This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json) Hash identifier: 1Q01/oa1X767PK/QfvdzxNlCiXUXThDe8E9TEWSvRjE= Subject key identifier: 4C:BD:6F:62:6B:92:A7:33:B0:38:0D:C8:9A:20:7F:7B:0D:47:23:3A Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Certificate serial: 019B2D42185E8B62917AE033F3077D931F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft Manifest number: 0AF1 Signing time: Wed 17 Dec 2025 17:01:04 +0000 Manifest this update: Wed 17 Dec 2025 17:01:04 +0000 Manifest next update: Thu 18 Dec 2025 17:01:04 +0000 Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: V/OsRW5Y4dKE9BSWxNegZxp+70lNn8nvWzVyXYt7XRU=) 2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:18:5e:8b:62:91:7a:e0:33:f3:07:7d:93:1f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Validity Not Before: Dec 17 17:01:04 2025 GMT Not After : Dec 18 17:01:04 2025 GMT Subject: CN=4cbd6f626b92a733b0380dc89a207f7b0d47233a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:69:3c:fc:d1:84:21:24:46:7b:6b:0a:77: 43:64:b7:ec:0c:ef:a8:1e:24:9a:eb:9f:12:ee:1d: 4e:f0:d0:9e:25:26:eb:15:77:f1:23:85:a6:a2:0a: 9f:cd:20:be:bc:41:2b:57:fd:de:95:24:00:74:84: d0:32:d8:02:fa:b8:b8:60:96:a8:db:03:44:f8:99: d1:11:83:f7:dc:b5:19:1f:97:b5:4b:87:d1:b9:94: 58:19:cf:4b:e3:2e:38:f1:a5:20:c6:23:d3:89:1e: 53:ca:9c:08:d1:c2:c7:24:42:d4:6a:cf:8a:11:59: 63:cc:4f:a1:d1:18:af:6e:f4:2f:d2:42:b9:a0:8b: eb:e3:9b:d9:7a:e9:af:c0:7d:7b:38:ce:da:00:5a: a9:76:64:c9:3c:19:36:c9:bd:1a:2b:38:ca:0f:59: 6b:03:72:3a:48:d9:94:04:51:31:45:45:61:f8:38: c8:09:9d:01:70:96:ad:f6:9e:cb:fa:54:ed:4e:ea: 3f:85:55:e7:8d:5c:80:be:7d:3d:bf:11:bb:4b:37: 69:e9:17:aa:9b:70:55:9c:94:fe:1a:1b:41:84:72: 13:77:36:7b:7c:c7:14:32:01:b8:5e:1a:14:0e:cd: cb:f8:64:e8:b2:b1:ae:ba:5f:95:0c:1c:58:28:64: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BD:6F:62:6B:92:A7:33:B0:38:0D:C8:9A:20:7F:7B:0D:47:23:3A X509v3 Authority Key Identifier: keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:df:b1:a9:92:96:39:bd:30:4c:35:be:39:76:95:76:8a:64: cf:fb:5a:2c:cc:c6:85:6d:70:ea:f9:1a:2b:5a:a8:2e:84:b0: b8:48:95:d1:07:e6:14:7a:10:fa:fa:9f:2f:a7:db:79:2c:9e: 95:c3:bf:d6:75:15:2f:40:49:0e:ee:db:13:2f:33:70:5e:e9: 3b:bb:be:7f:ab:5e:a5:85:b6:d1:58:67:58:35:2d:56:2d:86: a5:2e:16:df:a0:ef:fa:8f:6e:12:a7:2b:46:27:9e:e0:d6:da: 05:cb:2b:83:b2:07:c8:39:53:e0:01:34:7b:d9:01:75:64:43: 9a:f7:56:18:9f:d0:ee:d7:4d:18:3e:95:79:80:49:3f:09:fc: d4:6d:5e:e2:c1:1e:de:8b:24:66:29:96:66:67:eb:1c:2b:21: b0:3a:6f:83:70:cd:3c:c1:e4:4b:87:5d:f3:a9:48:ad:63:24: 20:5b:09:d9:07:33:93:c2:f6:54:e6:58:2c:a6:98:03:56:bd: a2:df:24:2d:1a:0e:b5:a6:ba:7f:a2:7e:02:55:48:71:8f:37: 96:74:6c:8e:6a:19:f1:d3:f4:8e:1a:7d:99:39:fa:2b:f9:b7: e5:a9:f8:b6:9e:9d:8c:75:f5:2b:23:ae:5b:8c:4d:95:ff:cc: 31:8d:de:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQhhei2KReuAz8wd9kx9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk MDVjNmYwHhcNMjUxMjE3MTcwMTA0WhcNMjUxMjE4MTcwMTA0WjAzMTEwLwYDVQQD Eyg0Y2JkNmY2MjZiOTJhNzMzYjAzODBkYzg5YTIwN2Y3YjBkNDcyMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLNpPPzRhCEkRntrCndDZLfsDO+o HiSa658S7h1O8NCeJSbrFXfxI4WmogqfzSC+vEErV/3elSQAdITQMtgC+ri4YJao 2wNE+JnREYP33LUZH5e1S4fRuZRYGc9L4y448aUgxiPTiR5TypwI0cLHJELUas+K EVljzE+h0RivbvQv0kK5oIvr45vZeumvwH17OM7aAFqpdmTJPBk2yb0aKzjKD1lr A3I6SNmUBFExRUVh+DjICZ0BcJat9p7L+lTtTuo/hVXnjVyAvn09vxG7Szdp6Req m3BVnJT+GhtBhHITdzZ7fMcUMgG4XhoUDs3L+GTosrGuul+VDBxYKGTIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEy9b2JrkqczsDgNyJogf3sNRyM6MB8GA1UdIwQY MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt+xqZKW Ob0wTDW+OXaVdopkz/taLMzGhW1w6vkaK1qoLoSwuEiV0QfmFHoQ+vqfL6fbeSye lcO/1nUVL0BJDu7bEy8zcF7pO7u+f6tepYW20VhnWDUtVi2GpS4W36Dv+o9uEqcr Riee4NbaBcsrg7IHyDlT4AE0e9kBdWRDmvdWGJ/Q7tdNGD6VeYBJPwn81G1e4sEe 3oskZimWZmfrHCshsDpvg3DNPMHkS4dd86lIrWMkIFsJ2Qczk8L2VOZYLKaYA1a9 ot8kLRoOtaa6f6J+AlVIcY83lnRsjmoZ8dP0jhp9mTn6K/m35an4tp6djHX1KyOu W4xNlf/MMY3eVA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:24:04 2025 by rpki-client