This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json) Hash identifier: MP9wGDZUfCoXj2vk8U5x3lckb1x5yNUHNNPFSRZufls= Subject key identifier: 50:B2:B6:2A:39:F0:9A:BC:95:DF:21:7B:64:50:44:E0:2D:A6:E6:29 Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6 Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6 Certificate serial: 019AFC1ECA933DF92DFA60E703DED4F1565C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft Manifest number: 0F01 Signing time: Mon 08 Dec 2025 04:01:07 +0000 Manifest this update: Mon 08 Dec 2025 04:01:07 +0000 Manifest next update: Tue 09 Dec 2025 04:01:07 +0000 Files and hashes: 1: AybpUeYPjFscWUBGnz0eMxdCYVY.roa (hash: Rp8q+rUirDyaLXwQ073sCktRLzdV+RBLGTTN+wcKRwU=) 2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: aD6f1n+dJKGTob5HNAW/+8uQlfcyCmFG2em8F/Iwibo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:1e:ca:93:3d:f9:2d:fa:60:e7:03:de:d4:f1:56:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6 Validity Not Before: Dec 8 04:01:07 2025 GMT Not After : Dec 9 04:01:07 2025 GMT Subject: CN=50b2b62a39f09abc95df217b645044e02da6e629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:09:06:45:80:7d:3d:10:c8:ce:ba:55:f9: 41:ae:7b:fa:1a:da:fa:97:12:24:81:80:ae:28:52: 2d:ac:3b:0f:41:39:55:ec:be:14:f6:5b:14:81:a3: 62:f1:6f:5a:08:2d:3f:fb:d7:bf:c4:6d:0c:69:c1: ca:77:f5:b3:e3:2f:22:4d:e7:d8:be:71:1e:06:6f: cf:1a:c3:78:cb:b6:d2:25:96:45:29:c3:90:ae:e7: 81:97:be:b5:b8:bb:90:62:af:e8:53:44:d2:6b:01: 52:94:18:f4:18:b3:83:af:70:be:7a:0c:df:eb:27: 4e:c9:9f:52:c6:63:db:a4:40:16:66:64:e9:c8:e5: 3f:26:e0:39:60:42:5a:6c:8f:9b:34:bd:8d:3f:f6: 53:e5:c1:dc:2c:c8:7b:cd:79:cc:f9:32:8a:6b:9a: cf:dc:88:30:a6:a9:7e:c2:f5:7a:7f:b8:63:3c:7f: ae:7e:5c:f8:88:76:4f:3a:dd:a5:64:16:96:58:90: 49:df:44:9e:c2:84:12:bf:da:e8:cf:a8:11:1c:60: fc:5c:47:68:20:f9:b6:07:3d:9d:ef:f0:06:79:ff: 96:c7:9f:bd:0b:63:a0:a3:41:b5:68:17:09:5e:43: cb:2c:33:2e:ed:b6:33:d5:48:b4:c2:38:f6:d7:7e: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B2:B6:2A:39:F0:9A:BC:95:DF:21:7B:64:50:44:E0:2D:A6:E6:29 X509v3 Authority Key Identifier: keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:77:c7:f4:b5:f8:c5:2c:e2:22:a4:4e:7a:63:37:db:97:2d: d4:cd:9b:da:1b:11:91:1f:3c:e3:b3:f5:5b:11:99:23:7c:7c: 34:cd:e3:82:44:d1:25:dc:a7:11:99:80:d5:fe:10:1e:6b:f4: ff:11:90:70:ab:f9:20:7d:96:c5:cc:b2:16:34:1f:a6:61:9a: 36:26:a9:3e:59:a3:ab:77:57:d3:94:ab:4f:b4:fa:55:ca:3f: f1:43:6a:59:9d:5b:c5:be:03:8c:55:07:0d:70:ca:87:97:a4: a2:18:a6:69:a7:ca:04:e3:3b:8b:20:84:ca:e6:5d:94:9c:ff: 23:59:5f:e1:fa:e7:c4:79:e1:7f:06:b1:ae:6b:25:20:65:e1: 7c:e1:db:07:78:64:89:23:30:e2:a0:08:71:e3:48:83:15:3d: d8:20:e4:54:20:79:c3:03:9a:d1:cc:f9:22:6f:fc:51:b6:67: 91:e2:44:59:50:4d:de:26:d8:25:aa:35:37:42:cf:27:04:cd: 1c:49:2b:5b:59:aa:dc:00:ac:5b:6e:34:1c:46:8f:e4:f2:25: 3b:2f:e8:49:4d:63:c6:cf:b6:ee:d4:2f:c5:af:1d:b8:c6:d3: b8:34:5e:b2:61:1a:8f:6f:47:52:dc:c6:58:a9:dd:86:5f:5f: c4:14:6a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8HsqTPfkt+mDnA97U8VZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMGQyMDQ3ZmY2MDdlZWY4NTI5Mzc2MGU5YzExYTZmNTk0 MWQxYjYwHhcNMjUxMjA4MDQwMTA3WhcNMjUxMjA5MDQwMTA3WjAzMTEwLwYDVQQD Eyg1MGIyYjYyYTM5ZjA5YWJjOTVkZjIxN2I2NDUwNDRlMDJkYTZlNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkgJBkWAfT0QyM66VflBrnv6Gtr6 lxIkgYCuKFItrDsPQTlV7L4U9lsUgaNi8W9aCC0/+9e/xG0MacHKd/Wz4y8iTefY vnEeBm/PGsN4y7bSJZZFKcOQrueBl761uLuQYq/oU0TSawFSlBj0GLODr3C+egzf 6ydOyZ9SxmPbpEAWZmTpyOU/JuA5YEJabI+bNL2NP/ZT5cHcLMh7zXnM+TKKa5rP 3Igwpql+wvV6f7hjPH+uflz4iHZPOt2lZBaWWJBJ30SewoQSv9roz6gRHGD8XEdo IPm2Bz2d7/AGef+Wx5+9C2Ogo0G1aBcJXkPLLDMu7bYz1Ui0wjj2134yQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCytio58Jq8ld8he2RQROAtpuYpMB8GA1UdIwQY MBaAFLMNIEf/YH7vhSk3YOnBGm9ZQdG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3cwZ1JfOWdmdS1GS1RkZzZjRWFiMWxCMGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NmJlYTItOGU2ZC00NGU4LWE4MDkt OTZiNDUxZjYwMDBjLzEvc3cwZ1JfOWdmdS1GS1RkZzZjRWFiMWxCMGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85NmJlYTItOGU2ZC00NGU4LWE4MDktOTZiNDUxZjYwMDBj LzEvc3cwZ1JfOWdmdS1GS1RkZzZjRWFiMWxCMGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnfH9LX4 xSziIqROemM325ct1M2b2hsRkR8847P1WxGZI3x8NM3jgkTRJdynEZmA1f4QHmv0 /xGQcKv5IH2WxcyyFjQfpmGaNiapPlmjq3dX05SrT7T6Vco/8UNqWZ1bxb4DjFUH DXDKh5ekohimaafKBOM7iyCEyuZdlJz/I1lf4frnxHnhfwaxrmslIGXhfOHbB3hk iSMw4qAIceNIgxU92CDkVCB5wwOa0cz5Im/8UbZnkeJEWVBN3ibYJao1N0LPJwTN HEkrW1mq3ACsW240HEaP5PIlOy/oSU1jxs+27tQvxa8duMbTuDResmEaj29HUtzG WKndhl9fxBRqJg== -----END CERTIFICATE-----Generated at Mon Dec 8 10:23:26 2025 by rpki-client