This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json) Hash identifier: GDh9SHQACvrtthCR+rgqfMvTqnu5uC+oMB6g9DGx7eI= Subject key identifier: E4:B6:F8:87:85:22:C8:7C:91:23:3A:3F:0B:1F:A9:88:5F:13:7E:B5 Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Certificate serial: 019AF1648B968DBE06134BD0C6655373CCA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft Manifest number: 0AD2 Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: Bi0cgZTq//w6rTSIZ9ZZdH1RtlPaU9rQbINy5jR+OGA=) 2: p_nbD9KuiCOJzHmbdVr4OiJYuSU.roa (hash: 2YfZYPYmw6whN3cTmCbCktLIftyc5bzNjj98rSEk3Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8b:96:8d:be:06:13:4b:d0:c6:65:53:73:cc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=e4b6f8878522c87c91233a3f0b1fa9885f137eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:8c:70:ae:8a:bb:cc:fc:c4:24:0f:32:19: 80:de:bb:9e:bc:49:4e:51:89:02:89:d7:c3:f1:a5: 43:fa:ab:c3:0c:dd:37:85:56:b6:a0:32:7e:dc:5f: c1:f4:aa:19:93:e6:b1:ce:ff:1a:55:36:99:a7:dc: 5a:d9:b9:d1:a0:60:f1:16:62:d0:de:8f:9a:cd:61: 7d:14:87:7c:16:d8:2c:dc:80:82:66:56:ba:83:07: d7:3c:37:99:b7:eb:ee:18:ff:c9:fa:8a:ed:3b:39: 04:ef:a8:a5:b6:11:7d:b9:58:69:76:67:f9:7e:9c: 41:61:ed:b1:25:5b:e8:91:ec:76:b9:89:24:09:9f: 37:29:ed:11:a1:a8:ce:af:a7:8f:9b:55:8c:68:d5: 38:7b:b1:6e:8a:67:61:9f:57:53:82:d3:0a:c4:d6: d6:99:33:7c:fd:06:0d:b5:79:e1:86:ed:aa:1d:1e: ab:19:42:79:b0:ff:3f:c5:83:4f:fa:84:c3:c8:a9: a8:b5:ec:2f:f6:80:d0:6b:22:9c:42:8b:36:6c:a6: bb:bc:db:4c:d1:a9:fc:ba:55:22:66:8f:45:39:c0: 78:50:4f:a3:56:ec:d5:ee:78:60:48:bf:7d:a7:c2: 35:9c:07:7f:f8:a7:71:d3:c0:0a:47:37:3f:ad:5f: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B6:F8:87:85:22:C8:7C:91:23:3A:3F:0B:1F:A9:88:5F:13:7E:B5 X509v3 Authority Key Identifier: keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9e:3c:8a:4a:28:21:91:1b:2b:05:16:e3:c8:6f:f6:c7:5c: 44:89:7e:9e:b8:0f:e9:e6:1a:21:7a:27:39:4d:ea:86:29:44: a9:7b:30:1d:a7:65:e1:6d:d0:7d:29:6e:07:26:2b:64:73:58: 51:20:8e:5e:27:45:0d:c3:e3:ac:d7:23:88:14:c9:86:2f:ec: 2c:73:9b:a0:5c:21:bd:8f:81:c9:4a:c0:93:ff:28:63:fd:b6: 32:87:80:1d:b3:84:59:b1:a5:d4:bc:cc:11:7a:7a:5d:99:76: 23:16:82:21:e6:25:a2:1c:1d:11:60:2b:cc:d0:45:f8:50:5c: 29:61:07:ee:63:9a:5d:e1:ad:33:ba:c7:d5:7d:13:98:94:2a: ae:e9:7d:0e:11:c8:33:05:62:34:6c:a7:db:df:8c:d6:02:2c: 11:8f:09:d1:93:01:d4:1b:aa:33:ac:84:1f:3c:4e:aa:a5:8d: ce:d4:ef:a2:58:7e:1f:f9:d0:60:94:26:3c:52:ef:da:bc:03: 1e:28:ae:1b:1c:5c:f9:ba:3a:52:48:04:57:d3:f8:16:05:c8: 93:a1:8a:ca:96:77:f9:3e:a5:92:8d:c0:f9:11:92:8d:04:74: 42:b0:33:5c:ca:ae:ae:bb:c5:c6:8c:f8:04:4f:c6:33:2d:2d: 6b:5d:8e:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIuWjb4GE0vQxmVTc8yhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk MDVjNmYwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD EyhlNGI2Zjg4Nzg1MjJjODdjOTEyMzNhM2YwYjFmYTk4ODVmMTM3ZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUGMcK6Ku8z8xCQPMhmA3ruevElO UYkCidfD8aVD+qvDDN03hVa2oDJ+3F/B9KoZk+axzv8aVTaZp9xa2bnRoGDxFmLQ 3o+azWF9FId8Ftgs3ICCZla6gwfXPDeZt+vuGP/J+ortOzkE76ilthF9uVhpdmf5 fpxBYe2xJVvokex2uYkkCZ83Ke0RoajOr6ePm1WMaNU4e7Fuimdhn1dTgtMKxNbW mTN8/QYNtXnhhu2qHR6rGUJ5sP8/xYNP+oTDyKmotewv9oDQayKcQos2bKa7vNtM 0an8ulUiZo9FOcB4UE+jVuzV7nhgSL99p8I1nAd/+Kdx08AKRzc/rV9u4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOS2+IeFIsh8kSM6PwsfqYhfE361MB8GA1UdIwQY MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJ48ikoo IZEbKwUW48hv9sdcRIl+nrgP6eYaIXonOU3qhilEqXswHadl4W3QfSluByYrZHNY USCOXidFDcPjrNcjiBTJhi/sLHOboFwhvY+ByUrAk/8oY/22MoeAHbOEWbGl1LzM EXp6XZl2IxaCIeYlohwdEWArzNBF+FBcKWEH7mOaXeGtM7rH1X0TmJQqrul9DhHI MwViNGyn29+M1gIsEY8J0ZMB1BuqM6yEHzxOqqWNztTvolh+H/nQYJQmPFLv2rwD HiiuGxxc+bo6UkgEV9P4FgXIk6GKypZ3+T6lko3A+RGSjQR0QrAzXMqurrvFxoz4 BE/GMy0ta12Osg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:10 2025 by rpki-client