This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft File: sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json) Hash identifier: XyK+nfhYbHWErhxPQVAb2PzRVpG3FC1EYhZexabBKok= Subject key identifier: 30:E4:94:6A:1D:90:52:1F:DE:F0:84:F3:11:BC:EF:58:38:D0:19:91 Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7 Certificate issuer: /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7 Certificate serial: 019B341FB72C13556846E05758ABC94CB17A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft Manifest number: 0611 Signing time: Fri 19 Dec 2025 01:00:52 +0000 Manifest this update: Fri 19 Dec 2025 01:00:52 +0000 Manifest next update: Sat 20 Dec 2025 01:00:52 +0000 Files and hashes: 1: 53_H80-AjcuM7a-7V7Ni8CDVxmc.roa (hash: TnMZlgDSn2wGls3cni5JDswiMtfBk15EprIHZOUPW18=) 2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: ulJkNlUQvSiNBOLkJtZRsgT2vksMYB3EkDCeAxR+6ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:b7:2c:13:55:68:46:e0:57:58:ab:c9:4c:b1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7 Validity Not Before: Dec 19 01:00:52 2025 GMT Not After : Dec 20 01:00:52 2025 GMT Subject: CN=30e4946a1d90521fdef084f311bcef5838d01991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:bb:13:e5:d9:2a:a4:75:ec:07:ee:1f:5e: 69:db:8a:8a:56:3d:d7:de:8e:01:89:4b:ff:3d:99: 80:7a:3b:f4:04:6d:5b:2e:cd:75:5f:25:f8:39:b9: 9a:e4:b7:d0:c5:4a:95:f7:3a:db:49:01:7f:c6:e4: f9:48:f6:e6:36:5b:eb:c4:5e:e8:50:69:65:c6:2c: 2e:9e:6f:56:4f:d8:10:d6:5c:87:5e:38:7c:d8:00: 6c:93:56:f8:f4:72:3f:d7:51:af:18:95:8d:81:c9: c1:fe:d7:ec:4e:4d:fe:39:50:b3:d0:6a:b9:32:79: 71:66:dc:21:ba:c8:db:cc:93:28:c8:1d:b3:02:b8: 61:46:b3:d0:cb:47:4e:db:c0:f3:b9:a4:cc:40:c3: 0f:e6:f9:ec:cd:e9:fd:db:46:a5:ba:92:f3:4e:f6: e3:0b:df:f8:5c:49:2f:3e:79:4b:79:f3:20:ac:8f: 7c:57:58:07:20:12:77:7b:17:81:33:d9:00:79:07: f4:85:ba:2e:c1:25:0d:56:cc:1c:21:d3:3a:46:a0: 8f:f0:c0:6a:1f:c0:dd:73:dc:57:92:38:fc:58:a8: f2:38:8c:bc:98:ad:03:72:5d:2a:f0:bd:89:e1:84: 97:0f:07:53:e8:7f:bf:83:72:bf:f2:4a:f3:5b:47: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E4:94:6A:1D:90:52:1F:DE:F0:84:F3:11:BC:EF:58:38:D0:19:91 X509v3 Authority Key Identifier: keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6f:b0:7c:01:2f:d2:06:4a:81:88:62:cc:3d:fc:de:c0:1a: 81:b3:12:51:6d:2e:fd:7a:bd:d6:1b:0d:d1:db:2d:85:64:d3: 52:3a:85:b1:b1:7e:85:ee:4e:e1:66:43:b5:99:89:8b:02:f0: 83:7e:7a:bb:5b:27:5d:d2:1a:1f:9b:ec:c5:6f:3f:9b:76:63: b5:f9:fa:1e:57:5d:11:2e:09:6c:c3:ff:20:b8:3b:fe:93:18: 96:31:98:7c:ae:bc:8a:3c:f3:8d:9f:32:08:77:59:38:83:26: 34:60:28:0b:18:ec:ef:27:47:76:25:e2:c7:b0:36:5d:91:c4: 6d:d8:2d:47:fb:99:b1:dd:9b:87:eb:97:7c:5d:d2:59:de:2e: 13:d5:da:7e:e5:cf:1a:6b:38:d5:ea:24:20:fc:e2:1c:2b:b0: 40:c5:f8:2e:0b:31:b6:f7:7b:d9:53:72:db:7e:40:1e:f0:9a: 88:01:be:b0:48:27:42:67:1a:bb:6a:40:ec:2d:7f:ac:b2:a9: 6d:0e:d0:5b:60:a5:59:f6:d5:9e:b8:a9:36:a3:fd:a5:2b:6c: d5:dd:b4:d5:09:09:3c:8e:72:ef:19:59:66:8d:3c:b7:1a:f6: e8:bd:7e:3e:50:ef:2a:0e:bf:02:94:d1:fa:69:21:a2:59:46: 1a:35:95:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H7csE1VoRuBXWKvJTLF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWYzZDY1OGI0OTRjYjE3MTUyMDZjNWNkNzZlNzkyZTcy NDdlZjcwHhcNMjUxMjE5MDEwMDUyWhcNMjUxMjIwMDEwMDUyWjAzMTEwLwYDVQQD EygzMGU0OTQ2YTFkOTA1MjFmZGVmMDg0ZjMxMWJjZWY1ODM4ZDAxOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouW7E+XZKqR17AfuH15p24qKVj3X 3o4BiUv/PZmAejv0BG1bLs11XyX4Obma5LfQxUqV9zrbSQF/xuT5SPbmNlvrxF7o UGllxiwunm9WT9gQ1lyHXjh82ABsk1b49HI/11GvGJWNgcnB/tfsTk3+OVCz0Gq5 MnlxZtwhusjbzJMoyB2zArhhRrPQy0dO28DzuaTMQMMP5vnszen920alupLzTvbj C9/4XEkvPnlLefMgrI98V1gHIBJ3exeBM9kAeQf0hbouwSUNVswcIdM6RqCP8MBq H8Ddc9xXkjj8WKjyOIy8mK0Dcl0q8L2J4YSXDwdT6H+/g3K/8krzW0cLCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDklGodkFIf3vCE8xG871g40BmRMB8GA1UdIwQY MBaAFLKvPWWLSUyxcVIGxc1255LnJH73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQt YTJlZWJiMTY2ZmM4LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQtYTJlZWJiMTY2ZmM4 LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2+wfAEv 0gZKgYhizD383sAagbMSUW0u/Xq91hsN0dsthWTTUjqFsbF+he5O4WZDtZmJiwLw g356u1snXdIaH5vsxW8/m3Zjtfn6HlddES4JbMP/ILg7/pMYljGYfK68ijzzjZ8y CHdZOIMmNGAoCxjs7ydHdiXix7A2XZHEbdgtR/uZsd2bh+uXfF3SWd4uE9XafuXP Gms41eokIPziHCuwQMX4Lgsxtvd72VNy235AHvCaiAG+sEgnQmcau2pA7C1/rLKp bQ7QW2ClWfbVnripNqP9pSts1d201QkJPI5y7xlZZo08txr26L1+PlDvKg6/ApTR +mkhollGGjWVTg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:42:04 2025 by rpki-client