This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json) Hash identifier: sB1nPsKKn06uzzHy3741Cl6ajqQcsAocoMDhWKKES2Q= Subject key identifier: 54:08:1F:19:DE:D2:DD:B4:AF:99:18:01:FB:D2:E0:35:06:71:6C:88 Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0 Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0 Certificate serial: 019B3DC74F58DDBBD6B3A63033160D9C547C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft Manifest number: 0F4A Signing time: Sat 20 Dec 2025 22:00:30 +0000 Manifest this update: Sat 20 Dec 2025 22:00:30 +0000 Manifest next update: Sun 21 Dec 2025 22:00:30 +0000 Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: YyfPMSj8x6Eimb6qzggtJu1sHZngyLdExH/ARBzpl3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:4f:58:dd:bb:d6:b3:a6:30:33:16:0d:9c:54:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0 Validity Not Before: Dec 20 22:00:30 2025 GMT Not After : Dec 21 22:00:30 2025 GMT Subject: CN=54081f19ded2ddb4af991801fbd2e03506716c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:fe:a9:bb:74:d3:71:b4:be:fd:7d:70:87: 3d:45:66:2e:59:2c:0f:88:20:5f:ae:2a:68:a2:fb: 25:30:4a:fb:3e:31:6b:e1:83:94:6a:2b:15:6c:13: d1:fb:8b:29:7d:0c:53:8b:cc:14:e1:41:6a:e1:7d: 23:3d:a9:1d:4d:32:97:5a:62:cc:d0:97:5f:9a:01: d7:f3:dc:69:6f:7c:93:da:64:b0:8a:51:9c:d1:51: 03:14:96:a6:b3:d8:59:d2:6b:33:58:ad:1a:50:f9: e0:7d:b5:ae:5a:6d:39:53:d6:47:f2:69:0f:d3:3a: 07:da:d6:ce:b9:93:1b:03:19:5a:e1:f9:0c:f6:32: e9:cc:ec:ac:55:f4:0e:c1:e4:55:b9:a3:31:be:70: 24:e7:fb:12:66:79:e8:0c:48:dc:73:d4:bd:40:21: f2:e4:bb:9e:ec:be:b7:8e:ed:35:f8:a5:c3:87:77: e4:67:a2:bb:ca:cb:78:ec:f2:68:e9:c5:4d:3f:80: 9d:e0:74:0c:b0:0a:22:5c:f3:6d:b6:54:f2:5a:32: 90:e2:08:0f:33:62:84:7d:c2:af:d0:60:de:8c:48: 3c:0f:cd:71:aa:d1:64:a0:eb:e0:de:24:9d:50:8e: 6e:2f:04:ab:57:14:f6:5a:65:0d:44:94:6f:62:7f: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:08:1F:19:DE:D2:DD:B4:AF:99:18:01:FB:D2:E0:35:06:71:6C:88 X509v3 Authority Key Identifier: keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fe:4d:d2:4c:c4:40:98:8b:dd:ef:d6:62:86:78:48:ec:59: e5:d4:70:72:ea:81:d7:01:ab:51:70:cb:7b:fe:c2:15:d3:c5: 69:9d:54:4d:8d:22:10:0b:9c:32:20:64:f9:4e:10:4e:57:f2: dc:e0:ae:0f:47:99:10:79:74:8e:03:4c:9a:f1:fe:39:e5:07: 4e:d9:ac:67:c2:f6:fc:59:03:c3:0b:b9:60:6e:ae:6e:5d:25: 2c:0c:72:21:f2:a7:8e:22:f1:b9:e3:b5:a5:6c:06:d8:91:85: 38:99:87:3e:34:bb:d9:2b:e0:df:55:77:df:f9:e0:44:23:5f: 2b:f6:1f:44:0d:eb:b8:22:fa:4b:06:ff:19:5e:2b:00:66:ae: b8:26:86:f0:80:f4:da:07:bf:38:9b:09:20:af:c6:67:48:99: ab:19:d7:80:f0:55:6f:8e:75:de:71:59:86:8a:02:0e:bc:0b: 7f:81:b3:97:ec:f8:57:b6:22:11:14:d5:a0:01:23:f8:8d:a3: d0:3e:84:b5:1d:68:de:6e:f7:b4:ad:1a:d7:9b:48:1a:2c:76: 35:d2:e8:99:52:9a:80:82:9e:ec:99:6d:27:79:e5:07:10:c1: 37:74:78:12:45:04:ab:42:b5:69:6e:e8:e4:14:0b:37:7e:a0: 5b:d2:17:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x09Y3bvWs6YwMxYNnFR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2FhZWZjODQ0ZGVjYWViMTI5NWQ4MjZhNTI4ZTg0NWJh YjFiZTAwHhcNMjUxMjIwMjIwMDMwWhcNMjUxMjIxMjIwMDMwWjAzMTEwLwYDVQQD Eyg1NDA4MWYxOWRlZDJkZGI0YWY5OTE4MDFmYmQyZTAzNTA2NzE2Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXj+qbt003G0vv19cIc9RWYuWSwP iCBfripoovslMEr7PjFr4YOUaisVbBPR+4spfQxTi8wU4UFq4X0jPakdTTKXWmLM 0JdfmgHX89xpb3yT2mSwilGc0VEDFJams9hZ0mszWK0aUPngfbWuWm05U9ZH8mkP 0zoH2tbOuZMbAxla4fkM9jLpzOysVfQOweRVuaMxvnAk5/sSZnnoDEjcc9S9QCHy 5Lue7L63ju01+KXDh3fkZ6K7yst47PJo6cVNP4Cd4HQMsAoiXPNttlTyWjKQ4ggP M2KEfcKv0GDejEg8D81xqtFkoOvg3iSdUI5uLwSrVxT2WmUNRJRvYn+BHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQIHxne0t20r5kYAfvS4DUGcWyIMB8GA1UdIwQY MBaAFK7KrvyETeyusSldgmpSjoRbqxvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWIt NmQ4ZDkxYzdmYWEwLzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWItNmQ4ZDkxYzdmYWEw LzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKv5N0kzE QJiL3e/WYoZ4SOxZ5dRwcuqB1wGrUXDLe/7CFdPFaZ1UTY0iEAucMiBk+U4QTlfy 3OCuD0eZEHl0jgNMmvH+OeUHTtmsZ8L2/FkDwwu5YG6ubl0lLAxyIfKnjiLxueO1 pWwG2JGFOJmHPjS72Svg31V33/ngRCNfK/YfRA3ruCL6Swb/GV4rAGauuCaG8ID0 2ge/OJsJIK/GZ0iZqxnXgPBVb4513nFZhooCDrwLf4Gzl+z4V7YiERTVoAEj+I2j 0D6EtR1o3m73tK0a15tIGix2NdLomVKagIKe7JltJ3nlBxDBN3R4EkUEq0K1aW7o 5BQLN36gW9IXYA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:36 2025 by rpki-client