This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json) Hash identifier: yWIpdXC9Vpi9OyP7/ckhOaCK/IQnrjopFXvzkzYuikU= Subject key identifier: 5B:99:44:75:9D:5E:3E:50:97:FB:EA:7B:8C:2E:84:CF:38:B6:75:39 Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Certificate serial: 019AF3C045316156076CA7EBD193AB8510E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft Manifest number: 0653 Signing time: Sat 06 Dec 2025 13:00:55 +0000 Manifest this update: Sat 06 Dec 2025 13:00:55 +0000 Manifest next update: Sun 07 Dec 2025 13:00:55 +0000 Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=) 2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=) 3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: pSxEozGGp/cU0IRHzQzn6hjWTWtoPYIcKExtUaxs4eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:45:31:61:56:07:6c:a7:eb:d1:93:ab:85:10:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88 Validity Not Before: Dec 6 13:00:55 2025 GMT Not After : Dec 7 13:00:55 2025 GMT Subject: CN=5b9944759d5e3e5097fbea7b8c2e84cf38b67539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:d6:f5:2e:81:15:1a:db:68:66:b2:85:a4: 3b:49:3f:4e:d7:7e:59:ee:3d:84:11:35:77:29:20: c3:ca:f2:ab:d9:3a:0e:2d:57:f7:7d:5a:a5:ba:56: cd:87:f3:37:ef:11:58:73:22:bc:0b:10:11:ee:c4: a0:7e:5a:e4:6d:f3:84:3a:4b:f8:ba:64:d7:57:49: 9e:26:e8:e5:47:1e:ca:2c:72:01:46:07:3e:00:03: 32:d3:e9:4d:5f:9c:9c:1f:85:f4:f6:46:50:ff:60: 4c:9c:c1:33:a1:a6:c7:9f:52:d6:c1:29:b5:d0:16: 19:29:bf:4b:14:9c:e0:76:14:57:48:4a:a3:cc:51: f3:9b:22:d7:d5:37:2a:29:7c:48:c6:7a:df:cc:93: 3d:55:b9:cb:ef:0b:cf:a6:83:4d:fc:99:88:e4:9b: 5e:0b:1e:24:02:00:c2:e9:87:b7:1a:4a:cd:cc:1f: c2:d6:65:23:80:b8:89:26:37:ef:ef:91:df:6f:27: 68:e1:af:c9:13:22:1e:8f:a8:5e:38:14:19:50:32: 8a:4d:97:71:a8:36:90:16:4e:e3:ec:ce:fc:ae:b1: 29:61:17:4a:cd:43:32:b9:72:ed:89:ba:86:e0:ce: 8b:a9:7c:6d:ef:ca:bf:e4:08:09:66:32:e2:e9:f9: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:99:44:75:9D:5E:3E:50:97:FB:EA:7B:8C:2E:84:CF:38:B6:75:39 X509v3 Authority Key Identifier: keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:39:80:33:c8:af:cf:3b:81:c5:a3:f6:81:04:cf:24:6c:e6: d2:d0:c9:cb:02:b7:f0:24:a2:e2:33:8f:3b:59:27:fb:93:c7: f9:c0:7b:cb:3f:62:c4:64:73:19:1f:37:2e:b7:ff:c0:fd:f8: cb:71:02:69:48:ea:7e:40:c6:4f:48:ef:fc:f4:5d:b9:a6:ad: 4e:b1:36:a2:a2:b0:7a:03:8e:3c:0e:14:c4:fe:ea:ef:05:62: 41:f9:8d:c1:d8:98:96:7e:f5:93:3b:93:a4:03:86:6f:ce:7a: 17:f0:82:64:14:1f:4a:ef:cf:90:8e:c7:86:5b:43:1f:19:6f: ea:ee:88:75:87:97:47:94:7d:2e:5a:49:b5:fe:2e:b7:2c:5f: 9b:44:69:c6:89:ca:cd:45:1e:dd:da:1a:99:d0:cd:d2:b8:e7: df:80:76:60:a8:95:ee:96:ba:2a:dc:78:08:b3:a3:eb:74:01: 31:09:91:9c:73:c3:96:9d:61:32:db:32:51:81:12:28:59:66: e8:37:04:eb:27:bf:c9:5f:01:bd:fb:06:98:c5:09:db:ad:bb: 82:4d:e0:20:b3:ed:88:cf:2e:f2:29:1e:2c:8b:43:d5:8b:c3: ef:18:f7:dc:ae:fe:4e:40:e0:27:36:86:77:f0:84:e4:58:e6: ac:6e:98:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEUxYVYHbKfr0ZOrhRDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl NTdmODgwHhcNMjUxMjA2MTMwMDU1WhcNMjUxMjA3MTMwMDU1WjAzMTEwLwYDVQQD Eyg1Yjk5NDQ3NTlkNWUzZTUwOTdmYmVhN2I4YzJlODRjZjM4YjY3NTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJXW9S6BFRrbaGayhaQ7ST9O135Z 7j2EETV3KSDDyvKr2ToOLVf3fVqlulbNh/M37xFYcyK8CxAR7sSgflrkbfOEOkv4 umTXV0meJujlRx7KLHIBRgc+AAMy0+lNX5ycH4X09kZQ/2BMnMEzoabHn1LWwSm1 0BYZKb9LFJzgdhRXSEqjzFHzmyLX1TcqKXxIxnrfzJM9VbnL7wvPpoNN/JmI5Jte Cx4kAgDC6Ye3GkrNzB/C1mUjgLiJJjfv75Hfbydo4a/JEyIej6heOBQZUDKKTZdx qDaQFk7j7M78rrEpYRdKzUMyuXLtibqG4M6LqXxt78q/5AgJZjLi6fmVzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuZRHWdXj5Ql/vqe4wuhM84tnU5MB8GA1UdIwQY MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut YTg5NzU5ZDcwNzFjLzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDmAM8iv zzuBxaP2gQTPJGzm0tDJywK38CSi4jOPO1kn+5PH+cB7yz9ixGRzGR83Lrf/wP34 y3ECaUjqfkDGT0jv/PRduaatTrE2oqKwegOOPA4UxP7q7wViQfmNwdiYln71kzuT pAOGb856F/CCZBQfSu/PkI7HhltDHxlv6u6IdYeXR5R9LlpJtf4utyxfm0RpxonK zUUe3doamdDN0rjn34B2YKiV7pa6Ktx4CLOj63QBMQmRnHPDlp1hMtsyUYESKFlm 6DcE6ye/yV8BvfsGmMUJ2627gk3gILPtiM8u8ikeLItD1YvD7xj33K7+TkDgJzaG d/CE5FjmrG6YPA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:22 2025 by rpki-client