This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json) Hash identifier: bqM+VXwodLPvzI+5kZ45e4OyAITNYvxoMhvvlvfYXOw= Subject key identifier: 02:6C:48:08:34:2D:BE:CF:D1:0E:99:D7:BF:19:3B:7E:34:27:7C:92 Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce Certificate serial: 019AF1D1EA1CAE55F5B0E515214C22CF7078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: C3YtnJohATd3dEST9xOFDpEwqK4ADYGWfvuM81FUy/g=) 2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ea:1c:ae:55:f5:b0:e5:15:21:4c:22:cf:70:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=026c4808342dbecfd10e99d7bf193b7e34277c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:13:60:6c:85:4e:18:b3:7b:b4:ac:ad:2d: eb:55:60:26:f9:e1:82:ae:4d:33:8c:73:9b:c2:cd: bc:2c:0e:a3:49:81:2b:42:44:ff:99:d9:c3:f9:04: 2d:05:2c:39:f3:0e:22:d5:63:bb:a6:3e:09:22:f1: 8f:bb:b9:e7:71:3f:cf:10:33:5b:fc:de:47:18:db: 23:19:63:94:d5:33:50:22:e9:dd:42:c7:e6:03:a6: 34:fd:d3:8a:80:70:09:02:f2:a1:22:61:f1:8a:83: d6:38:82:52:7a:7c:46:27:ec:2e:c4:47:a1:77:23: 8b:cd:e3:08:38:e1:75:20:ed:eb:85:a7:40:ee:59: 02:26:2e:61:ff:e8:cf:66:ea:42:f3:f4:b3:15:88: 5b:8f:92:88:e6:df:1d:3c:aa:9b:f4:ca:99:76:0a: e7:39:12:8f:f6:50:02:b6:d0:5a:b6:47:70:49:28: be:28:61:3d:c0:87:ce:c7:16:6b:92:4f:b6:94:a2: 64:5b:c3:13:47:5c:45:6b:0d:28:b6:23:35:5b:84: 4d:98:10:8f:30:27:6a:fe:47:93:c3:3b:e3:a3:da: 4f:85:a0:c0:91:ac:4e:5c:4f:f0:b6:3c:ac:c3:b4: 8c:64:7f:b1:a5:e3:ad:47:44:77:6e:b0:4c:4b:9d: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6C:48:08:34:2D:BE:CF:D1:0E:99:D7:BF:19:3B:7E:34:27:7C:92 X509v3 Authority Key Identifier: keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:91:e2:a2:67:7f:9f:c1:d4:a0:79:20:3e:91:7f:c7:6c:d5: af:69:45:ab:c9:7d:a1:5e:0c:45:f4:78:f0:81:1e:40:33:e3: 72:e7:49:75:dd:d7:82:47:c9:ac:46:87:f8:5a:4b:a6:0a:ff: a0:d2:4c:e2:c6:81:9b:8e:0e:4d:46:e9:c8:b7:0a:51:19:53: bc:97:30:62:51:d9:d4:2c:97:f0:ee:9e:be:89:7b:f5:7f:32: f2:8b:95:fd:cc:be:60:29:fc:ef:41:19:63:12:8a:3e:fa:8d: 47:08:24:57:fe:e7:82:f9:d0:93:73:90:1d:6b:fa:8f:65:31: 75:f1:05:ae:cb:5b:8a:17:62:9d:e6:8e:f9:15:44:da:81:f2: 6b:13:08:e3:41:37:55:b1:e0:ca:33:39:b5:8c:f7:21:8a:4b: 2e:60:5a:5b:26:ba:02:58:74:1e:7f:5d:44:7e:c2:53:3b:b5: 24:d8:58:a6:20:fc:0d:c4:d6:fe:27:c0:c8:57:4b:d1:91:8b: 4b:31:a6:81:dc:81:57:7d:21:8a:6e:94:3c:26:a8:d6:ae:fc: 41:3f:ac:4a:e5:80:29:70:13:9d:95:fa:70:74:0e:2e:5c:4b: 9a:84:9a:ae:ac:a6:ae:d7:dc:ba:02:8d:2b:3b:25:79:89:7e: 23:21:19:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eocrlX1sOUVIUwiz3B4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OWYwM2U0OGVkNjJhOTY4NDBlYjJmMmQ3OWMzZWMyMWEy N2YxY2UwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EygwMjZjNDgwODM0MmRiZWNmZDEwZTk5ZDdiZjE5M2I3ZTM0Mjc3YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQgTYGyFThize7SsrS3rVWAm+eGC rk0zjHObws28LA6jSYErQkT/mdnD+QQtBSw58w4i1WO7pj4JIvGPu7nncT/PEDNb /N5HGNsjGWOU1TNQIundQsfmA6Y0/dOKgHAJAvKhImHxioPWOIJSenxGJ+wuxEeh dyOLzeMIOOF1IO3rhadA7lkCJi5h/+jPZupC8/SzFYhbj5KI5t8dPKqb9MqZdgrn ORKP9lACttBatkdwSSi+KGE9wIfOxxZrkk+2lKJkW8MTR1xFaw0otiM1W4RNmBCP MCdq/keTwzvjo9pPhaDAkaxOXE/wtjysw7SMZH+xpeOtR0R3brBMS500lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJsSAg0Lb7P0Q6Z178ZO340J3ySMB8GA1UdIwQY MBaAFEmfA+SO1iqWhA6y8tecPsIaJ/HOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAt NDIyZTZkM2ZlOTNlLzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAtNDIyZTZkM2ZlOTNl LzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJHiomd/ n8HUoHkgPpF/x2zVr2lFq8l9oV4MRfR48IEeQDPjcudJdd3XgkfJrEaH+FpLpgr/ oNJM4saBm44OTUbpyLcKURlTvJcwYlHZ1CyX8O6evol79X8y8ouV/cy+YCn870EZ YxKKPvqNRwgkV/7ngvnQk3OQHWv6j2UxdfEFrstbihdineaO+RVE2oHyaxMI40E3 VbHgyjM5tYz3IYpLLmBaWya6Alh0Hn9dRH7CUzu1JNhYpiD8DcTW/ifAyFdL0ZGL SzGmgdyBV30him6UPCao1q78QT+sSuWAKXATnZX6cHQOLlxLmoSarqymrtfcugKN KzsleYl+IyEZjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:10 2025 by rpki-client