This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft File: swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json) Hash identifier: XcR/I3UfvLdog6yxZd5cCsCoDGUiOTNJ96g1d9RMZjI= Subject key identifier: 7A:EA:2B:42:42:F9:2F:2A:61:33:FF:2A:38:B9:7C:8D:55:52:8D:CE Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019AF31C4C07B8A75592AEBBBE076D39D071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft Manifest number: 1463 Signing time: Sat 06 Dec 2025 10:01:49 +0000 Manifest this update: Sat 06 Dec 2025 10:01:49 +0000 Manifest next update: Sun 07 Dec 2025 10:01:49 +0000 Files and hashes: 1: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=) 2: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=) 3: NzknDmn-TkBLhhCh3FNFS-0Flmg.roa (hash: s7se3/xdnMDjGZBCBbuaiotf7JHLKV6q0JTbfM402gw=) 4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=) 5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=) 6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: hYbmBt1gnz0jHTPWF6R6HZZmtCjqn6dwdQ8202NBkIg=) 7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4c:07:b8:a7:55:92:ae:bb:be:07:6d:39:d0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Dec 6 10:01:49 2025 GMT Not After : Dec 7 10:01:49 2025 GMT Subject: CN=7aea2b4242f92f2a6133ff2a38b97c8d55528dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:8a:19:e4:59:32:11:52:ff:c0:0d:61:aa: e5:5e:b2:63:c1:6f:aa:cd:ab:90:5a:ae:60:18:de: 2b:c0:d5:6a:e1:e0:4a:1b:bb:02:cf:4d:90:b5:45: 92:49:3a:0a:4f:79:e9:73:09:5b:28:72:80:02:01: f9:a8:1e:92:c1:7e:b0:78:03:16:8f:9f:7f:cd:dc: e9:c1:51:a1:8b:36:e9:b2:fb:48:61:83:01:d6:bf: 92:97:09:da:47:25:c6:8e:b3:17:06:cb:ba:0d:26: 09:2d:7d:ab:9d:da:0d:f5:77:41:6a:82:20:d2:f5: 04:97:08:e5:be:24:7b:a1:c7:23:60:58:51:61:4f: f7:0e:60:bc:67:96:7f:39:04:59:ff:13:4c:14:81: 5f:04:cd:2d:ae:b5:c9:7f:43:00:35:bd:f3:12:3c: e3:60:94:b9:74:c4:4f:6e:e1:33:14:22:09:52:e9: 86:80:f4:6e:7b:c6:44:db:df:ea:8f:f7:63:42:52: 64:60:3c:5e:a5:fe:62:db:f8:fe:49:8b:01:73:35: a9:df:e2:ef:64:85:56:5b:7a:60:ea:46:0b:c3:f1: 3f:7d:7b:91:98:7a:a1:f0:5f:b2:c1:b9:1d:1a:04: 65:28:15:45:67:52:bc:83:e8:07:c1:d1:db:de:b5: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EA:2B:42:42:F9:2F:2A:61:33:FF:2A:38:B9:7C:8D:55:52:8D:CE X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:fd:4a:8e:1d:4f:d3:d6:fe:35:ab:f0:af:b9:c8:7b:06:a9: ba:ed:c8:a4:81:0d:e8:59:ea:0c:d3:b1:bc:f6:50:cb:ac:75: 60:16:56:89:ef:d1:e5:61:35:a4:f7:e2:f9:cd:4b:5d:1c:87: 0d:84:d6:ad:a4:80:d4:88:f0:ad:0d:df:b7:bc:34:1c:f4:b1: 38:0e:5b:25:5e:a1:45:1a:37:40:ec:5f:61:28:57:2d:5a:73: 20:de:f8:9e:c7:6c:fd:59:6f:d6:75:38:cb:89:cb:dd:0d:95: 85:9e:57:27:cf:a7:53:1b:11:b7:36:57:27:76:86:7e:a6:8b: c8:8d:d1:b3:30:5a:6b:ca:79:d3:df:6e:44:92:cd:29:bc:8d: af:d0:92:a2:5c:53:e3:df:7a:57:2c:69:64:82:26:ed:56:97: fe:b1:d1:7b:2b:5d:7b:53:4c:a5:d2:a9:bf:53:19:95:1b:f4: 05:2a:99:4f:bd:6b:78:52:f7:41:14:63:35:58:ab:ee:d5:29: cc:5e:a8:09:08:a7:12:8d:19:c0:d8:43:76:f9:d0:c3:01:03: d8:e9:ef:96:7b:29:a7:68:56:c4:05:c7:64:cb:e8:85:5a:b9: e9:68:0f:d8:48:9a:77:2a:e4:bb:78:ce:b8:ec:58:e0:fb:df: ff:c2:be:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEwHuKdVkq67vgdtOdBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjUxMjA2MTAwMTQ5WhcNMjUxMjA3MTAwMTQ5WjAzMTEwLwYDVQQD Eyg3YWVhMmI0MjQyZjkyZjJhNjEzM2ZmMmEzOGI5N2M4ZDU1NTI4ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbGKGeRZMhFS/8ANYarlXrJjwW+q zauQWq5gGN4rwNVq4eBKG7sCz02QtUWSSToKT3npcwlbKHKAAgH5qB6SwX6weAMW j59/zdzpwVGhizbpsvtIYYMB1r+SlwnaRyXGjrMXBsu6DSYJLX2rndoN9XdBaoIg 0vUElwjlviR7occjYFhRYU/3DmC8Z5Z/OQRZ/xNMFIFfBM0trrXJf0MANb3zEjzj YJS5dMRPbuEzFCIJUumGgPRue8ZE29/qj/djQlJkYDxepf5i2/j+SYsBczWp3+Lv ZIVWW3pg6kYLw/E/fXuRmHqh8F+ywbkdGgRlKBVFZ1K8g+gHwdHb3rVvTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrqK0JC+S8qYTP/Kji5fI1VUo3OMB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvv1Kjh1P 09b+Navwr7nIewapuu3IpIEN6FnqDNOxvPZQy6x1YBZWie/R5WE1pPfi+c1LXRyH DYTWraSA1IjwrQ3ft7w0HPSxOA5bJV6hRRo3QOxfYShXLVpzIN74nsds/Vlv1nU4 y4nL3Q2VhZ5XJ8+nUxsRtzZXJ3aGfqaLyI3RszBaa8p5099uRJLNKbyNr9CSolxT 4996VyxpZIIm7VaX/rHReytde1NMpdKpv1MZlRv0BSqZT71reFL3QRRjNVir7tUp zF6oCQinEo0ZwNhDdvnQwwED2Onvlnspp2hWxAXHZMvohVq56WgP2Eiadyrku3jO uOxY4Pvf/8K+jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:07 2025 by rpki-client