This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft File: SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft (raw, json) Hash identifier: 3Arjv28bg/9/xT8CRezsfmX3FiUNK4L6KQr8zsDTECQ= Subject key identifier: B8:26:2B:9F:2F:78:90:DE:5E:AA:8F:6D:9C:64:4D:65:25:5B:C3:A0 Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F Certificate issuer: /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f Certificate serial: 019B462704E532D4DFCEDB3B21B4F3F10D18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft Manifest number: 0FEA Signing time: Mon 22 Dec 2025 13:02:00 +0000 Manifest this update: Mon 22 Dec 2025 13:02:00 +0000 Manifest next update: Tue 23 Dec 2025 13:02:00 +0000 Files and hashes: 1: SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl (hash: tYBExIe/HIOQOsDdO5nZ9lrNZCh7ljYH5Icdl2rC3O0=) 2: qbL9OL5sc-w50AXrG2tZRkZnW2s.roa (hash: Q4+OtthvOte+9IlGsVQn+tB7AZLUhi+dropNGViFYc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:04:e5:32:d4:df:ce:db:3b:21:b4:f3:f1:0d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f Validity Not Before: Dec 22 13:02:00 2025 GMT Not After : Dec 23 13:02:00 2025 GMT Subject: CN=b8262b9f2f7890de5eaa8f6d9c644d65255bc3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:75:ba:6b:fe:a4:6b:4b:af:bf:bf:19:83: c0:43:e6:bc:d8:e4:78:b3:81:e7:41:d8:09:c9:c6: 1a:3b:36:d3:bb:21:89:0b:d7:c5:65:8f:76:68:86: cf:71:cc:94:28:90:7b:18:b2:fb:4e:66:64:3f:93: 43:c8:83:c9:8e:a3:62:1d:49:a4:5b:b5:dc:7b:4a: 64:74:3c:1c:e1:17:d0:a6:4c:bb:70:da:2b:ba:76: 60:1c:a1:f0:b5:46:74:2a:ab:54:66:f8:c6:92:ba: d4:76:40:d3:55:ac:61:a0:53:8d:f0:b3:3f:5d:a3: 0f:50:ed:3f:d4:dd:7d:42:97:07:a9:55:05:b8:84: c7:db:b9:48:35:94:18:98:69:15:81:ca:06:da:22: eb:43:d9:58:8f:54:cf:25:ac:43:af:7c:60:32:44: a1:10:a1:d1:63:a6:3a:ef:bf:74:dd:a0:37:7e:e6: a7:cd:5e:69:10:72:81:4c:bd:f6:cc:83:c0:3e:ed: d5:2f:19:10:4b:be:3a:eb:03:e4:74:e8:0b:b1:f1: c2:91:42:b1:1f:d7:62:ef:42:80:5c:99:d7:b1:2a: f2:cf:6a:dc:b8:fc:db:a1:42:4e:4a:58:aa:93:89: e9:c1:5f:66:35:fb:c0:7d:00:d9:cb:c1:ca:9a:33: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:26:2B:9F:2F:78:90:DE:5E:AA:8F:6D:9C:64:4D:65:25:5B:C3:A0 X509v3 Authority Key Identifier: keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:81:1e:c9:e6:93:a0:6d:b4:20:49:53:b8:30:a2:a2:64:23: 14:5e:82:a2:a9:8e:9d:fc:49:6e:d7:6e:31:74:08:47:4a:2f: ae:af:cf:67:33:fd:26:d5:a9:99:a2:b4:c0:b1:67:2a:9f:df: a3:62:87:d2:ba:62:3a:9e:33:cb:fd:2f:b1:9e:a5:da:e5:1d: 34:bb:65:11:d7:c6:b8:92:a3:b2:fc:cb:0c:34:ea:03:69:c4: 80:41:44:fe:18:88:2a:16:50:98:25:d1:ef:ee:21:bc:97:71: ef:fd:65:11:52:66:c0:f5:a6:a6:eb:07:23:24:97:4d:48:c1: 75:58:64:cd:fd:8e:0e:82:36:41:df:16:b1:b2:1c:19:2f:ab: 1d:df:38:57:8d:59:22:3a:28:97:82:17:9c:70:c6:c7:cf:61: f7:ef:76:4d:94:89:69:bf:fa:a4:25:50:17:b0:71:cb:8c:21: 0b:17:61:15:73:59:49:ac:09:fe:25:89:62:bd:b4:eb:38:c0: 89:64:6b:00:64:35:b6:82:d5:2a:7a:03:da:ba:f5:f5:ba:cb: 37:82:e8:61:62:e0:c8:62:f1:44:cb:af:e9:3d:c2:32:32:22: dd:04:62:93:86:da:fe:39:24:d5:24:0e:a2:10:ec:7c:e6:37: 47:d4:86:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJwTlMtTfzts7IbTz8Q0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjQwYjU5YmJmNjkwNmE1NTVlMTA3NGM1YWU3M2VjNjJk ZmZjNWYwHhcNMjUxMjIyMTMwMjAwWhcNMjUxMjIzMTMwMjAwWjAzMTEwLwYDVQQD EyhiODI2MmI5ZjJmNzg5MGRlNWVhYThmNmQ5YzY0NGQ2NTI1NWJjM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdV1umv+pGtLr7+/GYPAQ+a82OR4 s4HnQdgJycYaOzbTuyGJC9fFZY92aIbPccyUKJB7GLL7TmZkP5NDyIPJjqNiHUmk W7Xce0pkdDwc4RfQpky7cNorunZgHKHwtUZ0KqtUZvjGkrrUdkDTVaxhoFON8LM/ XaMPUO0/1N19QpcHqVUFuITH27lINZQYmGkVgcoG2iLrQ9lYj1TPJaxDr3xgMkSh EKHRY6Y677903aA3fuanzV5pEHKBTL32zIPAPu3VLxkQS7466wPkdOgLsfHCkUKx H9di70KAXJnXsSryz2rcuPzboUJOSliqk4npwV9mNfvAfQDZy8HKmjNoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgmK58veJDeXqqPbZxkTWUlW8OgMB8GA1UdIwQY MBaAFEkkC1m79pBqVV4QdMWuc+xi3/xfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUt ZDE0YWYyY2I4ZmRlLzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUtZDE0YWYyY2I4ZmRl LzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4EeyeaT oG20IElTuDCiomQjFF6CoqmOnfxJbtduMXQIR0ovrq/PZzP9JtWpmaK0wLFnKp/f o2KH0rpiOp4zy/0vsZ6l2uUdNLtlEdfGuJKjsvzLDDTqA2nEgEFE/hiIKhZQmCXR 7+4hvJdx7/1lEVJmwPWmpusHIySXTUjBdVhkzf2ODoI2Qd8WsbIcGS+rHd84V41Z Ijool4IXnHDGx89h9+92TZSJab/6pCVQF7Bxy4whCxdhFXNZSawJ/iWJYr206zjA iWRrAGQ1toLVKnoD2rr19brLN4LoYWLgyGLxRMuv6T3CMjIi3QRik4ba/jkk1SQO ohDsfOY3R9SGOw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:50:37 2025 by rpki-client