This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json) Hash identifier: 7hHOK94WbxVF8jU2yuW0w3enh1+271ZoTH+9LxFIzsY= Subject key identifier: 56:0A:57:72:97:21:05:5B:25:07:2F:19:48:F8:0C:1C:E3:D5:99:D0 Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Certificate serial: 019B4C282BE412DAFE7DBD2380156BBF1AEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft Manifest number: 042B Signing time: Tue 23 Dec 2025 17:00:59 +0000 Manifest this update: Tue 23 Dec 2025 17:00:59 +0000 Manifest next update: Wed 24 Dec 2025 17:00:59 +0000 Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=) 2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: lMKDTLCkEO7Gi3RiG/VFI/oJWHEaZpPhy/8csYn/Q4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:2b:e4:12:da:fe:7d:bd:23:80:15:6b:bf:1a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Validity Not Before: Dec 23 17:00:59 2025 GMT Not After : Dec 24 17:00:59 2025 GMT Subject: CN=560a57729721055b25072f1948f80c1ce3d599d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:29:45:cd:f6:c0:28:9b:9e:eb:9c:9b:df: 2d:2d:81:b1:22:4b:65:13:65:b8:f9:c8:2a:33:c0: 9b:06:de:98:e9:08:cd:83:89:1a:65:fb:08:d1:c6: b8:61:11:3b:20:a1:aa:7f:b2:db:08:67:8d:dd:ea: 7d:7e:65:d0:4b:e6:ee:c5:da:3e:2d:88:fa:b7:00: 18:b7:ce:9b:d3:a5:75:b6:01:ac:71:52:50:74:f5: 43:40:af:3f:5a:85:ba:96:a9:a7:3d:c8:ca:8c:cd: ce:69:76:b5:79:0b:2a:80:ba:be:10:24:b5:1b:98: 19:c9:30:d2:3d:8b:15:31:ec:d2:d3:8b:7c:c9:ed: a2:df:29:47:17:2e:dc:cd:fb:1a:c1:3e:d9:ed:b6: f5:38:9d:b6:f3:76:5c:d0:de:fb:95:9f:7e:d8:fb: 18:32:f0:b3:5a:c9:41:69:2a:b9:e8:89:86:2f:7c: f9:f2:fb:3d:c1:5f:ad:9f:ac:42:ae:d3:9d:97:03: 0a:8d:45:93:b3:55:f4:9b:4f:23:a2:f0:f2:ab:b1: e3:61:18:27:61:06:5b:03:f5:85:c3:e4:1c:ef:f0: f8:e8:ff:49:6c:fe:bf:45:62:7a:ad:a6:83:f1:f8: c3:04:30:90:fd:61:ed:5d:8f:a9:44:25:13:5e:48: 32:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0A:57:72:97:21:05:5B:25:07:2F:19:48:F8:0C:1C:E3:D5:99:D0 X509v3 Authority Key Identifier: keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:de:96:84:5a:38:91:0f:1b:5a:d3:71:45:95:11:a7:af:6f: 4d:e1:c3:6b:bb:a1:26:b2:72:ba:0e:0d:5a:c1:12:34:58:5d: 47:8d:71:e6:38:1c:7f:0c:45:6b:ad:a5:a2:ba:99:fe:e1:77: 91:b4:b1:e7:ca:01:a3:90:e4:c2:8d:fa:e8:84:05:ea:44:46: 4a:1a:8c:ca:60:96:6c:b0:4c:f2:55:70:25:b9:66:e2:ac:22: a5:ed:70:e9:a6:ad:2a:9b:f1:93:64:f2:9f:44:36:41:6c:66: 10:f7:f1:82:d6:08:92:78:e0:cd:a3:a3:d3:4e:ce:7b:82:f4: 6b:2b:47:19:ae:dc:c4:27:aa:b2:98:b5:da:c2:93:bf:ee:58: ed:fb:38:0e:94:e4:de:c5:67:9c:f9:e4:c7:35:7e:3b:2c:3d: ae:de:58:c0:16:98:97:e5:f0:a8:05:4a:bf:df:9d:06:2c:9b: 46:76:6d:8d:e5:6c:85:d0:ea:a3:22:bb:2c:0e:db:6c:42:8b: 0c:8f:00:ef:85:55:4e:8f:8c:5f:72:b8:a0:c9:c1:7d:1b:a2: bf:1e:7b:1b:1d:c6:27:4f:85:67:ba:26:26:8a:38:78:6c:be: 33:00:7e:07:2b:41:19:3a:50:f4:a5:cd:07:21:fa:23:ce:3e: 7c:7f:e1:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKCvkEtr+fb0jgBVrvxruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOWZkMmNkZGY0YjQ0ZGU3OWE1YmZjOGNhMTlhNTZmNTUy ZWI0ZTgwHhcNMjUxMjIzMTcwMDU5WhcNMjUxMjI0MTcwMDU5WjAzMTEwLwYDVQQD Eyg1NjBhNTc3Mjk3MjEwNTViMjUwNzJmMTk0OGY4MGMxY2UzZDU5OWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+gpRc32wCibnuucm98tLYGxIktl E2W4+cgqM8CbBt6Y6QjNg4kaZfsI0ca4YRE7IKGqf7LbCGeN3ep9fmXQS+buxdo+ LYj6twAYt86b06V1tgGscVJQdPVDQK8/WoW6lqmnPcjKjM3OaXa1eQsqgLq+ECS1 G5gZyTDSPYsVMezS04t8ye2i3ylHFy7czfsawT7Z7bb1OJ2283Zc0N77lZ9+2PsY MvCzWslBaSq56ImGL3z58vs9wV+tn6xCrtOdlwMKjUWTs1X0m08jovDyq7HjYRgn YQZbA/WFw+Qc7/D46P9JbP6/RWJ6raaD8fjDBDCQ/WHtXY+pRCUTXkgyEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYKV3KXIQVbJQcvGUj4DBzj1ZnQMB8GA1UdIwQY MBaAFIqf0s3fS0TeeaW/yMoZpW9VLrToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgt NDRlZjU2NzRmZTMwLzEvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgtNDRlZjU2NzRmZTMw LzEvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkd6WhFo4 kQ8bWtNxRZURp69vTeHDa7uhJrJyug4NWsESNFhdR41x5jgcfwxFa62lorqZ/uF3 kbSx58oBo5Dkwo366IQF6kRGShqMymCWbLBM8lVwJblm4qwipe1w6aatKpvxk2Ty n0Q2QWxmEPfxgtYIknjgzaOj007Oe4L0aytHGa7cxCeqspi12sKTv+5Y7fs4DpTk 3sVnnPnkxzV+Oyw9rt5YwBaYl+XwqAVKv9+dBiybRnZtjeVshdDqoyK7LA7bbEKL DI8A74VVTo+MX3K4oMnBfRuivx57Gx3GJ0+FZ7omJoo4eGy+MwB+BytBGTpQ9KXN ByH6I84+fH/hPA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:33:15 2025 by rpki-client