This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json) Hash identifier: nVvZyuLC6tln/SNSWzSdr53z6wsaEpNnb4ITTIkQwRE= Subject key identifier: 93:2F:36:A6:86:C2:52:0B:73:E2:4F:90:B6:15:B3:18:FB:FA:B8:7C Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9 Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9 Certificate serial: 019AF2095D093DBE65879821F66AFDA1E083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft Manifest number: 0E31 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: kBpD5JAAu1rNn-aQ8UlFSwDRnx0.roa (hash: T699Qvy1WSC5sYOSIYHzGm20cDSkufPAzYmiL43UtM4=) 2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: xXGVg2/AunASHgzbN5yfxrALQDS0cZ0rG7ngrz18tSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5d:09:3d:be:65:87:98:21:f6:6a:fd:a1:e0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=932f36a686c2520b73e24f90b615b318fbfab87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ce:3a:71:3c:1c:43:e3:81:65:e4:0e:72:f1: 75:7d:07:8b:ab:a7:b6:d4:66:f9:7d:d4:23:63:5a: 94:42:1f:72:88:5c:b3:e7:1f:0c:c1:08:2f:87:dc: a2:e9:0c:ea:b9:26:74:a9:41:8b:4b:db:84:02:3f: 02:81:20:35:0b:83:5f:d2:b6:5f:62:3c:67:c8:c6: e3:5c:f7:86:f8:a4:f3:1b:81:ca:47:84:d2:35:8e: 05:34:a0:44:ac:ac:26:a1:e4:f3:b3:92:b9:b7:2e: 14:99:9b:e7:34:a3:8d:41:88:9b:d9:9a:40:a3:5a: 94:25:26:69:83:1a:b6:ce:7c:7b:e9:ca:cf:f3:a6: cf:aa:0a:ca:df:13:f2:4f:5a:46:4d:bf:df:92:37: 7b:8d:74:06:6e:74:71:5a:0d:c0:cc:2b:0b:de:68: 62:1b:e5:de:2a:2c:ef:b1:1e:f0:c4:65:6e:08:0c: 09:a8:d7:26:44:78:be:fb:a0:c1:27:42:e4:59:97: 09:79:6a:15:d7:65:51:5c:67:1e:4f:a2:08:05:4c: 4c:f8:54:e5:ea:e5:03:1b:5a:ad:92:3c:b7:c6:9f: 2f:f7:d3:86:49:f1:62:11:7c:ec:1d:bb:07:b2:38: 05:7a:ee:13:7d:9b:3e:5a:2d:3b:d9:08:30:c9:1e: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2F:36:A6:86:C2:52:0B:73:E2:4F:90:B6:15:B3:18:FB:FA:B8:7C X509v3 Authority Key Identifier: keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:75:0b:8a:91:dd:9f:83:bf:f9:93:4b:c9:3d:fd:80:0f:24: 79:25:91:3f:6e:f9:99:6c:77:2d:ab:f0:4a:aa:4f:c9:a2:f5: 27:62:fc:3c:05:85:11:16:8a:14:69:31:38:db:a1:77:50:01: 94:a5:c6:2d:e9:d1:a3:4f:d7:4a:16:bf:bc:33:ae:fd:b2:88: 63:bb:b9:c3:23:c2:50:cd:47:f3:85:98:99:6d:03:2b:00:69: 33:31:3b:ac:b5:3a:02:71:2d:5a:06:a5:90:34:c8:3f:b2:64: 69:b2:d8:ee:fc:d7:21:a6:77:23:f7:75:37:ac:0f:b5:ef:65: 66:58:e0:f8:65:8d:e0:46:fe:54:46:72:78:7a:2f:dd:f0:df: 68:5f:a3:60:0c:77:c1:50:eb:b2:6d:6f:6c:44:fa:30:e4:fa: 0f:b4:5a:ad:2f:8d:c2:8b:3f:7a:da:2c:d6:44:15:2a:3a:8c: 10:48:f6:dd:93:98:6c:89:1e:25:ca:4d:e0:db:bc:08:d3:80: 54:fd:0d:e2:d8:e1:7a:26:c6:70:cf:6b:83:49:84:e2:7a:69: eb:ad:ff:e5:71:c7:f0:0b:7a:4a:b1:ab:a8:b9:35:25:b1:23: d5:ba:42:a0:de:4b:13:99:13:e9:b6:b5:00:61:b8:b2:f3:2a: d8:3f:63:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV0JPb5lh5gh9mr9oeCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDQwYzdmNDUxYzYxNGQ3ZWViYTgyYzMyYTM5OGU4N2Rl M2I4YzkwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD Eyg5MzJmMzZhNjg2YzI1MjBiNzNlMjRmOTBiNjE1YjMxOGZiZmFiODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s46cTwcQ+OBZeQOcvF1fQeLq6e2 1Gb5fdQjY1qUQh9yiFyz5x8MwQgvh9yi6QzquSZ0qUGLS9uEAj8CgSA1C4Nf0rZf YjxnyMbjXPeG+KTzG4HKR4TSNY4FNKBErKwmoeTzs5K5ty4UmZvnNKONQYib2ZpA o1qUJSZpgxq2znx76crP86bPqgrK3xPyT1pGTb/fkjd7jXQGbnRxWg3AzCsL3mhi G+XeKizvsR7wxGVuCAwJqNcmRHi++6DBJ0LkWZcJeWoV12VRXGceT6IIBUxM+FTl 6uUDG1qtkjy3xp8v99OGSfFiEXzsHbsHsjgFeu4TfZs+Wi072QgwyR7rWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMvNqaGwlILc+JPkLYVsxj7+rh8MB8GA1UdIwQY MBaAFLMEDH9FHGFNfuuoLDKjmOh947jJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEt NWE3OGJhNjA5MWMxLzEvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEtNWE3OGJhNjA5MWMx LzEvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3ULipHd n4O/+ZNLyT39gA8keSWRP275mWx3LavwSqpPyaL1J2L8PAWFERaKFGkxONuhd1AB lKXGLenRo0/XSha/vDOu/bKIY7u5wyPCUM1H84WYmW0DKwBpMzE7rLU6AnEtWgal kDTIP7JkabLY7vzXIaZ3I/d1N6wPte9lZljg+GWN4Eb+VEZyeHov3fDfaF+jYAx3 wVDrsm1vbET6MOT6D7RarS+Nwos/etos1kQVKjqMEEj23ZOYbIkeJcpN4Nu8CNOA VP0N4tjheibGcM9rg0mE4npp663/5XHH8At6SrGrqLk1JbEj1bpCoN5LE5kT6ba1 AGG4svMq2D9jxg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:32 2025 by rpki-client