This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json) Hash identifier: 0tk/09HeaMHaZMwOhLudIusHsMqN9RmqXgJqTCKimdA= Subject key identifier: 99:38:82:24:A3:C0:16:01:C3:43:E3:9C:A6:7A:E9:F2:1F:6F:0D:AB Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63 Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63 Certificate serial: 019B42EE7EF3FA9C1422E001F47AC2825C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft Manifest number: 1186 Signing time: Sun 21 Dec 2025 22:01:24 +0000 Manifest this update: Sun 21 Dec 2025 22:01:24 +0000 Manifest next update: Mon 22 Dec 2025 22:01:24 +0000 Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=) 2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: SPXSZUJJwSmFOQ02ReM+/o15jJXcGdxm/rVuExhpIAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:7e:f3:fa:9c:14:22:e0:01:f4:7a:c2:82:5c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63 Validity Not Before: Dec 21 22:01:24 2025 GMT Not After : Dec 22 22:01:24 2025 GMT Subject: CN=99388224a3c01601c343e39ca67ae9f21f6f0dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:58:91:76:5c:d8:cb:a9:46:10:57:73:e5:06: 45:76:6b:6b:5b:ed:59:e3:05:1c:7d:cd:71:1d:7c: 2b:19:93:5c:1c:9a:cf:b6:42:2f:e9:49:4b:de:e4: 50:f9:22:e9:7b:c9:b1:d7:ec:5f:2b:46:95:a1:b1: 3d:20:61:e6:64:7f:4b:08:80:eb:7b:4f:db:f7:ab: 46:35:5d:66:b3:c0:73:f9:3b:35:71:0b:2b:8b:5f: 08:ed:51:6d:b1:5f:b6:49:9f:26:7a:85:93:64:1c: 99:0d:7a:31:47:8b:ee:9a:4b:17:2a:4b:64:86:75: dd:2b:51:18:39:3a:28:61:e3:56:92:dd:04:81:dc: a8:ff:5d:31:df:02:c8:f7:25:12:96:2f:69:0e:43: 3d:af:df:b5:61:a3:46:04:c4:04:12:5b:4f:1c:cd: e8:46:2b:f4:53:fa:b4:68:b4:1b:35:e6:75:41:3a: e1:ef:fd:16:fd:20:89:63:28:20:2e:ce:e0:82:25: 0e:db:24:17:6e:e5:59:9e:80:43:ff:32:b2:6f:11: 7d:12:d8:cd:12:44:dd:28:25:c2:37:d0:62:7e:23: 7f:46:86:46:d0:0a:52:9c:9e:d9:d9:0d:a2:b6:86: 82:32:df:d1:75:50:69:a7:17:21:c9:fb:26:7a:a1: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:38:82:24:A3:C0:16:01:C3:43:E3:9C:A6:7A:E9:F2:1F:6F:0D:AB X509v3 Authority Key Identifier: keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:82:94:36:f2:60:f5:a5:1b:bf:7c:23:e3:52:23:0e:f4:5b: 0d:57:bf:ff:71:fc:8a:69:87:f9:5c:bc:9e:00:ae:58:0b:5a: 69:5a:e5:fc:9a:9e:4b:4f:06:51:8c:0c:52:e7:8e:06:80:e2: e2:70:e5:f5:fb:85:6f:4e:dc:93:90:9f:17:78:84:bf:70:cd: 5c:4d:8c:90:ac:8b:42:6b:36:ec:20:01:66:81:2c:b6:2b:3d: 1a:41:2c:80:66:cc:32:2e:f0:0d:58:3c:82:ae:2f:2d:97:4a: ce:3f:77:9f:f8:51:a7:98:19:ed:d3:e8:e2:a1:39:9b:50:eb: 8d:8a:5d:54:9c:fb:80:f2:dc:d4:df:c4:57:ac:17:4a:5e:0e: 6d:6c:bc:89:ee:7f:26:c3:d3:96:45:d1:d9:2c:b6:37:5e:bb: b5:73:31:e8:4c:ce:7d:28:b7:e5:23:6b:37:e3:94:6c:b5:e7: 98:1d:14:a6:e5:1f:3e:43:3b:fd:9a:71:ca:04:89:94:4b:40: 22:b3:f6:41:a0:2b:b2:e2:b3:20:6e:9c:26:f5:85:07:f5:fd: bf:5c:d9:1a:ab:cb:af:5b:81:64:0d:7a:d8:7f:08:68:a6:28: 9c:38:d5:8d:43:b1:36:ab:c0:95:24:e2:e5:7a:62:f0:ee:d4: 4d:70:ec:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7n7z+pwUIuAB9HrCglyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYTVlMzVjMDVjMmFiNTRiZTc1OGI2Yzg2NzE4NmNlZTE1 OWJkNjMwHhcNMjUxMjIxMjIwMTI0WhcNMjUxMjIyMjIwMTI0WjAzMTEwLwYDVQQD Eyg5OTM4ODIyNGEzYzAxNjAxYzM0M2UzOWNhNjdhZTlmMjFmNmYwZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1iRdlzYy6lGEFdz5QZFdmtrW+1Z 4wUcfc1xHXwrGZNcHJrPtkIv6UlL3uRQ+SLpe8mx1+xfK0aVobE9IGHmZH9LCIDr e0/b96tGNV1ms8Bz+Ts1cQsri18I7VFtsV+2SZ8meoWTZByZDXoxR4vumksXKktk hnXdK1EYOTooYeNWkt0Egdyo/10x3wLI9yUSli9pDkM9r9+1YaNGBMQEEltPHM3o Riv0U/q0aLQbNeZ1QTrh7/0W/SCJYyggLs7ggiUO2yQXbuVZnoBD/zKybxF9EtjN EkTdKCXCN9BifiN/RoZG0ApSnJ7Z2Q2itoaCMt/RdVBppxchyfsmeqH50wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk4giSjwBYBw0PjnKZ66fIfbw2rMB8GA1UdIwQY MBaAFEql41wFwqtUvnWLbIZxhs7hWb1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQt N2M2NWFlYzZmMmJkLzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQtN2M2NWFlYzZmMmJk LzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4KUNvJg 9aUbv3wj41IjDvRbDVe//3H8immH+Vy8ngCuWAtaaVrl/JqeS08GUYwMUueOBoDi 4nDl9fuFb07ck5CfF3iEv3DNXE2MkKyLQms27CABZoEstis9GkEsgGbMMi7wDVg8 gq4vLZdKzj93n/hRp5gZ7dPo4qE5m1DrjYpdVJz7gPLc1N/EV6wXSl4ObWy8ie5/ JsPTlkXR2Sy2N167tXMx6EzOfSi35SNrN+OUbLXnmB0UpuUfPkM7/ZpxygSJlEtA IrP2QaArsuKzIG6cJvWFB/X9v1zZGqvLr1uBZA162H8IaKYonDjVjUOxNqvAlSTi 5Xpi8O7UTXDsQw== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:48 2025 by rpki-client