This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json) Hash identifier: IhFwQ14RZE1xJ/m2S6TcKFWoRw5sMt9O+lWvnVLlmLg= Subject key identifier: DE:E8:87:A4:48:39:09:16:E8:DB:30:C7:96:85:C5:99:8D:22:3D:29 Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Certificate serial: 019B3C7E4302F2684679B8E5AAA3BA8703EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft Manifest number: 0AC6 Signing time: Sat 20 Dec 2025 16:01:06 +0000 Manifest this update: Sat 20 Dec 2025 16:01:06 +0000 Manifest next update: Sun 21 Dec 2025 16:01:06 +0000 Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: mtS+nopSM7hYjGu75EM2L9ToxhPk1voHPcVvyOxrTYk=) 2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:43:02:f2:68:46:79:b8:e5:aa:a3:ba:87:03:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Validity Not Before: Dec 20 16:01:06 2025 GMT Not After : Dec 21 16:01:06 2025 GMT Subject: CN=dee887a448390916e8db30c79685c5998d223d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:06:cc:ff:82:58:9d:71:3c:4e:8d:57:73: 6c:99:87:58:7b:0d:8a:39:7d:cd:91:e9:83:3f:00: c6:6c:70:4c:92:9f:19:51:df:00:91:55:8e:2c:d7: 51:0e:9b:c7:5b:6b:b5:50:4b:f8:79:de:7d:7c:99: d9:d4:a1:4d:3d:b0:b1:12:60:92:3a:1c:06:47:81: 1f:1b:40:87:85:37:1a:1f:fe:61:52:f4:14:44:e2: a8:a1:55:01:0c:3c:6c:66:71:4a:e8:e7:91:56:ed: a0:7e:13:4b:5b:a0:dd:df:f1:02:81:e8:8d:6e:71: 4e:ed:20:1c:5f:e9:5f:60:1c:c2:c9:f6:3b:db:64: 80:08:08:12:41:31:5d:9f:04:8e:6c:0c:bb:d2:c2: f3:06:27:1f:51:2b:ed:f6:74:94:72:cc:4a:47:38: 4b:a2:45:cd:7d:6f:14:6b:ab:62:6d:d0:61:bd:cd: b1:2e:b2:43:92:4b:26:54:17:71:9d:1b:bf:b0:4e: 21:c7:ad:59:9d:14:1a:3c:95:3d:4c:2f:c0:82:6f: 1f:66:57:df:28:02:1d:8d:8b:4c:33:76:dd:99:9a: d0:d1:cc:fb:dc:df:d6:71:33:9f:63:c5:33:7b:f4: 03:e2:a6:e1:db:20:36:26:4b:b1:20:9f:e1:df:66: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E8:87:A4:48:39:09:16:E8:DB:30:C7:96:85:C5:99:8D:22:3D:29 X509v3 Authority Key Identifier: keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:73:38:c5:79:18:6a:94:42:6e:25:02:2f:1a:d5:01:47:be: 78:20:61:2d:40:f3:8f:7e:f2:99:e0:9b:5b:ac:da:59:09:a6: 65:d4:fc:fa:68:1d:ca:23:8d:ba:ee:23:56:da:1a:3d:27:6d: 3a:06:31:f2:fa:28:78:65:9f:43:08:6b:eb:27:a1:09:09:6d: 15:90:6f:de:ef:49:86:9d:18:56:5f:59:4c:3c:b7:a5:e6:c1: ea:f4:5f:17:59:a8:38:24:db:a0:4a:82:59:bb:2b:14:7e:19: fe:34:c3:95:fa:58:97:99:7e:14:7f:1e:4d:ed:af:ef:2c:50: c9:9f:a9:dd:18:f9:12:51:53:9b:d1:a7:67:fa:f1:d8:37:52: 3a:bb:bc:f5:68:bd:d1:c5:c8:5c:ef:8e:4b:9a:f4:f9:bc:2f: 7d:a3:ed:40:e2:32:7f:e6:e8:93:e0:ff:d1:34:5d:06:7f:d9: 6e:41:37:1f:61:90:8c:b7:a1:66:3f:28:4f:e4:fb:0f:b3:8d: 29:2b:51:e1:42:31:6b:c9:b2:e1:47:f0:d9:87:ae:fc:bd:34: 1a:ee:2b:ea:26:21:ad:60:61:e6:4e:a5:a7:13:38:90:d4:31: 30:24:ae:b0:23:04:7b:84:6d:fc:b9:fb:9d:8a:ce:52:f0:96: 1e:e8:c6:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fkMC8mhGebjlqqO6hwPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4 YTdjODEwHhcNMjUxMjIwMTYwMTA2WhcNMjUxMjIxMTYwMTA2WjAzMTEwLwYDVQQD EyhkZWU4ODdhNDQ4MzkwOTE2ZThkYjMwYzc5Njg1YzU5OThkMjIzZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy70GzP+CWJ1xPE6NV3NsmYdYew2K OX3NkemDPwDGbHBMkp8ZUd8AkVWOLNdRDpvHW2u1UEv4ed59fJnZ1KFNPbCxEmCS OhwGR4EfG0CHhTcaH/5hUvQUROKooVUBDDxsZnFK6OeRVu2gfhNLW6Dd3/ECgeiN bnFO7SAcX+lfYBzCyfY722SACAgSQTFdnwSObAy70sLzBicfUSvt9nSUcsxKRzhL okXNfW8Ua6tibdBhvc2xLrJDkksmVBdxnRu/sE4hx61ZnRQaPJU9TC/Agm8fZlff KAIdjYtMM3bdmZrQ0cz73N/WcTOfY8Uze/QD4qbh2yA2JkuxIJ/h32bjRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7oh6RIOQkW6Nswx5aFxZmNIj0pMB8GA1UdIwQY MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHM4xXkY apRCbiUCLxrVAUe+eCBhLUDzj37ymeCbW6zaWQmmZdT8+mgdyiONuu4jVtoaPSdt OgYx8vooeGWfQwhr6yehCQltFZBv3u9Jhp0YVl9ZTDy3pebB6vRfF1moOCTboEqC WbsrFH4Z/jTDlfpYl5l+FH8eTe2v7yxQyZ+p3Rj5ElFTm9GnZ/rx2DdSOru89Wi9 0cXIXO+OS5r0+bwvfaPtQOIyf+bok+D/0TRdBn/ZbkE3H2GQjLehZj8oT+T7D7ON KStR4UIxa8my4Ufw2Yeu/L00Gu4r6iYhrWBh5k6lpxM4kNQxMCSusCMEe4Rt/Ln7 nYrOUvCWHujGWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:52:17 2025 by rpki-client