This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json) Hash identifier: 5DeEV9qTtZ71sZn6sNbSdepV0ajg4Yr01XMj0Kck++o= Subject key identifier: 06:68:EE:91:7B:07:41:D3:CD:1D:F0:AF:AB:CC:DE:BD:44:8D:31:9E Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47 Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047 Certificate serial: 019AF12D0620D844C6E408D28955D0F34CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: Q//VzNc2Og/nMjtquAxej0HMdIxMSO8cIKyPQlarllg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:06:20:d8:44:c6:e4:08:d2:89:55:d0:f3:4c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047 Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=0668ee917b0741d3cd1df0afabccdebd448d319e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:c6:3c:71:78:e8:fd:a9:02:1c:98:94:ae: 22:f7:b2:d4:18:35:7b:90:11:a4:f1:a4:55:9a:df: f1:0a:86:6c:2c:b8:b4:45:ab:7c:8a:77:3a:b3:8e: fe:0c:bc:ab:52:5c:a7:a8:7e:ab:f6:1c:c8:5a:cd: 75:f7:73:fc:80:61:5a:05:8b:96:4e:13:08:8b:f9: 7b:53:f2:59:cf:0f:b9:40:66:af:ac:aa:15:d3:2a: b7:43:25:98:dc:7b:36:e8:d7:9c:fe:19:89:a8:85: a3:d6:39:7a:df:e5:3f:ce:d3:bc:45:58:e9:e2:18: b4:c8:b4:f4:1e:02:56:ff:e1:6b:91:ba:ed:67:56: f1:af:9b:4b:9d:2d:97:d4:24:c6:7c:1c:0c:63:10: 89:44:f8:a1:dc:1e:4b:fe:d5:5f:12:1e:b9:c3:5a: 5a:42:15:95:05:c4:2d:a2:26:2d:d9:60:fb:30:30: cc:72:d0:33:31:2f:9f:98:45:e8:83:31:6a:aa:7c: 51:7e:12:71:4d:6c:e0:dc:8f:82:66:03:66:dd:a1: 00:9e:6b:d2:03:02:61:8a:8e:f8:9d:88:a4:92:36: 19:50:45:25:f1:21:78:16:cf:cd:4c:6d:7d:21:3c: ac:39:54:59:94:11:10:49:10:71:b5:2c:74:90:90: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:68:EE:91:7B:07:41:D3:CD:1D:F0:AF:AB:CC:DE:BD:44:8D:31:9E X509v3 Authority Key Identifier: keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4a:78:af:04:73:bc:a0:68:b7:9d:72:dc:bb:d3:6d:69:18: fe:44:4c:52:f1:df:91:a1:9b:4b:42:2e:40:0a:7d:d5:3e:d3: 7f:fd:2b:a0:61:94:03:70:34:47:9f:92:45:4e:a7:06:c3:ad: a4:ac:2a:69:9c:d2:2e:3b:7c:c2:e8:24:2f:bd:c4:3b:16:a7: 8d:06:ac:60:29:fe:b4:42:db:96:2f:a1:34:35:43:d9:33:fc: a8:7f:fe:72:d0:15:70:19:28:31:70:83:58:55:a6:a0:c7:c4: e4:09:3a:96:6e:d1:fb:cf:af:95:6e:d9:fe:6c:29:00:16:3c: 0e:05:e2:7e:f1:53:72:90:fc:32:f2:96:f5:13:ca:a0:bb:06: 58:1f:59:f9:2a:36:73:6a:2e:eb:ad:22:9b:f2:e9:95:fa:26: c6:bd:95:56:57:5c:0e:24:16:87:f7:2d:fa:81:8d:b0:c2:dd: 89:96:7d:13:fc:b2:60:4a:4a:cd:aa:e1:93:4a:8e:1c:58:82: b9:80:1b:44:c5:3f:2c:9e:d9:a6:f1:fa:80:57:b1:63:38:34: a3:82:bd:b2:03:b4:65:ba:af:18:33:3c:0e:8a:0b:cb:ea:de: 6b:a0:78:18:57:ce:93:96:02:54:69:a7:c9:dc:3c:f3:8d:83: 15:16:4a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQYg2ETG5AjSiVXQ80ymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NmQ1ZmIwOThjNDMzMGViN2E2NTE4ZDkwMzY0MmRhMzYx OWIwNDcwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EygwNjY4ZWU5MTdiMDc0MWQzY2QxZGYwYWZhYmNjZGViZDQ0OGQzMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3GPHF46P2pAhyYlK4i97LUGDV7 kBGk8aRVmt/xCoZsLLi0Rat8inc6s47+DLyrUlynqH6r9hzIWs1193P8gGFaBYuW ThMIi/l7U/JZzw+5QGavrKoV0yq3QyWY3Hs26Nec/hmJqIWj1jl63+U/ztO8RVjp 4hi0yLT0HgJW/+FrkbrtZ1bxr5tLnS2X1CTGfBwMYxCJRPih3B5L/tVfEh65w1pa QhWVBcQtoiYt2WD7MDDMctAzMS+fmEXogzFqqnxRfhJxTWzg3I+CZgNm3aEAnmvS AwJhio74nYikkjYZUEUl8SF4Fs/NTG19ITysOVRZlBEQSRBxtSx0kJBuuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZo7pF7B0HTzR3wr6vM3r1EjTGeMB8GA1UdIwQY MBaAFEltX7CYxDMOt6ZRjZA2Qto2GbBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzkt MWJmMGE4MGYwOWM0LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzktMWJmMGE4MGYwOWM0 LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEp4rwRz vKBot51y3LvTbWkY/kRMUvHfkaGbS0IuQAp91T7Tf/0roGGUA3A0R5+SRU6nBsOt pKwqaZzSLjt8wugkL73EOxanjQasYCn+tELbli+hNDVD2TP8qH/+ctAVcBkoMXCD WFWmoMfE5Ak6lm7R+8+vlW7Z/mwpABY8DgXifvFTcpD8MvKW9RPKoLsGWB9Z+So2 c2ou660im/Lplfomxr2VVldcDiQWh/ct+oGNsMLdiZZ9E/yyYEpKzarhk0qOHFiC uYAbRMU/LJ7ZpvH6gFexYzg0o4K9sgO0ZbqvGDM8DooLy+rea6B4GFfOk5YCVGmn ydw8842DFRZKHg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:59 2025 by rpki-client