This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft File: swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json) Hash identifier: H7e3DuJklr0HvTdzF/FLHjfAdEnVO97eIzTXBLH6R2U= Subject key identifier: 7C:26:31:CC:AD:02:0A:70:CA:F1:23:CF:91:A3:C9:85:02:BF:CB:62 Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019BF386F2D7EB1693CD563E34507631FF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft Manifest number: 14E9 Signing time: Sun 25 Jan 2026 05:01:06 +0000 Manifest this update: Sun 25 Jan 2026 05:01:06 +0000 Manifest next update: Mon 26 Jan 2026 05:01:06 +0000 Files and hashes: 1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=) 2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=) 3: Eu3pOBC36Y-pw7OIVyQXZFyVHrQ.roa (hash: b+c4P8KvAFa/U6KE4xCMpIf8v/6ZAEwKWpXn3TBS6Qk=) 4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=) 5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=) 6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: rcrtp8kFv5BYsZOZ7ajfSdSwVtdKSrNp08aVB/nSt5g=) 7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:f2:d7:eb:16:93:cd:56:3e:34:50:76:31:ff:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Jan 25 05:01:06 2026 GMT Not After : Jan 26 05:01:06 2026 GMT Subject: CN=7c2631ccad020a70caf123cf91a3c98502bfcb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:0a:69:8d:fb:55:42:46:18:53:49:88:19: e8:e6:4e:97:a0:ec:3a:b7:29:be:20:5c:3b:b0:e7: 04:c2:b5:56:d7:05:ac:d3:15:3e:0f:cb:36:ec:51: 17:1b:a3:c9:df:24:5f:9b:3c:00:4a:4d:63:a2:12: fb:6b:58:1f:48:8b:0b:25:83:5c:c8:23:0e:b9:a8: 93:f7:39:3b:4c:f4:57:60:57:cc:f5:3e:99:b5:b8: 60:b6:62:38:f3:9c:86:b5:f0:5c:55:4b:ec:63:e6: 4c:0f:b2:02:f9:e2:de:99:19:5d:3b:06:fd:49:54: 35:86:76:be:8d:2b:b5:e5:41:53:32:e1:92:14:3e: 49:a4:08:37:53:2a:86:23:3f:6e:a5:34:25:83:b4: cd:ea:82:a5:a0:a5:2a:45:59:8c:ba:8c:fe:cf:ae: 3b:fa:f3:cc:c2:80:f4:b9:dc:4b:84:c9:73:51:90: 1d:1e:63:3a:bc:67:b7:ac:c9:50:fe:9e:82:a3:d9: 13:ef:0d:47:f2:50:83:09:ff:c5:59:1b:b6:4d:36: 5d:54:66:ca:48:a7:93:ad:d4:00:99:d0:0c:70:a0: 5d:73:07:df:b4:d2:44:f9:f8:78:07:dc:ab:93:94: 99:0f:e0:7b:bb:72:47:ee:97:e4:2e:07:32:1b:60: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:26:31:CC:AD:02:0A:70:CA:F1:23:CF:91:A3:C9:85:02:BF:CB:62 X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:48:51:fd:3f:59:87:ff:05:b2:c5:21:56:09:9b:40:da:e9: 2e:48:18:cb:82:87:ae:ec:d3:4a:fe:d9:0f:73:0e:02:83:dc: c4:2a:fb:6e:7d:e8:cc:2e:8e:78:c3:92:20:95:67:de:8c:c8: e7:f0:0d:87:6e:9e:b0:47:6b:6c:e3:4d:85:d9:d3:d8:2b:66: 2d:e0:4a:52:a2:27:4d:4b:0d:23:ee:83:6a:89:17:c4:cd:fb: b7:c2:50:21:fb:dc:37:79:39:72:33:55:57:af:0d:db:32:53: 4d:a3:02:c8:99:a1:7a:71:71:c9:46:40:7b:08:e0:5c:57:3f: a4:d1:cc:90:e4:05:e6:e8:1b:fc:ac:3a:3a:0b:05:bf:ce:48: 00:72:18:59:dd:3b:bb:dc:9c:f1:b3:a0:b7:f8:d8:f3:69:48: f7:e3:3f:04:b8:ff:4b:08:f9:03:f9:ac:3f:1a:43:94:69:7a: 9d:bf:78:e2:92:b1:0f:a9:02:60:6e:fb:a8:38:c0:ea:ac:d0: 1b:e7:1f:32:60:16:2b:1c:1c:39:40:2f:f5:3e:89:a3:c3:16: b2:64:da:ce:59:22:33:72:ee:23:aa:24:f1:c6:d1:91:00:1a: 6d:87:e2:f5:b1:9a:ac:66:4e:c8:8a:e0:f3:43:11:a7:f2:9b: e0:49:2c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhvLX6xaTzVY+NFB2Mf91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjYwMTI1MDUwMTA2WhcNMjYwMTI2MDUwMTA2WjAzMTEwLwYDVQQD Eyg3YzI2MzFjY2FkMDIwYTcwY2FmMTIzY2Y5MWEzYzk4NTAyYmZjYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFQKaY37VUJGGFNJiBno5k6XoOw6 tym+IFw7sOcEwrVW1wWs0xU+D8s27FEXG6PJ3yRfmzwASk1johL7a1gfSIsLJYNc yCMOuaiT9zk7TPRXYFfM9T6ZtbhgtmI485yGtfBcVUvsY+ZMD7IC+eLemRldOwb9 SVQ1hna+jSu15UFTMuGSFD5JpAg3UyqGIz9upTQlg7TN6oKloKUqRVmMuoz+z647 +vPMwoD0udxLhMlzUZAdHmM6vGe3rMlQ/p6Co9kT7w1H8lCDCf/FWRu2TTZdVGbK SKeTrdQAmdAMcKBdcwfftNJE+fh4B9yrk5SZD+B7u3JH7pfkLgcyG2Dm+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwmMcytAgpwyvEjz5GjyYUCv8tiMB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUhR/T9Z h/8FssUhVgmbQNrpLkgYy4KHruzTSv7ZD3MOAoPcxCr7bn3ozC6OeMOSIJVn3ozI 5/ANh26esEdrbONNhdnT2CtmLeBKUqInTUsNI+6DaokXxM37t8JQIfvcN3k5cjNV V68N2zJTTaMCyJmhenFxyUZAewjgXFc/pNHMkOQF5ugb/Kw6OgsFv85IAHIYWd07 u9yc8bOgt/jY82lI9+M/BLj/Swj5A/msPxpDlGl6nb944pKxD6kCYG77qDjA6qzQ G+cfMmAWKxwcOUAv9T6Jo8MWsmTazlkiM3LuI6ok8cbRkQAabYfi9bGarGZOyIrg 80MRp/Kb4EksTg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:02:57 2026 by rpki-client