This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft File: sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json) Hash identifier: uJUBPzDW+V336bDO3njTKmYl9oUhEQ5+/Zp/nDTqiIE= Subject key identifier: ED:46:82:A1:A3:14:59:09:C6:0C:D7:E5:86:8F:A6:CE:B5:38:5C:94 Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03 Certificate issuer: /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003 Certificate serial: 019AF088BCE62DC3227D34B2283DFCA27DAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft Manifest number: 175D Signing time: Fri 05 Dec 2025 22:01:24 +0000 Manifest this update: Fri 05 Dec 2025 22:01:24 +0000 Manifest next update: Sat 06 Dec 2025 22:01:24 +0000 Files and hashes: 1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: 6j/JckfPN0cirgm7Zl6qmhItq/SnRaOBp1m7pequ/KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:bc:e6:2d:c3:22:7d:34:b2:28:3d:fc:a2:7d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003 Validity Not Before: Dec 5 22:01:24 2025 GMT Not After : Dec 6 22:01:24 2025 GMT Subject: CN=ed4682a1a3145909c60cd7e5868fa6ceb5385c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:94:71:96:5a:91:95:1a:de:cf:e9:f0:62: 22:c7:10:90:52:ed:50:aa:11:35:39:a3:69:19:0e: c9:bf:d9:1a:01:b2:7e:b2:af:38:8c:3b:f0:0f:33: a8:12:e2:88:5e:4c:10:b9:ee:17:42:6d:f3:f1:55: 7d:e4:b7:00:06:f2:b3:d8:30:dd:5b:42:6f:95:d3: d0:26:35:98:38:35:50:dc:ca:40:6f:25:c7:37:7c: 22:fc:0a:c6:3b:8a:f4:67:30:c6:bb:a7:92:81:7a: 97:23:6d:19:ea:6a:28:74:d9:7b:76:3c:2a:03:5a: a1:68:7d:f6:04:bd:87:be:08:17:61:cb:5c:18:d3: a8:85:c2:af:15:00:56:c7:8f:58:b9:e3:9d:f4:cb: 7b:80:cd:33:62:04:c8:40:b9:31:07:40:7c:c3:a8: d9:35:03:3f:e0:02:71:f4:46:3f:52:4a:4f:96:4e: 55:a2:7b:ee:2a:db:ad:2b:02:51:dc:24:f1:51:4f: 1b:20:74:47:ef:8a:c3:7f:e0:9a:ee:3f:63:38:3f: ff:66:1c:bb:82:69:bd:c8:fd:e7:2a:7f:56:4b:8d: 5e:fd:67:33:75:8b:b0:0b:ff:10:de:0d:c5:87:bd: 6d:ed:62:f1:ca:4b:96:53:85:46:8f:7d:63:8d:a4: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:46:82:A1:A3:14:59:09:C6:0C:D7:E5:86:8F:A6:CE:B5:38:5C:94 X509v3 Authority Key Identifier: keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:dc:58:e5:f0:08:7f:0e:c3:72:ac:44:f8:11:78:00:02:57: da:a6:b2:70:94:79:d6:c4:f0:9c:d6:6b:64:05:7e:6c:b9:29: 26:4f:00:63:17:04:80:ff:19:06:dd:e5:82:0e:93:b0:b4:08: 41:bd:07:c1:eb:51:03:3d:3c:7b:29:4c:d6:ae:9a:7e:04:28: ea:80:f8:6f:4a:e8:49:9c:26:fa:64:94:70:2d:22:5e:53:eb: 94:a7:8a:15:f7:0e:06:51:9b:82:21:3d:4e:c9:e2:1b:c6:72: cf:d6:05:bd:bc:60:26:9c:f2:70:33:6d:c5:8a:e3:67:34:6b: 0e:02:bd:48:2b:d6:f5:e0:b4:82:4a:eb:d2:22:56:d1:eb:fa: bb:78:28:4c:9c:eb:3f:bc:3e:9d:69:df:eb:61:6a:da:db:e5: 60:a2:ee:e3:91:e0:53:c9:ac:32:d2:21:f8:ee:9b:67:a0:c2: 3d:ab:ae:f9:28:da:00:fa:23:4f:d3:d7:9f:94:11:6e:5c:a2: 28:53:47:5f:66:c6:01:21:13:69:0d:2a:6e:9c:e2:9f:33:8f: f9:da:45:7f:de:19:50:7a:e4:3e:90:98:44:6f:c8:40:52:cc: 94:c2:64:40:8d:f8:c8:01:39:7e:03:db:db:80:56:fe:b8:15: 15:8f:1a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLzmLcMifTSyKD38on2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMGEyYjQ4NGUyNmYzMGQzNWZkODJhMzQ0MjdmZjIyMDFj YjUwMDMwHhcNMjUxMjA1MjIwMTI0WhcNMjUxMjA2MjIwMTI0WjAzMTEwLwYDVQQD EyhlZDQ2ODJhMWEzMTQ1OTA5YzYwY2Q3ZTU4NjhmYTZjZWI1Mzg1Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v6UcZZakZUa3s/p8GIixxCQUu1Q qhE1OaNpGQ7Jv9kaAbJ+sq84jDvwDzOoEuKIXkwQue4XQm3z8VV95LcABvKz2DDd W0JvldPQJjWYODVQ3MpAbyXHN3wi/ArGO4r0ZzDGu6eSgXqXI20Z6moodNl7djwq A1qhaH32BL2HvggXYctcGNOohcKvFQBWx49YueOd9Mt7gM0zYgTIQLkxB0B8w6jZ NQM/4AJx9EY/UkpPlk5VonvuKtutKwJR3CTxUU8bIHRH74rDf+Ca7j9jOD//Zhy7 gmm9yP3nKn9WS41e/WczdYuwC/8Q3g3Fh71t7WLxykuWU4VGj31jjaQ4swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1GgqGjFFkJxgzX5YaPps61OFyUMB8GA1UdIwQY MBaAFLMKK0hOJvMNNf2Co0Qn/yIBy1ADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQt M2EwNDY3ZDVmMTA1LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mNjk5MTItMDNiNi00MDhjLWEyYzQtM2EwNDY3ZDVmMTA1 LzEvc3dvclNFNG04dzAxX1lLalJDZl9JZ0hMVUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtxY5fAI fw7DcqxE+BF4AAJX2qaycJR51sTwnNZrZAV+bLkpJk8AYxcEgP8ZBt3lgg6TsLQI Qb0HwetRAz08eylM1q6afgQo6oD4b0roSZwm+mSUcC0iXlPrlKeKFfcOBlGbgiE9 TsniG8Zyz9YFvbxgJpzycDNtxYrjZzRrDgK9SCvW9eC0gkrr0iJW0ev6u3goTJzr P7w+nWnf62Fq2tvlYKLu45HgU8msMtIh+O6bZ6DCPauu+SjaAPojT9PXn5QRblyi KFNHX2bGASETaQ0qbpzinzOP+dpFf94ZUHrkPpCYRG/IQFLMlMJkQI34yAE5fgPb 24BW/rgVFY8a4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:19 2025 by rpki-client