This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json) Hash identifier: /GMKX594YXEOMA7oMCm9wjxtuoEynZVudrV04Egi9Ys= Subject key identifier: 1F:63:2D:16:1D:7B:E5:99:67:6F:CE:AC:FE:7D:49:C2:FB:66:A3:74 Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Certificate serial: 019AEF75E6942CA0817F4227E29DB3B64C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft Manifest number: 0AD1 Signing time: Fri 05 Dec 2025 17:01:12 +0000 Manifest this update: Fri 05 Dec 2025 17:01:12 +0000 Manifest next update: Sat 06 Dec 2025 17:01:12 +0000 Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: GD7rLA+E4s1xbdPVs5QbxCpKPaiZT6Ni8MQngXowgWo=) 2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:75:e6:94:2c:a0:81:7f:42:27:e2:9d:b3:b6:4c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Validity Not Before: Dec 5 17:01:12 2025 GMT Not After : Dec 6 17:01:12 2025 GMT Subject: CN=1f632d161d7be599676fceacfe7d49c2fb66a374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:11:3f:22:85:b5:96:17:d0:a2:9e:c5:de: 45:a9:77:ca:b0:7f:ab:27:75:3c:3e:c9:b0:33:e1: ff:23:35:94:b0:88:bd:af:f1:1b:15:60:4c:62:73: 47:d9:bc:cc:9e:fe:2d:60:a0:cb:4a:91:67:a1:25: 0a:a3:75:1a:41:fc:06:f4:ec:1d:cc:71:82:53:70: d5:a2:e9:6c:b1:a3:03:77:8d:72:42:ae:93:99:e5: a4:19:14:a8:6f:57:6e:c5:09:9e:3b:ad:81:95:08: b5:ce:a6:e7:93:fe:18:02:9e:13:62:7e:63:63:d4: 9e:d5:09:cd:e0:95:38:d0:87:86:49:28:58:94:80: 0c:2d:ff:c4:d7:b2:f0:72:a4:00:3b:fc:05:4a:81: 64:8a:f7:a0:9a:07:4f:8a:7c:0b:4d:b6:c3:ba:9f: 0d:e2:ff:b5:5d:61:ca:8a:8c:81:fd:be:2c:0e:c5: 05:17:c5:62:6d:a1:2c:e3:fe:a6:39:d7:a6:18:7d: f7:a1:a9:73:4a:a6:a8:1a:bd:ce:2c:ae:55:24:57: 5b:be:0b:dc:cf:59:f4:60:59:23:1a:48:a6:75:bb: 72:1f:11:de:99:39:b2:41:96:7d:b0:14:6b:00:27: cd:5a:0c:9c:4e:65:5d:69:03:80:c0:7a:6f:c6:4d: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:63:2D:16:1D:7B:E5:99:67:6F:CE:AC:FE:7D:49:C2:FB:66:A3:74 X509v3 Authority Key Identifier: keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a0:40:3a:37:18:7d:c5:3f:83:e5:7e:7f:fc:26:d8:3f:2f: 25:04:3d:97:08:61:f4:40:7a:5f:b6:94:f3:17:72:fb:93:2a: cd:b9:0b:00:01:cf:85:87:a5:e8:4f:c9:63:91:b1:e7:5b:67: 6b:6d:e9:36:96:32:c3:0c:b9:12:92:96:42:dc:44:ce:b0:5f: 0c:77:99:60:f7:bd:25:d8:eb:7c:f5:cd:8d:a8:60:e6:99:80: 2d:b9:cb:2b:4b:6c:4a:fe:55:9b:7f:ef:ca:66:fe:09:96:67: 46:64:0a:19:bb:1e:38:6d:3c:28:dc:71:d4:92:66:04:a0:79: 4c:bf:da:2f:df:27:fe:75:30:fd:2c:26:2d:ce:c1:d2:ac:c9: 3c:aa:32:93:42:a6:5a:b1:16:12:a2:db:4e:3f:c1:1a:61:e8: b0:06:c6:9a:ee:8d:56:f6:cd:d8:43:05:23:8e:26:c0:1a:3f: 76:9c:09:64:e7:32:68:67:24:b8:67:c1:4c:d0:00:1f:31:ff: 9a:12:32:1e:4f:dd:bf:da:93:ee:44:8a:96:5f:6b:51:f5:a6: 2b:64:51:10:8e:e2:19:6e:d6:59:aa:83:bf:2f:89:73:3d:34: 76:49:ba:99:83:c1:ef:93:32:51:83:40:c7:db:16:07:e4:38: 7b:8b:ec:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvdeaULKCBf0In4p2ztkwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk MDVjNmYwHhcNMjUxMjA1MTcwMTEyWhcNMjUxMjA2MTcwMTEyWjAzMTEwLwYDVQQD EygxZjYzMmQxNjFkN2JlNTk5Njc2ZmNlYWNmZTdkNDljMmZiNjZhMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4IRPyKFtZYX0KKexd5FqXfKsH+r J3U8PsmwM+H/IzWUsIi9r/EbFWBMYnNH2bzMnv4tYKDLSpFnoSUKo3UaQfwG9Owd zHGCU3DVoulssaMDd41yQq6TmeWkGRSob1duxQmeO62BlQi1zqbnk/4YAp4TYn5j Y9Se1QnN4JU40IeGSShYlIAMLf/E17LwcqQAO/wFSoFkivegmgdPinwLTbbDup8N 4v+1XWHKioyB/b4sDsUFF8VibaEs4/6mOdemGH33oalzSqaoGr3OLK5VJFdbvgvc z1n0YFkjGkimdbtyHxHemTmyQZZ9sBRrACfNWgycTmVdaQOAwHpvxk29PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9jLRYde+WZZ2/OrP59ScL7ZqN0MB8GA1UdIwQY MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6BAOjcY fcU/g+V+f/wm2D8vJQQ9lwhh9EB6X7aU8xdy+5MqzbkLAAHPhYel6E/JY5Gx51tn a23pNpYywwy5EpKWQtxEzrBfDHeZYPe9JdjrfPXNjahg5pmALbnLK0tsSv5Vm3/v ymb+CZZnRmQKGbseOG08KNxx1JJmBKB5TL/aL98n/nUw/SwmLc7B0qzJPKoyk0Km WrEWEqLbTj/BGmHosAbGmu6NVvbN2EMFI44mwBo/dpwJZOcyaGckuGfBTNAAHzH/ mhIyHk/dv9qT7kSKll9rUfWmK2RREI7iGW7WWaqDvy+Jcz00dkm6mYPB75MyUYNA x9sWB+Q4e4vstA== -----END CERTIFICATE-----Generated at Fri Dec 5 19:26:24 2025 by rpki-client