This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json) Hash identifier: UjBN92viMLzU/3phnH0BhFyH59M3rKtsUbpjTzF7n44= Subject key identifier: B5:6A:13:60:9E:44:E4:AB:BC:30:9E:78:96:15:93:5B:F2:58:C6:34 Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611 Certificate serial: 019AF389DA48D9AAD7EB4C1CC08BEE0047FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft Manifest number: 1225 Signing time: Sat 06 Dec 2025 12:01:29 +0000 Manifest this update: Sat 06 Dec 2025 12:01:29 +0000 Manifest next update: Sun 07 Dec 2025 12:01:29 +0000 Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=) 2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: GS/i9O7dTwT1+SWuSHHnUvsdLO0LD1doK/RSvUjj3mc=) 3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:da:48:d9:aa:d7:eb:4c:1c:c0:8b:ee:00:47:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611 Validity Not Before: Dec 6 12:01:29 2025 GMT Not After : Dec 7 12:01:29 2025 GMT Subject: CN=b56a13609e44e4abbc309e789615935bf258c634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:3a:62:34:33:38:f2:69:50:0a:6d:e6:f2: b3:54:de:e9:7e:d8:5d:63:ad:d1:31:0a:51:95:07: 80:aa:69:df:ce:bc:96:d0:04:93:32:71:16:9d:b9: a1:e6:84:dd:02:10:94:83:06:61:04:89:c8:6f:6a: c2:b2:50:11:97:1c:46:b4:e4:c4:8e:74:5b:bc:b7: 31:e0:bf:23:fc:fc:b6:3b:8f:e8:2a:8d:83:4e:58: e7:23:da:67:0a:7b:e2:a1:9a:dd:fd:2c:9d:22:3d: 6c:b6:de:0f:30:e9:d7:fe:0b:77:91:2e:d7:e4:02: 6c:90:f6:8b:59:ec:a3:01:ed:73:c4:01:74:47:5e: 60:35:f6:b0:88:96:38:13:95:11:98:e2:32:a6:24: f9:d3:c2:82:c6:8c:8f:c3:f0:ef:96:a8:62:4f:98: 02:49:bd:b3:7d:44:fb:37:56:c3:a6:51:84:94:e8: e6:38:0a:cf:43:2b:6d:3d:e3:0f:98:b2:95:10:08: b0:3c:db:03:88:44:a4:1e:03:83:e2:f0:8e:a8:a4: f9:3a:05:62:e0:c0:d3:a9:2b:a7:fc:4e:d1:ee:11: 98:bf:58:33:c0:e1:aa:26:5d:42:f9:09:8d:01:dd: 78:69:3a:53:f2:19:36:b9:18:c7:3d:9c:6d:c7:b9: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:13:60:9E:44:E4:AB:BC:30:9E:78:96:15:93:5B:F2:58:C6:34 X509v3 Authority Key Identifier: keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c9:c0:c6:2b:28:2a:33:c8:44:27:bf:f8:4a:9f:ad:bf:70: 44:aa:c0:33:0b:d2:d9:cf:7f:fb:3a:dc:ef:f6:d8:34:4f:ad: 60:93:47:3a:bb:81:7e:b5:06:06:2a:4d:10:ef:48:93:20:e1: af:8a:9c:2f:b3:42:a8:52:ac:3d:1b:37:8f:71:8a:29:50:e9: db:84:3f:c6:f4:56:01:cf:45:ea:29:63:c4:0a:fd:bf:f8:33: 85:d6:db:1d:71:5f:d7:47:93:bc:74:aa:15:7b:62:73:85:21: a9:2f:35:31:18:4a:0a:9e:b6:3a:eb:73:dc:83:df:f9:db:0d: d8:bf:c0:01:75:24:f7:6b:e7:43:54:fe:0c:88:83:0f:2b:42: 18:ec:f8:2c:5e:97:5e:6b:d0:b1:e0:dd:1a:67:2a:af:1c:e3: f3:a7:c7:e4:85:88:c5:f3:e3:df:b5:0a:cc:6c:e1:7a:b7:13: 41:c9:20:83:d6:19:5e:f0:85:54:90:a9:03:60:e5:93:4f:7b: 69:2d:2d:98:27:a8:50:16:d0:d0:1c:60:ed:17:4a:fc:ad:c8: ad:31:88:db:52:94:1d:58:5b:19:81:0a:20:6c:c3:ec:23:22: 03:35:ce:d0:6d:58:14:c6:29:b1:f8:28:62:13:a5:5b:90:58: 6b:7f:6d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidpI2arX60wcwIvuAEf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OTkwMTBiYmIxZjQ4NzA5YWVhYzAyZTg0MzM4YTQ5Yjc3 NzQ2MTEwHhcNMjUxMjA2MTIwMTI5WhcNMjUxMjA3MTIwMTI5WjAzMTEwLwYDVQQD EyhiNTZhMTM2MDllNDRlNGFiYmMzMDllNzg5NjE1OTM1YmYyNThjNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMs6YjQzOPJpUApt5vKzVN7pfthd Y63RMQpRlQeAqmnfzryW0ASTMnEWnbmh5oTdAhCUgwZhBInIb2rCslARlxxGtOTE jnRbvLcx4L8j/Py2O4/oKo2DTljnI9pnCnvioZrd/SydIj1stt4PMOnX/gt3kS7X 5AJskPaLWeyjAe1zxAF0R15gNfawiJY4E5URmOIypiT508KCxoyPw/DvlqhiT5gC Sb2zfUT7N1bDplGElOjmOArPQyttPeMPmLKVEAiwPNsDiESkHgOD4vCOqKT5OgVi 4MDTqSun/E7R7hGYv1gzwOGqJl1C+QmNAd14aTpT8hk2uRjHPZxtx7nceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVqE2CeROSrvDCeeJYVk1vyWMY0MB8GA1UdIwQY MBaAFEmZAQu7H0hwmurALoQzikm3d0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjkt NWZlOGFmYTM1ZGY2LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mYzFmY2YtMmM3NS00MWE2LTgxZjktNWZlOGFmYTM1ZGY2 LzEvU1prQkM3c2ZTSENhNnNBdWhET0tTYmQzUmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcnAxiso KjPIRCe/+Eqfrb9wRKrAMwvS2c9/+zrc7/bYNE+tYJNHOruBfrUGBipNEO9IkyDh r4qcL7NCqFKsPRs3j3GKKVDp24Q/xvRWAc9F6iljxAr9v/gzhdbbHXFf10eTvHSq FXtic4UhqS81MRhKCp62Outz3IPf+dsN2L/AAXUk92vnQ1T+DIiDDytCGOz4LF6X XmvQseDdGmcqrxzj86fH5IWIxfPj37UKzGzhercTQckgg9YZXvCFVJCpA2Dlk097 aS0tmCeoUBbQ0Bxg7RdK/K3IrTGI21KUHVhbGYEKIGzD7CMiAzXO0G1YFMYpsfgo YhOlW5BYa39tAg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:36 2025 by rpki-client