This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json) Hash identifier: DvZfAbJ6ryTC4ZsqJez4mz/bc+W8gGZo7sSxHOvcqRw= Subject key identifier: DD:21:0F:CE:24:C4:B0:96:AE:7F:C3:35:3B:74:17:49:AC:2F:30:1C Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a Certificate serial: 019B484B592797024A86B22FFBF4CF35644C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 23:00:56 +0000 Manifest this update: Mon 22 Dec 2025 23:00:56 +0000 Manifest next update: Tue 23 Dec 2025 23:00:56 +0000 Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=) 2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=) 3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: MAD15tOq9mCBHIgoyneoLoonYTf9C+zmptme1LzeoP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:59:27:97:02:4a:86:b2:2f:fb:f4:cf:35:64:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a Validity Not Before: Dec 22 23:00:56 2025 GMT Not After : Dec 23 23:00:56 2025 GMT Subject: CN=dd210fce24c4b096ae7fc3353b741749ac2f301c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:69:77:22:13:aa:3d:0e:6e:5e:cb:d3:32: 9a:0b:39:f3:77:c0:d7:b6:b4:8d:2e:7a:0f:0c:91: 67:31:13:f9:23:ef:8b:33:d0:3c:0b:06:bf:45:c0: d9:dd:e7:19:17:f7:34:e1:ed:60:01:18:c4:f0:61: f3:87:18:bb:44:dc:73:eb:73:78:ca:a7:44:6b:60: 26:df:3a:81:50:f5:fa:d8:ca:f1:61:38:de:e6:b6: f1:de:22:c0:ff:e8:5c:8a:cd:e0:77:c0:09:ed:6a: fa:be:6f:2c:0e:59:64:b4:fa:4b:94:ec:39:dc:d6: a2:5a:b6:42:10:c3:b8:22:23:f2:46:87:99:90:65: 80:2e:56:ef:51:3e:6a:d5:b2:e5:fa:d6:11:77:27: 35:9e:b4:ca:5e:70:ed:89:91:59:94:94:3e:46:f7: d4:bd:36:f6:e4:0d:1a:3c:8b:64:72:08:97:e1:e0: 8a:db:31:d1:44:f0:9b:91:06:5e:65:41:c0:85:50: 69:63:92:ce:25:a6:3e:7b:44:4b:b3:87:14:fe:10: 72:89:ef:20:62:26:a1:1b:5e:47:de:bf:6b:34:b2: b8:0e:63:0b:71:bc:47:27:6a:d1:3e:b3:f7:e0:07: ef:da:38:4a:95:c3:06:ec:39:73:ee:f7:31:db:0f: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:21:0F:CE:24:C4:B0:96:AE:7F:C3:35:3B:74:17:49:AC:2F:30:1C X509v3 Authority Key Identifier: keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:84:11:ca:4f:df:bc:4d:62:96:fa:b1:74:6a:64:ef:e8:2c: b5:38:ac:77:1e:24:cc:86:af:4e:eb:63:9a:13:34:5f:3d:c2: 68:e0:06:87:58:c6:ce:da:3a:47:07:34:85:8b:49:6d:07:29: ba:0d:e4:fd:af:fb:8a:56:97:46:c2:3d:68:8e:6b:79:17:a4: 48:11:a1:e1:e5:ee:e0:1f:5e:f6:6e:e8:b0:65:6a:12:3e:53: 52:ed:b8:de:83:74:8a:44:1e:b7:96:2d:f8:43:b9:cf:39:0c: f1:8f:0f:11:b3:33:a2:44:d0:17:93:ae:c4:ae:3f:a8:95:09: b3:63:6d:ee:68:3d:98:d2:01:aa:df:6c:31:a8:4c:ba:82:50: ef:68:c2:47:25:fb:aa:a2:d1:75:d4:81:43:74:20:c4:73:0c: a1:41:3b:bf:f9:ac:fd:50:98:b3:11:a2:b6:29:79:1f:f6:7b: 35:89:b6:a9:1c:17:c5:df:70:f6:06:27:a7:1e:ac:7d:aa:7a: 3e:11:87:b7:3a:ed:5a:a1:00:dd:c3:8e:3e:1e:c5:23:c9:45: a2:b6:c7:f2:88:03:fa:6a:46:a2:c6:e2:b8:16:fa:a0:8c:f2: 90:81:96:12:0c:1d:50:9c:83:a7:7a:94:7a:56:78:bf:cd:45: 05:2c:2c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS1knlwJKhrIv+/TPNWRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj MDY4NWEwHhcNMjUxMjIyMjMwMDU2WhcNMjUxMjIzMjMwMDU2WjAzMTEwLwYDVQQD EyhkZDIxMGZjZTI0YzRiMDk2YWU3ZmMzMzUzYjc0MTc0OWFjMmYzMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfFpdyITqj0Obl7L0zKaCznzd8DX trSNLnoPDJFnMRP5I++LM9A8Cwa/RcDZ3ecZF/c04e1gARjE8GHzhxi7RNxz63N4 yqdEa2Am3zqBUPX62MrxYTje5rbx3iLA/+hcis3gd8AJ7Wr6vm8sDllktPpLlOw5 3NaiWrZCEMO4IiPyRoeZkGWALlbvUT5q1bLl+tYRdyc1nrTKXnDtiZFZlJQ+RvfU vTb25A0aPItkcgiX4eCK2zHRRPCbkQZeZUHAhVBpY5LOJaY+e0RLs4cU/hByie8g YiahG15H3r9rNLK4DmMLcbxHJ2rRPrP34Afv2jhKlcMG7Dlz7vcx2w8VCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0hD84kxLCWrn/DNTt0F0msLzAcMB8GA1UdIwQY MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt MzZlNjRhYzY0NTQyLzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4QRyk/f vE1ilvqxdGpk7+gstTisdx4kzIavTutjmhM0Xz3CaOAGh1jGzto6Rwc0hYtJbQcp ug3k/a/7ilaXRsI9aI5reRekSBGh4eXu4B9e9m7osGVqEj5TUu243oN0ikQet5Yt +EO5zzkM8Y8PEbMzokTQF5OuxK4/qJUJs2Nt7mg9mNIBqt9sMahMuoJQ72jCRyX7 qqLRddSBQ3QgxHMMoUE7v/ms/VCYsxGitil5H/Z7NYm2qRwXxd9w9gYnpx6sfap6 PhGHtzrtWqEA3cOOPh7FI8lForbH8ogD+mpGosbiuBb6oIzykIGWEgwdUJyDp3qU elZ4v81FBSwsbg== -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:45 2025 by rpki-client