This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: C/Z6wQuD76mta6r6HanNzUCg4LtW0/NGtzfgyodAVic=
Subject key identifier: 24:25:93:64:32:9B:1E:6F:53:F9:69:65:13:FF:23:DF:7D:82:0C:3F
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 019B3EDAF41BFBA5CB5B07A96DAB65998B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 178F
Signing time: Sun 21 Dec 2025 03:01:35 +0000
Manifest this update: Sun 21 Dec 2025 03:01:35 +0000
Manifest next update: Mon 22 Dec 2025 03:01:35 +0000
Files and hashes: 1: 1-fO1x-zi8QWRbmjkH4DjBKGyJ98.roa (hash: mvfK7I5z/jAXOStg+IEHlWFuIOiBRl1nmXGrXHhSqtY=)
2: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: oqgn8i3iEnBubvTahuN1+Y0L9hyUpzA62mKXQEGGDWI=)
4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
5: jHd0BQzN011_cMoKuI7iRsLMJu8.roa (hash: JjmkBCaZsliO1zFW0zpJ5sroTsscOQWZvCVDg8ArSY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:da:f4:1b:fb:a5:cb:5b:07:a9:6d:ab:65:99:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Dec 21 03:01:35 2025 GMT
Not After : Dec 22 03:01:35 2025 GMT
Subject: CN=24259364329b1e6f53f9696513ff23df7d820c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:d4:bc:e4:ca:25:4f:2e:d5:c3:af:4f:11:
81:1b:b3:bb:33:36:cb:c2:71:0d:2f:2c:f8:df:e7:
5e:85:c8:ab:97:83:67:92:32:46:b1:f2:b9:ee:16:
f4:f7:29:fe:48:30:52:6b:31:74:c5:6d:9e:28:4b:
7b:31:04:c5:07:f4:93:32:e2:8a:a5:70:d2:ce:86:
a1:20:15:2c:74:d1:b3:11:52:97:fc:29:3c:25:32:
85:1e:fa:1f:9f:c3:35:01:fa:ae:6f:8f:e8:55:a4:
6d:52:2b:d6:54:a5:d0:3b:27:48:ba:74:31:8b:16:
40:3c:b6:a8:6e:8d:13:e2:be:6f:99:db:5b:dc:e6:
0a:49:0a:55:fb:34:ab:4b:66:6e:c3:eb:2e:49:d4:
4a:7f:ac:c1:23:09:e2:e7:a0:e9:03:45:0c:6a:1c:
77:49:89:53:06:4b:e2:f5:76:9a:75:0d:9d:17:03:
6b:a6:7b:74:03:87:17:2b:bd:ff:fd:09:05:40:0a:
8d:7f:29:c6:25:96:30:33:69:d4:ac:e4:ba:5d:10:
dc:54:41:21:3f:98:80:53:77:fb:4b:7b:4f:7a:8d:
80:12:88:f7:c4:6d:b8:c6:6e:18:0b:2e:02:e8:3f:
b4:c6:02:dc:15:a6:27:f4:0b:c7:7f:bb:ad:90:3c:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:93:64:32:9B:1E:6F:53:F9:69:65:13:FF:23:DF:7D:82:0C:3F
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b1:99:08:a1:6f:09:09:50:57:50:6c:65:48:ad:23:44:3d:
9e:a8:7e:d7:16:11:89:fa:44:c2:23:6f:44:ee:7e:64:9a:53:
7f:36:32:11:ea:e6:82:6d:c9:8d:f4:5e:04:24:14:40:36:2f:
0b:6d:9d:7c:25:74:7f:ac:43:8e:55:40:33:e0:ed:ab:a9:2a:
6c:6e:0d:c2:aa:be:60:7c:b1:35:fe:5c:4a:33:9a:4e:ae:d7:
e3:ad:8b:ee:6f:a7:e3:4b:4e:e4:f9:ba:47:bc:7f:28:d9:48:
bb:8a:43:8e:65:21:fa:12:b6:19:d9:e4:64:ef:12:9f:fd:b7:
55:eb:52:59:d1:82:5c:e8:cd:63:be:ac:77:c3:5f:78:7a:00:
89:98:ef:a6:d3:12:a9:15:f9:63:aa:be:6e:9f:5c:f2:66:f6:
ad:07:8f:20:6e:94:ee:d8:05:f7:1b:e0:b3:4b:f4:8f:bf:b8:
da:86:28:ce:7e:6d:9e:74:34:46:b3:81:79:44:5c:c6:d7:50:
ff:58:61:62:05:34:05:1e:4e:39:37:57:b2:7b:04:17:fd:3e:
40:a4:ff:95:01:81:fc:e9:f1:87:7a:af:b1:88:7e:1e:35:76:
d5:19:b4:1d:cb:67:0d:bf:1e:1d:ce:81:04:75:18:3e:72:16:
c4:ce:0f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+2vQb+6XLWwepbatlmYt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx
OTk1ZGIwHhcNMjUxMjIxMDMwMTM1WhcNMjUxMjIyMDMwMTM1WjAzMTEwLwYDVQQD
EygyNDI1OTM2NDMyOWIxZTZmNTNmOTY5NjUxM2ZmMjNkZjdkODIwYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMrUvOTKJU8u1cOvTxGBG7O7MzbL
wnENLyz43+dehcirl4NnkjJGsfK57hb09yn+SDBSazF0xW2eKEt7MQTFB/STMuKK
pXDSzoahIBUsdNGzEVKX/Ck8JTKFHvofn8M1Afqub4/oVaRtUivWVKXQOydIunQx
ixZAPLaobo0T4r5vmdtb3OYKSQpV+zSrS2Zuw+suSdRKf6zBIwni56DpA0UMahx3
SYlTBkvi9XaadQ2dFwNrpnt0A4cXK73//QkFQAqNfynGJZYwM2nUrOS6XRDcVEEh
P5iAU3f7S3tPeo2AEoj3xG24xm4YCy4C6D+0xgLcFaYn9AvHf7utkDzuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQlk2Qymx5vU/lpZRP/I999ggw/MB8GA1UdIwQY
MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt
NDgwYzMyZjQwMGUxLzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx
LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLGZCKFv
CQlQV1BsZUitI0Q9nqh+1xYRifpEwiNvRO5+ZJpTfzYyEermgm3JjfReBCQUQDYv
C22dfCV0f6xDjlVAM+Dtq6kqbG4Nwqq+YHyxNf5cSjOaTq7X462L7m+n40tO5Pm6
R7x/KNlIu4pDjmUh+hK2GdnkZO8Sn/23VetSWdGCXOjNY76sd8NfeHoAiZjvptMS
qRX5Y6q+bp9c8mb2rQePIG6U7tgF9xvgs0v0j7+42oYozn5tnnQ0RrOBeURcxtdQ
/1hhYgU0BR5OOTdXsnsEF/0+QKT/lQGB/Onxh3qvsYh+HjV21Rm0HctnDb8eHc6B
BHUYPnIWxM4PWw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:06:22 2025 by rpki-client