This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft File: pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json) Hash identifier: ZhRGMtzQVhQ7KCK+ZjDLU8IMWqcITclpD2jC+SZINC4= Subject key identifier: 71:1E:9B:10:2D:88:E4:CB:E5:61:AC:17:1B:60:B2:54:8C:62:A8:9A Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Certificate serial: 019B73A3523DEEBF4D8DE0B9B893336EA168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft Manifest number: 0917 Signing time: Wed 31 Dec 2025 09:00:41 +0000 Manifest this update: Wed 31 Dec 2025 09:00:41 +0000 Manifest next update: Thu 01 Jan 2026 09:00:41 +0000 Files and hashes: 1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=) 2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: BfSil88Tsq1Fu4A3c8pc2uknyKBLIvt7EkvkPOT/LO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:a3:52:3d:ee:bf:4d:8d:e0:b9:b8:93:33:6e:a1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Validity Not Before: Dec 31 09:00:41 2025 GMT Not After : Jan 1 09:00:41 2026 GMT Subject: CN=711e9b102d88e4cbe561ac171b60b2548c62a89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:b8:ce:71:1c:18:e7:3a:e3:43:cd:48:71: 03:d9:23:73:dc:90:8b:6f:91:13:2c:bc:8a:72:2e: f7:0a:47:16:6f:cc:55:82:84:93:2a:4d:30:27:c0: 98:ef:9b:35:b9:59:22:f6:7c:b0:96:15:2f:cd:3d: a3:6e:0a:e9:90:bf:a9:0a:30:3a:17:4e:a7:e5:12: b4:51:a8:0b:f3:a6:ab:b8:dc:1d:1c:77:de:66:8f: 7f:0e:50:6b:e0:6d:de:a8:0e:6a:5c:5c:d9:8c:63: e6:cb:0c:21:b7:11:c6:e0:ad:24:f6:bb:ca:b2:22: a3:f5:ed:5c:2c:0f:7f:b9:2f:a1:3b:f9:99:4b:bd: 28:51:0b:04:9f:c4:36:15:81:1a:58:cd:7d:7e:b3: 8b:b0:71:a6:ca:90:b8:1f:9a:ae:ae:da:e9:15:49: ad:0e:4c:95:cf:91:77:84:bc:3a:07:c3:ec:7f:83: 59:7f:9b:2b:2f:cf:cb:e4:7e:99:82:3f:2b:54:cf: 91:a4:d9:38:a9:31:52:fd:93:ca:8e:ab:95:09:db: 7f:08:73:d0:6e:c1:24:bb:8e:e4:f5:27:00:b2:bd: 97:79:25:5b:09:a6:57:ee:64:e5:1b:3f:6f:09:9d: 95:38:3f:38:66:29:ab:88:00:86:9f:d5:68:03:d1: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1E:9B:10:2D:88:E4:CB:E5:61:AC:17:1B:60:B2:54:8C:62:A8:9A X509v3 Authority Key Identifier: keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:32:32:56:20:3b:eb:51:02:56:31:4a:73:28:27:7b:46:9c: ec:32:16:1b:04:db:3a:f7:41:7a:cd:95:1b:ff:42:fa:93:90: 58:e7:2a:51:a1:a5:6f:bc:a9:4d:b7:e1:b6:62:64:d2:68:b5: 0b:75:5a:88:56:82:89:76:e3:fd:08:99:7a:70:20:3a:6f:8e: 26:56:e3:20:6a:1a:b8:dc:e8:23:db:c1:37:8f:70:82:3c:53: ca:07:87:54:91:03:50:60:57:d7:21:fc:98:22:1b:bb:95:a2: 4c:08:2c:a4:2d:8a:b8:06:3f:0f:39:83:63:5f:0e:aa:53:19: c5:fa:95:3e:7d:30:0d:3f:2b:37:77:7f:4b:1d:de:7c:b9:b9: 71:21:df:98:7f:84:8d:67:f1:34:2e:23:9e:f8:a5:27:bb:61: 0f:c3:1d:57:08:5e:c5:49:30:2c:dc:02:47:70:2b:38:9a:22: fe:2b:59:43:00:de:a2:99:c8:91:d5:4a:bb:f5:97:85:40:0b: 01:02:d9:8f:83:c5:cf:ae:63:12:0e:ec:25:3c:91:a1:01:f8: aa:84:50:f9:6d:6a:85:5f:e2:de:be:cd:c0:18:5d:be:c4:7e: 30:a9:fe:81:7a:fb:30:1e:5e:7b:fd:6f:6b:0a:3f:ec:e0:94: 48:c5:13:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzo1I97r9NjeC5uJMzbqFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk NmM1YTUwHhcNMjUxMjMxMDkwMDQxWhcNMjYwMTAxMDkwMDQxWjAzMTEwLwYDVQQD Eyg3MTFlOWIxMDJkODhlNGNiZTU2MWFjMTcxYjYwYjI1NDhjNjJhODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw64znEcGOc640PNSHED2SNz3JCL b5ETLLyKci73CkcWb8xVgoSTKk0wJ8CY75s1uVki9nywlhUvzT2jbgrpkL+pCjA6 F06n5RK0UagL86aruNwdHHfeZo9/DlBr4G3eqA5qXFzZjGPmywwhtxHG4K0k9rvK siKj9e1cLA9/uS+hO/mZS70oUQsEn8Q2FYEaWM19frOLsHGmypC4H5qurtrpFUmt DkyVz5F3hLw6B8Psf4NZf5srL8/L5H6Zgj8rVM+RpNk4qTFS/ZPKjquVCdt/CHPQ bsEku47k9ScAsr2XeSVbCaZX7mTlGz9vCZ2VOD84ZimriACGn9VoA9HUBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEemxAtiOTL5WGsFxtgslSMYqiaMB8GA1UdIwQY MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt ZTkzMDFhZmMzODRmLzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzIyViA7 61ECVjFKcygne0ac7DIWGwTbOvdBes2VG/9C+pOQWOcqUaGlb7ypTbfhtmJk0mi1 C3VaiFaCiXbj/QiZenAgOm+OJlbjIGoauNzoI9vBN49wgjxTygeHVJEDUGBX1yH8 mCIbu5WiTAgspC2KuAY/DzmDY18OqlMZxfqVPn0wDT8rN3d/Sx3efLm5cSHfmH+E jWfxNC4jnvilJ7thD8MdVwhexUkwLNwCR3ArOJoi/itZQwDeopnIkdVKu/WXhUAL AQLZj4PFz65jEg7sJTyRoQH4qoRQ+W1qhV/i3r7NwBhdvsR+MKn+gXr7MB5ee/1v awo/7OCUSMUTMA== -----END CERTIFICATE-----Generated at Wed Dec 31 11:54:24 2025 by rpki-client