This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json) Hash identifier: Z57NywPgsbww06dVgghujnMoVy+VgCrl+wI9ahtIob4= Subject key identifier: 2B:2A:02:50:8B:74:A9:D0:44:F0:20:D7:B9:1B:62:A4:32:3B:AD:DC Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Certificate serial: 019B3945F11814FB91CF9008733998A5F1BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft Manifest number: 0677 Signing time: Sat 20 Dec 2025 01:00:43 +0000 Manifest this update: Sat 20 Dec 2025 01:00:43 +0000 Manifest next update: Sun 21 Dec 2025 01:00:43 +0000 Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=) 2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=) 3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: hmNOdxNjUix1Gx2Dxrp40HBHrXLS5V7ENt4ZMjyzb7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:f1:18:14:fb:91:cf:90:08:73:39:98:a5:f1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Validity Not Before: Dec 20 01:00:43 2025 GMT Not After : Dec 21 01:00:43 2025 GMT Subject: CN=2b2a02508b74a9d044f020d7b91b62a4323baddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:58:3d:9e:5c:93:75:e1:13:64:99:97:91: 4b:49:1e:1d:bb:31:dd:c4:3d:f6:02:53:e0:fb:f7: 2d:b8:27:10:ec:bd:92:fc:99:a0:ea:97:70:af:9a: e6:1e:8e:2a:3e:04:a5:d6:31:4a:1c:71:e7:94:f2: 3f:c3:5a:03:ff:eb:a1:c2:c3:62:49:eb:9c:fb:31: 74:33:17:b1:09:7a:60:6b:34:70:96:d8:02:ba:ec: 3b:2b:12:e1:61:b1:36:fa:cc:ca:85:67:51:59:d2: 0b:83:6e:5b:b8:49:d1:a0:32:7f:1f:bb:bd:8e:57: 2c:30:5c:77:35:0f:17:c6:95:9f:cc:e4:b8:26:28: b2:ba:1d:01:fd:ce:55:f4:89:75:0a:cc:8a:90:f9: e2:eb:56:30:93:19:b4:b5:72:f6:04:f5:bf:d1:7f: 7d:c9:62:60:00:e0:57:4c:df:87:91:28:8b:d4:69: e0:cc:2f:c8:e4:b8:55:3e:cc:41:91:2d:b2:e2:47: b4:35:aa:f2:a2:b1:6d:2c:34:90:43:4b:46:a1:27: 23:8f:0e:77:43:47:0a:13:42:a8:04:c0:28:1f:db: 78:06:90:4f:6b:07:c8:99:c8:38:98:05:96:7f:f2: a7:03:b9:27:65:ce:18:e7:a3:05:35:bc:45:30:6b: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2A:02:50:8B:74:A9:D0:44:F0:20:D7:B9:1B:62:A4:32:3B:AD:DC X509v3 Authority Key Identifier: keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:14:c3:55:64:82:78:87:3a:f7:d1:4d:5d:7d:44:fd:41:4a: 01:cb:ec:34:d4:b0:21:a7:2d:e6:ca:8e:44:cc:19:78:f0:82: 8a:3f:4f:b5:91:bc:4e:ef:f8:c2:c5:af:f0:61:d8:2d:4f:04: 14:a4:e1:56:2e:42:9d:c8:b3:74:d6:95:11:26:25:15:bb:37: 2d:8f:c3:b0:8d:1e:b2:47:2e:d3:88:20:19:20:41:fd:69:0f: eb:84:fb:2d:ec:7f:18:df:c5:a0:1e:4c:c0:93:bb:41:b3:85: b9:4f:84:69:a4:d6:40:c7:6a:10:fb:77:76:eb:49:ed:b7:9b: 3f:5a:7e:1d:06:3a:36:c2:40:65:e1:32:c8:62:93:fd:2c:99: 21:c2:2c:61:aa:b5:cc:a7:1b:b9:a6:b1:98:98:6c:1d:47:2c: 6d:a5:15:6f:72:3a:4a:ee:a5:f4:ff:05:1a:a9:b1:21:62:fd: cb:c9:cc:be:36:ac:db:c6:a0:f5:65:fa:21:de:c7:d8:47:68: 84:4b:39:1d:fa:28:9f:a7:97:06:67:9d:e2:02:5a:f4:2a:40: 51:7c:ef:f0:d7:7d:a7:15:47:27:94:30:51:2f:89:c0:64:f0: f7:46:fa:ab:fb:e5:1c:65:18:5b:6a:d7:91:7b:13:a0:58:d2: ed:d5:66:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RfEYFPuRz5AIczmYpfG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl NTdmODgwHhcNMjUxMjIwMDEwMDQzWhcNMjUxMjIxMDEwMDQzWjAzMTEwLwYDVQQD EygyYjJhMDI1MDhiNzRhOWQwNDRmMDIwZDdiOTFiNjJhNDMyM2JhZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTNYPZ5ck3XhE2SZl5FLSR4duzHd xD32AlPg+/ctuCcQ7L2S/Jmg6pdwr5rmHo4qPgSl1jFKHHHnlPI/w1oD/+uhwsNi Seuc+zF0MxexCXpgazRwltgCuuw7KxLhYbE2+szKhWdRWdILg25buEnRoDJ/H7u9 jlcsMFx3NQ8XxpWfzOS4Jiiyuh0B/c5V9Il1CsyKkPni61Ywkxm0tXL2BPW/0X99 yWJgAOBXTN+HkSiL1GngzC/I5LhVPsxBkS2y4ke0NaryorFtLDSQQ0tGoScjjw53 Q0cKE0KoBMAoH9t4BpBPawfImcg4mAWWf/KnA7knZc4Y56MFNbxFMGsNHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsqAlCLdKnQRPAg17kbYqQyO63cMB8GA1UdIwQY MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut YTg5NzU5ZDcwNzFjLzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRTDVWSC eIc699FNXX1E/UFKAcvsNNSwIact5sqORMwZePCCij9PtZG8Tu/4wsWv8GHYLU8E FKThVi5CncizdNaVESYlFbs3LY/DsI0eskcu04ggGSBB/WkP64T7Lex/GN/FoB5M wJO7QbOFuU+EaaTWQMdqEPt3dutJ7bebP1p+HQY6NsJAZeEyyGKT/SyZIcIsYaq1 zKcbuaaxmJhsHUcsbaUVb3I6Su6l9P8FGqmxIWL9y8nMvjas28ag9WX6Id7H2Edo hEs5Hfoon6eXBmed4gJa9CpAUXzv8Nd9pxVHJ5QwUS+JwGTw90b6q/vlHGUYW2rX kXsToFjS7dVmCw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:05:29 2025 by rpki-client