This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json) Hash identifier: Gd/5mC/L+Y3uY3emApirWLtZuYc16fRr4hVFACgaZgY= Subject key identifier: DE:11:91:98:C9:01:D1:43:E9:5E:C8:5E:FB:86:EB:79:00:01:CC:39 Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14 Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014 Certificate serial: 019B51173270C2827D0F6A7B92B38918F61F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft Manifest number: 11C5 Signing time: Wed 24 Dec 2025 16:00:33 +0000 Manifest this update: Wed 24 Dec 2025 16:00:33 +0000 Manifest next update: Thu 25 Dec 2025 16:00:33 +0000 Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=) 2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: G+kaogorAUYTFmlLoSGRrro/RHvQkBN/2ZtraLG0cUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:32:70:c2:82:7d:0f:6a:7b:92:b3:89:18:f6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014 Validity Not Before: Dec 24 16:00:33 2025 GMT Not After : Dec 25 16:00:33 2025 GMT Subject: CN=de119198c901d143e95ec85efb86eb790001cc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:0b:cb:98:f2:60:f8:0e:5d:55:58:a6:f1: b0:26:9f:01:44:0c:5c:06:b5:cc:d8:c0:66:58:84: f8:49:0f:b0:fe:ac:47:6f:f9:20:4e:e5:95:44:5b: d3:61:3e:f8:42:d9:e2:80:bb:a7:1f:d7:70:5b:69: 9a:24:61:9b:ea:26:df:a2:60:dd:c5:c7:cd:4d:fe: 5d:5e:f5:0e:03:3b:46:be:85:0a:e8:bd:2c:88:f9: e7:6c:ea:05:c6:ed:b9:8d:82:4d:4e:b5:37:60:b2: 1d:16:da:58:f5:bd:23:e9:91:cb:ab:b7:5a:4f:29: cd:cc:7f:b0:4b:2e:03:df:5b:54:3e:bc:6c:6d:93: a1:e1:87:4a:eb:61:00:e9:e5:4f:20:ca:1c:47:d5: e7:43:03:7a:36:9d:5c:3c:97:54:32:f1:e7:f1:af: 51:f1:05:79:a9:b9:4d:68:6b:ee:8b:4c:ac:38:7d: 98:64:59:5b:7e:6f:de:78:0f:c3:c7:32:41:5b:f5: d8:82:16:4f:1d:2c:c8:cc:4a:01:a9:ee:a0:5e:d5: f1:ea:86:8c:c2:5e:0b:ea:3f:ea:5c:38:c2:95:82: 4a:4f:cf:e2:45:e9:20:af:25:f4:75:b9:12:09:b0: 93:cd:d9:22:f8:47:77:1d:98:02:9a:88:9f:29:67: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:91:98:C9:01:D1:43:E9:5E:C8:5E:FB:86:EB:79:00:01:CC:39 X509v3 Authority Key Identifier: keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:86:16:ad:5a:e1:2f:6f:89:46:3a:ad:eb:1a:27:3a:3f:db: 9e:d8:35:16:57:61:4a:7b:15:db:e3:4e:c7:9c:dc:dd:f8:9d: e2:fd:4b:cd:43:97:88:0e:44:23:ff:2a:52:22:e5:7f:f0:fa: 51:f3:29:e2:24:6f:f3:2d:b7:c3:74:f4:eb:f8:15:69:71:a1: 6e:d5:e8:db:8e:1e:b4:cd:d6:43:f9:49:4f:50:28:c9:99:7b: a6:ab:a8:ab:66:b5:88:0c:89:3c:db:ea:2a:ae:40:45:e7:1c: 85:22:58:ce:ed:89:b3:c8:c2:8d:91:4b:85:88:41:6b:01:e1: c8:f7:d1:0a:3a:dc:ba:35:54:00:cc:0d:04:14:4f:5e:2f:b6: 25:23:58:56:2a:eb:d5:60:ba:d3:bd:4c:3a:da:a4:c0:44:a5: 2e:38:3b:32:ee:00:3e:bb:88:1c:de:2d:3f:73:68:15:2f:fa: b8:5e:de:e1:06:45:52:ff:5f:12:00:7e:5d:b1:28:19:87:d0: 36:cd:7a:04:3c:1d:9d:00:ba:ee:6a:e0:39:b7:8d:2b:c2:5a: 89:a9:b1:18:c8:d9:31:5c:6b:aa:5e:05:69:c4:0a:fe:16:48: cf:7e:9e:07:c3:ea:ab:a6:99:58:77:63:a9:92:8a:6e:35:64: 9d:0d:e6:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRFzJwwoJ9D2p7krOJGPYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTQ4YWYzZDk2OTMxYmQ5MGMzYmZkNTVmMWZhMzA0N2Iz NTYwMTQwHhcNMjUxMjI0MTYwMDMzWhcNMjUxMjI1MTYwMDMzWjAzMTEwLwYDVQQD EyhkZTExOTE5OGM5MDFkMTQzZTk1ZWM4NWVmYjg2ZWI3OTAwMDFjYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziALy5jyYPgOXVVYpvGwJp8BRAxc BrXM2MBmWIT4SQ+w/qxHb/kgTuWVRFvTYT74QtnigLunH9dwW2maJGGb6ibfomDd xcfNTf5dXvUOAztGvoUK6L0siPnnbOoFxu25jYJNTrU3YLIdFtpY9b0j6ZHLq7da TynNzH+wSy4D31tUPrxsbZOh4YdK62EA6eVPIMocR9XnQwN6Np1cPJdUMvHn8a9R 8QV5qblNaGvui0ysOH2YZFlbfm/eeA/DxzJBW/XYghZPHSzIzEoBqe6gXtXx6oaM wl4L6j/qXDjClYJKT8/iRekgryX0dbkSCbCTzdki+Ed3HZgCmoifKWcMswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4RkZjJAdFD6V7IXvuG63kAAcw5MB8GA1UdIwQY MBaAFLKkivPZaTG9kMO/1V8fowR7NWAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEt YjliZDA2NTk0ODNhLzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEtYjliZDA2NTk0ODNh LzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoYWrVrh L2+JRjqt6xonOj/bntg1FldhSnsV2+NOx5zc3fid4v1LzUOXiA5EI/8qUiLlf/D6 UfMp4iRv8y23w3T06/gVaXGhbtXo244etM3WQ/lJT1AoyZl7pquoq2a1iAyJPNvq Kq5ARecchSJYzu2Js8jCjZFLhYhBawHhyPfRCjrcujVUAMwNBBRPXi+2JSNYVirr 1WC6071MOtqkwESlLjg7Mu4APruIHN4tP3NoFS/6uF7e4QZFUv9fEgB+XbEoGYfQ Ns16BDwdnQC67mrgObeNK8JaiamxGMjZMVxrql4FacQK/hZIz36eB8Pqq6aZWHdj qZKKbjVknQ3mjw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:12:16 2025 by rpki-client