This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json) Hash identifier: CjotZf7RAHnYffX6k03Hi+MImZbYy+2ix9CWRyjCmtk= Subject key identifier: D8:DF:6A:8D:D7:D7:49:EF:AD:98:5C:74:A5:AE:4F:B2:ED:AD:55:3F Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Certificate serial: 019B6E0F02CE2AF17CC67E602122ADF79680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft Manifest number: 14B8 Signing time: Tue 30 Dec 2025 07:00:35 +0000 Manifest this update: Tue 30 Dec 2025 07:00:35 +0000 Manifest next update: Wed 31 Dec 2025 07:00:35 +0000 Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: cyCobMCpWZkz1KCIv/B2pxXH8j3+D9xjLhHL4d7PBJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:02:ce:2a:f1:7c:c6:7e:60:21:22:ad:f7:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Validity Not Before: Dec 30 07:00:35 2025 GMT Not After : Dec 31 07:00:35 2025 GMT Subject: CN=d8df6a8dd7d749efad985c74a5ae4fb2edad553f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:49:36:25:6d:58:58:c7:be:f2:28:51:f5: c6:ac:11:9b:d4:9c:f5:87:e4:6a:a4:de:76:0c:12: 08:da:e3:0d:9e:6a:2a:96:8b:31:cf:28:b4:1a:1d: 64:f2:f7:08:4e:55:60:b8:1c:d9:e0:bd:25:48:34: 3a:58:0a:76:d6:be:d5:98:b7:dc:f2:9b:a6:f8:e8: 12:d3:36:21:48:42:59:da:f9:ba:53:a3:b7:46:2e: f7:9d:2f:ed:49:ca:aa:ef:da:fe:5b:25:1c:80:cb: 3d:5a:99:90:76:0a:bf:49:1f:70:f5:bc:41:84:e7: da:7c:1a:cc:5e:63:74:a5:84:7a:7e:d8:a3:89:c7: 51:4b:23:d8:61:49:b2:f0:a7:ca:04:12:48:fd:0d: 6c:fa:d7:e4:12:7d:ee:b7:2e:1a:0c:ac:dd:ae:77: 64:a7:62:a5:99:56:54:99:54:75:2e:8b:77:00:e7: cf:4e:a9:df:66:b8:92:a6:bc:c9:00:66:c5:e5:fa: bf:a2:98:42:a7:3b:cd:c1:92:11:7e:16:9c:dc:2a: 0d:8b:4f:ad:5a:be:11:4b:37:a9:03:c1:f1:ab:63: da:b7:c2:af:47:48:30:1d:b5:b6:04:5f:03:3d:cd: 53:13:a5:9e:bb:00:47:c7:e1:70:f2:69:49:52:16: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DF:6A:8D:D7:D7:49:EF:AD:98:5C:74:A5:AE:4F:B2:ED:AD:55:3F X509v3 Authority Key Identifier: keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:54:38:c5:d6:c9:e0:76:97:a8:7e:10:a6:36:cc:76:1e:26: 91:3d:21:d1:db:49:39:c0:09:4d:0f:66:4a:2f:45:81:f1:23: 64:48:59:c8:5c:78:3e:44:8e:45:48:a9:fa:19:53:35:23:25: 42:97:cd:9f:03:79:34:67:00:16:16:3e:01:70:99:9b:b5:04: c7:00:c4:55:62:27:0a:7c:6b:b6:cc:2a:d8:aa:f6:f5:53:c6: 44:d1:44:32:59:59:91:73:5d:eb:35:fd:f1:15:35:6a:5b:fc: 4b:70:73:e3:64:1d:68:c3:bf:2e:94:c9:13:e1:89:72:de:4b: 2e:4b:c0:de:7e:61:97:33:9b:cc:73:f2:7e:76:9f:b6:17:d1: 89:d8:f4:5e:ba:af:e3:28:3a:ec:79:62:9d:92:7c:3d:c3:cb: 4a:92:e5:a4:00:ca:9e:e6:17:71:2a:e0:ec:88:dd:84:b9:8e: a8:ac:35:ce:1d:37:b4:5c:80:be:79:19:3e:73:e5:45:dd:e2: cc:a0:1a:5a:01:00:13:f3:34:ba:89:7e:3e:5b:1a:89:29:60: 4a:a2:12:ad:df:e9:e7:e2:9f:10:9c:e9:ab:1f:93:49:76:12: b6:99:af:24:7b:6a:10:60:f5:ac:8b:00:1a:0e:6e:e2:9c:93: b7:c8:49:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuDwLOKvF8xn5gISKt95aAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGQwNDJjZmE3NjZlN2UyYmI2ZjBiMDRjMzdkNjAzZmZh MzM4M2UwHhcNMjUxMjMwMDcwMDM1WhcNMjUxMjMxMDcwMDM1WjAzMTEwLwYDVQQD EyhkOGRmNmE4ZGQ3ZDc0OWVmYWQ5ODVjNzRhNWFlNGZiMmVkYWQ1NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jlJNiVtWFjHvvIoUfXGrBGb1Jz1 h+RqpN52DBII2uMNnmoqlosxzyi0Gh1k8vcITlVguBzZ4L0lSDQ6WAp21r7VmLfc 8pum+OgS0zYhSEJZ2vm6U6O3Ri73nS/tScqq79r+WyUcgMs9WpmQdgq/SR9w9bxB hOfafBrMXmN0pYR6ftijicdRSyPYYUmy8KfKBBJI/Q1s+tfkEn3uty4aDKzdrndk p2KlmVZUmVR1Lot3AOfPTqnfZriSprzJAGbF5fq/ophCpzvNwZIRfhac3CoNi0+t Wr4RSzepA8Hxq2Pat8KvR0gwHbW2BF8DPc1TE6WeuwBHx+Fw8mlJUhbHwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjfao3X10nvrZhcdKWuT7LtrVU/MB8GA1UdIwQY MBaAFEkNBCz6dm5+K7bwsEw31gP/ozg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMt OTYyNjJjODE5MzMzLzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMtOTYyNjJjODE5MzMz LzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlQ4xdbJ 4HaXqH4QpjbMdh4mkT0h0dtJOcAJTQ9mSi9FgfEjZEhZyFx4PkSORUip+hlTNSMl QpfNnwN5NGcAFhY+AXCZm7UExwDEVWInCnxrtswq2Kr29VPGRNFEMllZkXNd6zX9 8RU1alv8S3Bz42QdaMO/LpTJE+GJct5LLkvA3n5hlzObzHPyfnafthfRidj0Xrqv 4yg67HlinZJ8PcPLSpLlpADKnuYXcSrg7IjdhLmOqKw1zh03tFyAvnkZPnPlRd3i zKAaWgEAE/M0uol+PlsaiSlgSqISrd/p5+KfEJzpqx+TSXYStpmvJHtqEGD1rIsA Gg5u4pyTt8hJkQ== -----END CERTIFICATE-----Generated at Tue Dec 30 16:33:01 2025 by rpki-client