This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json) Hash identifier: 9VMqS2v2Rh5Yd6vcwVeMWztr+rM3+LlvWjDe7IRJ+ks= Subject key identifier: 77:43:A1:C8:7C:64:6C:4B:C7:F0:F1:BB:E5:B8:1F:AA:9B:A1:D1:F9 Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Certificate serial: 019AF1644E4EAA4684909BD9E181F7F86FFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft Manifest number: 03FC Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=) 2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: +urAr3ChKfs2pDFEWiC2PaxrzcYH4wsRTq+ZMJlAu/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4e:4e:aa:46:84:90:9b:d9:e1:81:f7:f8:6f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=7743a1c87c646c4bc7f0f1bbe5b81faa9ba1d1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:88:99:0e:c5:97:99:48:f4:76:1f:fd:c7:2e: 51:e7:31:6d:e8:95:3d:87:e8:f2:f3:af:92:e5:19: d2:2c:67:de:ac:c3:1a:23:27:63:02:89:60:80:28: 0b:71:53:e2:1f:d7:83:f7:00:d9:66:e8:b7:bf:3b: e8:11:85:1e:2e:35:cb:9d:16:a2:5b:c5:4e:01:0e: b1:59:bf:be:f1:fb:4f:41:3b:f7:53:ff:54:f0:b6: 94:df:4c:7d:fa:f1:9c:4e:3d:9b:1d:b7:94:37:54: 9c:59:d8:fb:f8:74:e0:d4:d3:35:a5:f2:86:31:27: c8:98:d5:e2:5b:54:12:8d:b0:8e:6c:08:7f:8d:f7: 08:20:a3:d0:e8:5f:1e:12:d2:c9:a6:84:c1:17:69: d1:b7:dd:fe:67:f3:66:ce:46:c0:d5:f9:61:42:55: e8:87:a5:dd:db:89:7c:59:ea:4d:d2:9e:85:41:b9: ad:c7:11:13:72:01:36:07:9e:c8:e4:f8:65:42:44: e3:37:4c:9a:a2:a2:16:0a:cd:18:74:56:5a:74:01: c0:ca:3b:99:a3:98:84:47:ae:14:dd:cd:fa:0e:5b: 42:71:49:84:a0:fc:10:68:59:e9:2e:f2:fa:ec:3f: 37:91:c9:7b:b2:95:2c:36:cc:aa:42:80:84:3f:97: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:43:A1:C8:7C:64:6C:4B:C7:F0:F1:BB:E5:B8:1F:AA:9B:A1:D1:F9 X509v3 Authority Key Identifier: keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2f:d7:2b:c4:bb:00:15:01:50:3b:b0:c0:5d:71:27:74:6e: a8:19:e3:b7:e0:ef:99:d6:17:70:37:b8:6e:8c:ab:f1:f9:e1: e6:25:46:19:ca:58:7e:b3:16:9b:df:07:01:42:5f:40:fa:97: 71:0b:b9:8e:59:1a:be:ad:64:bf:49:3f:23:2c:0f:61:b4:cd: ab:da:f8:8e:a9:1f:db:b6:16:f0:4b:c3:26:ac:1b:52:9e:71: a6:2d:7e:b7:8c:dc:49:c0:41:1a:58:1e:ba:64:d3:85:c1:6d: ac:bf:9a:52:79:bf:96:59:0f:ea:f2:22:33:06:21:7b:53:56: e4:a3:00:2f:21:f8:7b:8a:fc:31:07:54:fc:a1:d3:e7:ac:a4: 0b:3e:6e:00:ea:db:b9:46:1f:f7:56:25:6f:27:9e:c8:6e:19: 12:5f:59:48:eb:4a:c0:dc:0b:e2:0c:98:d9:ef:87:cb:46:c0: 03:c3:a3:ce:8f:2b:02:eb:ca:ae:97:1b:23:55:ee:c0:a5:52: 03:41:f3:17:0d:13:3c:3f:97:87:9c:f8:0e:c1:d3:92:01:13: 35:c8:63:7b:56:20:59:22:11:32:17:fc:c2:17:77:3b:ca:13: 8d:83:16:f8:b0:53:e6:fb:39:f6:15:31:13:25:93:83:67:8e: 51:a6:7c:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZE5OqkaEkJvZ4YH3+G//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOWZkMmNkZGY0YjQ0ZGU3OWE1YmZjOGNhMTlhNTZmNTUy ZWI0ZTgwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD Eyg3NzQzYTFjODdjNjQ2YzRiYzdmMGYxYmJlNWI4MWZhYTliYTFkMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64iZDsWXmUj0dh/9xy5R5zFt6JU9 h+jy86+S5RnSLGferMMaIydjAolggCgLcVPiH9eD9wDZZui3vzvoEYUeLjXLnRai W8VOAQ6xWb++8ftPQTv3U/9U8LaU30x9+vGcTj2bHbeUN1ScWdj7+HTg1NM1pfKG MSfImNXiW1QSjbCObAh/jfcIIKPQ6F8eEtLJpoTBF2nRt93+Z/NmzkbA1flhQlXo h6Xd24l8WepN0p6FQbmtxxETcgE2B57I5PhlQkTjN0yaoqIWCs0YdFZadAHAyjuZ o5iER64U3c36DltCcUmEoPwQaFnpLvL67D83kcl7spUsNsyqQoCEP5fe/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdDoch8ZGxLx/Dxu+W4H6qbodH5MB8GA1UdIwQY MBaAFIqf0s3fS0TeeaW/yMoZpW9VLrToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgt NDRlZjU2NzRmZTMwLzEvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgtNDRlZjU2NzRmZTMw LzEvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi/XK8S7 ABUBUDuwwF1xJ3RuqBnjt+DvmdYXcDe4boyr8fnh5iVGGcpYfrMWm98HAUJfQPqX cQu5jlkavq1kv0k/IywPYbTNq9r4jqkf27YW8EvDJqwbUp5xpi1+t4zcScBBGlge umTThcFtrL+aUnm/llkP6vIiMwYhe1NW5KMALyH4e4r8MQdU/KHT56ykCz5uAOrb uUYf91YlbyeeyG4ZEl9ZSOtKwNwL4gyY2e+Hy0bAA8Ojzo8rAuvKrpcbI1XuwKVS A0HzFw0TPD+Xh5z4DsHTkgETNchje1YgWSIRMhf8whd3O8oTjYMW+LBT5vs59hUx EyWTg2eOUaZ8yA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:50 2025 by rpki-client