This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json) Hash identifier: kGsdgpuOziye8l5afU1jAecie481W7uHnxV8lfswZns= Subject key identifier: FE:54:F9:A8:01:8B:2C:E2:3E:40:E1:9B:8C:B8:10:F2:9E:FE:08:A2 Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Certificate serial: 019B6CFC553F2D2E48C77758AE86D1F6A8BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft Manifest number: 043C Signing time: Tue 30 Dec 2025 02:00:34 +0000 Manifest this update: Tue 30 Dec 2025 02:00:34 +0000 Manifest next update: Wed 31 Dec 2025 02:00:34 +0000 Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=) 2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: X2H9QBoUadpIPgsp7XZIaCtxVNiRr95RaGtOWMsNbUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:55:3f:2d:2e:48:c7:77:58:ae:86:d1:f6:a8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Validity Not Before: Dec 30 02:00:34 2025 GMT Not After : Dec 31 02:00:34 2025 GMT Subject: CN=fe54f9a8018b2ce23e40e19b8cb810f29efe08a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:95:9a:26:9a:63:fd:ba:ff:e5:68:d8:61: 6a:f6:75:f5:63:a2:97:73:1a:27:4e:d7:08:6a:ad: 48:cf:d7:1a:e6:e9:5e:d5:fe:6f:b7:30:02:f1:9a: 3d:6f:24:c4:0b:65:69:1c:54:9b:ad:2f:73:09:db: b3:c2:cb:ee:a3:6b:6c:01:b2:ff:d5:63:b3:fb:09: f6:92:53:dc:64:c6:cf:a2:4b:d4:84:41:9f:62:5a: e1:5e:c5:8c:ee:b2:11:ca:c5:0d:fa:77:c0:ef:30: 8e:e1:da:e1:a2:85:de:86:66:90:e6:e3:ee:17:40: c0:35:00:9a:f4:0d:68:2f:0b:4f:a1:b5:2c:ce:a7: 8d:f2:f4:96:d8:45:6d:0d:58:4e:65:9d:09:a6:c4: 24:8b:aa:a2:84:1d:35:d4:49:16:5b:b8:3c:e4:24: 69:ec:8d:3a:4b:a0:92:ee:47:37:69:40:7b:6a:90: 24:b8:6c:04:71:5f:a2:17:22:f5:e4:55:6e:2a:6f: 99:02:bf:5a:66:39:4c:27:aa:86:48:0a:05:c1:0f: f1:01:0c:85:4c:bb:33:b9:41:dc:0b:01:ab:d1:70: e5:f7:87:18:5e:d3:39:0e:27:45:af:69:54:4c:d3: 94:87:e5:8f:0b:62:29:59:35:42:94:de:1b:ce:eb: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:F9:A8:01:8B:2C:E2:3E:40:E1:9B:8C:B8:10:F2:9E:FE:08:A2 X509v3 Authority Key Identifier: keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:94:10:03:ff:c3:bd:65:61:60:cd:f3:e9:af:4c:8f:d0:e7: a1:c5:07:35:88:32:6e:f9:19:a8:56:6b:04:56:2b:4d:a4:51: 53:ea:61:cb:0f:82:ab:93:eb:f0:37:ed:e1:5f:e7:c5:6c:d1: 3f:58:b6:ec:5e:f7:99:f4:5d:72:37:34:56:c8:75:88:10:e1: 8a:09:93:6d:c7:74:24:68:51:cd:bb:08:3a:99:fe:81:28:06: 0d:56:1c:73:55:45:6a:ae:53:dd:ea:80:27:ab:0d:23:3f:63: 0c:f2:06:56:b4:d3:30:77:c0:83:1c:ad:fd:3e:da:05:5c:b1: b5:5b:6a:53:13:b8:b3:db:7d:27:91:1a:ba:9d:5c:d1:42:0d: b3:23:35:7a:e6:2a:d5:f0:63:9a:91:28:07:d0:70:ae:d7:43: fe:f4:4e:79:6b:50:89:00:0d:19:05:97:89:30:bb:10:bf:34: 55:25:b6:c5:13:7a:13:12:89:f9:28:31:5a:aa:40:f0:e2:60: 1f:f1:da:e3:9f:ff:e5:bf:8e:6e:6b:f7:40:f9:f6:4a:99:36: 2d:d8:57:a5:39:1c:eb:cb:b2:29:13:d4:97:9a:1e:e2:7c:e3: 0f:8c:d5:14:34:af:af:77:bf:3a:4a:ad:76:a4:ce:3a:0a:89: 2f:1c:65:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/FU/LS5Ix3dYrobR9qi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOWZkMmNkZGY0YjQ0ZGU3OWE1YmZjOGNhMTlhNTZmNTUy ZWI0ZTgwHhcNMjUxMjMwMDIwMDM0WhcNMjUxMjMxMDIwMDM0WjAzMTEwLwYDVQQD EyhmZTU0ZjlhODAxOGIyY2UyM2U0MGUxOWI4Y2I4MTBmMjllZmUwOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yCVmiaaY/26/+Vo2GFq9nX1Y6KX cxonTtcIaq1Iz9ca5ule1f5vtzAC8Zo9byTEC2VpHFSbrS9zCduzwsvuo2tsAbL/ 1WOz+wn2klPcZMbPokvUhEGfYlrhXsWM7rIRysUN+nfA7zCO4drhooXehmaQ5uPu F0DANQCa9A1oLwtPobUszqeN8vSW2EVtDVhOZZ0JpsQki6qihB011EkWW7g85CRp 7I06S6CS7kc3aUB7apAkuGwEcV+iFyL15FVuKm+ZAr9aZjlMJ6qGSAoFwQ/xAQyF TLszuUHcCwGr0XDl94cYXtM5DidFr2lUTNOUh+WPC2IpWTVClN4bzus53QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5U+agBiyziPkDhm4y4EPKe/giiMB8GA1UdIwQY MBaAFIqf0s3fS0TeeaW/yMoZpW9VLrToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgt NDRlZjU2NzRmZTMwLzEvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgtNDRlZjU2NzRmZTMw LzEvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpQQA//D vWVhYM3z6a9Mj9DnocUHNYgybvkZqFZrBFYrTaRRU+phyw+Cq5Pr8Dft4V/nxWzR P1i27F73mfRdcjc0Vsh1iBDhigmTbcd0JGhRzbsIOpn+gSgGDVYcc1VFaq5T3eqA J6sNIz9jDPIGVrTTMHfAgxyt/T7aBVyxtVtqUxO4s9t9J5Eaup1c0UINsyM1euYq 1fBjmpEoB9BwrtdD/vROeWtQiQANGQWXiTC7EL80VSW2xRN6ExKJ+SgxWqpA8OJg H/Ha45//5b+Obmv3QPn2Spk2LdhXpTkc68uyKRPUl5oe4nzjD4zVFDSvr3e/Okqt dqTOOgqJLxxliQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:53:19 2025 by rpki-client