This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft File: SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json) Hash identifier: z/Mre2+xi+h3Eg3UiSKqqPAG6Y/gJ/YWrciiDwdrpA0= Subject key identifier: B2:11:71:9B:91:D5:5C:B5:D5:3C:FC:19:4A:6F:B3:44:E9:1C:E4:3B Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69 Certificate issuer: /CN=4aa6dc84f46b690721485a4405bfc939da254969 Certificate serial: 019B7034298B0D95F65348ACC5ADD30763A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft Manifest number: 02F8 Signing time: Tue 30 Dec 2025 17:00:25 +0000 Manifest this update: Tue 30 Dec 2025 17:00:25 +0000 Manifest next update: Wed 31 Dec 2025 17:00:25 +0000 Files and hashes: 1: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: k+2LjE5xzRV6AE8ogFpvnAiUAvUcKWG5NnC2Fq5e7Lw=) 2: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (hash: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:29:8b:0d:95:f6:53:48:ac:c5:ad:d3:07:63:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969 Validity Not Before: Dec 30 17:00:25 2025 GMT Not After : Dec 31 17:00:25 2025 GMT Subject: CN=b211719b91d55cb5d53cfc194a6fb344e91ce43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ec:59:0b:e1:04:a4:03:82:3e:79:39:25:8d: 8a:19:52:32:2d:fa:0a:d7:d2:22:da:06:6d:e5:e9: 79:d1:5f:74:49:8e:75:ab:f5:9f:a3:af:59:d8:c6: 1a:6b:90:05:78:46:d3:4a:8d:ff:f3:d9:a1:38:cd: bb:08:37:4d:d1:28:e4:81:92:2d:e1:c7:cd:77:c9: c6:d1:08:12:ca:89:00:79:79:42:8c:ef:ef:a8:78: f7:06:b1:1a:09:d6:1f:41:68:67:18:2f:2a:47:ca: a3:d2:e4:f9:6d:e3:aa:21:84:b5:58:32:73:02:58: 4f:18:32:59:70:3b:9b:7b:fa:e1:bd:48:0a:6c:81: 03:d8:19:e7:e4:a2:4b:c8:7d:b4:38:24:f0:39:eb: 20:e2:44:30:dd:7a:0e:69:57:71:f2:22:cc:57:e5: 26:45:26:c6:02:88:7a:35:63:14:6c:e6:11:fc:11: 7c:c6:50:da:e0:e6:96:ed:ee:79:9f:63:6f:a8:10: 6e:0d:f5:d8:53:f3:15:66:46:e3:ec:07:a0:a3:d0: 25:ea:6c:bf:47:70:9d:ac:e8:e7:4b:22:93:f5:d9: 99:2c:1b:2a:87:79:b8:e1:c8:ce:21:a0:4f:4b:08: 02:61:33:2a:77:80:b4:42:59:61:2e:d3:97:fb:d5: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:71:9B:91:D5:5C:B5:D5:3C:FC:19:4A:6F:B3:44:E9:1C:E4:3B X509v3 Authority Key Identifier: keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:90:96:c5:50:ac:5c:5d:b0:16:fc:bb:96:61:71:3f:b3:da: 44:a9:62:0a:3e:5e:e1:d1:24:6b:20:cb:5a:28:9d:13:77:f1: 54:6b:6f:cf:db:e6:4f:75:8e:f4:56:47:e9:90:81:03:90:9d: f1:7e:53:cf:9f:99:97:fd:e1:04:5d:61:4a:5f:e9:5f:28:81: 81:85:03:09:71:ac:21:3c:0e:bb:a0:45:98:55:51:ca:b5:02: e3:3e:cf:49:1f:1c:9b:60:3d:91:53:d6:af:23:8e:81:25:3f: 3a:69:65:16:88:ae:80:40:c4:f9:d5:3a:96:80:3c:a1:7b:09: ba:55:ad:e9:10:dc:76:9d:8c:6c:2c:34:96:ec:36:ad:02:d6: 39:e1:db:c6:74:b3:da:6d:8e:79:a7:31:af:c2:21:6b:ac:13: 63:7f:e6:0e:0b:38:96:7f:74:df:9b:ec:0b:c8:86:5d:02:40: 1e:0f:ab:08:83:b3:f3:27:30:20:a2:25:00:43:13:77:45:17: 34:11:98:77:94:1a:4e:15:b8:a7:ce:1e:9f:88:6f:cc:ee:b4: 34:a0:05:93:fb:fe:0d:bd:67:0d:09:f1:ef:e1:44:96:a4:0b: ce:aa:98:09:d3:05:5a:35:91:69:fc:f7:33:d5:fe:d5:d8:ee: 3d:0c:23:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNCmLDZX2U0isxa3TB2OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYTZkYzg0ZjQ2YjY5MDcyMTQ4NWE0NDA1YmZjOTM5ZGEy NTQ5NjkwHhcNMjUxMjMwMTcwMDI1WhcNMjUxMjMxMTcwMDI1WjAzMTEwLwYDVQQD EyhiMjExNzE5YjkxZDU1Y2I1ZDUzY2ZjMTk0YTZmYjM0NGU5MWNlNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OxZC+EEpAOCPnk5JY2KGVIyLfoK 19Ii2gZt5el50V90SY51q/Wfo69Z2MYaa5AFeEbTSo3/89mhOM27CDdN0SjkgZIt 4cfNd8nG0QgSyokAeXlCjO/vqHj3BrEaCdYfQWhnGC8qR8qj0uT5beOqIYS1WDJz AlhPGDJZcDube/rhvUgKbIED2Bnn5KJLyH20OCTwOesg4kQw3XoOaVdx8iLMV+Um RSbGAoh6NWMUbOYR/BF8xlDa4OaW7e55n2NvqBBuDfXYU/MVZkbj7Aego9Al6my/ R3CdrOjnSyKT9dmZLBsqh3m44cjOIaBPSwgCYTMqd4C0QllhLtOX+9Xy8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIRcZuR1Vy11Tz8GUpvs0TpHOQ7MB8GA1UdIwQY MBaAFEqm3IT0a2kHIUhaRAW/yTnaJUlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3FiY2hQUnJhUWNoU0ZwRUJiX0pPZG9sU1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NzM3N2EtMWE3Yi00ZTg0LWEyNDQt MDlmYzliYjM0YjlkLzEvU3FiY2hQUnJhUWNoU0ZwRUJiX0pPZG9sU1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81NzM3N2EtMWE3Yi00ZTg0LWEyNDQtMDlmYzliYjM0Yjlk LzEvU3FiY2hQUnJhUWNoU0ZwRUJiX0pPZG9sU1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZCWxVCs XF2wFvy7lmFxP7PaRKliCj5e4dEkayDLWiidE3fxVGtvz9vmT3WO9FZH6ZCBA5Cd 8X5Tz5+Zl/3hBF1hSl/pXyiBgYUDCXGsITwOu6BFmFVRyrUC4z7PSR8cm2A9kVPW ryOOgSU/OmllFoiugEDE+dU6loA8oXsJulWt6RDcdp2MbCw0luw2rQLWOeHbxnSz 2m2Oeacxr8Iha6wTY3/mDgs4ln9035vsC8iGXQJAHg+rCIOz8ycwIKIlAEMTd0UX NBGYd5QaThW4p84en4hvzO60NKAFk/v+Db1nDQnx7+FElqQLzqqYCdMFWjWRafz3 M9X+1djuPQwj2w== -----END CERTIFICATE-----Generated at Wed Dec 31 02:27:01 2025 by rpki-client