This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json) Hash identifier: 1iL0wr/C4ugBL3FCuwc42NAfAk+pRL4cV3/ZWa7EDzY= Subject key identifier: E0:57:46:E6:EB:D5:F0:5C:E4:8A:F1:E9:68:14:F1:A3:9D:77:CE:B3 Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18 Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918 Certificate serial: 019B4995432E2F5F67E62B8E4CBAF58710CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft Manifest number: 114A Signing time: Tue 23 Dec 2025 05:01:17 +0000 Manifest this update: Tue 23 Dec 2025 05:01:17 +0000 Manifest next update: Wed 24 Dec 2025 05:01:17 +0000 Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: LnzQR/E9yYLMVXFP2jnRvj0cx9z71mE6yyHaGCmqayY=) 2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:43:2e:2f:5f:67:e6:2b:8e:4c:ba:f5:87:10:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918 Validity Not Before: Dec 23 05:01:17 2025 GMT Not After : Dec 24 05:01:17 2025 GMT Subject: CN=e05746e6ebd5f05ce48af1e96814f1a39d77ceb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:58:69:39:04:d4:75:d6:ec:32:ee:08:46: e7:74:0d:ae:b0:96:a0:2a:17:0a:30:ae:81:54:b2: 55:c1:50:ac:4c:d7:29:9a:45:b8:28:31:59:98:eb: 79:d0:28:9e:91:6f:3c:d0:de:f0:68:5c:99:76:9b: 14:73:cf:1a:61:5e:48:a4:18:b7:19:27:5a:5f:b3: 96:ac:3f:82:86:4f:e4:bf:69:68:25:aa:4a:11:42: f7:8d:1b:8c:14:8e:43:a5:c1:8d:1d:a2:22:20:73: c5:f7:3e:fd:00:d9:c2:ed:36:40:d6:02:0a:16:9d: a5:e6:20:61:7c:40:1d:83:f1:79:6d:70:f3:03:6f: 9b:9c:9c:e2:f3:18:c8:b2:36:19:25:a7:d8:f0:5a: ec:d2:0a:3d:f3:09:3b:7c:52:2b:b5:aa:18:7e:0b: bb:84:d4:d7:17:a1:fd:83:26:81:17:64:fa:03:a1: 44:13:22:8a:e6:65:85:eb:42:34:3f:46:e9:f9:13: 4c:af:cb:e1:86:18:3a:cc:de:c3:91:2d:5e:87:3e: e5:3a:4b:53:63:01:e6:8e:58:7b:16:a6:fa:bd:ce: ce:57:8c:ff:29:e1:38:f6:41:6c:f4:bf:20:3c:a1: 19:ad:3c:0b:76:ba:53:26:50:05:ac:b5:0d:a4:4d: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:57:46:E6:EB:D5:F0:5C:E4:8A:F1:E9:68:14:F1:A3:9D:77:CE:B3 X509v3 Authority Key Identifier: keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f4:ab:f1:df:1d:4a:05:27:1a:33:52:c6:5c:56:d9:fa:04: 1c:48:4c:50:08:af:5d:29:45:3f:aa:39:6a:90:93:d1:29:a0: 7b:63:65:65:5b:a2:8b:fe:c0:25:60:f8:a4:7a:38:ad:af:50: c3:ec:9d:c3:c8:9e:36:c1:5b:cf:7f:76:40:27:1b:71:32:f6: 52:c5:87:60:77:ef:66:c4:c0:70:0c:cd:8c:a1:32:d3:c0:fc: c5:c9:5f:77:f6:03:f5:8b:10:4f:ac:4b:13:39:27:06:06:ae: b6:c9:23:5e:8e:97:93:9b:47:3b:09:12:59:71:e5:ec:af:62: c2:b2:01:be:3c:52:01:18:b0:e9:1a:e9:d3:43:74:98:35:e8: 0a:dd:07:1d:13:08:95:c7:3c:c0:42:41:5a:6e:bb:d4:ff:75: 54:1a:ea:f9:08:ca:e9:5d:c8:0a:0d:c5:4a:13:d1:26:a2:b4: 6d:cd:e2:a6:9c:44:71:d3:79:0f:e9:37:9e:32:3c:e7:bd:30: 3b:6e:5d:60:5a:4f:84:55:59:0b:3a:4a:83:63:db:ee:9f:dc: 09:b0:e6:ca:9a:7a:e7:e5:d7:64:5a:70:a1:7b:ca:0e:13:69: 56:b8:9d:c3:64:ef:ba:b4:24:5b:51:42:28:71:48:1a:b0:ba: 64:10:d5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlUMuL19n5iuOTLr1hxDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWJkMWE3NjVhZTVjYmUxZGM5M2RhZjAyNGQzYTQ3ZTcy YWM5MTgwHhcNMjUxMjIzMDUwMTE3WhcNMjUxMjI0MDUwMTE3WjAzMTEwLwYDVQQD EyhlMDU3NDZlNmViZDVmMDVjZTQ4YWYxZTk2ODE0ZjFhMzlkNzdjZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEhYaTkE1HXW7DLuCEbndA2usJag KhcKMK6BVLJVwVCsTNcpmkW4KDFZmOt50CiekW880N7waFyZdpsUc88aYV5IpBi3 GSdaX7OWrD+Chk/kv2loJapKEUL3jRuMFI5DpcGNHaIiIHPF9z79ANnC7TZA1gIK Fp2l5iBhfEAdg/F5bXDzA2+bnJzi8xjIsjYZJafY8Frs0go98wk7fFIrtaoYfgu7 hNTXF6H9gyaBF2T6A6FEEyKK5mWF60I0P0bp+RNMr8vhhhg6zN7DkS1ehz7lOktT YwHmjlh7Fqb6vc7OV4z/KeE49kFs9L8gPKEZrTwLdrpTJlAFrLUNpE2MxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBXRubr1fBc5Irx6WgU8aOdd86zMB8GA1UdIwQY MBaAFEqr0adlrly+Hck9rwJNOkfnKskYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mYmYyMzktNWY4YS00ZDZhLWEwY2It NDRhYzZhZGIzYTQ5LzEvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mYmYyMzktNWY4YS00ZDZhLWEwY2ItNDRhYzZhZGIzYTQ5 LzEvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvSr8d8d SgUnGjNSxlxW2foEHEhMUAivXSlFP6o5apCT0Smge2NlZVuii/7AJWD4pHo4ra9Q w+ydw8ieNsFbz392QCcbcTL2UsWHYHfvZsTAcAzNjKEy08D8xclfd/YD9YsQT6xL EzknBgautskjXo6Xk5tHOwkSWXHl7K9iwrIBvjxSARiw6Rrp00N0mDXoCt0HHRMI lcc8wEJBWm671P91VBrq+QjK6V3ICg3FShPRJqK0bc3ippxEcdN5D+k3njI8570w O25dYFpPhFVZCzpKg2Pb7p/cCbDmypp65+XXZFpwoXvKDhNpVridw2TvurQkW1FC KHFIGrC6ZBDVYg== -----END CERTIFICATE-----Generated at Tue Dec 23 09:14:22 2025 by rpki-client