This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json) Hash identifier: EHCPdFuvTWt/UYtLLsD98fBqujsc04BKROw1yGQc1Js= Subject key identifier: 4E:57:B2:6F:F4:13:8F:13:E1:4C:8A:FC:83:97:58:8A:05:4F:CB:6C Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e Certificate serial: 019AF19BA477B2884BC3643D2DC34A64B02A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft Manifest number: 0FE9 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: njNrbvfWag50quycr9slLMYBupGtEsVmhi9J47BHuZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a4:77:b2:88:4b:c3:64:3d:2d:c3:4a:64:b0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=4e57b26ff4138f13e14c8afc8397588a054fcb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:e9:73:8f:d5:c2:38:e6:c1:a0:ac:61:8d: c3:a6:41:43:fa:91:29:58:57:9d:48:35:bc:57:8e: 4f:bf:32:1f:a4:6e:20:fa:43:c7:3d:03:c8:0d:dd: d3:00:97:ab:ac:ce:69:95:71:24:77:49:6c:a2:2b: 1d:30:19:27:7e:bc:c5:58:85:b6:51:f7:9d:60:c7: 65:e3:be:b4:a5:2a:c2:1d:28:de:78:c6:95:a9:d7: 10:14:f8:aa:f1:ad:71:ca:a5:23:46:3c:27:60:b1: f9:b4:46:e9:7c:5e:30:c0:a6:7b:84:56:ee:42:75: ca:8a:3f:87:18:47:9f:9b:0c:85:6a:e2:ee:7b:d3: b1:60:79:6c:40:97:55:d9:ef:07:3b:6a:f3:dc:3e: 66:c9:95:18:63:61:de:c9:56:a5:ec:67:e1:a9:5f: 18:1e:44:7b:7a:11:15:58:f1:13:8a:47:37:7e:d1: af:9d:10:63:b6:34:ad:5f:fc:fa:97:7c:c4:82:de: ea:12:ae:4f:e7:b6:75:8d:44:f4:f8:8f:9e:97:b6: f9:7f:ea:75:0e:86:16:8f:e9:0c:2c:04:43:99:89: d8:82:19:05:90:e2:d9:7b:3f:8e:81:7d:a1:56:8e: ea:ec:10:82:5a:2d:c4:87:b2:3a:74:68:16:9e:bf: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:57:B2:6F:F4:13:8F:13:E1:4C:8A:FC:83:97:58:8A:05:4F:CB:6C X509v3 Authority Key Identifier: keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:17:5a:6a:25:fe:54:40:49:0e:4f:8b:68:c9:6e:de:9c:92: 41:e7:9b:07:03:bd:af:c1:19:b3:f2:f8:10:53:13:d9:f9:c1: dc:02:3b:6b:16:68:55:ba:05:3a:de:28:b9:71:3b:64:2e:bd: 44:97:9b:af:89:a2:4a:36:65:df:c1:2c:22:d2:99:58:00:8c: fb:64:fa:d9:83:ec:f3:4e:d7:cb:86:ce:fc:06:b3:66:d0:93: 6e:a1:b2:f7:67:1a:41:8d:a0:cf:26:e5:de:3d:a2:dd:29:85: ab:b6:5a:ae:1b:f0:4d:98:9d:47:87:6f:c2:5a:34:88:e9:ae: dc:72:75:1e:55:70:a1:ef:89:56:71:1c:91:c9:31:fe:3a:cb: 7f:4f:da:e8:66:c2:2c:0a:9d:46:25:ee:5e:04:7d:80:27:4a: b9:3a:57:70:ef:36:6d:55:40:e2:6c:2b:5e:93:f9:1a:c8:3f: 25:7a:8a:fd:fa:30:d0:49:4d:3c:04:9d:aa:56:a6:78:77:c5: 4b:0c:9d:43:b7:3e:71:46:fa:7b:1f:2d:c2:2e:68:0a:67:97: 47:64:f1:82:a2:8a:02:80:fa:c3:3f:c7:ae:ab:84:ba:e5:be: 94:e4:39:4b:df:94:7a:1e:b1:22:ea:87:79:ff:f6:d6:ec:44: 28:fc:b0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6R3sohLw2Q9LcNKZLAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMzgxYmFhMGEwYWRkMzJhOWY5NDE0ZjliMmM5YTVhMzIy NTM0MmUwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD Eyg0ZTU3YjI2ZmY0MTM4ZjEzZTE0YzhhZmM4Mzk3NTg4YTA1NGZjYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRXpc4/VwjjmwaCsYY3DpkFD+pEp WFedSDW8V45PvzIfpG4g+kPHPQPIDd3TAJerrM5plXEkd0lsoisdMBknfrzFWIW2 UfedYMdl4760pSrCHSjeeMaVqdcQFPiq8a1xyqUjRjwnYLH5tEbpfF4wwKZ7hFbu QnXKij+HGEefmwyFauLue9OxYHlsQJdV2e8HO2rz3D5myZUYY2HeyVal7GfhqV8Y HkR7ehEVWPETikc3ftGvnRBjtjStX/z6l3zEgt7qEq5P57Z1jUT0+I+el7b5f+p1 DoYWj+kMLARDmYnYghkFkOLZez+OgX2hVo7q7BCCWi3Eh7I6dGgWnr98AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5Xsm/0E48T4UyK/IOXWIoFT8tsMB8GA1UdIwQY MBaAFEs4G6oKCt0yqflBT5ssmloyJTQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2Yt NjJmOWY0NDZhZDAxLzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMTZjMTUtZGU3Ni00MzNkLWI5N2YtNjJmOWY0NDZhZDAx LzEvU3pnYnFnb0szVEtwLVVGUG15eWFXaklsTkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxdaaiX+ VEBJDk+LaMlu3pySQeebBwO9r8EZs/L4EFMT2fnB3AI7axZoVboFOt4ouXE7ZC69 RJebr4miSjZl38EsItKZWACM+2T62YPs807Xy4bO/AazZtCTbqGy92caQY2gzybl 3j2i3SmFq7ZarhvwTZidR4dvwlo0iOmu3HJ1HlVwoe+JVnEckckx/jrLf0/a6GbC LAqdRiXuXgR9gCdKuTpXcO82bVVA4mwrXpP5Gsg/JXqK/fow0ElNPASdqlameHfF SwydQ7c+cUb6ex8twi5oCmeXR2TxgqKKAoD6wz/HrquEuuW+lOQ5S9+Ueh6xIuqH ef/21uxEKPywxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:08 2025 by rpki-client