This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft File: SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json) Hash identifier: C9Bk6tecKrCNfYX4gimXZbCVLGJ4SRqlLc4hHiCuG7c= Subject key identifier: F1:DF:85:4E:DE:93:D9:DA:57:73:47:0C:75:F7:59:D8:AB:7B:FE:5C Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE Certificate issuer: /CN=4b0715db88042544e389319b5edc29d0e156c5be Certificate serial: 019BF951A253699355C2EB34370F05C3A324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft Manifest number: 0666 Signing time: Mon 26 Jan 2026 08:00:35 +0000 Manifest this update: Mon 26 Jan 2026 08:00:35 +0000 Manifest next update: Tue 27 Jan 2026 08:00:35 +0000 Files and hashes: 1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: kXIsT/2FXbft9DU93obeXJwa7SmkmN1mSD2ZhFcr4gY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:a2:53:69:93:55:c2:eb:34:37:0f:05:c3:a3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be Validity Not Before: Jan 26 08:00:35 2026 GMT Not After : Jan 27 08:00:35 2026 GMT Subject: CN=f1df854ede93d9da5773470c75f759d8ab7bfe5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:47:a2:77:90:e1:ac:a6:84:28:64:d9:d7: e8:3f:9c:60:f8:e2:04:ef:f6:fd:19:51:87:a2:86: 1c:21:84:05:f8:ac:2c:ad:6e:50:78:db:73:ed:6c: ee:0d:bd:bf:7b:c7:15:c6:27:66:5e:f8:68:88:ff: 6c:98:3d:df:16:79:d1:22:08:2f:36:07:c9:df:25: 81:f6:5e:03:4c:e7:5f:b7:72:d1:d7:bc:f8:4e:1c: b6:bf:c2:c1:85:be:72:0e:f2:b5:16:65:f7:dd:32: 0a:83:11:da:4f:69:49:a3:65:d0:0d:6e:80:72:c1: c7:cd:25:cd:85:63:2a:81:ef:9d:f6:c7:02:3d:38: cb:f0:6b:b5:14:16:5a:a6:6b:1b:c9:4a:73:4f:4c: c3:20:ab:ae:9b:a3:dc:91:cf:55:11:39:e0:0c:5f: a1:35:da:71:2c:08:b1:ec:7c:db:ee:12:a8:48:82: f8:c9:e9:4f:04:7c:91:52:21:da:cd:69:32:28:8f: 34:1c:4b:df:1a:5b:9e:c3:4d:9f:63:8b:89:d7:28: 48:1f:b0:f1:e5:da:7b:6c:d4:e5:f1:d9:3d:a4:ae: 18:e0:84:26:7a:03:d3:b1:a6:7e:e3:8f:1a:15:0c: d8:d3:5c:da:0a:ac:17:80:0a:62:69:26:65:49:a0: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:85:4E:DE:93:D9:DA:57:73:47:0C:75:F7:59:D8:AB:7B:FE:5C X509v3 Authority Key Identifier: keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:23:8b:40:fc:2b:29:03:50:20:39:f1:8f:16:d9:6e:ad:fc: ab:d9:61:76:3e:43:a7:37:70:19:c3:9c:cd:4b:9e:c9:27:f5: cb:6a:cf:40:54:51:2e:ab:38:f4:fc:86:7d:d5:bb:3c:25:31: 82:e0:71:64:ad:30:31:6b:5f:45:91:f2:52:5b:a2:ce:9d:ea: 69:4b:ce:95:43:bf:b0:94:eb:91:d5:13:34:5f:d6:77:6f:68: 8c:db:73:8c:6b:4d:12:ed:6a:28:71:5d:48:40:05:a9:26:ae: bc:4c:ab:62:e6:ea:4b:51:6f:60:20:77:8d:d0:22:c8:28:b4: 2c:d0:b5:11:07:66:c1:e6:ab:da:f0:7f:f4:8c:0f:60:41:59: 3b:66:48:63:49:18:d3:ff:fd:25:ed:2c:cb:60:f2:e3:a3:3a: a3:8a:00:3a:eb:25:c6:28:73:9d:cb:5c:00:ab:e7:64:ec:ce: 9a:8a:6d:22:4d:e6:09:04:01:d6:79:10:24:4b:78:3f:75:0e: e1:d1:70:0d:af:d1:99:21:55:49:6e:54:25:16:46:85:9c:fb: 59:c5:e7:cc:f2:ae:36:48:c0:26:c8:8f:de:f0:6b:38:44:5c: 09:1e:0a:8a:30:16:3f:7c:d9:9f:3f:88:99:b8:4c:3a:a5:41: 95:0f:61:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UaJTaZNVwus0Nw8Fw6MkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMDcxNWRiODgwNDI1NDRlMzg5MzE5YjVlZGMyOWQwZTE1 NmM1YmUwHhcNMjYwMTI2MDgwMDM1WhcNMjYwMTI3MDgwMDM1WjAzMTEwLwYDVQQD EyhmMWRmODU0ZWRlOTNkOWRhNTc3MzQ3MGM3NWY3NTlkOGFiN2JmZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt5HoneQ4aymhChk2dfoP5xg+OIE 7/b9GVGHooYcIYQF+KwsrW5QeNtz7WzuDb2/e8cVxidmXvhoiP9smD3fFnnRIggv NgfJ3yWB9l4DTOdft3LR17z4Thy2v8LBhb5yDvK1FmX33TIKgxHaT2lJo2XQDW6A csHHzSXNhWMqge+d9scCPTjL8Gu1FBZapmsbyUpzT0zDIKuum6Pckc9VETngDF+h NdpxLAix7Hzb7hKoSIL4yelPBHyRUiHazWkyKI80HEvfGluew02fY4uJ1yhIH7Dx 5dp7bNTl8dk9pK4Y4IQmegPTsaZ+448aFQzY01zaCqwXgApiaSZlSaA8WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHfhU7ek9naV3NHDHX3Wdire/5cMB8GA1UdIwQY MBaAFEsHFduIBCVE44kxm17cKdDhVsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzkt YmIzZDk5Yjk4YTllLzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzktYmIzZDk5Yjk4YTll LzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSOLQPwr KQNQIDnxjxbZbq38q9lhdj5DpzdwGcOczUueySf1y2rPQFRRLqs49PyGfdW7PCUx guBxZK0wMWtfRZHyUluizp3qaUvOlUO/sJTrkdUTNF/Wd29ojNtzjGtNEu1qKHFd SEAFqSauvEyrYubqS1FvYCB3jdAiyCi0LNC1EQdmwear2vB/9IwPYEFZO2ZIY0kY 0//9Je0sy2Dy46M6o4oAOuslxihznctcAKvnZOzOmoptIk3mCQQB1nkQJEt4P3UO 4dFwDa/RmSFVSW5UJRZGhZz7WcXnzPKuNkjAJsiP3vBrOERcCR4KijAWP3zZnz+I mbhMOqVBlQ9hYA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:16 2026 by rpki-client