This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json) Hash identifier: CdphilllvWPzJ4n3kYsC2qNQmpWHcOpJ9+5Ud/a9WHI= Subject key identifier: 85:58:2D:17:5B:33:42:F4:F6:54:3E:7F:CA:5B:52:C9:45:3D:92:52 Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57 Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557 Certificate serial: 019B2F9E852A8E2A773CEDFAFD875F2A6415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft Manifest number: 0927 Signing time: Thu 18 Dec 2025 04:01:16 +0000 Manifest this update: Thu 18 Dec 2025 04:01:16 +0000 Manifest next update: Fri 19 Dec 2025 04:01:16 +0000 Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: rDvzHDXkgyLMJw1RfyRWZEOFa3z7koJFGT43Tz40DN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:85:2a:8e:2a:77:3c:ed:fa:fd:87:5f:2a:64:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557 Validity Not Before: Dec 18 04:01:16 2025 GMT Not After : Dec 19 04:01:16 2025 GMT Subject: CN=85582d175b3342f4f6543e7fca5b52c9453d9252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:5c:de:cd:c5:d4:e0:b3:99:1f:b2:48:a7: ad:ca:4b:4f:18:90:25:c2:1f:fd:b8:e9:1c:7a:5d: ad:1b:1a:7f:51:3c:e9:57:59:0f:7f:67:2d:ab:91: 6e:c9:52:69:bf:dd:4e:01:c8:2f:42:75:de:2a:35: 37:d8:e6:7f:0d:b8:d5:3d:1e:3e:22:11:b5:8c:eb: 0b:da:56:1c:b7:02:d7:8c:54:1f:c8:a5:c0:1c:bd: b8:9d:58:0e:62:7f:bd:f3:35:38:ac:0e:70:1c:a5: 97:c6:a8:12:07:d1:74:62:e6:19:4d:2a:98:86:ca: 5b:ed:25:3a:e7:22:c2:a0:a1:27:cc:29:6e:2d:f5: cf:e3:f2:ab:a2:b5:90:38:33:b0:de:52:a7:8e:12: 76:b6:d9:6a:32:a4:09:a2:77:05:93:3f:6c:cd:47: 20:33:f9:6e:59:86:89:95:88:0d:d6:54:54:40:5a: 4d:93:25:9e:70:fe:34:40:af:70:9c:28:62:bd:ec: db:86:7b:c4:92:f1:04:3f:d2:d0:ca:c4:c9:62:9f: 25:a5:d1:59:1f:23:c1:b3:29:37:0f:36:cf:e5:ac: 5e:f2:52:81:72:71:20:e3:3e:d7:d3:6c:e4:68:29: b5:da:32:fa:16:ee:d2:99:d1:b4:e8:30:e8:30:11: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:2D:17:5B:33:42:F4:F6:54:3E:7F:CA:5B:52:C9:45:3D:92:52 X509v3 Authority Key Identifier: keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e2:5d:9b:70:63:24:ac:44:87:fc:0f:a7:58:24:51:7b:3b: 7b:17:64:39:93:b2:43:48:c8:d3:f4:db:a6:a2:5a:99:8b:e6: 1a:21:5a:26:e6:e9:f4:2e:e5:ad:76:12:56:16:48:ac:9e:d6: 05:83:1d:59:88:19:f9:2f:df:4b:48:1c:66:e6:42:bc:2f:54: f9:4d:10:bb:06:56:57:18:f3:4d:08:dc:20:f4:05:27:35:d0: 38:87:8d:45:5f:e7:38:c1:71:43:21:43:cc:cf:73:4b:a3:eb: 74:26:02:79:04:68:13:19:2a:1a:b4:03:96:a4:db:d0:43:03: 70:9a:34:c1:a4:1c:1c:13:d9:81:c7:d5:c9:35:02:ac:74:76: 04:19:3c:a0:52:ca:8b:1d:1c:fc:62:68:6d:af:44:cc:ac:18: 63:7d:4f:b0:e8:61:67:d3:0e:3a:54:46:d3:62:41:7c:4c:6c: bb:a9:27:44:fd:2b:1b:36:1b:1f:39:04:47:4b:f5:8c:c2:0b: 8d:b3:5f:5f:d1:cc:f0:72:ee:52:29:46:b3:28:0f:29:32:2e: fb:62:52:ed:6e:86:0d:0a:91:18:06:3e:ae:06:61:98:61:31: 3a:3c:47:57:6b:a0:e4:fe:59:ed:fb:57:47:4d:a9:53:de:08: 49:20:ec:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnoUqjip3PO36/YdfKmQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm YmQ1NTcwHhcNMjUxMjE4MDQwMTE2WhcNMjUxMjE5MDQwMTE2WjAzMTEwLwYDVQQD Eyg4NTU4MmQxNzViMzM0MmY0ZjY1NDNlN2ZjYTViNTJjOTQ1M2Q5MjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMdc3s3F1OCzmR+ySKetyktPGJAl wh/9uOkcel2tGxp/UTzpV1kPf2ctq5FuyVJpv91OAcgvQnXeKjU32OZ/DbjVPR4+ IhG1jOsL2lYctwLXjFQfyKXAHL24nVgOYn+98zU4rA5wHKWXxqgSB9F0YuYZTSqY hspb7SU65yLCoKEnzCluLfXP4/KrorWQODOw3lKnjhJ2ttlqMqQJoncFkz9szUcg M/luWYaJlYgN1lRUQFpNkyWecP40QK9wnChivezbhnvEkvEEP9LQysTJYp8lpdFZ HyPBsyk3DzbP5axe8lKBcnEg4z7X02zkaCm12jL6Fu7SmdG06DDoMBEhMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVYLRdbM0L09lQ+f8pbUslFPZJSMB8GA1UdIwQY MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOJdm3Bj JKxEh/wPp1gkUXs7exdkOZOyQ0jI0/TbpqJamYvmGiFaJubp9C7lrXYSVhZIrJ7W BYMdWYgZ+S/fS0gcZuZCvC9U+U0QuwZWVxjzTQjcIPQFJzXQOIeNRV/nOMFxQyFD zM9zS6PrdCYCeQRoExkqGrQDlqTb0EMDcJo0waQcHBPZgcfVyTUCrHR2BBk8oFLK ix0c/GJoba9EzKwYY31PsOhhZ9MOOlRG02JBfExsu6knRP0rGzYbHzkER0v1jMIL jbNfX9HM8HLuUilGsygPKTIu+2JS7W6GDQqRGAY+rgZhmGExOjxHV2ug5P5Z7ftX R02pU94ISSDsCw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:23:35 2025 by rpki-client