This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json) Hash identifier: rrG5p1QXkxBgZiye97O+L09PpmSLU3NLxeGhA/hQ7L0= Subject key identifier: 61:8B:E1:7C:AA:B3:80:A0:34:2F:97:5D:4B:2B:6F:3C:37:E2:1F:BD Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611 Certificate serial: 019B40C92B8AE7F0670649D61C1005EEEA58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft Manifest number: 124D Signing time: Sun 21 Dec 2025 12:01:24 +0000 Manifest this update: Sun 21 Dec 2025 12:01:24 +0000 Manifest next update: Mon 22 Dec 2025 12:01:24 +0000 Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=) 2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: GF0ybYEPI2HHY7N34CAqCTzh6JvFhYJfQsY2Tv3chho=) 3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:2b:8a:e7:f0:67:06:49:d6:1c:10:05:ee:ea:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611 Validity Not Before: Dec 21 12:01:24 2025 GMT Not After : Dec 22 12:01:24 2025 GMT Subject: CN=618be17caab380a0342f975d4b2b6f3c37e21fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:41:ee:cc:9f:94:7a:1b:e1:dd:47:1a:c9: f8:10:30:67:e6:89:34:01:92:fa:97:f7:bb:9b:84: 0d:b9:0a:9f:19:bd:60:72:e7:82:d6:b2:3f:f3:87: c2:07:2c:21:54:10:99:27:0a:81:2c:4a:ff:3d:2c: b3:43:67:eb:7d:55:dd:84:3c:16:3a:12:4a:59:8b: 2b:ac:8d:ab:9e:38:06:19:9d:78:0d:c1:2e:5d:cc: 94:cf:1b:a4:67:ef:3b:ca:87:f6:b7:d7:16:fb:14: 72:ef:99:53:16:41:93:90:0a:30:de:c6:ec:1a:48: fd:d6:c2:62:9d:4d:ff:31:66:0e:15:f3:20:db:38: 0e:1b:aa:07:9e:0d:a7:1f:b1:ea:24:c2:8f:82:16: 23:03:54:26:45:98:69:71:3a:a6:ac:a1:40:8a:44: 1b:60:aa:94:f4:04:bb:64:ad:5d:12:94:31:b8:78: 0e:69:01:f8:d2:16:ca:c6:34:6c:6a:82:2f:52:0f: 37:fa:55:05:b4:4f:04:8e:19:a0:2e:db:9a:d2:bc: 2c:07:c2:ec:e1:8b:f2:87:0b:6b:58:24:ac:97:5c: dd:d1:b0:f3:28:6f:2c:b3:f5:c9:c5:a4:93:a5:17: 49:43:67:ce:17:1f:2b:6d:5e:16:3a:d2:b3:0c:0c: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8B:E1:7C:AA:B3:80:A0:34:2F:97:5D:4B:2B:6F:3C:37:E2:1F:BD X509v3 Authority Key Identifier: keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:18:a5:57:d8:dd:b1:9f:8e:db:e4:65:49:e8:7d:79:ec:f0: 52:c8:bf:a2:b2:48:90:92:6d:2c:9c:d7:2a:d3:72:2f:7e:b2: 18:6e:e2:8b:b2:38:f2:83:6a:4b:39:da:ed:e0:29:23:cf:fb: 04:5e:4d:08:a0:d8:95:d7:ce:6f:78:85:4e:17:a8:c2:65:c8: 9c:f4:f3:e0:5c:2f:2b:fa:9d:a5:f2:19:9c:52:53:e5:2f:dd: 17:bb:30:07:21:c4:50:10:67:cb:71:2f:56:80:9d:77:78:3b: 5d:81:39:82:9c:43:2a:97:0c:65:d0:86:19:02:b8:23:0e:ec: c1:2e:ef:9d:ff:92:a4:d1:68:a4:2c:f6:f7:3d:91:fd:99:b0: 68:18:c8:80:1f:05:de:cc:b1:b4:45:00:3c:67:86:ea:2e:17: 6b:d8:6a:e2:0c:24:b7:5e:72:95:55:86:80:a7:b0:c6:41:64: c4:0e:d2:e7:59:b5:7a:db:58:a1:d7:c4:60:a6:03:60:0a:03: db:dc:34:14:f6:6a:97:ab:d2:18:0b:b1:53:f3:71:81:f4:19: c5:a7:ea:d7:b1:74:f8:cc:04:b4:94:87:93:99:62:c3:bc:39: 5b:38:8e:e4:ee:1a:84:f2:96:ae:47:eb:35:3b:a2:a4:54:f9: 31:76:e7:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySuK5/BnBknWHBAF7upYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OTkwMTBiYmIxZjQ4NzA5YWVhYzAyZTg0MzM4YTQ5Yjc3 NzQ2MTEwHhcNMjUxMjIxMTIwMTI0WhcNMjUxMjIyMTIwMTI0WjAzMTEwLwYDVQQD Eyg2MThiZTE3Y2FhYjM4MGEwMzQyZjk3NWQ0YjJiNmYzYzM3ZTIxZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8xB7syflHob4d1HGsn4EDBn5ok0 AZL6l/e7m4QNuQqfGb1gcueC1rI/84fCBywhVBCZJwqBLEr/PSyzQ2frfVXdhDwW OhJKWYsrrI2rnjgGGZ14DcEuXcyUzxukZ+87yof2t9cW+xRy75lTFkGTkAow3sbs Gkj91sJinU3/MWYOFfMg2zgOG6oHng2nH7HqJMKPghYjA1QmRZhpcTqmrKFAikQb YKqU9AS7ZK1dEpQxuHgOaQH40hbKxjRsaoIvUg83+lUFtE8EjhmgLtua0rwsB8Ls 4YvyhwtrWCSsl1zd0bDzKG8ss/XJxaSTpRdJQ2fOFx8rbV4WOtKzDAzp0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGL4Xyqs4CgNC+XXUsrbzw34h+9MB8GA1UdIwQY MBaAFEmZAQu7H0hwmurALoQzikm3d0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjkt NWZlOGFmYTM1ZGY2LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjktNWZlOGFmYTM1ZGY2 LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBilV9jd sZ+O2+RlSeh9eezwUsi/orJIkJJtLJzXKtNyL36yGG7ii7I48oNqSzna7eApI8/7 BF5NCKDYldfOb3iFTheowmXInPTz4FwvK/qdpfIZnFJT5S/dF7swByHEUBBny3Ev VoCdd3g7XYE5gpxDKpcMZdCGGQK4Iw7swS7vnf+SpNFopCz29z2R/ZmwaBjIgB8F 3syxtEUAPGeG6i4Xa9hq4gwkt15ylVWGgKewxkFkxA7S51m1ettYodfEYKYDYAoD 29w0FPZql6vSGAuxU/NxgfQZxafq17F0+MwEtJSHk5liw7w5WziO5O4ahPKWrkfr NTuipFT5MXbnbg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:10:21 2025 by rpki-client