This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File: SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier: SpcCLaz6M703bCASoiYo1sRkly4P/tldHL0IoQm0K0c=
Subject key identifier: FD:6B:35:39:21:F5:D7:38:E2:4F:47:FD:E9:39:C5:42:C3:88:C4:B5
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer: /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial: 019AF2ADE6458D83486BADA7EDF7A48F9CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number: 05DE
Signing time: Sat 06 Dec 2025 08:01:14 +0000
Manifest this update: Sat 06 Dec 2025 08:01:14 +0000
Manifest next update: Sun 07 Dec 2025 08:01:14 +0000
Files and hashes: 1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: a7ieBIznFfIo7ZRjb2FkYSqK96E/qvZ9QT8DxqUWdnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:e6:45:8d:83:48:6b:ad:a7:ed:f7:a4:8f:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
Validity
Not Before: Dec 6 08:01:14 2025 GMT
Not After : Dec 7 08:01:14 2025 GMT
Subject: CN=fd6b353921f5d738e24f47fde939c542c388c4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:5c:3b:16:3b:a3:9c:91:8a:bb:92:46:9e:
59:b2:73:c6:fe:2f:de:f3:41:cc:03:d3:f3:f7:76:
14:67:92:7c:a5:09:19:a1:e6:e4:0d:e5:8c:71:61:
85:a5:c7:2b:1c:8c:d3:dd:ec:00:cf:a3:95:e9:0e:
38:9e:18:bc:00:40:4a:4b:55:ea:84:4c:2e:03:13:
78:9d:6b:cb:9e:45:52:e1:c8:27:79:8d:90:5b:23:
a3:ba:98:7c:48:08:f8:40:70:54:c0:6e:cc:dc:b1:
b3:f7:9d:00:45:93:d5:f2:51:e0:6f:9b:80:74:ec:
9c:21:bf:fe:74:ca:b4:db:3b:44:a5:03:a0:25:92:
cd:fc:1a:3d:d8:47:83:2f:14:f8:cb:3a:21:f5:6b:
5f:cd:ef:db:6a:f9:8a:f2:4f:97:95:86:67:e8:ce:
a2:34:26:cf:36:9b:37:0d:8d:d1:a7:52:a5:68:cb:
f6:94:a7:4b:5e:a7:40:98:3e:03:84:62:e8:c1:67:
48:86:ad:86:ba:fd:a1:d1:a8:c0:4c:aa:ee:70:0d:
59:c0:90:00:e0:02:eb:61:60:f5:24:df:9a:8b:f0:
8f:cc:a8:9c:11:99:22:c1:01:01:36:32:90:2b:6b:
d4:6f:a6:44:a3:ad:a0:9e:28:6b:b5:26:1e:34:d4:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:35:39:21:F5:D7:38:E2:4F:47:FD:E9:39:C5:42:C3:88:C4:B5
X509v3 Authority Key Identifier:
keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:b5:a8:7d:6a:79:be:a3:a9:f3:a2:28:fc:a9:56:90:c3:
ee:2c:83:d5:ce:67:98:92:3e:63:7f:aa:34:a0:61:35:d4:92:
16:14:b6:8b:53:c6:3e:f7:49:e3:04:5c:ed:cc:4f:35:f3:15:
89:94:13:ae:67:ed:45:10:ec:cd:1a:4d:98:73:6c:3c:a8:08:
d8:6e:20:03:ef:40:7f:16:ab:d4:af:8f:7a:81:69:5f:24:10:
cc:30:dc:6f:0e:7f:fb:97:af:6f:f7:84:94:d4:88:91:d2:e5:
46:64:cd:ce:13:d3:02:b5:25:14:d8:98:28:35:3e:d0:2b:1d:
fe:93:4b:4d:67:c8:66:11:4f:ea:f5:ad:48:d9:08:a6:17:db:
78:1a:37:5a:f3:b7:fb:3b:7f:ce:78:95:28:3c:2e:72:c7:93:
b1:05:b4:ba:8d:f3:6c:4d:db:c2:3d:a5:4d:af:bf:95:09:55:
f4:41:3d:0a:44:b1:69:4d:11:e5:ac:7e:ee:5d:9c:f6:a4:91:
d2:ab:24:b7:88:5d:86:b0:9d:b5:d2:0d:90:50:e2:49:e0:68:
3e:95:f9:d8:04:6b:05:96:ac:c0:cf:57:dc:e0:e9:46:1a:49:
65:ad:a5:4b:6c:7d:6e:86:83:d6:82:59:dc:1a:3a:ed:a8:3e:
f0:0a:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:11 2025 by rpki-client