This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json) Hash identifier: mSdXCiLa9B3afgbsUaQpYr88bWoAFS9FlasZZcXaERM= Subject key identifier: F5:90:00:56:3F:8F:35:AF:AA:08:2D:92:2D:36:71:9E:11:31:C2:C3 Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5 Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5 Certificate serial: 019B5976BD6FAFDD421494215B38291960B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:01:52 +0000 Manifest this update: Fri 26 Dec 2025 07:01:52 +0000 Manifest next update: Sat 27 Dec 2025 07:01:52 +0000 Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: sqrRKNymHR3AZkXTnz+ZwgB3F9jBwYIBfM9FVpp1Jgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:bd:6f:af:dd:42:14:94:21:5b:38:29:19:60:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5 Validity Not Before: Dec 26 07:01:52 2025 GMT Not After : Dec 27 07:01:52 2025 GMT Subject: CN=f59000563f8f35afaa082d922d36719e1131c2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:58:84:90:35:b9:57:c2:bf:ec:02:33:3a: b9:c8:32:d8:72:e5:a9:55:e0:f4:dc:54:46:8c:af: 3b:af:58:24:f7:49:ae:be:1d:78:26:0c:33:46:be: e0:a3:64:58:da:73:5a:db:51:90:d7:ba:6f:e1:21: cd:4e:1b:c5:8b:c3:dd:4b:ba:d6:78:d8:9f:3c:d0: 68:fa:2a:eb:78:a4:9a:f3:6d:9e:7f:11:cc:10:46: ae:87:ee:45:f8:87:11:cc:2d:f9:c3:7e:ec:f3:64: 01:e8:5f:ce:06:50:2f:44:d2:dc:d8:75:a6:11:6a: e5:a0:50:05:5f:60:db:dd:aa:ea:cf:cd:76:64:68: 99:35:21:e2:b1:f7:71:63:5e:1e:af:bc:6a:ab:8f: 00:1d:06:21:37:b5:a8:24:78:f2:6c:be:6d:a5:a1: 20:94:2b:09:86:b5:1d:a8:49:41:0f:dd:be:8c:0e: 5d:2f:52:10:8f:65:2f:56:08:66:85:f3:8f:7b:3c: e4:60:4f:d3:7c:94:b1:df:bc:92:9c:34:07:fe:88: 86:6f:30:3f:9b:20:43:14:a5:d7:4b:9b:78:1e:81: 68:f9:84:c7:94:67:55:64:59:6a:ce:b0:6d:78:7d: 7c:e2:9b:b5:b8:e3:b5:a6:be:1a:bf:51:18:c1:d4: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:00:56:3F:8F:35:AF:AA:08:2D:92:2D:36:71:9E:11:31:C2:C3 X509v3 Authority Key Identifier: keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f8:f7:70:cb:c8:01:9d:52:48:7a:e3:de:67:25:6c:cd:e3: c3:b2:1f:4c:7f:64:a5:dc:98:8d:0b:7b:dd:81:e2:c2:dc:f6: c3:a0:b2:00:c6:a1:0a:1f:83:0c:dc:f9:81:aa:e2:12:d9:32: ad:fa:dd:de:fe:ef:94:1e:44:39:81:f9:f1:cb:21:77:73:ea: c9:27:dc:78:03:32:a8:e0:5c:ee:96:da:31:d4:95:24:50:93: 46:57:71:ab:4e:90:82:8a:ce:8e:b6:e2:fe:66:8c:88:6e:7e: 74:55:8a:2c:4d:47:c7:69:ef:50:00:e0:e4:c6:05:11:4d:91: e7:bc:04:c5:5d:81:39:cf:f5:3f:01:e4:cb:e7:19:6f:aa:c7: fd:0e:e8:44:ec:91:e1:1d:0a:6e:f1:a8:30:77:d6:a1:58:50: 09:fd:7d:ec:5f:5e:49:d3:21:56:67:d5:bd:d2:0c:a6:ba:8a: 29:fd:47:56:b7:9c:48:ad:e0:f2:d0:0c:bc:5a:50:67:e9:8c: 4b:b1:c1:1c:c3:92:ca:3c:07:fa:4f:a9:b7:e2:52:dd:2c:3e: 74:a3:31:14:e9:8a:b1:9c:b6:e4:70:da:1f:0f:e9:f1:ac:6b: 14:c4:a1:a4:7f:de:38:8d:d6:5a:ab:5e:8d:aa:10:56:4d:ff: 6d:98:1a:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdr1vr91CFJQhWzgpGWC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiM2Q0NjYxM2QyMDI5NjI5Njc5YjJiMDRhMmY5Yzg2Y2Fi Yzc0ZDUwHhcNMjUxMjI2MDcwMTUyWhcNMjUxMjI3MDcwMTUyWjAzMTEwLwYDVQQD EyhmNTkwMDA1NjNmOGYzNWFmYWEwODJkOTIyZDM2NzE5ZTExMzFjMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F5YhJA1uVfCv+wCMzq5yDLYcuWp VeD03FRGjK87r1gk90muvh14JgwzRr7go2RY2nNa21GQ17pv4SHNThvFi8PdS7rW eNifPNBo+irreKSa822efxHMEEauh+5F+IcRzC35w37s82QB6F/OBlAvRNLc2HWm EWrloFAFX2Db3arqz812ZGiZNSHisfdxY14er7xqq48AHQYhN7WoJHjybL5tpaEg lCsJhrUdqElBD92+jA5dL1IQj2UvVghmhfOPezzkYE/TfJSx37ySnDQH/oiGbzA/ myBDFKXXS5t4HoFo+YTHlGdVZFlqzrBteH184pu1uOO1pr4av1EYwdT2KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWQAFY/jzWvqggtki02cZ4RMcLDMB8GA1UdIwQY MBaAFEs9RmE9IClilnmysEovnIbKvHTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAt Yjk3OWU2NWJjMGQ2LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAtYjk3OWU2NWJjMGQ2 LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavj3cMvI AZ1SSHrj3mclbM3jw7IfTH9kpdyYjQt73YHiwtz2w6CyAMahCh+DDNz5gariEtky rfrd3v7vlB5EOYH58cshd3PqySfceAMyqOBc7pbaMdSVJFCTRldxq06QgorOjrbi /maMiG5+dFWKLE1Hx2nvUADg5MYFEU2R57wExV2BOc/1PwHky+cZb6rH/Q7oROyR 4R0KbvGoMHfWoVhQCf197F9eSdMhVmfVvdIMprqKKf1HVrecSK3g8tAMvFpQZ+mM S7HBHMOSyjwH+k+pt+JS3Sw+dKMxFOmKsZy25HDaHw/p8axrFMShpH/eOI3WWqte jaoQVk3/bZgaqw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:48 2025 by rpki-client