f:a0:73:82:8c:c9:57:a8:be:87:17:37: 0e:b4:60:f5:c2:f4:4f:20:12:6d:f6:12:fd:95:8e: c7:9a:67:f9:33:62:ec:20:70:6c:70:04:a6:8b:ea: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DE:6B:1F:AD:1A:6A:85:07:1F:C0:04:08:3E:93:2A:DF:47:4C:4E X509v3 Authority Key Identifier: keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:bc:ce:ff:ad:3d:a9:1f:a6:d0:0f:7b:8f:9f:f7:b6:b2:4b: 1e:07:57:4e:f0:4f:98:1e:94:93:7c:38:b4:45:a6:a4:dc:c1: e5:a4:d4:7f:3b:e4:9e:19:ac:dd:41:a5:f2:48:60:5c:55:22: 1b:46:f1:67:7d:de:ca:a9:95:3e:9b:7d:c1:d1:58:58:2b:d3: 8d:bd:79:ba:d6:65:bb:22:33:1b:bf:cd:e3:2c:c8:00:ab:90: 7a:bd:01:00:52:f7:02:98:b5:24:e0:5e:8c:00:c3:ce:0b:a0: ad:1b:a8:10:d7:2f:5e:e9:69:b2:38:81:9a:60:b1:1c:24:77: 2f:f6:eb:10:c8:eb:0d:9c:e6:1a:92:75:b8:6e:a2:42:ac:59: 6b:93:94:c3:35:c0:5d:21:3e:7c:c5:06:ec:65:93:64:4d:43: 05:91:e3:02:69:95:4a:1e:39:5d:a1:fc:52:5f:3e:8f:47:de: ad:8b:36:a9:c4:4e:cb:f3:f1:b7:b2:04:f5:20:2d:15:45:09: 5e:88:58:7e:4e:49:91:d5:1f:15:1d:6b:cf:ee:06:da:9a:8f: fa:d2:82:01:7d:69:9f:9c:fb:33:60:c7:cf:33:51:38:12:e2: 49:c9:c0:51:52:91:8a:60:20:dc:7c:bf:2d:e0:b5:b7:d5:a0: 29:09:0c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lExWNP3ugmwxq83VoKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDUxNWY0N2RhOTI1ZDlmOTAxMzgwOGFhOTExM2MyYmRl OTZkOWEwHhcNMjUxMjIxMDMwMDUzWhcNMjUxMjIyMDMwMDUzWjAzMTEwLwYDVQQD EyhmNGRlNmIxZmFkMWE2YTg1MDcxZmMwMDQwODNlOTMyYWRmNDc0YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DhDOKEnZMPpTKQBPu+vhFzaQrLQ XfNgpXsae4t/w1dQkopqF8hm4wKMuPXdhurzdOK+GR1g9n84C7VA5g0C+027n1nh N89XCUvG9hknGV4vCpytvSzTVR4PDK79s1MlcCR9/cZ5V4qX43rlIjbGMirWd8MS w1fZNBduI9qQ6z6cYEwY9GM8Cu+uTfl4DC++RdpHtFq61eKq5McbvESWu6nwUzU5 HT4f9FLTWTHPboJoB5L7lI1y6tdI7Nx5D28vTbifopqGokxJhaQIFPIJaS56QsAP oHOCjMlXqL6HFzcOtGD1wvRPIBJt9hL9lY7Hmmf5M2LsIHBscASmi+pW/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTeax+tGmqFBx/ABAg+kyrfR0xOMB8GA1UdIwQY MBaAFLMFFfR9qSXZ+QE4CKqRE8K96W2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYt MTczODI1MzliMDAwLzEvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYtMTczODI1MzliMDAw LzEvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLzO/609 qR+m0A97j5/3trJLHgdXTvBPmB6Uk3w4tEWmpNzB5aTUfzvknhms3UGl8khgXFUi G0bxZ33eyqmVPpt9wdFYWCvTjb15utZluyIzG7/N4yzIAKuQer0BAFL3Api1JOBe jADDzgugrRuoENcvXulpsjiBmmCxHCR3L/brEMjrDZzmGpJ1uG6iQqxZa5OUwzXA XSE+fMUG7GWTZE1DBZHjAmmVSh45XaH8Ul8+j0ferYs2qcROy/Pxt7IE9SAtFUUJ XohYfk5JkdUfFR1rz+4G2pqP+tKCAX1pn5z7M2DHzzNROBLiScnAUVKRimAg3Hy/ LeC1t9WgKQkM2w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:47:24 2025 by rpki-client