This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json) Hash identifier: hjT/krVY8yJ1Jo+xnpQthRR0sRypdkKy4oprCdpc5aY= Subject key identifier: 6B:53:83:7C:8A:8B:63:EB:0B:A7:46:3E:BF:B7:08:C2:08:2E:54:B9 Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7 Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7 Certificate serial: 019AF12E935BD2B3EB687B826F51E7B35A7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft Manifest number: 125E Signing time: Sat 06 Dec 2025 01:02:32 +0000 Manifest this update: Sat 06 Dec 2025 01:02:32 +0000 Manifest next update: Sun 07 Dec 2025 01:02:32 +0000 Files and hashes: 1: 3Uvg-SGM_zlK_SKX6X83CL5pES4.roa (hash: txSz1BVeFo/z2vKlSjUFGN00mKoCcahrUY9+MYjGUZA=) 2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: 7xeUiwgfVwovh1730N6YRAtpTVfjaTfCIYmJVNTyVo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:93:5b:d2:b3:eb:68:7b:82:6f:51:e7:b3:5a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7 Validity Not Before: Dec 6 01:02:32 2025 GMT Not After : Dec 7 01:02:32 2025 GMT Subject: CN=6b53837c8a8b63eb0ba7463ebfb708c2082e54b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:de:92:27:48:9d:49:5b:16:39:68:e4:8d: 28:00:33:a8:26:3d:1c:d5:a4:f5:ba:a1:74:7d:f3: ed:28:c3:12:5d:2a:02:93:e5:59:0b:d0:bb:e5:dd: ab:d9:63:4f:c2:d4:76:31:74:81:e6:ca:11:fb:05: 35:2d:db:1d:51:5e:92:3f:1c:1e:ee:b4:4c:cd:51: ab:56:b5:31:46:3b:cb:ce:a0:22:99:15:3d:11:8a: c4:71:15:e6:03:86:65:5c:a7:5e:2e:c4:f5:b4:0b: 97:b3:b5:65:6f:31:d5:10:98:86:68:d8:c8:84:66: 70:59:c6:84:c4:ce:a5:2f:7f:f6:31:52:34:25:34: 2f:08:c2:9e:06:17:86:b2:5c:be:80:6c:26:0c:81: 0a:bb:76:50:14:69:63:49:4e:a3:60:d6:e2:6e:88: b9:bf:a6:59:0d:68:18:6d:f3:81:e2:18:4a:ff:ed: f1:b8:ba:46:05:75:42:c7:96:13:ed:9a:36:5f:cc: 68:f4:77:20:b5:4a:37:94:56:3d:2f:90:17:59:d5: 0c:a0:b0:4e:9c:67:42:20:eb:a7:9d:dc:4b:db:04: 28:f0:cb:35:bc:ee:8e:08:3e:85:10:1b:3a:86:f6: 61:49:8c:d8:83:0d:9b:74:40:93:a8:82:f5:2c:db: 7f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:53:83:7C:8A:8B:63:EB:0B:A7:46:3E:BF:B7:08:C2:08:2E:54:B9 X509v3 Authority Key Identifier: keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:65:56:5d:e5:fe:57:b4:07:5e:2c:da:0d:d9:ab:5c:7d:56: 04:8a:e6:7c:02:b1:ed:49:c0:52:e3:57:b2:08:0a:2e:33:ab: e7:6f:18:a6:ba:08:bc:6b:1a:ba:4b:9b:c6:ca:8c:bf:d3:5c: ab:ca:9a:82:3e:83:31:3f:e1:73:a6:a6:49:11:4d:43:56:2b: f1:82:43:93:c1:ba:39:63:e7:ef:c6:61:4c:23:09:23:f1:ce: c0:cd:c2:f7:4a:bb:59:6e:dc:42:89:3f:10:8c:c9:4d:b8:92: b2:40:25:6d:06:54:b6:a9:0d:f4:71:c7:67:7b:e1:1e:89:ea: 2e:8b:69:d6:10:46:35:0d:fd:5e:9c:4b:c9:14:f0:65:bc:56: b5:f3:2e:2f:e0:07:9b:58:8e:a8:49:80:a5:84:5a:2f:f8:91: de:f7:15:e3:b4:ba:fc:17:da:63:f9:a2:7b:b3:c3:7f:8c:cb: 20:d9:ed:e2:16:35:b8:d9:3b:fa:f1:e6:3a:21:7a:55:5a:53: a2:01:af:b7:e5:71:9a:7c:94:0f:14:4a:35:4b:3f:1f:44:4b: 1b:5d:70:82:eb:8d:65:b3:af:29:b5:e3:d4:a0:49:e9:e6:3c: c3:76:f5:19:5b:fc:62:04:28:2b:ba:00:9b:02:1f:1c:42:1a: 64:8d:48:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpNb0rPraHuCb1Hns1p/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMzk4YjViMWQ5YTk2ZTQxMTViN2JjZjZmY2E2M2ZiYWY2 MzljYTcwHhcNMjUxMjA2MDEwMjMyWhcNMjUxMjA3MDEwMjMyWjAzMTEwLwYDVQQD Eyg2YjUzODM3YzhhOGI2M2ViMGJhNzQ2M2ViZmI3MDhjMjA4MmU1NGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3fekidInUlbFjlo5I0oADOoJj0c 1aT1uqF0ffPtKMMSXSoCk+VZC9C75d2r2WNPwtR2MXSB5soR+wU1LdsdUV6SPxwe 7rRMzVGrVrUxRjvLzqAimRU9EYrEcRXmA4ZlXKdeLsT1tAuXs7VlbzHVEJiGaNjI hGZwWcaExM6lL3/2MVI0JTQvCMKeBheGsly+gGwmDIEKu3ZQFGljSU6jYNbiboi5 v6ZZDWgYbfOB4hhK/+3xuLpGBXVCx5YT7Zo2X8xo9HcgtUo3lFY9L5AXWdUMoLBO nGdCIOunndxL2wQo8Ms1vO6OCD6FEBs6hvZhSYzYgw2bdECTqIL1LNt/MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtTg3yKi2PrC6dGPr+3CMIILlS5MB8GA1UdIwQY MBaAFLM5i1sdmpbkEVt7z2/KY/uvY5ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQt NzljYzUyYzA2ZDRmLzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQtNzljYzUyYzA2ZDRm LzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWVWXeX+ V7QHXizaDdmrXH1WBIrmfAKx7UnAUuNXsggKLjOr528YproIvGsaukubxsqMv9Nc q8qagj6DMT/hc6amSRFNQ1Yr8YJDk8G6OWPn78ZhTCMJI/HOwM3C90q7WW7cQok/ EIzJTbiSskAlbQZUtqkN9HHHZ3vhHonqLotp1hBGNQ39XpxLyRTwZbxWtfMuL+AH m1iOqEmApYRaL/iR3vcV47S6/BfaY/mie7PDf4zLINnt4hY1uNk7+vHmOiF6VVpT ogGvt+VxmnyUDxRKNUs/H0RLG11wguuNZbOvKbXj1KBJ6eY8w3b1GVv8YgQoK7oA mwIfHEIaZI1IdA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:13 2025 by rpki-client