This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json) Hash identifier: vWUVcFpverblQz7hDt9azpduJ6wnCb4ENUcpDTiHQr4= Subject key identifier: 84:F1:12:76:2B:22:D2:1B:A4:EE:1E:B9:39:E8:F1:CE:4E:37:D5:A6 Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f Certificate serial: 019AF19AFF811975380E635F96CF0AE02A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: uKaT2KaUniG7JdEW9BGrQrnSAptuorcyYw5YgKLdhtw=) 2: p14blZvuyTFQl4sjyccJsTsvOjE.roa (hash: jmb5FTKTJY5Nob/oSTDpf4n6KA9LOz58wdEIfxeBJdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ff:81:19:75:38:0e:63:5f:96:cf:0a:e0:2a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=84f112762b22d21ba4ee1eb939e8f1ce4e37d5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:19:02:36:d4:ca:1e:3b:7e:59:e6:26:0b: a2:15:99:5d:fe:57:7f:d6:9c:d2:51:6c:ff:b9:43: a5:80:ed:65:fc:e5:9b:2a:28:d1:74:e1:eb:66:2d: 4a:be:47:de:a9:76:6a:0e:d9:42:0a:56:71:8b:8f: a7:ee:c9:e2:fd:a2:b4:b3:4a:45:09:20:48:e0:43: f7:c0:ab:b4:77:8f:a6:de:93:59:99:f0:86:ed:d2: e1:d6:f5:1d:e4:b1:77:0c:d2:19:9d:fc:df:e1:b6: 35:ee:03:65:fb:7e:24:d1:57:70:6a:9a:9f:bc:3a: 19:80:30:54:89:75:d0:c9:b5:ff:a2:5d:48:cc:4d: f7:f2:6f:bc:99:bc:a6:b7:47:01:af:98:36:2a:ed: 0e:e8:35:11:a6:0b:b2:9c:28:1f:61:a3:b5:7c:89: b5:52:1b:ce:c0:5f:a1:2a:7d:41:17:08:96:46:96: ff:23:83:bf:c7:86:43:d7:2e:90:e8:7f:ef:b6:62: 27:ee:17:91:0d:68:65:36:7a:3e:7b:2a:ba:82:ce: 2d:4b:72:13:c8:b5:b0:60:1e:1e:1e:69:b7:2b:5f: ad:45:65:c8:c3:ef:56:5f:c1:02:b7:ce:5c:a8:41: f7:58:e4:0a:b0:66:49:8e:12:a4:41:8f:6d:d9:bd: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F1:12:76:2B:22:D2:1B:A4:EE:1E:B9:39:E8:F1:CE:4E:37:D5:A6 X509v3 Authority Key Identifier: keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:04:6f:91:89:03:85:68:27:b9:1e:54:f6:97:37:84:81:70: 1c:8c:38:e1:1f:7f:10:38:82:ce:8d:1b:05:39:76:ec:a0:48: 01:29:09:27:cf:17:a3:1f:67:a3:c9:ae:51:28:ac:66:a4:bd: 0b:bc:b5:c9:77:20:4a:6d:ad:c8:57:2f:d3:2a:13:15:8e:1f: 6e:29:1d:0a:94:18:d2:8d:cf:b6:0e:05:b5:9f:aa:a4:67:17: fb:06:21:88:6a:eb:9f:1f:c1:d7:e5:3d:96:c3:60:42:17:cf: e0:77:b4:8f:45:96:cd:98:a5:a8:78:39:27:19:20:66:81:1e: a7:0b:77:66:ad:45:66:ef:aa:9b:d7:1e:70:a6:8b:5e:9b:46: dc:9f:7b:fe:36:d0:81:1a:f4:5b:eb:cb:a4:43:ed:f8:f2:63: c3:13:10:f5:bb:34:24:37:7f:d6:ac:cd:80:b3:55:10:05:44: 60:4d:b9:d5:92:e3:31:84:57:03:a7:ab:09:a4:a7:84:54:b4: a8:d7:f2:ac:e6:7c:5d:d4:7d:4f:38:46:3c:64:a1:14:73:1e: 66:6c:be:57:87:07:11:6d:9b:1a:e6:b8:c4:36:79:86:77:ad: ef:38:3b:13:47:aa:20:28:b3:45:6d:eb:16:d2:89:cc:09:d4: 6d:53:17:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv+BGXU4DmNfls8K4CosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NmIwMDU4OTcxZDI5OTNhNTdhNWIxY2I2Y2RmZjVkMmVi NDRlM2YwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD Eyg4NGYxMTI3NjJiMjJkMjFiYTRlZTFlYjkzOWU4ZjFjZTRlMzdkNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCUZAjbUyh47flnmJguiFZld/ld/ 1pzSUWz/uUOlgO1l/OWbKijRdOHrZi1KvkfeqXZqDtlCClZxi4+n7sni/aK0s0pF CSBI4EP3wKu0d4+m3pNZmfCG7dLh1vUd5LF3DNIZnfzf4bY17gNl+34k0Vdwapqf vDoZgDBUiXXQybX/ol1IzE338m+8mbymt0cBr5g2Ku0O6DURpguynCgfYaO1fIm1 UhvOwF+hKn1BFwiWRpb/I4O/x4ZD1y6Q6H/vtmIn7heRDWhlNno+eyq6gs4tS3IT yLWwYB4eHmm3K1+tRWXIw+9WX8ECt85cqEH3WOQKsGZJjhKkQY9t2b0fgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITxEnYrItIbpO4euTno8c5ON9WmMB8GA1UdIwQY MBaAFElrAFiXHSmTpXpbHLbN/10utE4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNTVkYzEtNzYwNC00YzhkLWExYjQt MzlmOGUyYjQ2NzVkLzEvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kNTVkYzEtNzYwNC00YzhkLWExYjQtMzlmOGUyYjQ2NzVk LzEvU1dzQVdKY2RLWk9sZWxzY3RzM19YUzYwVGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwRvkYkD hWgnuR5U9pc3hIFwHIw44R9/EDiCzo0bBTl27KBIASkJJ88Xox9no8muUSisZqS9 C7y1yXcgSm2tyFcv0yoTFY4fbikdCpQY0o3Ptg4FtZ+qpGcX+wYhiGrrnx/B1+U9 lsNgQhfP4He0j0WWzZilqHg5JxkgZoEepwt3Zq1FZu+qm9cecKaLXptG3J97/jbQ gRr0W+vLpEPt+PJjwxMQ9bs0JDd/1qzNgLNVEAVEYE251ZLjMYRXA6erCaSnhFS0 qNfyrOZ8XdR9TzhGPGShFHMeZmy+V4cHEW2bGua4xDZ5hnet7zg7E0eqICizRW3r FtKJzAnUbVMXQA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:10 2025 by rpki-client