This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft File: sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json) Hash identifier: A7EuJe4FZoOrxp5+apD0WbE+Hva43hgs1rIv9aC/wQU= Subject key identifier: FF:D3:1E:74:60:29:16:01:1D:81:5E:D8:B6:5F:A8:94:24:3A:0F:5B Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5 Certificate issuer: /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5 Certificate serial: 019B2F9E11A339F109DB77C8879A320787C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft Manifest number: 0719 Signing time: Thu 18 Dec 2025 04:00:46 +0000 Manifest this update: Thu 18 Dec 2025 04:00:46 +0000 Manifest next update: Fri 19 Dec 2025 04:00:46 +0000 Files and hashes: 1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=) 2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: 0ba3lRESSHdzH5lVx82/Y1r8mFfCmBuWFzrqIOUu2CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:11:a3:39:f1:09:db:77:c8:87:9a:32:07:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5 Validity Not Before: Dec 18 04:00:46 2025 GMT Not After : Dec 19 04:00:46 2025 GMT Subject: CN=ffd31e74602916011d815ed8b65fa894243a0f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:7a:2b:14:23:31:22:11:ba:42:b8:e5:f6: 8b:a5:ab:00:2a:d2:33:78:ec:dc:7f:54:90:60:a6: bb:dd:18:20:29:8e:d1:7b:f6:a7:d4:a8:f5:de:ac: cf:2b:85:ed:46:49:72:2b:67:c9:4a:5c:b9:75:df: 67:ed:9e:b0:e7:a8:1a:d4:42:fb:f2:87:13:7e:b9: df:85:2b:df:e2:b3:10:1b:df:2a:1e:4d:ea:34:f3: 7b:04:9c:53:2f:42:7a:05:73:28:69:4d:a4:f9:e1: f9:35:ec:3f:72:24:99:bc:bd:13:37:fa:7e:40:a4: 51:2d:e1:f2:a7:84:7a:75:bf:e1:15:4a:66:07:1a: cf:0d:d1:93:29:7f:fb:bf:24:d7:4a:52:35:63:34: 50:52:55:0d:d5:b1:56:60:6b:88:11:b3:eb:db:06: ee:c0:04:13:0c:d0:a9:34:6e:24:dc:df:e8:62:1e: e7:47:81:a9:ca:7d:aa:93:e2:30:d5:25:64:1b:45: 7e:63:4d:3a:bd:7f:a8:c4:62:7b:fa:4d:01:a8:22: 7e:74:c7:9d:76:4c:77:9b:5b:3c:b2:2b:9b:5e:7a: 2f:a7:ea:59:83:6a:9b:ed:a3:64:c5:09:0f:87:c2: 6e:c6:8c:8d:c5:ad:6a:83:9a:94:19:d7:22:74:b8: 43:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:1E:74:60:29:16:01:1D:81:5E:D8:B6:5F:A8:94:24:3A:0F:5B X509v3 Authority Key Identifier: keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:10:16:7a:eb:80:87:9c:09:14:82:df:46:2c:e1:f0:ec:67: 8d:79:54:7a:68:f1:49:48:15:93:3a:77:84:92:15:18:fc:56: dc:87:b9:fd:7d:1c:98:60:aa:b6:74:2e:da:12:eb:78:5f:cd: f7:de:07:3c:ef:d8:d6:ec:c8:3e:e1:87:9b:da:95:44:61:88: d3:2e:54:fb:d8:bc:a0:bf:fa:45:eb:71:0b:99:40:4f:90:5d: 3e:1e:d5:97:1f:fd:cc:ac:ef:f6:33:5a:c9:b7:9e:06:eb:df: d9:5f:57:8b:be:fd:50:6e:91:b8:e5:c9:ba:ce:fc:f6:67:b2: 78:e8:f4:2b:c8:9e:8b:d4:40:03:0a:fd:82:f9:00:4b:15:02: 08:c3:f4:3e:17:27:c5:52:bc:3e:2a:b2:cb:9b:6c:88:ef:20: fc:73:e2:2c:c9:a5:1f:d0:54:71:1e:9b:4e:6c:44:86:39:58: 56:d7:72:f4:5e:4c:e6:4f:58:e1:a2:3f:5a:e2:6d:69:e6:32: a6:bd:2b:ae:ee:49:91:cd:37:cc:7d:cc:90:68:11:42:0e:9c: eb:cc:6c:0f:75:8f:4e:3c:e6:f2:03:d0:c2:5a:17:5c:26:6e: a9:0e:76:6d:e5:14:68:5a:22:dc:25:47:fc:65:68:4b:f4:40: 0f:5c:fd:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnhGjOfEJ23fIh5oyB4fAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMGJmMmM2YTlmMWE0MmI4YWNlZTAxMjU5ZjkxZjUxNDRh YjhhZjUwHhcNMjUxMjE4MDQwMDQ2WhcNMjUxMjE5MDQwMDQ2WjAzMTEwLwYDVQQD EyhmZmQzMWU3NDYwMjkxNjAxMWQ4MTVlZDhiNjVmYTg5NDI0M2EwZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyot6KxQjMSIRukK45faLpasAKtIz eOzcf1SQYKa73RggKY7Re/an1Kj13qzPK4XtRklyK2fJSly5dd9n7Z6w56ga1EL7 8ocTfrnfhSvf4rMQG98qHk3qNPN7BJxTL0J6BXMoaU2k+eH5New/ciSZvL0TN/p+ QKRRLeHyp4R6db/hFUpmBxrPDdGTKX/7vyTXSlI1YzRQUlUN1bFWYGuIEbPr2wbu wAQTDNCpNG4k3N/oYh7nR4Gpyn2qk+Iw1SVkG0V+Y006vX+oxGJ7+k0BqCJ+dMed dkx3m1s8siubXnovp+pZg2qb7aNkxQkPh8JuxoyNxa1qg5qUGdcidLhDVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/THnRgKRYBHYFe2LZfqJQkOg9bMB8GA1UdIwQY MBaAFLEL8sap8aQris7gEln5H1FEq4r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQt MjUxYTljODY0ZDI2LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQtMjUxYTljODY0ZDI2 LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehAWeuuA h5wJFILfRizh8OxnjXlUemjxSUgVkzp3hJIVGPxW3Ie5/X0cmGCqtnQu2hLreF/N 994HPO/Y1uzIPuGHm9qVRGGI0y5U+9i8oL/6RetxC5lAT5BdPh7Vlx/9zKzv9jNa ybeeBuvf2V9Xi779UG6RuOXJus789meyeOj0K8iei9RAAwr9gvkASxUCCMP0Phcn xVK8Piqyy5tsiO8g/HPiLMmlH9BUcR6bTmxEhjlYVtdy9F5M5k9Y4aI/WuJtaeYy pr0rru5Jkc03zH3MkGgRQg6c68xsD3WPTjzm8gPQwloXXCZuqQ52beUUaFoi3CVH /GVoS/RAD1z96Q== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:27 2025 by rpki-client