This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft File: SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json) Hash identifier: 1o73jHIp4jX8JeSGjLB8ejaCMRts09YetzrgVvgG4is= Subject key identifier: E9:E2:76:1B:AB:B4:AA:9D:70:FD:E7:14:CC:D8:CC:D0:A3:71:D9:39 Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c Certificate serial: 019B50A99FDCE5C940126E1B8BBC154E90AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft Manifest number: 14F4 Signing time: Wed 24 Dec 2025 14:00:52 +0000 Manifest this update: Wed 24 Dec 2025 14:00:52 +0000 Manifest next update: Thu 25 Dec 2025 14:00:52 +0000 Files and hashes: 1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=) 2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: ZewnOc4VBSYbedmyFJe9U0AfejtQsc2FgR5AAJHBLc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:9f:dc:e5:c9:40:12:6e:1b:8b:bc:15:4e:90:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c Validity Not Before: Dec 24 14:00:52 2025 GMT Not After : Dec 25 14:00:52 2025 GMT Subject: CN=e9e2761babb4aa9d70fde714ccd8ccd0a371d939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:39:15:eb:f9:3c:59:12:c9:bc:09:95:a9:80: d7:9b:62:d3:9f:e0:19:6a:4e:e3:65:71:28:d6:c4: 72:76:c3:8b:ed:41:18:78:61:85:74:92:2e:27:a1: 3b:a3:21:e4:79:c1:30:f9:f4:53:bd:1e:ca:0f:a9: e1:6a:33:90:ae:4c:fe:3d:4b:d0:8f:73:5c:4d:b9: 94:0f:9c:17:36:38:e3:1c:c3:29:5d:92:5d:c7:cb: fe:40:34:41:b6:00:68:9d:be:6d:ea:5b:78:cb:4c: 43:0c:1c:35:bb:1c:b0:35:cd:56:3e:a4:cc:b0:81: 3b:50:9f:e0:9a:f1:d4:ab:70:fe:4f:2c:f2:ff:1e: 3b:4a:38:b1:8e:af:7d:14:18:4a:72:d5:eb:bf:67: 62:2f:95:d6:05:68:ec:5d:4c:75:74:c4:c8:11:46: 91:33:99:cc:dc:a2:7f:e8:14:53:f5:a0:7f:83:8c: e8:08:92:d6:25:6e:e3:8e:db:21:33:d1:b1:b9:2e: 60:34:aa:e6:c2:9a:7a:dc:25:72:c8:65:da:80:0e: 27:df:ee:b5:fb:bd:47:17:c4:79:75:1c:75:77:f8: 70:d3:a2:07:22:bc:c3:c7:47:86:58:0b:14:d7:80: 5a:4a:e5:e5:5c:d5:8e:97:d1:23:f8:4a:15:6a:6d: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:76:1B:AB:B4:AA:9D:70:FD:E7:14:CC:D8:CC:D0:A3:71:D9:39 X509v3 Authority Key Identifier: keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:14:bc:4a:3d:82:50:87:ff:2a:2b:40:e6:cc:ac:cc:f3: 80:41:d8:42:2e:1c:a5:a9:05:bf:cd:a8:be:f7:a5:81:84:f8: ec:68:4f:1f:ba:4c:d9:69:a8:d0:03:ab:27:f3:03:ef:96:53: b9:82:2f:c1:90:bb:e4:03:1f:91:bc:2c:6f:a7:2a:fe:47:ee: 25:30:3d:b0:72:96:4f:b5:84:91:fc:1c:d7:09:8c:f0:02:27: 3d:52:74:b5:5c:bd:16:c9:c4:41:5a:5b:30:fb:8d:53:7f:1f: 61:f6:06:65:ec:4e:48:54:b3:73:12:47:1e:6a:bc:17:d9:bb: b4:e6:fe:8c:b9:cb:67:04:9a:23:a7:32:1d:22:fe:7b:93:aa: 72:a9:98:28:fc:ba:fd:85:e7:13:49:d9:2f:68:53:ee:ed:49: 3e:7f:72:17:d9:96:5b:42:71:a0:e3:a7:c5:a4:03:bf:41:7f: 4b:46:fa:03:71:ae:8d:88:ca:f0:21:69:99:bd:3e:1f:bb:c6: a4:18:b6:23:af:88:a8:75:ef:28:fa:53:e0:3f:6a:aa:67:35: 86:9f:19:13:b2:82:6b:26:27:b2:77:6d:9a:aa:ed:20:f5:87: ec:b2:a9:27:22:0e:df:f7:99:ad:a5:3d:4d:8a:18:8c:40:bf: 91:e0:4f:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqZ/c5clAEm4bi7wVTpCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYTY5MTc4NzZmZDc4OTI2YzE5MjdiOWZkYzc5NjU4ZDc0 NmM4NGMwHhcNMjUxMjI0MTQwMDUyWhcNMjUxMjI1MTQwMDUyWjAzMTEwLwYDVQQD EyhlOWUyNzYxYmFiYjRhYTlkNzBmZGU3MTRjY2Q4Y2NkMGEzNzFkOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jkV6/k8WRLJvAmVqYDXm2LTn+AZ ak7jZXEo1sRydsOL7UEYeGGFdJIuJ6E7oyHkecEw+fRTvR7KD6nhajOQrkz+PUvQ j3NcTbmUD5wXNjjjHMMpXZJdx8v+QDRBtgBonb5t6lt4y0xDDBw1uxywNc1WPqTM sIE7UJ/gmvHUq3D+Tyzy/x47Sjixjq99FBhKctXrv2diL5XWBWjsXUx1dMTIEUaR M5nM3KJ/6BRT9aB/g4zoCJLWJW7jjtshM9GxuS5gNKrmwpp63CVyyGXagA4n3+61 +71HF8R5dRx1d/hw06IHIrzDx0eGWAsU14BaSuXlXNWOl9Ej+EoVam2utQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnidhurtKqdcP3nFMzYzNCjcdk5MB8GA1UdIwQY MBaAFEqmkXh2/XiSbBknuf3HlljXRshMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQt OWNlMjdjMTJiMmY0LzEvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQtOWNlMjdjMTJiMmY0 LzEvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcsUvEo9 glCH/yorQObMrMzzgEHYQi4cpakFv82ovvelgYT47GhPH7pM2Wmo0AOrJ/MD75ZT uYIvwZC75AMfkbwsb6cq/kfuJTA9sHKWT7WEkfwc1wmM8AInPVJ0tVy9FsnEQVpb MPuNU38fYfYGZexOSFSzcxJHHmq8F9m7tOb+jLnLZwSaI6cyHSL+e5OqcqmYKPy6 /YXnE0nZL2hT7u1JPn9yF9mWW0JxoOOnxaQDv0F/S0b6A3GujYjK8CFpmb0+H7vG pBi2I6+IqHXvKPpT4D9qqmc1hp8ZE7KCayYnsndtmqrtIPWH7LKpJyIO3/eZraU9 TYoYjEC/keBPJA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:17:29 2025 by rpki-client