This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft File: 1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft (raw, json) Hash identifier: 1spLTOx2UfcPe23nUtCJeYH0JLprbicmbY1orFtq7m4= Subject key identifier: 0E:18:BF:3B:F8:20:64:DA:C5:AA:11:10:38:89:45:B1:B9:EA:CD:BE Authority key identifier: F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E Certificate issuer: /CN=f94fd2418e7f09e01d15113fff004e055f80fc5e Certificate serial: 019B755B19C6A2767AA0002A0D115903AFC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft Manifest number: 0838 Signing time: Wed 31 Dec 2025 17:01:03 +0000 Manifest this update: Wed 31 Dec 2025 17:01:03 +0000 Manifest next update: Thu 01 Jan 2026 17:01:03 +0000 Files and hashes: 1: 1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl (hash: yAymh28+AzDrO+wVgZpvC0pkug2rHxMhjOjehKrpTGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5b:19:c6:a2:76:7a:a0:00:2a:0d:11:59:03:af:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94fd2418e7f09e01d15113fff004e055f80fc5e Validity Not Before: Dec 31 17:01:03 2025 GMT Not After : Jan 1 17:01:03 2026 GMT Subject: CN=0e18bf3bf82064dac5aa1110388945b1b9eacdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:fd:90:f6:6a:a2:ed:36:99:4e:6a:eb:5c: f9:4d:ca:f0:e8:06:1c:2f:3b:0c:de:93:be:bb:c3: 3a:a9:4c:fc:b7:23:ba:29:c4:2f:2b:68:32:24:95: ee:e2:75:ab:9b:cc:bc:c7:06:14:3a:a1:c7:0e:8a: db:a5:cd:fc:a2:8e:00:0d:ad:bd:95:fc:90:14:d5: 0f:d2:8a:82:73:d7:c8:8b:57:ea:e7:e0:3f:e5:d0: f3:9f:d6:95:ed:81:27:63:a4:da:41:35:85:4f:19: b7:56:5c:a7:92:c6:53:21:82:9a:7c:ff:8c:3d:41: a5:b0:52:80:dd:f9:55:a3:37:b2:c7:58:09:ce:84: 37:18:c6:d7:a8:ff:68:e5:40:0d:8a:b2:d3:1a:54: 61:ab:bb:77:8c:eb:97:f8:1b:b7:76:a7:6f:ca:55: 4a:97:1e:ab:36:d3:5b:ec:2d:45:44:fe:e0:05:cd: af:c8:30:bd:36:b8:74:8e:56:a8:98:5f:54:15:96: 3c:e5:16:22:eb:fa:35:76:a8:3f:fc:24:e3:18:8b: ac:89:88:c2:3f:4d:8c:1c:2a:f8:95:d9:0e:21:d7: d5:20:aa:b8:4e:4c:46:c1:e7:d3:d0:f4:a3:b0:69: 68:50:cd:5d:b4:14:7c:c6:6e:3c:49:d9:37:f6:cb: 3f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:18:BF:3B:F8:20:64:DA:C5:AA:11:10:38:89:45:B1:B9:EA:CD:BE X509v3 Authority Key Identifier: keyid:F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:22:86:f4:e1:d1:1c:8d:b1:66:c5:44:ed:e4:c1:61:d7:69: 19:c6:05:fa:47:c7:d8:b2:62:f1:d5:3a:64:72:f3:73:a2:e7: 5e:95:14:d2:f2:e3:4b:8f:a7:63:3a:23:49:20:eb:df:ee:02: 12:02:c2:91:12:ce:97:76:9a:5a:5f:fa:34:4c:f2:4e:43:ee: 24:1c:ca:46:b9:55:5c:5b:2f:ca:3b:18:a4:07:82:ea:69:2c: e1:52:90:ee:09:2c:21:de:3b:88:87:63:1b:bb:f8:2e:44:d0: 31:b8:0b:06:74:f1:82:52:20:af:f0:d3:a7:0f:d5:e0:04:6b: a9:fe:df:e1:e2:82:c3:ec:ba:82:fa:32:eb:04:db:ac:1d:b0: b5:f9:e1:36:3a:19:b6:62:f8:3e:be:47:85:bb:4b:08:1e:c4: 49:0f:18:4c:5c:87:f7:c7:2c:02:ee:ab:fa:e2:91:cc:72:ee: 49:ea:e0:f5:48:f2:63:db:e7:73:89:fe:9a:e9:bb:1e:7e:fb: 93:c8:cc:0a:bb:87:72:af:17:e6:f6:78:cd:56:b5:86:8b:aa: 43:9e:dc:7c:76:84:d0:97:71:a6:07:8e:1f:70:94:06:c6:64: e3:94:65:f8:90:0b:2a:dd:cd:b5:7b:99:e9:8d:24:f8:16:3c: 3c:2a:76:65 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt1WxnGonZ6oAAqDRFZA6/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGZkMjQxOGU3ZjA5ZTAxZDE1MTEzZmZmMDA0ZTA1NWY4 MGZjNWUwHhcNMjUxMjMxMTcwMTAzWhcNMjYwMTAxMTcwMTAzWjAzMTEwLwYDVQQD EygwZTE4YmYzYmY4MjA2NGRhYzVhYTExMTAzODg5NDViMWI5ZWFjZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8P9kPZqou02mU5q61z5Tcrw6AYc LzsM3pO+u8M6qUz8tyO6KcQvK2gyJJXu4nWrm8y8xwYUOqHHDorbpc38oo4ADa29 lfyQFNUP0oqCc9fIi1fq5+A/5dDzn9aV7YEnY6TaQTWFTxm3VlynksZTIYKafP+M PUGlsFKA3flVozeyx1gJzoQ3GMbXqP9o5UANirLTGlRhq7t3jOuX+Bu3dqdvylVK lx6rNtNb7C1FRP7gBc2vyDC9Nrh0jlaomF9UFZY85RYi6/o1dqg//CTjGIusiYjC P02MHCr4ldkOIdfVIKq4TkxGwefT0PSjsGloUM1dtBR8xm48Sdk39ss/zQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA4Yvzv4IGTaxaoREDiJRbG56s2+MB8GA1UdIwQY MBaAFPlP0kGOfwngHRURP/8ATgVfgPxeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VX1NRWTVfQ2VBZEZSRV9fd0JPQlYtQV9GNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMWZmYmMzLTQ5OGQtNDcwMC05YTVl LTkxNzBlZTlhNTFlNi8xLzEtVV9TUVk1X0NlQWRGUkVfX3dCT0JWLUFfRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q5LzFmZmJjMy00OThkLTQ3MDAtOWE1ZS05MTcwZWU5YTUx ZTYvMS8xLVVfU1FZNV9DZUFkRlJFX193Qk9CVi1BX0Y0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiKG 9OHRHI2xZsVE7eTBYddpGcYF+kfH2LJi8dU6ZHLzc6LnXpUU0vLjS4+nYzojSSDr 3+4CEgLCkRLOl3aaWl/6NEzyTkPuJBzKRrlVXFsvyjsYpAeC6mks4VKQ7gksId47 iIdjG7v4LkTQMbgLBnTxglIgr/DTpw/V4ARrqf7f4eKCw+y6gvoy6wTbrB2wtfnh NjoZtmL4Pr5HhbtLCB7ESQ8YTFyH98csAu6r+uKRzHLuSerg9UjyY9vnc4n+mum7 Hn77k8jMCruHcq8X5vZ4zVa1houqQ57cfHaE0JdxpgeOH3CUBsZk45Rl+JALKt3N tXuZ6Y0k+BY8PCp2ZQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:04:19 2025 by rpki-client