This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json) Hash identifier: 5b8xw7aixcrJTMcUQV793aAUAKKL5WoJ3k7h0H4HQ+g= Subject key identifier: 45:59:F2:98:35:F4:77:51:7C:40:FD:06:11:40:D1:E1:1B:C9:CE:F5 Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611 Certificate serial: 019B23D0E853573659B3261CC4357C81F13D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft Manifest number: 123E Signing time: Mon 15 Dec 2025 21:00:52 +0000 Manifest this update: Mon 15 Dec 2025 21:00:52 +0000 Manifest next update: Tue 16 Dec 2025 21:00:52 +0000 Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=) 2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: yILKHvZtPiugegS9ayR6/EhGJInN02FN5xQVY7Sg7SI=) 3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:e8:53:57:36:59:b3:26:1c:c4:35:7c:81:f1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611 Validity Not Before: Dec 15 21:00:52 2025 GMT Not After : Dec 16 21:00:52 2025 GMT Subject: CN=4559f29835f477517c40fd061140d1e11bc9cef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b6:48:70:2d:89:83:f7:a1:7c:a8:65:f4:84: ac:96:78:4b:d4:f6:aa:f3:f0:10:2f:10:3d:9e:33: 9a:e0:60:6f:99:38:ea:44:e3:9e:5b:91:ff:30:0d: 41:1f:6f:22:6f:e5:5f:d0:e8:fe:ad:fa:92:14:15: ca:40:f2:6d:9a:d6:87:ea:24:80:9b:6d:5c:01:67: 45:49:1b:37:94:42:bc:84:f8:f7:12:0e:f2:48:27: 82:7d:a4:76:c9:7f:41:82:04:5f:56:1b:29:44:b0: 22:a5:6f:5c:c5:96:df:a3:9c:7a:79:40:97:60:55: e9:5c:57:70:15:05:c6:5e:0f:1d:01:dc:2b:fe:4b: bf:a0:ef:ae:ec:39:11:26:93:6a:bf:5b:d0:1c:3f: 66:4c:14:f9:b6:f6:bb:7e:d6:a4:3a:41:f0:5d:f9: 1f:55:48:e8:8a:2e:30:00:7f:15:d6:17:ab:7c:c4: 1b:71:10:ce:c4:4d:04:3d:95:b1:21:64:78:e0:03: 9c:52:c6:e1:ba:69:47:a0:2d:41:c5:84:c9:64:6f: 50:be:93:43:b5:f7:c3:be:2c:6c:a9:0b:c8:e6:c4: 83:01:b4:32:52:08:b3:ab:61:48:ef:7b:3a:43:7a: 06:70:7c:c5:34:29:ff:d7:94:e7:15:f2:59:37:66: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:59:F2:98:35:F4:77:51:7C:40:FD:06:11:40:D1:E1:1B:C9:CE:F5 X509v3 Authority Key Identifier: keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3c:db:7c:dc:94:0a:52:2c:7e:4d:5d:54:34:9d:5a:2d:b4: 32:19:43:11:54:bd:ef:0d:b5:80:6f:78:2b:db:82:23:46:1d: 55:71:fc:fe:b7:2b:af:9e:58:b9:06:e3:fc:1c:c5:53:1e:96: 9d:3a:e9:20:84:4e:a0:ae:2c:20:4d:bd:7b:12:78:1b:6e:5b: 7b:8e:18:dc:4d:02:80:4d:15:b7:c1:2c:2c:95:8e:5d:d8:31: 4c:c8:79:1f:f9:12:95:3c:43:cd:b8:a1:8b:f5:c3:96:d3:04: 4d:22:5f:50:25:c9:0f:08:c1:be:a7:31:92:d8:1c:8a:82:84: bc:de:cf:99:2d:eb:21:4a:20:64:f5:1e:d0:ab:cf:3e:40:79: 12:70:4c:c7:43:44:2b:a4:93:70:c2:38:7a:25:fb:55:4e:07: 73:4c:75:e3:9c:ac:be:2d:3d:74:d6:ef:12:24:e8:e3:85:55: 22:1b:30:2b:25:89:48:84:34:88:ea:01:ba:dc:bd:fa:ec:73: f3:e7:0d:1d:ea:87:03:5c:7b:36:c2:dc:56:58:86:e3:e0:c9: be:df:db:69:26:ba:0b:9e:96:41:3f:c7:25:ab:68:d8:7d:d3: 38:b8:41:5e:a2:f3:dc:1c:68:9d:63:c9:55:07:ac:ee:9c:89: 13:2a:dd:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0OhTVzZZsyYcxDV8gfE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OTkwMTBiYmIxZjQ4NzA5YWVhYzAyZTg0MzM4YTQ5Yjc3 NzQ2MTEwHhcNMjUxMjE1MjEwMDUyWhcNMjUxMjE2MjEwMDUyWjAzMTEwLwYDVQQD Eyg0NTU5ZjI5ODM1ZjQ3NzUxN2M0MGZkMDYxMTQwZDFlMTFiYzljZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rZIcC2Jg/ehfKhl9ISslnhL1Paq 8/AQLxA9njOa4GBvmTjqROOeW5H/MA1BH28ib+Vf0Oj+rfqSFBXKQPJtmtaH6iSA m21cAWdFSRs3lEK8hPj3Eg7ySCeCfaR2yX9BggRfVhspRLAipW9cxZbfo5x6eUCX YFXpXFdwFQXGXg8dAdwr/ku/oO+u7DkRJpNqv1vQHD9mTBT5tva7ftakOkHwXfkf VUjoii4wAH8V1herfMQbcRDOxE0EPZWxIWR44AOcUsbhumlHoC1BxYTJZG9QvpND tffDvixsqQvI5sSDAbQyUgizq2FI73s6Q3oGcHzFNCn/15TnFfJZN2ZrJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVZ8pg19HdRfED9BhFA0eEbyc71MB8GA1UdIwQY MBaAFEmZAQu7H0hwmurALoQzikm3d0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjkt NWZlOGFmYTM1ZGY2LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjktNWZlOGFmYTM1ZGY2 LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTzbfNyU ClIsfk1dVDSdWi20MhlDEVS97w21gG94K9uCI0YdVXH8/rcrr55YuQbj/BzFUx6W nTrpIIROoK4sIE29exJ4G25be44Y3E0CgE0Vt8EsLJWOXdgxTMh5H/kSlTxDzbih i/XDltMETSJfUCXJDwjBvqcxktgcioKEvN7PmS3rIUogZPUe0KvPPkB5EnBMx0NE K6STcMI4eiX7VU4Hc0x145ysvi09dNbvEiTo44VVIhswKyWJSIQ0iOoButy9+uxz 8+cNHeqHA1x7NsLcVliG4+DJvt/baSa6C56WQT/HJato2H3TOLhBXqLz3BxonWPJ VQes7pyJEyrdag== -----END CERTIFICATE-----Generated at Tue Dec 16 06:19:51 2025 by rpki-client