This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json) Hash identifier: Rvq38+XvMd06owWf2ShnBiDXC4eUp+FTF4FQtmOrRl8= Subject key identifier: 5A:5C:47:13:B5:93:2B:21:CD:71:81:9D:38:C9:6E:A1:72:65:DA:25 Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611 Certificate serial: 019B3AFD38128A49D157518713F121A38BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft Manifest number: 124A Signing time: Sat 20 Dec 2025 09:00:31 +0000 Manifest this update: Sat 20 Dec 2025 09:00:31 +0000 Manifest next update: Sun 21 Dec 2025 09:00:31 +0000 Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=) 2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: DqpWXzOiXVXMXoRJLg4l2iUbwyyq162dNQnP8GADIvE=) 3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:38:12:8a:49:d1:57:51:87:13:f1:21:a3:8b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611 Validity Not Before: Dec 20 09:00:31 2025 GMT Not After : Dec 21 09:00:31 2025 GMT Subject: CN=5a5c4713b5932b21cd71819d38c96ea17265da25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:14:94:cd:b4:93:2c:f8:8f:63:af:77:06: 58:c7:56:91:fb:72:57:52:25:46:b6:eb:e1:fa:9b: fe:3f:3a:40:df:fd:ad:ea:e3:e3:4a:ee:0c:9e:d2: bf:b6:15:9c:e8:47:21:ab:59:1a:99:12:9a:86:31: f9:66:cb:d8:39:2f:47:7a:02:97:90:94:31:34:88: 16:33:16:d8:f9:a1:8d:45:b1:e5:68:af:27:8d:3b: b4:27:f4:35:04:1b:ba:d9:3f:a0:05:7f:8d:98:54: 54:75:aa:81:fa:13:6c:0c:6a:05:82:65:d7:d5:f7: 90:cb:94:44:c8:6b:1a:bf:bb:99:5a:eb:58:cd:7c: 4b:ed:b3:99:9b:66:f6:49:dd:c0:4c:28:7b:d8:ec: 9a:ab:c6:9f:a6:ec:8a:eb:21:ad:48:4e:9b:8a:94: 5c:c6:95:7b:d9:1c:96:2b:34:1a:96:19:57:d8:8d: 4c:9b:93:c8:6a:d4:d7:51:f4:6c:e8:3b:ce:74:5e: 39:d2:de:32:ce:cb:4b:2e:15:1a:1d:ef:d4:d9:5f: fe:cd:da:cc:47:d6:6a:42:99:3a:28:9b:df:5c:40: d3:75:d7:8f:85:aa:5c:3c:c3:df:2e:a7:09:ef:b4: 9f:ab:c1:12:5e:07:27:e6:15:df:2b:77:d5:a0:a2: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5C:47:13:B5:93:2B:21:CD:71:81:9D:38:C9:6E:A1:72:65:DA:25 X509v3 Authority Key Identifier: keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d8:78:26:9a:92:0c:e0:b1:f1:83:1c:92:9d:ed:ef:15:19: 87:47:b2:74:17:72:17:c3:3a:a8:f8:27:e9:7e:11:18:e1:ea: bf:84:6e:ad:33:b6:a9:57:07:34:d9:5d:1f:0c:57:bb:25:ea: 45:2a:99:76:a3:7d:39:1c:30:c4:de:06:b2:05:89:72:fa:72: e9:e7:a9:5c:41:0e:03:00:a2:01:6e:9a:64:f2:bd:57:07:ec: 01:11:c5:dc:e7:85:2f:36:07:dc:17:1b:67:da:7c:17:d7:87: a5:7b:d1:07:02:8c:da:04:13:80:00:13:23:22:78:75:75:36: fe:1c:84:a3:16:c0:34:29:bb:60:d2:29:a4:84:6f:f9:20:aa: a7:7b:bc:2d:e7:bc:59:2e:2d:7d:0b:4a:a4:d1:ec:c0:75:74: 9a:2b:fe:df:99:f7:d1:87:60:3f:02:7e:97:ec:ea:72:f5:e0: eb:8c:3a:a1:e2:c2:54:a5:79:b1:0e:25:65:fa:89:37:92:37: b5:4e:2b:65:db:cb:1e:06:f0:ef:27:e2:76:2d:c7:e9:57:cd: 98:bd:60:12:6f:15:67:6f:9a:92:f5:5e:71:e8:9f:66:e6:54: 10:b6:80:6b:d6:cd:45:61:ba:c1:4a:eb:9c:79:ce:41:d7:ff: 6a:31:ed:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/TgSiknRV1GHE/Eho4vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OTkwMTBiYmIxZjQ4NzA5YWVhYzAyZTg0MzM4YTQ5Yjc3 NzQ2MTEwHhcNMjUxMjIwMDkwMDMxWhcNMjUxMjIxMDkwMDMxWjAzMTEwLwYDVQQD Eyg1YTVjNDcxM2I1OTMyYjIxY2Q3MTgxOWQzOGM5NmVhMTcyNjVkYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOUUlM20kyz4j2OvdwZYx1aR+3JX UiVGtuvh+pv+PzpA3/2t6uPjSu4MntK/thWc6Echq1kamRKahjH5ZsvYOS9HegKX kJQxNIgWMxbY+aGNRbHlaK8njTu0J/Q1BBu62T+gBX+NmFRUdaqB+hNsDGoFgmXX 1feQy5REyGsav7uZWutYzXxL7bOZm2b2Sd3ATCh72Oyaq8afpuyK6yGtSE6bipRc xpV72RyWKzQalhlX2I1Mm5PIatTXUfRs6DvOdF450t4yzstLLhUaHe/U2V/+zdrM R9ZqQpk6KJvfXEDTddePhapcPMPfLqcJ77Sfq8ESXgcn5hXfK3fVoKLukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpcRxO1kyshzXGBnTjJbqFyZdolMB8GA1UdIwQY MBaAFEmZAQu7H0hwmurALoQzikm3d0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjkt NWZlOGFmYTM1ZGY2LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjktNWZlOGFmYTM1ZGY2 LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNh4JpqS DOCx8YMckp3t7xUZh0eydBdyF8M6qPgn6X4RGOHqv4RurTO2qVcHNNldHwxXuyXq RSqZdqN9ORwwxN4GsgWJcvpy6eepXEEOAwCiAW6aZPK9VwfsARHF3OeFLzYH3Bcb Z9p8F9eHpXvRBwKM2gQTgAATIyJ4dXU2/hyEoxbANCm7YNIppIRv+SCqp3u8Lee8 WS4tfQtKpNHswHV0miv+35n30YdgPwJ+l+zqcvXg64w6oeLCVKV5sQ4lZfqJN5I3 tU4rZdvLHgbw7yfidi3H6VfNmL1gEm8VZ2+akvVeceifZuZUELaAa9bNRWG6wUrr nHnOQdf/ajHtCw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:09:19 2025 by rpki-client