This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json) Hash identifier: 0DDFW4yejyB/osGZGdsut4fiqvF6Uwatf7R9QiWo+FI= Subject key identifier: D6:E3:9E:60:37:E1:3D:96:9B:4F:F9:04:63:88:DA:CC:E1:2D:19:05 Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9 Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9 Certificate serial: 019C420FFBDE299FDB9C4CE409A2AD4EFCBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft Manifest number: 0EE0 Signing time: Mon 09 Feb 2026 11:01:09 +0000 Manifest this update: Mon 09 Feb 2026 11:01:09 +0000 Manifest next update: Tue 10 Feb 2026 11:01:09 +0000 Files and hashes: 1: HfrLlB4hKtVM_U8ec59MAiKWNM0.roa (hash: vvyUfIqwDg/vVPERqoykgaE3kPhLAXeAghrpbLhVekI=) 2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: UVCajS1NA5y/y/YCBdPgNS3Em+DnWXB8BfI3s+qrXqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:fb:de:29:9f:db:9c:4c:e4:09:a2:ad:4e:fc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9 Validity Not Before: Feb 9 11:01:09 2026 GMT Not After : Feb 10 11:01:09 2026 GMT Subject: CN=d6e39e6037e13d969b4ff9046388dacce12d1905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:73:33:f4:85:df:93:24:43:1b:da:c1:71: 13:de:d1:5a:5b:bf:74:6a:42:c4:b6:f0:29:82:f5: 73:98:65:9b:12:51:db:55:35:a9:e1:ec:12:c2:ea: 42:3b:38:94:06:af:80:e1:53:bb:9c:bb:c0:d4:ef: ba:ed:0a:a9:53:55:ce:2c:76:98:0a:ec:9c:75:2c: d6:0a:8a:ef:00:9f:e6:eb:93:06:36:74:e3:3c:9f: ee:9a:56:8c:a2:4e:56:20:53:9a:da:6c:cf:ee:3e: 71:7d:19:4a:73:08:fc:2c:f6:45:64:c0:94:fe:dd: 58:cc:57:04:f2:51:52:ef:93:ea:56:e2:b1:73:21: 04:8d:08:0a:35:f5:fb:eb:0b:24:f8:22:71:2d:21: 7c:00:91:c9:87:4d:42:d9:d2:7b:e1:6b:c5:04:8a: 15:08:f9:a8:ba:d0:7b:51:b6:79:67:8d:f9:15:af: 7f:de:5b:be:40:fd:2d:16:5d:01:ec:0e:a9:59:d0: a1:a0:2d:fb:a1:ce:d0:c1:e0:9d:7c:0d:5f:14:22: 04:eb:75:14:75:fb:8f:77:eb:e9:db:fa:9f:09:f9: 9f:df:e9:58:f8:12:ff:2b:28:03:c1:d5:65:5a:eb: c6:ff:e8:2b:90:7d:dc:1f:5e:20:ac:5c:a1:43:70: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E3:9E:60:37:E1:3D:96:9B:4F:F9:04:63:88:DA:CC:E1:2D:19:05 X509v3 Authority Key Identifier: keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:98:99:4d:e5:b6:8f:7c:3e:46:b0:ec:53:1d:54:1c:f6:a8: 8e:65:c1:cb:70:55:ff:36:f7:be:c6:ca:19:9c:be:a7:56:7f: b6:36:aa:96:ac:04:4f:f0:91:cf:6c:f1:ba:64:f7:23:d9:63: b6:7f:d6:ce:28:0b:e1:ba:69:04:91:83:26:b8:80:d2:8f:53: 91:c2:09:4c:0b:21:12:e3:f7:a4:1a:71:85:f0:41:a4:42:3a: ee:b1:8d:21:f9:25:83:51:7d:81:ed:c1:6e:08:fc:bc:17:fc: 69:49:d2:a8:22:80:cb:7d:f2:94:a0:cb:13:85:9e:71:f3:c3: 97:d4:a4:d9:c2:6b:f2:d6:c7:88:fe:f4:2a:00:79:4a:80:11: d8:5d:5f:49:96:a8:9e:1b:8c:89:ed:8f:c4:12:31:9c:32:a4: 9c:cd:52:30:65:4f:b3:ac:69:ca:ed:19:2d:1b:34:c6:7d:95: 7e:52:51:bb:1f:af:57:fd:1f:71:f7:60:2e:e3:3c:11:d2:c4: b1:21:c2:3e:8a:3a:da:15:6f:c2:d5:2f:54:fb:e3:6a:d5:82: 35:a7:45:2b:61:ef:5e:ff:78:8a:73:05:ff:05:1a:7d:1a:c3: 04:25:cd:d3:e0:0c:d0:f1:db:c7:0f:81:8d:89:b7:a6:01:0b: 6f:c7:00:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/veKZ/bnEzkCaKtTvy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDQwYzdmNDUxYzYxNGQ3ZWViYTgyYzMyYTM5OGU4N2Rl M2I4YzkwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD EyhkNmUzOWU2MDM3ZTEzZDk2OWI0ZmY5MDQ2Mzg4ZGFjY2UxMmQxOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzBzM/SF35MkQxvawXET3tFaW790 akLEtvApgvVzmGWbElHbVTWp4ewSwupCOziUBq+A4VO7nLvA1O+67QqpU1XOLHaY CuycdSzWCorvAJ/m65MGNnTjPJ/umlaMok5WIFOa2mzP7j5xfRlKcwj8LPZFZMCU /t1YzFcE8lFS75PqVuKxcyEEjQgKNfX76wsk+CJxLSF8AJHJh01C2dJ74WvFBIoV CPmoutB7UbZ5Z435Fa9/3lu+QP0tFl0B7A6pWdChoC37oc7QweCdfA1fFCIE63UU dfuPd+vp2/qfCfmf3+lY+BL/KygDwdVlWuvG/+grkH3cH14grFyhQ3D4CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbjnmA34T2Wm0/5BGOI2szhLRkFMB8GA1UdIwQY MBaAFLMEDH9FHGFNfuuoLDKjmOh947jJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEt NWE3OGJhNjA5MWMxLzEvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82NjZlNjctMTU0Ni00MTNjLWI2YTEtNWE3OGJhNjA5MWMx LzEvc3dRTWYwVWNZVTEtNjZnc01xT1k2SDNqdU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepiZTeW2 j3w+RrDsUx1UHPaojmXBy3BV/zb3vsbKGZy+p1Z/tjaqlqwET/CRz2zxumT3I9lj tn/WzigL4bppBJGDJriA0o9TkcIJTAshEuP3pBpxhfBBpEI67rGNIfklg1F9ge3B bgj8vBf8aUnSqCKAy33ylKDLE4WecfPDl9Sk2cJr8tbHiP70KgB5SoAR2F1fSZao nhuMie2PxBIxnDKknM1SMGVPs6xpyu0ZLRs0xn2VflJRux+vV/0fcfdgLuM8EdLE sSHCPoo62hVvwtUvVPvjatWCNadFK2HvXv94inMF/wUafRrDBCXN0+AM0PHbxw+B jYm3pgELb8cAcw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:37 2026 by rpki-client