This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json) Hash identifier: vGfxFHNnBzxQEhNkvFEruZKLJXMupIzSYfiFJDI7KnU= Subject key identifier: 9B:A9:40:1F:3B:84:F6:FC:F3:AE:1E:A6:28:10:6C:23:A9:06:CA:C6 Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04 Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704 Certificate serial: 019AF1641476630DCC50C90352ADB0DF5740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft Manifest number: 0A31 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: RpILInX8NStLNGo-i8gOsmzL6zY.roa (hash: FpLee9KVIm2tnuSw+HOBh77bwO/f6Y21iVU1yWYIf/s=) 2: bt4jZ_Fg1p7_W1scNCt1lEzJp-I.roa (hash: NTiQWaRJGSQ8lYqtebC2mqNAEmw3CSrzTGYD0GLgxFA=) 3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: /e2EeIBtxpwh1h//aFRMKB3wiVgAUimM2rVHu+jlCZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:14:76:63:0d:cc:50:c9:03:52:ad:b0:df:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=9ba9401f3b84f6fcf3ae1ea628106c23a906cac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:aa:57:d7:3e:08:07:36:00:de:be:ac:1d: 91:ad:19:d2:17:6f:78:86:aa:ac:f1:db:cc:5e:97: b8:6b:68:3b:70:db:52:6e:ca:f9:68:6e:3f:6f:f1: 31:a5:a5:19:a1:2d:0f:8a:3e:fb:73:4f:f2:17:40: 51:1c:0b:29:20:66:4d:71:f1:0c:52:01:25:ad:96: bb:5a:bc:a0:15:de:99:85:27:54:65:dd:ee:bd:4e: 3a:21:74:80:67:32:aa:45:42:8a:11:d4:ba:83:5b: 8b:89:94:b9:c4:02:c6:6e:be:2f:74:2a:99:da:5e: 60:cb:77:95:c2:c3:ae:ff:d7:3f:78:ec:2f:28:76: b0:03:bf:ad:a2:67:a5:d6:99:b7:b2:b5:b4:5e:bf: 82:a5:93:d1:58:26:79:9c:90:3b:9c:08:88:71:10: 70:44:71:f1:80:87:ee:d1:76:50:18:3b:a1:66:f5: 1e:3c:e6:54:d5:dc:1a:a0:1d:9b:19:59:c4:03:a3: 57:cf:3c:59:88:56:0d:ca:4e:c4:5e:d4:95:31:9d: 66:21:df:bb:1b:26:01:c4:a9:34:03:73:79:0f:25: f7:fa:1e:3e:9b:08:af:25:d4:40:09:7b:73:ba:09: 14:a7:98:91:4c:d2:68:aa:71:7d:81:ec:4f:ed:c7: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A9:40:1F:3B:84:F6:FC:F3:AE:1E:A6:28:10:6C:23:A9:06:CA:C6 X509v3 Authority Key Identifier: keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:24:29:67:b3:7e:b0:dc:0b:a1:9b:e9:01:08:d9:eb:41:73: f0:46:f2:87:2f:3d:fc:c7:b3:9a:ea:a9:ab:5d:36:4b:62:27: 04:5d:54:4b:7c:af:6a:78:49:e3:d9:63:de:7a:34:d8:06:1a: 76:6d:de:bf:b4:32:de:b9:60:bc:04:34:cb:d4:dc:a7:1a:2f: ee:14:81:62:97:88:ac:0c:b9:d4:d8:1d:19:8f:bb:f6:b2:02: 64:1e:04:c3:cc:4f:ae:d1:30:ee:3d:33:e0:52:05:ab:21:8f: 78:d9:cd:99:b6:01:b3:ba:60:10:8f:79:51:43:c5:83:21:cf: 0a:71:4b:5c:a8:77:e6:3e:93:66:89:c6:8f:be:67:73:91:f8: e9:cc:96:6e:20:cb:23:6a:d8:b6:5e:ed:3f:b7:71:2c:a5:c3: 6d:12:86:a2:11:9c:d8:10:3a:11:11:7f:32:9b:1c:6a:a9:d8: d3:04:58:1d:7a:bf:5a:4b:b2:ef:04:70:7e:bf:a8:51:93:70: 36:b7:d4:69:34:1e:97:72:c5:dc:23:ec:db:92:cf:a6:2a:2f: 4f:14:fe:7f:59:e0:73:e8:64:d7:3c:c6:1b:18:ad:72:2b:cc: 87:54:91:a6:6b:95:da:5b:a1:42:ca:ac:9a:9e:0a:af:9f:e8: 93:50:4f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBR2Yw3MUMkDUq2w31dAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMGUzMDExYTBmYjMxMTFmYmU4NDkzYzEyMzA5NzRhZWY1 MzI3MDQwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD Eyg5YmE5NDAxZjNiODRmNmZjZjNhZTFlYTYyODEwNmMyM2E5MDZjYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0eqV9c+CAc2AN6+rB2RrRnSF294 hqqs8dvMXpe4a2g7cNtSbsr5aG4/b/ExpaUZoS0Pij77c0/yF0BRHAspIGZNcfEM UgElrZa7WrygFd6ZhSdUZd3uvU46IXSAZzKqRUKKEdS6g1uLiZS5xALGbr4vdCqZ 2l5gy3eVwsOu/9c/eOwvKHawA7+tomel1pm3srW0Xr+CpZPRWCZ5nJA7nAiIcRBw RHHxgIfu0XZQGDuhZvUePOZU1dwaoB2bGVnEA6NXzzxZiFYNyk7EXtSVMZ1mId+7 GyYBxKk0A3N5DyX3+h4+mwivJdRACXtzugkUp5iRTNJoqnF9gexP7cd9XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJupQB87hPb8864epigQbCOpBsrGMB8GA1UdIwQY MBaAFLMOMBGg+zER++hJPBIwl0rvUycEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDIt ZjlmYjM4Yzc3YzU1LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDItZjlmYjM4Yzc3YzU1 LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCQpZ7N+ sNwLoZvpAQjZ60Fz8Ebyhy89/Mezmuqpq102S2InBF1US3yvanhJ49lj3no02AYa dm3ev7Qy3rlgvAQ0y9Tcpxov7hSBYpeIrAy51NgdGY+79rICZB4Ew8xPrtEw7j0z 4FIFqyGPeNnNmbYBs7pgEI95UUPFgyHPCnFLXKh35j6TZonGj75nc5H46cyWbiDL I2rYtl7tP7dxLKXDbRKGohGc2BA6ERF/MpscaqnY0wRYHXq/Wkuy7wRwfr+oUZNw NrfUaTQel3LF3CPs25LPpiovTxT+f1ngc+hk1zzGGxitcivMh1SRpmuV2luhQsqs mp4Kr5/ok1BPog== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:07 2025 by rpki-client