This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
File:                     SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json)
Hash identifier:          T16wHeTElddJH0VjCUnOLzoHnqmE5HHN7v/D/WbrttQ=
Subject key identifier:   7E:CC:40:0D:61:40:60:40:D0:5B:6C:7F:8A:E6:A1:D0:11:20:70:F0
Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B
Certificate issuer:       /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
Certificate serial:       019AF50BA666DC0F74BF47F7BE096DDFB112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 19:02:52 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:52 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:52 +0000
Files and hashes:         1: 83Pa1Fny_wQGf-aBjmuuxzW1qe8.roa (hash: BUZf5O8+Scwp5tYQEgr26uQX4AHjB4ej9Ew9RQ9oFhg=)
                          2: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: jzvCaxOEnd5MG3NT/Oa7kIQ7CYbLMbW1eGTCAB/1bLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:a6:66:dc:0f:74:bf:47:f7:be:09:6d:df:b1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b
        Validity
            Not Before: Dec  6 19:02:52 2025 GMT
            Not After : Dec  7 19:02:52 2025 GMT
        Subject: CN=7ecc400d61406040d05b6c7f8ae6a1d0112070f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:1b:0f:31:92:69:d2:b1:40:7e:ec:4a:f9:
                    43:10:2f:a9:49:82:bd:20:d2:9c:1a:77:41:c7:58:
                    9b:1b:4c:e5:c0:d0:53:2b:7e:16:42:55:67:65:a5:
                    77:01:60:39:5b:e8:d1:a8:73:9a:9d:fc:89:65:a5:
                    22:9e:a9:95:f1:0a:4a:a9:b2:d4:8d:67:e9:ae:69:
                    25:1c:a5:08:cc:e4:6c:6b:1b:f4:3f:ab:a7:23:20:
                    86:12:21:4b:70:c5:85:69:91:37:59:de:45:92:05:
                    9b:17:b4:04:00:71:a8:88:75:20:c2:f7:b4:c0:e0:
                    28:ea:53:68:cc:7a:e5:81:3d:7f:d7:9c:66:49:27:
                    ee:6b:1f:3a:a4:1e:d5:38:7a:3b:bf:94:cb:3c:b9:
                    30:9b:a7:6c:2c:8a:5c:43:1c:ca:7a:b1:72:95:06:
                    e1:3d:ad:0a:fb:66:28:d1:a8:c5:0c:d8:28:0a:23:
                    6d:39:81:4f:ec:99:13:44:ce:a1:7a:4a:f3:4c:22:
                    a8:e0:4d:6c:59:a2:6b:b8:e1:b2:2d:af:e2:2c:3e:
                    22:e8:76:42:3d:08:95:07:3e:7c:9e:10:84:94:1f:
                    f3:b7:c1:03:56:5f:fc:c1:3f:3c:ce:68:6e:1d:fe:
                    e8:da:8a:28:34:f4:f8:f0:b6:b2:c6:f1:9c:58:9e:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CC:40:0D:61:40:60:40:D0:5B:6C:7F:8A:E6:A1:D0:11:20:70:F0
            X509v3 Authority Key Identifier:
                keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:61:3d:25:be:68:cb:9c:10:cf:58:41:cb:58:bc:72:7b:
         45:08:d9:94:83:c0:1e:1c:41:f9:e2:1c:c4:e8:02:33:4a:af:
         90:81:2d:19:6c:29:e7:8c:1b:dc:16:99:5c:6c:1b:28:2c:43:
         d6:ff:7d:2b:b0:6a:0f:1b:76:58:76:5c:ed:b5:f3:83:c6:13:
         e2:c4:47:e3:da:6d:da:4d:bc:ab:6b:74:ec:81:91:6a:16:ef:
         ea:ff:36:5a:b3:0c:46:31:68:ce:ad:e8:5e:61:c4:07:7d:f9:
         72:77:51:dc:e7:49:33:02:7d:7e:5e:49:ec:68:89:53:ac:7b:
         ba:fc:cb:71:f9:84:1f:35:98:d5:74:38:be:24:8b:d9:2b:56:
         02:7c:00:21:5a:9f:37:a4:47:d2:00:47:37:a7:a2:44:0d:ba:
         db:d8:42:da:38:43:10:1f:b6:a6:10:c7:21:8d:9b:d2:0e:ab:
         02:82:50:a7:11:ce:54:13:dc:83:39:19:59:d8:fd:c9:0c:fc:
         64:69:6f:28:4e:c0:bd:b0:f8:5a:11:00:a1:3a:99:ad:cd:c6:
         92:8d:bf:19:f1:21:36:ed:4b:4e:a9:1f:db:72:3b:96:2d:55:
         1c:9a:af:d3:e6:f7:39:df:03:76:6e:f9:2f:fe:0a:74:ed:1f:
         a0:59:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:55:59 2025 by rpki-client