This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft File: swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json) Hash identifier: /sGUW+oZENedSrnXQ/rJcZcbfTQyuBdVz1hphpUh418= Subject key identifier: 5B:58:13:03:78:D9:21:E2:62:1E:24:B2:88:46:5E:E7:54:A5:82:FA Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019C06D6EE612A0465029C3FC036D76DF574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft Manifest number: 14F3 Signing time: Wed 28 Jan 2026 23:01:14 +0000 Manifest this update: Wed 28 Jan 2026 23:01:14 +0000 Manifest next update: Thu 29 Jan 2026 23:01:14 +0000 Files and hashes: 1: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (hash: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E=) 2: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (hash: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw=) 3: Eu3pOBC36Y-pw7OIVyQXZFyVHrQ.roa (hash: b+c4P8KvAFa/U6KE4xCMpIf8v/6ZAEwKWpXn3TBS6Qk=) 4: dwhUyoSSaDK38txtGg0jSa0q1jg.roa (hash: k7UVyXGKucPb2F8aYlQNpyHGS55kGYMFp7t5q8ColOk=) 5: nbEyzwbyFXZciM8F-9e1dkIzrao.roa (hash: YX1CEGsLriayTcWNcXvhaE3p5TpYkjHzE5qRO+3Ix9o=) 6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: QQAeXgjymqj0EvuUOIpiTenOLICLm9XoOwkmb3Nx+wo=) 7: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (hash: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:d6:ee:61:2a:04:65:02:9c:3f:c0:36:d7:6d:f5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Jan 28 23:01:14 2026 GMT Not After : Jan 29 23:01:14 2026 GMT Subject: CN=5b58130378d921e2621e24b288465ee754a582fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:fb:5d:d3:17:5d:78:f8:fe:24:5f:96:fc: 47:c2:90:46:bc:d5:5d:e8:78:be:a4:e5:11:6e:0c: 3c:f8:56:9a:7b:62:a4:33:6a:52:c2:11:57:29:34: 06:39:ad:da:9b:1e:cc:2e:31:2d:60:15:6d:4d:36: e1:00:a9:78:cd:1f:ae:76:6f:3d:e9:37:0f:1c:8a: 22:4c:9a:62:0a:a0:2d:e0:a5:60:eb:10:f3:bc:28: c7:5e:61:2b:40:23:b9:b1:8e:88:da:10:e9:df:a3: df:c3:de:a0:f5:77:f1:5a:c8:b0:0d:8d:d8:8c:d8: a3:52:03:f2:09:c3:2b:d3:b3:1f:f2:20:61:4b:c5: 18:47:3f:a1:20:79:00:a6:9b:ff:28:2b:e6:ec:86: 3c:3e:b1:ca:8b:d8:8a:57:ef:30:ab:89:06:2b:c2: 29:c1:70:a8:f6:d2:da:27:af:81:c5:17:f0:5a:49: e4:8c:50:94:5a:57:0e:66:b2:f8:0d:26:53:57:af: bd:fa:13:2a:5e:99:7d:43:35:3c:c7:66:cd:4e:cd: ca:2c:8e:c1:5a:64:57:76:59:de:4f:60:54:66:d1: f8:04:84:4c:ba:ff:f4:93:ac:7b:42:65:84:ec:8e: dd:5f:05:fc:86:75:7a:8e:a0:41:5a:3b:53:df:4c: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:58:13:03:78:D9:21:E2:62:1E:24:B2:88:46:5E:E7:54:A5:82:FA X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7c:83:22:43:a8:0f:1e:dc:16:fc:45:aa:76:26:bd:24:44: 62:0b:ae:39:58:09:c0:4c:19:27:62:23:73:f8:9b:5c:29:00: 2a:34:eb:40:1f:77:2c:4d:d4:12:2d:7f:02:e9:dd:e5:b1:bc: 50:b7:1b:af:81:4d:12:9d:7e:00:f6:c8:c1:fc:c3:56:51:0e: b9:34:2f:b6:14:17:44:f9:eb:07:99:9b:d1:53:00:dd:f4:5f: f7:96:ff:9f:8e:08:bd:f1:32:af:25:fc:b8:a2:fc:3f:e1:d4: 64:e2:a2:c6:96:af:de:b8:7a:b6:a2:99:c3:e7:85:52:22:5f: d7:f5:a6:3b:2d:07:09:43:2f:71:22:bc:87:5f:7a:91:bc:f5: 73:f4:8c:0f:91:e9:99:9f:f9:cc:91:61:15:c2:6c:1f:0f:40: c7:1a:ce:00:82:b1:53:7d:79:45:eb:36:f3:e1:e0:9b:de:7a: b1:69:3f:93:11:cf:91:d2:43:13:72:cb:63:4f:e6:b2:71:be: 15:dc:d7:30:1b:44:f8:0e:e5:d4:a5:b0:80:4f:00:ca:9d:f8: e5:c5:6c:b0:b5:67:26:b2:14:19:eb:57:2c:43:11:e4:f8:b8: 0c:a7:d9:78:b0:35:ae:8e:29:36:50:cc:52:7a:83:f9:a7:b4: ad:ae:22:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwG1u5hKgRlApw/wDbXbfV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjYwMTI4MjMwMTE0WhcNMjYwMTI5MjMwMTE0WjAzMTEwLwYDVQQD Eyg1YjU4MTMwMzc4ZDkyMWUyNjIxZTI0YjI4ODQ2NWVlNzU0YTU4MmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog77XdMXXXj4/iRflvxHwpBGvNVd 6Hi+pOURbgw8+Faae2KkM2pSwhFXKTQGOa3amx7MLjEtYBVtTTbhAKl4zR+udm89 6TcPHIoiTJpiCqAt4KVg6xDzvCjHXmErQCO5sY6I2hDp36Pfw96g9XfxWsiwDY3Y jNijUgPyCcMr07Mf8iBhS8UYRz+hIHkAppv/KCvm7IY8PrHKi9iKV+8wq4kGK8Ip wXCo9tLaJ6+BxRfwWknkjFCUWlcOZrL4DSZTV6+9+hMqXpl9QzU8x2bNTs3KLI7B WmRXdlneT2BUZtH4BIRMuv/0k6x7QmWE7I7dXwX8hnV6jqBBWjtT30zkFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtYEwN42SHiYh4ksohGXudUpYL6MB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3yDIkOo Dx7cFvxFqnYmvSREYguuOVgJwEwZJ2Ijc/ibXCkAKjTrQB93LE3UEi1/Aund5bG8 ULcbr4FNEp1+APbIwfzDVlEOuTQvthQXRPnrB5mb0VMA3fRf95b/n44IvfEyryX8 uKL8P+HUZOKixpav3rh6tqKZw+eFUiJf1/WmOy0HCUMvcSK8h196kbz1c/SMD5Hp mZ/5zJFhFcJsHw9AxxrOAIKxU315Res28+Hgm956sWk/kxHPkdJDE3LLY0/msnG+ FdzXMBtE+A7l1KWwgE8Ayp345cVssLVnJrIUGetXLEMR5Pi4DKfZeLA1ro4pNlDM UnqD+ae0ra4iFw== -----END CERTIFICATE-----Generated at Thu Jan 29 07:40:37 2026 by rpki-client