This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft File: SwGEomKzUJ4aumGpC-yrMrACVUw.mft (raw, json) Hash identifier: WdI/ziWByZKlPgngyZiFuUrUUy3dJRcNb04B+QVrJvA= Subject key identifier: 3B:77:80:2F:2C:2E:26:93:9D:4F:31:80:69:5D:B8:37:BD:1B:80:65 Authority key identifier: 4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C Certificate issuer: /CN=4b0184a262b3509e1aba61a90becab32b002554c Certificate serial: 019B1F8710AA7DEC710D64AD6BC7F1FFDF25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft Manifest number: 1708 Signing time: Mon 15 Dec 2025 01:01:43 +0000 Manifest this update: Mon 15 Dec 2025 01:01:43 +0000 Manifest next update: Tue 16 Dec 2025 01:01:43 +0000 Files and hashes: 1: SwGEomKzUJ4aumGpC-yrMrACVUw.crl (hash: vyWPJ8w89g6bdxH404m/NVYa+rGyUdgGvigdneaYnWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:10:aa:7d:ec:71:0d:64:ad:6b:c7:f1:ff:df:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b0184a262b3509e1aba61a90becab32b002554c Validity Not Before: Dec 15 01:01:43 2025 GMT Not After : Dec 16 01:01:43 2025 GMT Subject: CN=3b77802f2c2e26939d4f3180695db837bd1b8065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:a1:f2:cb:62:fd:b0:e8:c2:a1:3e:b8:34: 5b:80:76:67:9e:75:1f:62:fe:99:02:68:0d:f2:a3: 12:c6:6b:0e:a8:b1:e8:ab:35:81:1f:27:85:87:37: 32:03:04:20:ac:31:a3:83:fe:f0:8a:18:75:5e:24: fc:4f:2d:47:a7:13:49:bb:0c:67:4a:9c:fd:81:9f: 44:65:d4:3b:2c:09:2b:33:fa:45:d3:fe:0a:30:54: 13:43:52:bc:70:39:d5:6f:3d:45:a2:37:bd:ff:ff: 3d:d7:99:15:15:a9:4d:5f:90:f8:25:3b:ff:2a:2e: cd:c1:67:13:33:ab:c9:dd:02:9e:f4:3a:0f:bf:c5: cd:b0:8c:b3:7a:00:9f:a5:79:e3:20:0c:bb:43:ce: 89:74:ec:db:e4:1c:88:f4:bf:90:e6:61:a4:9e:b4: 87:68:08:e8:f5:e0:4d:29:3a:6d:1b:4e:a0:32:e9: a7:49:41:8c:08:f8:8c:e2:1d:bc:24:83:23:36:b2: 90:6b:e6:71:a6:ce:4e:76:d3:75:00:6c:ac:d5:ca: 43:0d:f6:6f:60:ee:0b:17:30:d3:b2:8d:81:cf:e2: 22:ed:42:18:5a:4b:71:e1:cd:22:d0:4e:b0:bf:1b: 02:e3:50:bb:74:49:09:33:e6:a0:94:30:36:02:3a: fb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:77:80:2F:2C:2E:26:93:9D:4F:31:80:69:5D:B8:37:BD:1B:80:65 X509v3 Authority Key Identifier: keyid:4B:01:84:A2:62:B3:50:9E:1A:BA:61:A9:0B:EC:AB:32:B0:02:55:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGEomKzUJ4aumGpC-yrMrACVUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/264ad4-aa1b-46e3-94b2-e35afa36a428/1/SwGEomKzUJ4aumGpC-yrMrACVUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:64:9d:d3:62:3e:04:d2:a0:49:34:48:d9:09:2c:e7:de:da: 12:a4:9b:5c:b7:a2:dd:12:4f:20:ce:8c:03:08:6b:51:d1:83: 63:e1:c4:be:7a:f1:4b:5c:8b:b0:2a:57:bd:5d:1c:7f:13:58: ba:cf:9a:81:13:62:f5:27:35:06:87:c2:66:26:84:81:16:46: 3e:24:10:0d:76:18:40:c8:7d:fe:45:da:d6:de:b2:73:05:f0: 7c:75:3b:c0:f5:12:68:af:5b:fc:79:65:3a:e1:da:b8:a6:1c: f8:59:8b:4b:7b:22:a7:3f:b5:8e:a2:82:6f:24:fc:30:31:11: 30:92:7d:53:3b:25:0f:30:17:1c:f7:db:6c:b0:30:02:83:fc: 67:2c:3e:06:56:bc:59:7e:14:93:5c:e5:5e:ea:af:16:06:53: ca:1f:91:40:86:f5:0a:a0:87:24:56:15:a3:69:71:20:72:d2: 67:98:3c:55:fb:85:76:6a:db:c4:c8:49:64:ee:84:a8:28:a8: 5d:a9:ab:ca:4b:bf:b8:01:07:2c:21:20:2c:d3:28:85:18:f7: 3c:1c:a0:0d:78:77:dc:c7:b5:ca:d0:a7:b6:d0:ff:6f:5d:64: 44:41:21:81:5e:2c:be:40:5e:a2:ae:42:2d:8e:bc:38:5a:8d: be:b7:ff:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhxCqfexxDWSta8fx/98lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMDE4NGEyNjJiMzUwOWUxYWJhNjFhOTBiZWNhYjMyYjAw MjU1NGMwHhcNMjUxMjE1MDEwMTQzWhcNMjUxMjE2MDEwMTQzWjAzMTEwLwYDVQQD EygzYjc3ODAyZjJjMmUyNjkzOWQ0ZjMxODA2OTVkYjgzN2JkMWI4MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugyh8sti/bDowqE+uDRbgHZnnnUf Yv6ZAmgN8qMSxmsOqLHoqzWBHyeFhzcyAwQgrDGjg/7wihh1XiT8Ty1HpxNJuwxn Spz9gZ9EZdQ7LAkrM/pF0/4KMFQTQ1K8cDnVbz1Foje9//8915kVFalNX5D4JTv/ Ki7NwWcTM6vJ3QKe9DoPv8XNsIyzegCfpXnjIAy7Q86JdOzb5ByI9L+Q5mGknrSH aAjo9eBNKTptG06gMumnSUGMCPiM4h28JIMjNrKQa+Zxps5OdtN1AGys1cpDDfZv YO4LFzDTso2Bz+Ii7UIYWktx4c0i0E6wvxsC41C7dEkJM+aglDA2Ajr7wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDt3gC8sLiaTnU8xgGlduDe9G4BlMB8GA1UdIwQY MBaAFEsBhKJis1CeGrphqQvsqzKwAlVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjRhZDQtYWExYi00NmUzLTk0YjIt ZTM1YWZhMzZhNDI4LzEvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNjRhZDQtYWExYi00NmUzLTk0YjItZTM1YWZhMzZhNDI4 LzEvU3dHRW9tS3pVSjRhdW1HcEMteXJNckFDVlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmSd02I+ BNKgSTRI2Qks597aEqSbXLei3RJPIM6MAwhrUdGDY+HEvnrxS1yLsCpXvV0cfxNY us+agRNi9Sc1BofCZiaEgRZGPiQQDXYYQMh9/kXa1t6ycwXwfHU7wPUSaK9b/Hll OuHauKYc+FmLS3sipz+1jqKCbyT8MDERMJJ9UzslDzAXHPfbbLAwAoP8Zyw+Bla8 WX4Uk1zlXuqvFgZTyh+RQIb1CqCHJFYVo2lxIHLSZ5g8VfuFdmrbxMhJZO6EqCio Xamryku/uAEHLCEgLNMohRj3PBygDXh33Me1ytCnttD/b11kREEhgV4svkBeoq5C LY68OFqNvrf/Ag== -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:43 2025 by rpki-client