This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft File: SwzeTE-TKZljaA1sT8BgT3yEJDs.mft (raw, json) Hash identifier: D7p+juNHgfKyJ/0BKJKDbdU3KO6iRb+75yr7DT7QHDU= Subject key identifier: 80:71:7D:89:21:F0:65:60:47:43:9E:CA:90:5F:48:12:8D:90:89:CA Authority key identifier: 4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B Certificate issuer: /CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b Certificate serial: 019BFE7848A4C2E2C53BB55FAC40BA2B6EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 08:00:54 +0000 Manifest this update: Tue 27 Jan 2026 08:00:54 +0000 Manifest next update: Wed 28 Jan 2026 08:00:54 +0000 Files and hashes: 1: SwzeTE-TKZljaA1sT8BgT3yEJDs.crl (hash: F2J0CYczdrC/O+Puay8AfeyRyDUu6T/SwXQ6mxK+B9o=) 2: vj_1jofrGODDjfKXShYV7qRv8ZI.roa (hash: 5aSTepYVctMlEXvufzWOc12f0s+jwPXsm+O0hYqWeCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:48:a4:c2:e2:c5:3b:b5:5f:ac:40:ba:2b:6e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b0cde4c4f93299963680d6c4fc0604f7c84243b Validity Not Before: Jan 27 08:00:54 2026 GMT Not After : Jan 28 08:00:54 2026 GMT Subject: CN=80717d8921f0656047439eca905f48128d9089ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:14:3c:75:67:9a:bc:b7:43:2f:b4:5b:62: ad:37:a0:bb:b6:e4:08:c4:83:40:b8:4c:20:7f:1a: e2:37:0e:73:9e:00:ec:33:22:9d:ea:e6:02:50:c5: 81:82:25:cc:44:92:29:53:e4:84:0d:5d:1b:bd:3a: a7:96:4f:02:ae:ad:cc:15:38:9e:3f:7b:94:b1:3b: c9:42:73:b9:25:26:de:dd:6e:21:46:56:93:92:36: ba:8a:5b:db:47:53:80:99:f3:6f:15:f1:15:fa:dc: 9d:2f:5c:ba:64:54:37:b7:13:5e:b4:e8:d2:a7:a7: 5c:65:df:44:e3:c9:d2:cc:48:e5:ae:bc:d5:39:a7: e8:96:8d:3d:77:3d:8b:3d:5d:12:52:2e:2a:6c:d4: 1d:4d:40:8a:0d:e7:12:41:4f:64:c6:37:a0:42:9b: e4:af:c8:a7:96:dc:7d:8e:d6:5a:9a:71:06:ca:4c: 9c:c5:7d:28:71:2f:79:12:d5:67:7a:33:40:f3:ad: 30:c1:ea:22:12:65:b2:d7:d3:ca:f1:2c:01:bd:c4: d5:95:44:c4:3f:5d:75:96:5d:04:f4:d4:59:a4:4e: eb:11:2e:82:e4:3e:8b:c9:7d:28:80:3f:f0:ba:88: 16:d7:e6:ba:c6:2e:02:7e:7a:d1:72:6c:41:67:56: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:71:7D:89:21:F0:65:60:47:43:9E:CA:90:5F:48:12:8D:90:89:CA X509v3 Authority Key Identifier: keyid:4B:0C:DE:4C:4F:93:29:99:63:68:0D:6C:4F:C0:60:4F:7C:84:24:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzeTE-TKZljaA1sT8BgT3yEJDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6a3bb7-7067-42e8-8097-89620c25150e/1/SwzeTE-TKZljaA1sT8BgT3yEJDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a4:d3:1a:af:1c:30:ed:bc:67:05:3c:32:d4:f6:65:c5:2c: 5a:ef:1b:e4:73:cb:fe:8a:61:2a:59:06:2b:f8:48:96:9a:fd: ac:2e:3e:57:1f:c2:2f:23:e1:18:85:c8:a6:20:7d:b6:30:66: 62:1b:f5:bc:8b:54:42:27:55:dd:92:d4:2f:fa:53:1f:c7:24: 24:02:90:20:5c:84:25:2b:99:12:5c:07:f6:3b:06:37:56:9a: fd:60:13:07:54:aa:c5:55:1e:0a:9b:19:41:68:db:35:de:86: fd:ae:ff:e5:eb:d1:a2:f7:e8:60:79:02:50:2f:32:09:a0:78: 27:1f:d6:85:22:bd:86:ed:df:09:20:34:c2:b5:59:3d:88:57: 7c:8e:6b:a2:af:37:1d:52:6f:2b:04:dd:13:73:34:ae:1d:0b: 71:40:be:a0:67:58:c9:2e:93:c6:64:03:2c:15:ac:f1:18:93: e4:00:17:43:75:7b:d6:73:6c:10:62:84:f1:bc:c7:49:1f:4b: 60:77:6d:34:29:c3:e5:b9:f5:2e:15:b4:e5:d4:78:19:a1:ab: ec:2e:7d:ee:b4:6f:a3:e4:08:4d:5a:20:68:7f:59:13:57:07: b5:f1:bb:d1:c7:ed:0c:bf:73:a9:0b:69:74:65:96:ba:ba:b2: 46:db:db:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eEikwuLFO7VfrEC6K27HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMGNkZTRjNGY5MzI5OTk2MzY4MGQ2YzRmYzA2MDRmN2M4 NDI0M2IwHhcNMjYwMTI3MDgwMDU0WhcNMjYwMTI4MDgwMDU0WjAzMTEwLwYDVQQD Eyg4MDcxN2Q4OTIxZjA2NTYwNDc0MzllY2E5MDVmNDgxMjhkOTA4OWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsQUPHVnmry3Qy+0W2KtN6C7tuQI xINAuEwgfxriNw5zngDsMyKd6uYCUMWBgiXMRJIpU+SEDV0bvTqnlk8Crq3MFTie P3uUsTvJQnO5JSbe3W4hRlaTkja6ilvbR1OAmfNvFfEV+tydL1y6ZFQ3txNetOjS p6dcZd9E48nSzEjlrrzVOafolo09dz2LPV0SUi4qbNQdTUCKDecSQU9kxjegQpvk r8inltx9jtZamnEGykycxX0ocS95EtVnejNA860wweoiEmWy19PK8SwBvcTVlUTE P111ll0E9NRZpE7rES6C5D6LyX0ogD/wuogW1+a6xi4CfnrRcmxBZ1Y/WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBxfYkh8GVgR0OeypBfSBKNkInKMB8GA1UdIwQY MBaAFEsM3kxPkymZY2gNbE/AYE98hCQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3d6ZVRFLVRLWmxqYUExc1Q4QmdUM3lFSkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82YTNiYjctNzA2Ny00MmU4LTgwOTct ODk2MjBjMjUxNTBlLzEvU3d6ZVRFLVRLWmxqYUExc1Q4QmdUM3lFSkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi82YTNiYjctNzA2Ny00MmU4LTgwOTctODk2MjBjMjUxNTBl LzEvU3d6ZVRFLVRLWmxqYUExc1Q4QmdUM3lFSkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6TTGq8c MO28ZwU8MtT2ZcUsWu8b5HPL/ophKlkGK/hIlpr9rC4+Vx/CLyPhGIXIpiB9tjBm Yhv1vItUQidV3ZLUL/pTH8ckJAKQIFyEJSuZElwH9jsGN1aa/WATB1SqxVUeCpsZ QWjbNd6G/a7/5evRovfoYHkCUC8yCaB4Jx/WhSK9hu3fCSA0wrVZPYhXfI5roq83 HVJvKwTdE3M0rh0LcUC+oGdYyS6TxmQDLBWs8RiT5AAXQ3V71nNsEGKE8bzHSR9L YHdtNCnD5bn1LhW05dR4GaGr7C597rRvo+QITVogaH9ZE1cHtfG70cftDL9zqQtp dGWWurqyRtvbcw== -----END CERTIFICATE-----Generated at Tue Jan 27 12:49:29 2026 by rpki-client