This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json) Hash identifier: RdxoDKLlMdY2Hr2I/St5ZelSi3z7TNtUZF0UB5Ub0As= Subject key identifier: A6:19:A4:C8:AA:8C:38:B1:2D:92:9B:C7:F6:72:BD:48:D7:B9:F4:CF Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02 Certificate serial: 019BF6F551C7E4A4551EBC19771EB1A2842A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft Manifest number: 1417 Signing time: Sun 25 Jan 2026 21:00:30 +0000 Manifest this update: Sun 25 Jan 2026 21:00:30 +0000 Manifest next update: Mon 26 Jan 2026 21:00:30 +0000 Files and hashes: 1: P41_d-OKREkue8A7QbG6bWS93yg.roa (hash: 4T63cKmKfkswxOAQk6ynb6AaDZKx66mFM+yXG2XkVCE=) 2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: QdKCL0+S+PjurpnjUeHDMBnpfQ0Vijcn052wNoYNUzE=) 3: Z4XnKcMRawaQSe5mqHxSQObPnf0.roa (hash: 4Mf7OgITGWZNLNJ26SsOplCcXWIE2LHFBqgYKYBiyDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:51:c7:e4:a4:55:1e:bc:19:77:1e:b1:a2:84:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02 Validity Not Before: Jan 25 21:00:30 2026 GMT Not After : Jan 26 21:00:30 2026 GMT Subject: CN=a619a4c8aa8c38b12d929bc7f672bd48d7b9f4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:2e:2f:43:82:f7:c5:75:c4:35:d3:81:93: 9d:5a:61:d1:b4:14:21:c8:40:a0:c7:6b:36:73:75: c0:66:cb:5c:54:28:41:68:d3:f9:c9:87:87:4c:16: 3f:f5:98:e5:bd:b5:50:d4:a0:45:e7:88:c4:e9:c0: b4:47:58:7c:be:0c:c9:6f:a5:ff:49:72:45:38:51: 0f:a5:6b:31:f2:56:09:d4:b5:eb:28:8d:b6:0e:4a: e2:60:ed:39:b2:df:a6:c5:94:37:9c:6a:64:e9:81: 5a:9b:5c:47:67:b4:cc:17:c8:b6:32:27:8a:43:23: 8e:b2:9c:27:ee:79:77:2d:e6:b7:60:3e:06:d6:70: 0f:82:81:76:77:68:d6:cc:5b:50:bb:0d:87:07:45: 6f:db:a8:d5:84:36:ea:c5:da:1f:e2:42:50:17:f3: 7f:64:e0:6f:61:74:fe:3a:c3:64:88:03:77:8e:b9: 3d:ad:9e:68:42:d3:1c:7f:bf:a6:57:8a:19:03:78: 1b:17:28:2b:27:cd:91:ae:fa:90:33:e8:46:b1:35: 19:50:14:22:68:d7:72:e9:0a:20:11:9d:02:f9:74: ba:38:ee:d1:6f:81:48:72:11:6a:dc:80:aa:de:48: 24:a4:d3:17:c8:14:a8:e0:02:90:22:a3:4c:1d:91: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:19:A4:C8:AA:8C:38:B1:2D:92:9B:C7:F6:72:BD:48:D7:B9:F4:CF X509v3 Authority Key Identifier: keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:74:d1:f7:f0:58:c8:bf:32:1d:f5:d2:a9:0b:86:36:af:2c: 6b:96:6e:c7:12:30:c4:51:e7:50:3d:4b:f0:3d:65:59:a3:18: b1:7c:88:a3:51:6f:67:b5:8c:6a:c1:66:71:38:28:a5:4f:9e: de:e1:82:ad:92:74:43:2e:18:32:ac:01:28:d6:48:f1:29:06: b5:f9:e6:c0:f0:14:da:7f:ab:bb:26:4d:7c:bb:00:c6:52:3f: 46:62:9c:fb:c7:1a:b2:b6:71:ab:20:d3:29:af:d2:da:dd:db: e9:77:62:c5:67:9c:e6:4d:a4:07:e0:15:0f:76:52:26:30:e6: 13:f4:33:ec:5a:f6:ca:39:fa:23:8b:fa:67:9b:f9:3e:35:e5: 0e:29:79:cb:81:7b:bb:8f:c5:41:9c:80:de:da:b4:3e:9d:8b: 79:8b:2e:89:d7:29:f0:af:f2:10:ac:83:3a:2d:83:00:8a:ba: 62:70:0b:e4:45:53:56:fa:f4:21:ba:94:c5:7b:77:f1:59:8d: 7b:e5:cd:11:51:98:3b:59:7e:89:9e:9b:4b:82:3f:0f:9a:22: e1:94:58:53:86:e9:67:92:b2:06:6d:7e:54:3f:54:7d:db:a2: cb:5a:28:0e:27:b6:78:0f:31:e0:f5:9d:30:eb:ce:25:cc:08: 70:85:7d:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29VHH5KRVHrwZdx6xooQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMDFiMDg1MWI3Zjg5ZWE0YmIxMzJhN2Y1Mzk1YjlkMmFj YTFjMDIwHhcNMjYwMTI1MjEwMDMwWhcNMjYwMTI2MjEwMDMwWjAzMTEwLwYDVQQD EyhhNjE5YTRjOGFhOGMzOGIxMmQ5MjliYzdmNjcyYmQ0OGQ3YjlmNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgAuL0OC98V1xDXTgZOdWmHRtBQh yECgx2s2c3XAZstcVChBaNP5yYeHTBY/9ZjlvbVQ1KBF54jE6cC0R1h8vgzJb6X/ SXJFOFEPpWsx8lYJ1LXrKI22DkriYO05st+mxZQ3nGpk6YFam1xHZ7TMF8i2MieK QyOOspwn7nl3Lea3YD4G1nAPgoF2d2jWzFtQuw2HB0Vv26jVhDbqxdof4kJQF/N/ ZOBvYXT+OsNkiAN3jrk9rZ5oQtMcf7+mV4oZA3gbFygrJ82RrvqQM+hGsTUZUBQi aNdy6QogEZ0C+XS6OO7Rb4FIchFq3ICq3kgkpNMXyBSo4AKQIqNMHZEqsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYZpMiqjDixLZKbx/ZyvUjXufTPMB8GA1UdIwQY MBaAFEsBsIUbf4nqS7Eyp/U5W50qyhwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgt YmQ1MDQzYzBkMWZiLzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgtYmQ1MDQzYzBkMWZi LzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3TR9/BY yL8yHfXSqQuGNq8sa5ZuxxIwxFHnUD1L8D1lWaMYsXyIo1FvZ7WMasFmcTgopU+e 3uGCrZJ0Qy4YMqwBKNZI8SkGtfnmwPAU2n+ruyZNfLsAxlI/RmKc+8casrZxqyDT Ka/S2t3b6XdixWec5k2kB+AVD3ZSJjDmE/Qz7Fr2yjn6I4v6Z5v5PjXlDil5y4F7 u4/FQZyA3tq0Pp2LeYsuidcp8K/yEKyDOi2DAIq6YnAL5EVTVvr0IbqUxXt38VmN e+XNEVGYO1l+iZ6bS4I/D5oi4ZRYU4bpZ5KyBm1+VD9Ufduiy1ooDie2eA8x4PWd MOvOJcwIcIV9Eg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:55 2026 by rpki-client