This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json) Hash identifier: mJ/rSgI5PwUIJmQhGFQreR1JjQUSin2JlBQ4jqvWgBI= Subject key identifier: C3:EE:D2:95:6A:8C:16:BE:DF:EB:55:F2:E6:9C:9C:E2:48:F9:F2:76 Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Certificate serial: 019B0E2535674BE659FC7F1EDEF0D994C986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft Manifest number: 0AAE Signing time: Thu 11 Dec 2025 16:01:18 +0000 Manifest this update: Thu 11 Dec 2025 16:01:18 +0000 Manifest next update: Fri 12 Dec 2025 16:01:18 +0000 Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: UTmxfXmHGF5Vxr8YEDrWdZxWjMAEnVk5tJqHNBQc+uA=) 2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:35:67:4b:e6:59:fc:7f:1e:de:f0:d9:94:c9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81 Validity Not Before: Dec 11 16:01:18 2025 GMT Not After : Dec 12 16:01:18 2025 GMT Subject: CN=c3eed2956a8c16bedfeb55f2e69c9ce248f9f276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:64:d3:7d:77:ec:d3:39:eb:95:c4:ce:c1: 21:68:4d:9f:b5:01:da:38:d7:f2:50:de:f9:85:e0: f5:61:9e:cf:cf:7d:d9:b7:b6:79:13:b9:b8:64:b2: a7:d2:f1:72:29:d6:9e:8d:58:fc:2b:fe:94:1f:be: 49:fb:bc:0f:3e:db:b6:20:f9:93:28:88:c9:02:5b: 85:8f:ad:df:6e:09:bd:64:71:47:9c:d5:7d:73:56: fc:33:70:44:ce:9a:09:d6:a9:b2:8f:be:47:e1:d6: e7:fe:1b:96:76:04:04:73:67:4e:c5:88:f3:93:a6: d4:4e:17:13:d9:40:21:38:93:ee:21:96:b0:92:37: a1:8f:b4:59:c4:23:1a:2c:a8:e5:a6:9d:01:e2:0f: 83:a6:97:7c:bf:5b:02:62:cd:6b:da:e8:c4:ce:ac: 49:50:b1:82:2c:04:b0:7a:f3:ee:7e:88:81:40:90: 0b:93:23:bd:75:95:5f:75:77:35:2e:79:5d:ce:35: 40:64:c7:14:d3:1d:7d:05:e6:b0:1e:b5:f0:09:e5: b4:56:dc:7d:dc:31:d6:64:f4:2c:5b:b1:9c:b0:98: 7f:f8:80:72:c1:44:fc:be:2c:2e:16:84:41:f4:8d: c2:fe:7e:2a:38:3c:33:48:54:ca:e8:ab:6b:bc:47: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EE:D2:95:6A:8C:16:BE:DF:EB:55:F2:E6:9C:9C:E2:48:F9:F2:76 X509v3 Authority Key Identifier: keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f5:f4:d0:e6:fc:97:f5:a2:42:56:15:2d:7f:72:d1:82:1b: f4:83:61:58:64:bf:b1:c8:b9:c6:f9:b0:3c:3d:70:c5:38:99: 63:b5:29:8a:06:80:46:bb:37:1d:9a:71:c1:7f:76:f2:de:c2: 49:48:4a:05:e9:e9:6e:3f:99:21:4a:e1:6d:12:f7:8a:71:7d: 64:e6:c4:d3:dd:3c:a8:a3:32:0c:9d:08:79:9a:0a:a0:ab:26: 29:b3:e2:70:6f:a6:fb:58:3b:bb:08:a1:5c:4d:98:c0:33:78: fe:58:86:e5:36:7f:42:e2:a6:2b:2c:18:6b:9b:8c:2c:ab:3a: 6e:a7:9d:ae:f1:74:57:70:d3:d5:16:52:a4:36:b5:73:fa:f6: 5f:ce:a3:08:34:36:b4:ac:c4:8a:29:60:b7:7d:7c:8b:1e:96: bb:50:da:32:51:bb:dd:19:4c:76:1b:aa:55:9c:81:9e:5d:07: 6e:89:16:69:07:84:c1:9d:f8:f8:4f:dc:fa:14:25:2d:e4:55: fd:76:af:39:3b:8b:d7:67:31:53:bb:12:2a:bb:df:fc:8e:30: 8f:93:75:29:38:61:44:fb:8e:f1:70:8b:27:4b:b8:41:58:fc: 09:53:15:79:a4:c0:8e:da:dc:a9:fe:26:cd:2d:3f:ef:f9:44: 72:10:7e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJTVnS+ZZ/H8e3vDZlMmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4 YTdjODEwHhcNMjUxMjExMTYwMTE4WhcNMjUxMjEyMTYwMTE4WjAzMTEwLwYDVQQD EyhjM2VlZDI5NTZhOGMxNmJlZGZlYjU1ZjJlNjljOWNlMjQ4ZjlmMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Nk03137NM565XEzsEhaE2ftQHa ONfyUN75heD1YZ7Pz33Zt7Z5E7m4ZLKn0vFyKdaejVj8K/6UH75J+7wPPtu2IPmT KIjJAluFj63fbgm9ZHFHnNV9c1b8M3BEzpoJ1qmyj75H4dbn/huWdgQEc2dOxYjz k6bUThcT2UAhOJPuIZawkjehj7RZxCMaLKjlpp0B4g+Dppd8v1sCYs1r2ujEzqxJ ULGCLASwevPufoiBQJALkyO9dZVfdXc1LnldzjVAZMcU0x19BeawHrXwCeW0Vtx9 3DHWZPQsW7GcsJh/+IBywUT8viwuFoRB9I3C/n4qODwzSFTK6KtrvEdkjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPu0pVqjBa+3+tV8uacnOJI+fJ2MB8GA1UdIwQY MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfX00Ob8 l/WiQlYVLX9y0YIb9INhWGS/sci5xvmwPD1wxTiZY7UpigaARrs3HZpxwX928t7C SUhKBenpbj+ZIUrhbRL3inF9ZObE0908qKMyDJ0IeZoKoKsmKbPicG+m+1g7uwih XE2YwDN4/liG5TZ/QuKmKywYa5uMLKs6bqedrvF0V3DT1RZSpDa1c/r2X86jCDQ2 tKzEiilgt318ix6Wu1DaMlG73RlMdhuqVZyBnl0HbokWaQeEwZ34+E/c+hQlLeRV /XavOTuL12cxU7sSKrvf/I4wj5N1KThhRPuO8XCLJ0u4QVj8CVMVeaTAjtrcqf4m zS0/7/lEchB+dw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:42:59 2025 by rpki-client