This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json) Hash identifier: q540U6dR92Zjt3YcDY7zJleZ+cKSpOw5Sf+ssX5iGO8= Subject key identifier: C4:97:5A:F7:F2:D5:8E:BE:C5:3C:06:05:87:95:E0:FF:8D:D3:43:91 Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce Certificate serial: 019B3D22BA87D9AA3279FC5779663575A8D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:00:44 +0000 Manifest this update: Sat 20 Dec 2025 19:00:44 +0000 Manifest next update: Sun 21 Dec 2025 19:00:44 +0000 Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: ycsuBJt+MzruwCIQmFrk/7l+EJS/kwGbE/HVyhKstXk=) 2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:ba:87:d9:aa:32:79:fc:57:79:66:35:75:a8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce Validity Not Before: Dec 20 19:00:44 2025 GMT Not After : Dec 21 19:00:44 2025 GMT Subject: CN=c4975af7f2d58ebec53c06058795e0ff8dd34391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:26:58:83:44:14:d6:19:98:11:57:b6:64:e3: bd:c4:b6:35:54:e7:6f:1e:95:ad:ca:ab:0e:5b:55: 8d:0b:54:eb:c1:51:d9:76:0c:ad:b9:48:bf:b4:92: 79:66:13:b2:d1:e0:a5:fb:1d:2a:a8:0f:0e:f3:ba: 65:38:9c:f2:3a:ee:2c:2a:d9:86:57:88:0c:3c:32: 3c:1a:69:6b:9f:cf:46:9a:24:5c:2d:bd:9a:97:74: a2:bd:6f:fb:07:f1:ab:6e:fb:34:6a:8f:a5:d8:56: 60:d2:e2:8c:6d:5d:77:07:14:55:1b:db:76:3c:d4: a3:23:33:9e:5c:d8:98:3e:b4:d3:74:4c:72:b7:f9: b2:3a:f3:07:66:43:33:e0:82:7b:78:7f:fa:46:90: 1b:81:83:92:79:39:7a:f5:03:0c:4d:80:c9:71:26: 6e:b7:4c:c4:8e:a4:95:a9:f0:81:4f:50:03:c1:b5: 17:0d:6f:ec:13:ae:c3:ac:4f:4d:95:65:af:de:b1: ef:42:e8:60:18:d9:cf:07:82:ed:6b:3f:08:03:bf: 99:3d:33:c1:01:d2:9e:b8:9f:70:6f:4c:e3:97:8c: a3:64:c5:28:ed:df:a7:cf:1c:65:c0:fc:ed:20:26: 12:ae:1f:7d:dc:9f:73:49:f1:4e:b2:4b:a2:af:29: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:97:5A:F7:F2:D5:8E:BE:C5:3C:06:05:87:95:E0:FF:8D:D3:43:91 X509v3 Authority Key Identifier: keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:82:02:35:0d:3d:06:07:c6:35:6d:15:61:18:7c:d8:d9:b4: 02:7d:6c:dc:0e:f6:6b:8f:b7:e6:df:7d:b0:0a:39:cb:ac:84: a9:c3:9c:b6:f8:ba:4a:17:1e:15:94:85:82:96:ff:83:47:4f: 26:5a:05:13:67:9e:c3:31:35:20:39:b2:7e:83:18:e3:f2:e7: f6:2a:00:6f:cf:1a:75:17:5e:5e:b7:af:05:1b:ac:ef:c1:2d: 20:76:e2:88:3c:ec:4c:bf:da:76:77:55:52:51:2b:76:0a:20: 0f:c1:b3:6f:32:5f:9e:af:15:ac:b2:7a:79:b4:ea:8d:01:44: 9a:46:1b:e3:97:fc:da:74:99:23:03:37:40:d4:d1:2a:b1:dd: 3a:1f:8b:32:be:5a:c2:44:63:ee:d4:d7:6e:73:1d:cc:4a:ca: a6:91:42:70:e9:d1:62:f7:2d:9a:20:ad:4d:83:b8:4e:67:38: d3:31:55:b3:d2:d5:36:fb:fa:4b:87:32:88:29:08:ec:e5:a1: 51:87:8d:35:bb:95:4c:8c:52:02:89:1f:51:02:1e:c4:2d:a5: e2:50:9c:be:1b:11:dc:70:ca:fa:ce:6c:be:93:34:09:b3:5b: d0:35:49:75:81:36:a4:f9:81:01:dc:9d:dd:3a:75:fa:40:69: eb:44:49:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrqH2aoyefxXeWY1dajSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OWYwM2U0OGVkNjJhOTY4NDBlYjJmMmQ3OWMzZWMyMWEy N2YxY2UwHhcNMjUxMjIwMTkwMDQ0WhcNMjUxMjIxMTkwMDQ0WjAzMTEwLwYDVQQD EyhjNDk3NWFmN2YyZDU4ZWJlYzUzYzA2MDU4Nzk1ZTBmZjhkZDM0MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SZYg0QU1hmYEVe2ZOO9xLY1VOdv HpWtyqsOW1WNC1TrwVHZdgytuUi/tJJ5ZhOy0eCl+x0qqA8O87plOJzyOu4sKtmG V4gMPDI8Gmlrn89GmiRcLb2al3SivW/7B/Grbvs0ao+l2FZg0uKMbV13BxRVG9t2 PNSjIzOeXNiYPrTTdExyt/myOvMHZkMz4IJ7eH/6RpAbgYOSeTl69QMMTYDJcSZu t0zEjqSVqfCBT1ADwbUXDW/sE67DrE9NlWWv3rHvQuhgGNnPB4Ltaz8IA7+ZPTPB AdKeuJ9wb0zjl4yjZMUo7d+nzxxlwPztICYSrh993J9zSfFOskuirynrMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSXWvfy1Y6+xTwGBYeV4P+N00ORMB8GA1UdIwQY MBaAFEmfA+SO1iqWhA6y8tecPsIaJ/HOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAt NDIyZTZkM2ZlOTNlLzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAtNDIyZTZkM2ZlOTNl LzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYICNQ09 BgfGNW0VYRh82Nm0An1s3A72a4+35t99sAo5y6yEqcOctvi6ShceFZSFgpb/g0dP JloFE2eewzE1IDmyfoMY4/Ln9ioAb88adRdeXrevBRus78EtIHbiiDzsTL/adndV UlErdgogD8GzbzJfnq8VrLJ6ebTqjQFEmkYb45f82nSZIwM3QNTRKrHdOh+LMr5a wkRj7tTXbnMdzErKppFCcOnRYvctmiCtTYO4Tmc40zFVs9LVNvv6S4cyiCkI7OWh UYeNNbuVTIxSAokfUQIexC2l4lCcvhsR3HDK+s5svpM0CbNb0DVJdYE2pPmBAdyd 3Tp1+kBp60RJbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:41 2025 by rpki-client