This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft File: swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json) Hash identifier: 4i8e41hvNiS5TruLY1Uu0HSDViflU0hXQEZm93tyFTY= Subject key identifier: 04:B1:90:C3:E8:B3:D7:22:34:54:78:7D:37:43:C1:35:3B:48:F0:8F Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019B38A0FC561B26548798407804DBE9C418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft Manifest number: 1487 Signing time: Fri 19 Dec 2025 22:00:32 +0000 Manifest this update: Fri 19 Dec 2025 22:00:32 +0000 Manifest next update: Sat 20 Dec 2025 22:00:32 +0000 Files and hashes: 1: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=) 2: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=) 3: NzknDmn-TkBLhhCh3FNFS-0Flmg.roa (hash: s7se3/xdnMDjGZBCBbuaiotf7JHLKV6q0JTbfM402gw=) 4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=) 5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=) 6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: GW3FbddmFcR9yh4KMPxzPo2yjHyOFQfgO1oTL+q+0XI=) 7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a0:fc:56:1b:26:54:87:98:40:78:04:db:e9:c4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Dec 19 22:00:32 2025 GMT Not After : Dec 20 22:00:32 2025 GMT Subject: CN=04b190c3e8b3d7223454787d3743c1353b48f08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dc:55:74:71:7c:f4:28:e8:b0:f4:03:96:c1: 3e:c8:ab:4f:e8:5d:a2:f2:8a:c2:82:1c:ed:d5:2c: 72:47:a3:4c:05:37:22:88:45:41:5d:cd:c1:e7:18: 76:d9:2d:59:eb:a9:8f:f1:0d:92:2f:65:ec:41:07: 8c:cf:3d:77:ef:da:28:7e:c8:ad:bb:c1:39:01:03: 14:b1:7a:5e:fd:ee:a5:71:52:71:0a:61:65:0d:d3: 83:c2:e9:4a:a5:45:97:6b:26:0d:b1:10:bd:cf:c1: e6:cc:1b:23:72:ae:a0:7c:13:99:84:c1:0e:a7:e7: e3:8d:2c:4e:4a:5d:6a:27:20:b8:e7:66:e0:12:7f: 4c:95:b9:19:07:1c:6e:82:ba:49:8c:fe:05:8d:b4: f6:a0:9d:a1:d1:5e:24:8b:4f:be:64:6a:06:b1:d5: a7:35:43:d8:38:74:04:05:76:8e:68:89:cb:fa:d1: cb:19:52:e4:68:7f:de:41:d0:07:ca:1f:ee:3a:d5: 10:6e:23:dd:33:bf:f7:37:ae:3b:7b:cc:c3:9f:4c: ee:d1:9d:99:39:10:af:bb:d7:54:02:15:95:11:9b: 6c:c6:af:0b:74:f9:75:44:da:85:25:03:16:fd:dd: d0:c6:33:61:4d:a0:fa:0d:d1:3a:10:6a:03:d0:d4: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B1:90:C3:E8:B3:D7:22:34:54:78:7D:37:43:C1:35:3B:48:F0:8F X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:95:f0:fa:07:b5:22:4e:9e:90:41:66:bd:68:cb:b6:09:ec: 17:e6:91:7e:a4:7f:d6:f8:b5:79:90:16:9f:06:70:a6:17:80: 7c:44:c9:05:22:9d:4c:7d:69:07:25:e1:e8:43:5f:63:c9:1b: 93:44:f7:74:b5:b8:8f:1f:07:7d:28:fb:0b:d3:e6:16:db:f9: e6:80:3c:05:3f:fa:20:67:60:1b:2c:81:b3:0c:53:65:a6:26: 72:72:25:94:a2:9e:9e:47:70:05:d0:fc:be:aa:8e:cf:d7:bd: db:c3:3e:42:39:44:3e:e2:ee:80:7d:68:67:9e:75:3d:5f:52: 57:4a:b5:6f:9a:a4:57:7c:ec:4d:ca:e1:a3:6e:aa:74:9e:02: eb:9f:6f:12:43:6f:c0:1c:84:79:c7:ad:cb:d7:57:16:33:3d: be:ad:aa:bb:88:a9:39:fe:23:16:ca:2b:8b:4d:10:62:1b:a1: b2:1a:b6:60:26:b5:8f:54:f8:6a:ac:d5:95:11:30:ed:ef:60: d2:0e:c3:7d:10:99:ec:3f:dd:25:01:62:8c:62:80:a4:08:bc: 0f:8a:34:8d:44:f5:30:2c:4f:ce:8d:40:48:11:4d:aa:b0:8f: cc:33:d8:db:8d:97:6b:12:87:c9:41:bf:77:01:27:63:82:3e: f0:02:a7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oPxWGyZUh5hAeATb6cQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjUxMjE5MjIwMDMyWhcNMjUxMjIwMjIwMDMyWjAzMTEwLwYDVQQD EygwNGIxOTBjM2U4YjNkNzIyMzQ1NDc4N2QzNzQzYzEzNTNiNDhmMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89xVdHF89CjosPQDlsE+yKtP6F2i 8orCghzt1SxyR6NMBTciiEVBXc3B5xh22S1Z66mP8Q2SL2XsQQeMzz1379oofsit u8E5AQMUsXpe/e6lcVJxCmFlDdODwulKpUWXayYNsRC9z8HmzBsjcq6gfBOZhMEO p+fjjSxOSl1qJyC452bgEn9MlbkZBxxugrpJjP4FjbT2oJ2h0V4ki0++ZGoGsdWn NUPYOHQEBXaOaInL+tHLGVLkaH/eQdAHyh/uOtUQbiPdM7/3N647e8zDn0zu0Z2Z ORCvu9dUAhWVEZtsxq8LdPl1RNqFJQMW/d3QxjNhTaD6DdE6EGoD0NStswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASxkMPos9ciNFR4fTdDwTU7SPCPMB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZXw+ge1 Ik6ekEFmvWjLtgnsF+aRfqR/1vi1eZAWnwZwpheAfETJBSKdTH1pByXh6ENfY8kb k0T3dLW4jx8HfSj7C9PmFtv55oA8BT/6IGdgGyyBswxTZaYmcnIllKKenkdwBdD8 vqqOz9e928M+QjlEPuLugH1oZ551PV9SV0q1b5qkV3zsTcrho26qdJ4C659vEkNv wByEecety9dXFjM9vq2qu4ipOf4jFsori00QYhuhshq2YCa1j1T4aqzVlREw7e9g 0g7DfRCZ7D/dJQFijGKApAi8D4o0jUT1MCxPzo1ASBFNqrCPzDPY242XaxKHyUG/ dwEnY4I+8AKnog== -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:33 2025 by rpki-client