This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json) Hash identifier: l1lgaAPfH/llOpjyZyGy/CC4QUXJ+ZUwkvhaev/VS3c= Subject key identifier: F6:C2:B5:AF:88:82:9F:90:D2:4B:6D:92:47:57:49:61:1D:63:93:2E Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99 Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199 Certificate serial: 019B4581C5839F96AAB309CBE6AEEEE90CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft Manifest number: 14B6 Signing time: Mon 22 Dec 2025 10:01:31 +0000 Manifest this update: Mon 22 Dec 2025 10:01:31 +0000 Manifest next update: Tue 23 Dec 2025 10:01:31 +0000 Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: jiWfFulze8arYBOzNHp9lj++S1kGEa0LVE5rFF9Vjkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:c5:83:9f:96:aa:b3:09:cb:e6:ae:ee:e9:0c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199 Validity Not Before: Dec 22 10:01:31 2025 GMT Not After : Dec 23 10:01:31 2025 GMT Subject: CN=f6c2b5af88829f90d24b6d92475749611d63932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:59:de:11:9d:0a:6e:74:fe:ef:ea:55:d9: 74:cc:f8:3c:74:f6:2d:36:8b:89:e6:e5:80:30:66: 22:c3:f6:86:e1:0d:1e:a4:0a:27:d5:81:27:ba:b1: de:e2:33:c1:35:9c:e3:23:94:98:cf:bb:01:db:06: 24:d9:44:e8:a9:06:18:e8:32:4b:38:5b:8a:62:2c: 4d:2d:8c:4a:89:96:8e:14:4e:08:02:9c:9e:5e:cc: 82:ed:ee:ad:0c:f3:4c:7a:7d:ff:e9:42:7e:bc:30: dd:81:4c:61:23:e0:dd:e1:56:6b:a1:50:a9:8d:dd: 0f:ec:89:a3:88:9c:db:07:b7:f5:22:7a:3a:90:0f: 6e:63:5f:bc:69:a7:55:6f:65:35:9c:31:a0:95:aa: ba:f0:7c:bb:86:63:c3:df:c6:fb:20:d3:2f:3d:f7: dc:13:47:99:5b:3b:1b:86:e8:7d:59:5b:db:ee:a6: d8:73:5f:06:4c:1a:f3:28:05:4b:36:4e:82:4e:78: 32:be:34:75:d5:2b:41:1a:46:9e:65:8d:99:80:a4: 01:e3:ee:a3:36:18:83:f4:08:e4:1b:67:dc:d3:1f: 4b:46:81:06:17:2a:7d:d7:2c:3c:e0:4b:c3:0b:54: f6:fb:4c:c0:5e:10:27:c0:f0:4f:76:5c:a9:03:b9: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C2:B5:AF:88:82:9F:90:D2:4B:6D:92:47:57:49:61:1D:63:93:2E X509v3 Authority Key Identifier: keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f2:cc:ae:08:ac:36:8f:b9:ee:25:6f:f9:f4:89:94:cb:5d: bb:f5:7f:7e:a6:a9:7a:51:ef:dd:74:48:b4:d5:90:d0:49:e7: ed:4e:6b:d1:a3:a7:88:ea:44:66:11:83:6e:84:ab:03:b1:4d: 5a:6d:b1:99:22:bd:91:92:0c:26:1a:92:32:9c:70:ce:b2:e6: 8a:7c:f5:0c:e9:84:9a:a5:fb:34:c7:f8:fa:b8:17:c9:03:ea: 53:8f:11:c4:4e:1a:1b:0e:af:78:a5:2c:9d:12:d2:e2:a9:8b: f2:e5:33:dc:c6:5e:1a:10:b6:9a:f5:a0:d8:e0:7b:4e:97:dd: d6:96:a3:21:84:9e:e3:5f:b5:6e:a9:de:0b:1d:69:32:99:45: b1:ba:ba:aa:56:a3:95:fc:22:74:7e:eb:75:93:ee:4b:c4:91: 32:ab:06:b7:15:38:30:f7:e9:aa:e2:7b:d1:c0:48:21:f6:86: b8:ec:2a:9d:4f:53:fc:6f:6c:6f:db:4b:ec:87:ad:46:21:c5: bf:76:18:1b:cb:cf:85:bb:cc:6c:a8:e8:6b:b7:f2:03:04:00: 79:fc:25:bd:d7:00:41:d6:3c:77:23:23:24:17:07:28:63:0d: d8:ca:d5:2f:7e:7f:5c:bc:44:8b:2b:d1:6c:75:6e:ee:4e:a8: 22:6e:8b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgcWDn5aqswnL5q7u6QyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzQxM2RkMzY2N2U3ODE5NWU1MjY4YWEyODVhZWE1MTZi Y2IxOTkwHhcNMjUxMjIyMTAwMTMxWhcNMjUxMjIzMTAwMTMxWjAzMTEwLwYDVQQD EyhmNmMyYjVhZjg4ODI5ZjkwZDI0YjZkOTI0NzU3NDk2MTFkNjM5MzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjJZ3hGdCm50/u/qVdl0zPg8dPYt NouJ5uWAMGYiw/aG4Q0epAon1YEnurHe4jPBNZzjI5SYz7sB2wYk2UToqQYY6DJL OFuKYixNLYxKiZaOFE4IApyeXsyC7e6tDPNMen3/6UJ+vDDdgUxhI+Dd4VZroVCp jd0P7ImjiJzbB7f1Ino6kA9uY1+8aadVb2U1nDGglaq68Hy7hmPD38b7INMvPffc E0eZWzsbhuh9WVvb7qbYc18GTBrzKAVLNk6CTngyvjR11StBGkaeZY2ZgKQB4+6j NhiD9AjkG2fc0x9LRoEGFyp91yw84EvDC1T2+0zAXhAnwPBPdlypA7mA+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbCta+Igp+Q0kttkkdXSWEdY5MuMB8GA1UdIwQY MBaAFP7EE902Z+eBleUmiqKFrqUWvLGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUt M2ZkMTRiOTM2ZWI0LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUtM2ZkMTRiOTM2ZWI0 LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvLMrgis No+57iVv+fSJlMtdu/V/fqapelHv3XRItNWQ0Enn7U5r0aOniOpEZhGDboSrA7FN Wm2xmSK9kZIMJhqSMpxwzrLminz1DOmEmqX7NMf4+rgXyQPqU48RxE4aGw6veKUs nRLS4qmL8uUz3MZeGhC2mvWg2OB7Tpfd1pajIYSe41+1bqneCx1pMplFsbq6qlaj lfwidH7rdZPuS8SRMqsGtxU4MPfpquJ70cBIIfaGuOwqnU9T/G9sb9tL7IetRiHF v3YYG8vPhbvMbKjoa7fyAwQAefwlvdcAQdY8dyMjJBcHKGMN2MrVL35/XLxEiyvR bHVu7k6oIm6Lpw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:07:25 2025 by rpki-client