This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json) Hash identifier: JVpyctosiWNNcIh0lcxgnQBDWoZ9bfeJuSWAOHY29VI= Subject key identifier: DA:5E:E9:65:54:D5:DA:C2:6C:88:9A:84:B5:C2:AE:E6:C3:63:3F:67 Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Certificate serial: 019B38D7FF8023A472D1546628873AA7897A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft Manifest number: 0AF7 Signing time: Fri 19 Dec 2025 23:00:38 +0000 Manifest this update: Fri 19 Dec 2025 23:00:38 +0000 Manifest next update: Sat 20 Dec 2025 23:00:38 +0000 Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: /T1E2DTgEEhO81Z/ixHlTtN+qKQwP4GGq22/AfMne/I=) 2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:ff:80:23:a4:72:d1:54:66:28:87:3a:a7:89:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Validity Not Before: Dec 19 23:00:38 2025 GMT Not After : Dec 20 23:00:38 2025 GMT Subject: CN=da5ee96554d5dac26c889a84b5c2aee6c3633f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:0a:99:aa:5e:9f:64:87:3f:a0:72:b9:ae: f4:d2:ad:76:67:64:b4:b2:52:2e:a9:5b:0c:01:a1: 68:49:3c:29:b8:e8:53:1a:aa:69:3b:a1:34:2b:c7: bd:4c:91:44:dc:4a:a4:8b:bb:8d:df:21:3a:d4:aa: d9:26:a2:ee:e0:02:f3:f6:ab:5a:85:01:2c:af:4b: 8f:a5:bf:01:41:9f:8e:77:e4:6b:e4:3b:c8:84:b0: 95:48:89:fa:22:4e:94:74:9f:59:11:a6:5c:28:af: 18:9b:a2:95:d9:db:73:f0:c8:9a:39:c7:c6:e6:63: 87:ff:8e:80:7b:55:a5:01:56:ed:40:1a:82:d3:22: 03:1f:d3:5c:06:cd:58:ff:53:35:1f:cc:69:73:73: 8e:f0:46:89:96:bd:28:b7:14:2c:47:58:a2:5d:e4: 78:16:dc:3f:24:83:ff:30:47:28:7c:59:23:dc:ca: ac:f6:20:49:33:fd:f2:6d:de:5d:4e:20:89:e6:2f: f3:ff:09:41:f3:0e:50:72:11:f3:27:43:7c:55:93: 2a:0e:3a:2f:44:9f:38:ac:4d:59:1e:b7:66:60:ba: 4f:6a:a9:56:2b:cc:ee:a2:2c:71:5b:45:0b:85:ab: 7d:84:27:11:8f:3f:cc:6b:46:06:16:c4:eb:9f:02: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5E:E9:65:54:D5:DA:C2:6C:88:9A:84:B5:C2:AE:E6:C3:63:3F:67 X509v3 Authority Key Identifier: keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0c:aa:30:4b:e3:96:37:5a:84:cd:9d:a4:07:71:52:0e:4e: 83:c4:68:42:3c:c9:96:91:ac:73:df:71:ec:9d:71:99:bf:5d: 30:0a:bc:61:f5:85:81:51:c6:69:a2:ea:a0:0f:28:f6:73:43: 36:4c:b0:40:cf:1d:15:33:6d:ee:00:33:37:f9:86:30:ca:4f: 89:34:82:15:30:8b:d0:74:28:15:63:01:f4:fc:e8:c1:3f:80: 07:11:f5:90:31:95:b2:df:ae:14:82:87:42:97:4e:2f:25:74: 7c:24:33:7f:71:6d:55:51:79:64:b0:11:01:0a:64:41:cb:8b: 2e:f3:1f:fc:77:f4:84:b1:81:0f:6b:5b:fc:32:be:fe:06:ae: 8b:f3:98:56:8d:9d:02:22:8a:f0:50:be:51:3e:1e:76:51:34: 88:4c:80:31:f4:d9:48:f5:84:c2:c8:75:9f:3b:9f:c2:b1:93: 54:fd:6b:3f:97:01:68:40:bb:22:4f:da:b0:fc:21:8a:ec:1a: 79:84:f2:ab:65:74:c3:9d:81:4c:a2:ee:0d:bc:23:70:f6:44: f6:f2:32:20:12:b9:39:9b:7c:38:c3:11:1b:11:5b:e8:3f:51: bc:a2:40:bf:a6:12:d9:fc:29:86:17:bd:2c:c3:d1:a8:ea:2c: 70:ea:9d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/+AI6Ry0VRmKIc6p4l6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk MDVjNmYwHhcNMjUxMjE5MjMwMDM4WhcNMjUxMjIwMjMwMDM4WjAzMTEwLwYDVQQD EyhkYTVlZTk2NTU0ZDVkYWMyNmM4ODlhODRiNWMyYWVlNmMzNjMzZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksgKmapen2SHP6Byua700q12Z2S0 slIuqVsMAaFoSTwpuOhTGqppO6E0K8e9TJFE3Eqki7uN3yE61KrZJqLu4ALz9qta hQEsr0uPpb8BQZ+Od+Rr5DvIhLCVSIn6Ik6UdJ9ZEaZcKK8Ym6KV2dtz8MiaOcfG 5mOH/46Ae1WlAVbtQBqC0yIDH9NcBs1Y/1M1H8xpc3OO8EaJlr0otxQsR1iiXeR4 Ftw/JIP/MEcofFkj3Mqs9iBJM/3ybd5dTiCJ5i/z/wlB8w5QchHzJ0N8VZMqDjov RJ84rE1ZHrdmYLpPaqlWK8zuoixxW0ULhat9hCcRjz/Ma0YGFsTrnwI9owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpe6WVU1drCbIiahLXCrubDYz9nMB8GA1UdIwQY MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAyqMEvj ljdahM2dpAdxUg5Og8RoQjzJlpGsc99x7J1xmb9dMAq8YfWFgVHGaaLqoA8o9nND NkywQM8dFTNt7gAzN/mGMMpPiTSCFTCL0HQoFWMB9PzowT+ABxH1kDGVst+uFIKH QpdOLyV0fCQzf3FtVVF5ZLARAQpkQcuLLvMf/Hf0hLGBD2tb/DK+/gaui/OYVo2d AiKK8FC+UT4edlE0iEyAMfTZSPWEwsh1nzufwrGTVP1rP5cBaEC7Ik/asPwhiuwa eYTyq2V0w52BTKLuDbwjcPZE9vIyIBK5OZt8OMMRGxFb6D9RvKJAv6YS2fwphhe9 LMPRqOoscOqdMg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:26 2025 by rpki-client