This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft File: swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json) Hash identifier: GqyM16VSTquXr94kEx0TPhERMNSdoBOiJDTU8zK0M+k= Subject key identifier: 6C:53:A9:BC:67:94:35:1A:FC:E6:DE:49:22:C3:95:BA:D9:B3:A0:BC Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019B1BAA3AA8780B3936F42F098D41884CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft Manifest number: 1478 Signing time: Sun 14 Dec 2025 07:01:39 +0000 Manifest this update: Sun 14 Dec 2025 07:01:39 +0000 Manifest next update: Mon 15 Dec 2025 07:01:39 +0000 Files and hashes: 1: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=) 2: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=) 3: NzknDmn-TkBLhhCh3FNFS-0Flmg.roa (hash: s7se3/xdnMDjGZBCBbuaiotf7JHLKV6q0JTbfM402gw=) 4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=) 5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=) 6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: PjGK8QTlzG9hZcyeH2LNfElercy9qHkAA3s4BCExJTE=) 7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:3a:a8:78:0b:39:36:f4:2f:09:8d:41:88:4c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Dec 14 07:01:39 2025 GMT Not After : Dec 15 07:01:39 2025 GMT Subject: CN=6c53a9bc6794351afce6de4922c395bad9b3a0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:3c:d4:63:32:9c:1f:e0:e1:f4:94:2c:87: c4:a5:e6:97:80:da:75:04:99:8d:5d:a2:24:53:fe: e8:ee:bc:20:2e:d0:71:1f:19:51:c9:91:56:66:4b: a1:c1:37:42:0c:d7:09:a1:ba:b4:1b:95:14:de:76: c1:27:1f:2a:da:a3:9a:1e:44:17:a7:4e:97:1d:4e: c6:5a:32:45:da:ad:3e:27:2d:93:78:b5:40:ea:bd: 4f:35:2c:f1:3b:79:bb:bc:bc:c3:b5:22:49:e0:5c: 23:f6:d2:e8:34:74:c4:ad:6b:42:98:af:e7:4b:57: ad:9c:d8:44:70:66:9d:5c:ce:a0:49:05:67:2f:be: 31:2f:ce:1a:e6:16:d1:34:cf:0f:25:d0:4c:5d:f5: 0a:4d:6a:01:37:7e:e7:2f:4e:50:05:53:d1:0c:5c: 3c:38:78:e5:d1:3f:12:c6:66:20:ca:5e:c1:80:c1: 58:53:50:0d:e1:af:d3:01:28:b0:36:bf:9d:31:29: b8:8b:98:92:3d:94:56:4a:86:f9:0b:4d:e2:01:7c: d0:fc:8f:f7:a4:03:2b:10:a1:ea:b0:bd:f2:32:48: d6:27:2f:ff:f4:23:53:fa:b8:18:f9:70:56:46:a1: 97:52:6c:a6:eb:2c:77:34:81:51:95:3d:a7:b9:b1: 52:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:53:A9:BC:67:94:35:1A:FC:E6:DE:49:22:C3:95:BA:D9:B3:A0:BC X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:42:84:13:12:e1:77:1f:1c:bd:ef:7f:92:e5:3d:67:36:55: 20:60:77:7b:5d:87:5d:5e:8f:61:de:7d:3a:d0:c3:84:b8:d5: a9:33:7d:e2:6f:e7:77:27:82:83:65:75:6e:e1:47:81:00:5f: 2d:45:f1:39:09:36:91:e1:f5:8c:25:c6:38:23:57:47:61:36: 98:3c:da:c3:8e:0b:28:ce:50:b5:bb:a4:eb:2f:b4:e2:ea:ee: d7:9a:0a:3e:44:70:34:48:11:1e:a3:71:9e:46:42:ff:e6:8d: 6f:d9:4c:42:10:cb:ca:03:07:1e:d1:64:d0:68:9f:19:02:75: 5e:ca:b2:24:67:09:ad:8d:4c:2f:08:65:07:56:4f:90:6f:87: c7:54:80:c5:c7:09:9d:2e:87:fa:f6:f1:73:44:ad:eb:f6:3e: 3f:56:f4:e6:0e:a6:d3:4d:0f:05:ec:2a:7c:c4:80:97:fe:a3: 8e:d2:21:84:8f:c5:28:4a:e9:07:d4:7e:36:34:09:71:54:fa: 18:6c:5b:18:08:84:cc:d7:59:5f:fa:34:d8:3a:b9:64:8e:3c: b9:01:7a:7c:c7:0f:10:53:09:b3:2a:9b:f5:e1:90:69:57:25: 08:c1:13:79:de:40:ec:11:d6:7a:36:29:ea:df:f8:71:43:98: 2a:d6:4f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqjqoeAs5NvQvCY1BiEymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjUxMjE0MDcwMTM5WhcNMjUxMjE1MDcwMTM5WjAzMTEwLwYDVQQD Eyg2YzUzYTliYzY3OTQzNTFhZmNlNmRlNDkyMmMzOTViYWQ5YjNhMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQI81GMynB/g4fSULIfEpeaXgNp1 BJmNXaIkU/7o7rwgLtBxHxlRyZFWZkuhwTdCDNcJobq0G5UU3nbBJx8q2qOaHkQX p06XHU7GWjJF2q0+Jy2TeLVA6r1PNSzxO3m7vLzDtSJJ4Fwj9tLoNHTErWtCmK/n S1etnNhEcGadXM6gSQVnL74xL84a5hbRNM8PJdBMXfUKTWoBN37nL05QBVPRDFw8 OHjl0T8SxmYgyl7BgMFYU1AN4a/TASiwNr+dMSm4i5iSPZRWSob5C03iAXzQ/I/3 pAMrEKHqsL3yMkjWJy//9CNT+rgY+XBWRqGXUmym6yx3NIFRlT2nubFSqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxTqbxnlDUa/ObeSSLDlbrZs6C8MB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUKEExLh dx8cve9/kuU9ZzZVIGB3e12HXV6PYd59OtDDhLjVqTN94m/ndyeCg2V1buFHgQBf LUXxOQk2keH1jCXGOCNXR2E2mDzaw44LKM5Qtbuk6y+04uru15oKPkRwNEgRHqNx nkZC/+aNb9lMQhDLygMHHtFk0GifGQJ1XsqyJGcJrY1MLwhlB1ZPkG+Hx1SAxccJ nS6H+vbxc0St6/Y+P1b05g6m000PBewqfMSAl/6jjtIhhI/FKErpB9R+NjQJcVT6 GGxbGAiEzNdZX/o02Dq5ZI48uQF6fMcPEFMJsyqb9eGQaVclCMETed5A7BHWejYp 6t/4cUOYKtZPYw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:36 2025 by rpki-client