This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json) Hash identifier: SMinRGhbNfbJWd+S3JiJzSJ6f70FVPDKrX4TPy2P2ts= Subject key identifier: F1:FF:5D:83:88:67:BD:6D:07:1A:26:81:F9:0C:C1:3E:7D:57:81:AC Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7 Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7 Certificate serial: 019B59775C2C1D154CBA4D1C5A05944445E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft Manifest number: 1294 Signing time: Fri 26 Dec 2025 07:02:32 +0000 Manifest this update: Fri 26 Dec 2025 07:02:32 +0000 Manifest next update: Sat 27 Dec 2025 07:02:32 +0000 Files and hashes: 1: 3Uvg-SGM_zlK_SKX6X83CL5pES4.roa (hash: txSz1BVeFo/z2vKlSjUFGN00mKoCcahrUY9+MYjGUZA=) 2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: iZ6r0N+FJT2KnZVFj9EZn0ufZRTe3ajShif+ZGFaLww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:5c:2c:1d:15:4c:ba:4d:1c:5a:05:94:44:45:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7 Validity Not Before: Dec 26 07:02:32 2025 GMT Not After : Dec 27 07:02:32 2025 GMT Subject: CN=f1ff5d838867bd6d071a2681f90cc13e7d5781ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:0c:e0:19:42:8b:7d:e7:1f:94:4e:e7:d2: b0:50:cc:5d:1f:2d:8b:d4:54:e4:89:de:8f:62:ee: 93:8d:82:c5:bf:c4:17:3f:24:c0:ae:74:65:a7:7c: cd:84:fa:a4:72:4e:86:1d:23:08:d8:59:dc:18:2c: e8:02:50:3f:54:15:30:93:72:19:9c:cd:1b:b7:6d: db:4f:16:e3:ba:20:b5:91:32:1d:65:48:d1:6f:54: c1:5d:0a:cf:0f:7d:c5:09:26:b6:26:88:ae:ea:d9: 17:19:8a:51:e2:bf:8a:b4:ca:be:0a:a1:e6:8b:76: 17:f0:c3:08:57:d0:25:f0:bd:b0:39:c1:ca:ef:a2: 77:20:e6:03:0e:21:f2:f9:9d:d6:02:87:65:db:40: 03:eb:2f:0d:61:58:9c:99:66:80:09:97:f6:41:e3: 9e:e3:a0:ca:29:40:da:c4:59:dc:86:04:3c:2d:bf: 05:21:b6:bd:18:3f:7c:ae:57:bd:de:25:bb:10:26: 89:31:db:73:d6:b1:03:2f:59:cb:ad:88:85:8c:d8: f2:b1:1f:ad:0b:97:64:f6:c5:06:d9:a9:04:4c:25: 8c:d2:56:fc:db:98:c9:33:d2:f5:f2:8c:73:ae:f4: cf:31:41:a4:8a:f4:15:18:97:d1:3a:11:84:f0:d1: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FF:5D:83:88:67:BD:6D:07:1A:26:81:F9:0C:C1:3E:7D:57:81:AC X509v3 Authority Key Identifier: keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:92:ba:f0:d3:5d:20:1e:a1:3b:2e:c9:dc:e9:af:64:50:5d: 1f:8f:90:05:e5:c4:ed:54:9a:0d:2b:6e:13:94:d6:5c:ff:7b: 2a:de:24:8a:60:81:c6:8e:a5:73:65:e3:e3:f3:a5:4e:cf:09: 6b:d1:da:6c:ea:4d:35:eb:79:8c:8d:5f:1e:c1:a3:16:7b:b3: 26:55:e7:3d:cb:03:27:53:5a:2a:e8:4b:ed:4e:2e:27:10:d6: 0e:ce:0b:11:27:a8:93:f7:68:c9:8d:2c:01:7e:09:73:8e:af: 4e:c3:c0:2b:44:39:ec:84:23:94:a6:e1:f8:9a:e7:1f:a5:17: 46:6d:ef:e5:de:f5:ec:6d:60:25:28:b7:87:b7:b3:a3:b6:8b: b7:56:cf:fc:8b:16:3b:02:34:f2:aa:d7:12:6f:07:41:91:f5: ac:1d:7f:b0:37:2a:b5:7b:1d:14:8a:f7:52:b1:e3:30:1e:91: 76:a8:d0:4e:f4:40:48:7d:71:2f:8e:96:20:47:47:db:20:ca: 83:09:5a:9e:27:ce:79:6d:dd:32:e8:ee:3c:76:49:d3:e3:74: 94:42:60:32:35:a0:a8:be:dc:c5:11:c8:94:88:8a:78:02:eb: b8:93:ee:1f:8a:ed:e1:df:a1:6b:b1:3f:96:d7:b4:e3:39:f1: 95:b7:a1:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1wsHRVMuk0cWgWUREXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMzk4YjViMWQ5YTk2ZTQxMTViN2JjZjZmY2E2M2ZiYWY2 MzljYTcwHhcNMjUxMjI2MDcwMjMyWhcNMjUxMjI3MDcwMjMyWjAzMTEwLwYDVQQD EyhmMWZmNWQ4Mzg4NjdiZDZkMDcxYTI2ODFmOTBjYzEzZTdkNTc4MWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7QM4BlCi33nH5RO59KwUMxdHy2L 1FTkid6PYu6TjYLFv8QXPyTArnRlp3zNhPqkck6GHSMI2FncGCzoAlA/VBUwk3IZ nM0bt23bTxbjuiC1kTIdZUjRb1TBXQrPD33FCSa2Joiu6tkXGYpR4r+KtMq+CqHm i3YX8MMIV9Al8L2wOcHK76J3IOYDDiHy+Z3WAodl20AD6y8NYVicmWaACZf2QeOe 46DKKUDaxFnchgQ8Lb8FIba9GD98rle93iW7ECaJMdtz1rEDL1nLrYiFjNjysR+t C5dk9sUG2akETCWM0lb825jJM9L18oxzrvTPMUGkivQVGJfROhGE8NGw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH/XYOIZ71tBxomgfkMwT59V4GsMB8GA1UdIwQY MBaAFLM5i1sdmpbkEVt7z2/KY/uvY5ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQt NzljYzUyYzA2ZDRmLzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQtNzljYzUyYzA2ZDRm LzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJK68NNd IB6hOy7J3OmvZFBdH4+QBeXE7VSaDStuE5TWXP97Kt4kimCBxo6lc2Xj4/OlTs8J a9HabOpNNet5jI1fHsGjFnuzJlXnPcsDJ1NaKuhL7U4uJxDWDs4LESeok/doyY0s AX4Jc46vTsPAK0Q57IQjlKbh+JrnH6UXRm3v5d717G1gJSi3h7ezo7aLt1bP/IsW OwI08qrXEm8HQZH1rB1/sDcqtXsdFIr3UrHjMB6RdqjQTvRASH1xL46WIEdH2yDK gwlanifOeW3dMujuPHZJ0+N0lEJgMjWgqL7cxRHIlIiKeALruJPuH4rt4d+ha7E/ lte04znxlbehzg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:36 2025 by rpki-client