This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json) Hash identifier: Ym/EP6rDx81nGlc+laDtmgDtrNxElneMBh3gjw39rPM= Subject key identifier: 0F:A8:E8:7C:C8:03:F1:3E:9E:B9:C3:CF:43:2D:8B:F2:AD:3C:15:C6 Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Certificate serial: 019B7480624091206AD5DD2F71BFD414B28C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft Manifest number: 17BA Signing time: Wed 31 Dec 2025 13:02:09 +0000 Manifest this update: Wed 31 Dec 2025 13:02:09 +0000 Manifest next update: Thu 01 Jan 2026 13:02:09 +0000 Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=) 2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: w4SkjnDHH+F63zJblyvIrkW3wuzAtpsUsdQygk++15A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:80:62:40:91:20:6a:d5:dd:2f:71:bf:d4:14:b2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Validity Not Before: Dec 31 13:02:09 2025 GMT Not After : Jan 1 13:02:09 2026 GMT Subject: CN=0fa8e87cc803f13e9eb9c3cf432d8bf2ad3c15c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:a9:32:73:49:24:86:05:8b:2f:52:98:a4: 74:d3:6c:80:8c:27:a5:11:93:ec:07:2f:7e:ff:78: d0:32:b5:66:58:ea:ed:ac:a6:91:21:c4:ac:ea:eb: f5:fc:39:21:fd:fd:0f:53:2b:89:a7:3d:cc:70:7e: d7:3a:60:21:1a:c3:d9:66:65:90:1c:48:4f:ff:2b: 30:40:99:cf:c7:a7:fe:82:c0:a7:ad:07:c5:0a:bc: 9a:15:ec:7d:07:7f:d1:7f:99:46:4a:de:86:06:4a: 1b:9e:13:9b:54:df:ac:bc:20:40:bf:74:ac:ac:01: 8b:45:5a:9a:60:06:7f:4e:80:55:d3:2f:69:a1:bb: 55:c6:8f:23:23:51:1b:44:d2:03:c5:3b:4a:c7:75: c5:b0:05:67:d0:fd:72:ce:a4:11:81:5f:21:21:9f: 49:c9:37:33:5a:4a:d7:d4:b4:d3:32:bf:e6:47:4c: b1:fa:90:98:4e:3b:a2:02:bc:7a:25:b6:25:34:9a: 62:8b:0a:f9:55:34:09:fe:70:bb:c8:69:59:6c:6a: ad:dc:3b:2f:fa:01:ac:95:05:d4:de:2b:ed:7a:67: 2c:cd:41:0e:db:cf:59:e8:80:d2:1f:f6:65:f5:2c: 03:1c:2a:4e:1b:a5:fd:44:cb:75:b7:18:e8:10:4a: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A8:E8:7C:C8:03:F1:3E:9E:B9:C3:CF:43:2D:8B:F2:AD:3C:15:C6 X509v3 Authority Key Identifier: keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7e:4b:a4:6b:a7:d4:ff:7a:9a:50:b6:73:41:88:b9:ae:95: 53:cf:39:d0:88:7b:25:f5:f2:e6:5e:92:92:89:13:9b:a5:05: 62:01:66:4f:01:04:a5:63:35:46:f7:61:37:1b:02:6c:da:48: 4a:9f:39:eb:0d:79:22:3c:89:9e:ac:a1:9c:04:a7:e7:88:d9: 7b:64:03:4a:4c:9d:b2:75:15:d6:c5:94:2f:3b:99:a7:f1:0c: f4:35:31:a6:2c:f7:d3:ec:47:b0:67:1a:cc:9f:3f:b2:f9:21: 74:10:a2:f5:4c:af:56:ed:a0:fb:74:16:b1:49:bb:bf:06:ca: c3:7d:fc:c7:6c:a2:d0:f0:53:51:53:90:46:c5:b7:49:3a:dd: 6d:fa:ab:de:34:85:f0:c4:50:ed:00:a0:77:4f:c9:2b:56:b4: 97:d2:42:bc:a8:8b:83:00:7d:30:37:e3:32:50:50:95:0a:46: 4a:a1:86:f1:53:2b:d4:a3:3f:c3:3f:66:8e:11:a7:2b:8d:c7: 73:6f:4e:d6:63:6e:96:25:05:16:ba:19:11:b4:18:8d:96:d6: 06:68:11:44:a1:54:c7:e8:2c:5b:d0:ab:d5:18:59:42:1b:5e: 4c:dc:79:cf:8b:43:bc:d9:87:a1:87:9c:10:2e:11:df:49:20: f8:1d:de:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0gGJAkSBq1d0vcb/UFLKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi OGUwNzAwHhcNMjUxMjMxMTMwMjA5WhcNMjYwMTAxMTMwMjA5WjAzMTEwLwYDVQQD EygwZmE4ZTg3Y2M4MDNmMTNlOWViOWMzY2Y0MzJkOGJmMmFkM2MxNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp+pMnNJJIYFiy9SmKR002yAjCel EZPsBy9+/3jQMrVmWOrtrKaRIcSs6uv1/Dkh/f0PUyuJpz3McH7XOmAhGsPZZmWQ HEhP/yswQJnPx6f+gsCnrQfFCryaFex9B3/Rf5lGSt6GBkobnhObVN+svCBAv3Ss rAGLRVqaYAZ/ToBV0y9pobtVxo8jI1EbRNIDxTtKx3XFsAVn0P1yzqQRgV8hIZ9J yTczWkrX1LTTMr/mR0yx+pCYTjuiArx6JbYlNJpiiwr5VTQJ/nC7yGlZbGqt3Dsv +gGslQXU3ivtemcszUEO289Z6IDSH/Zl9SwDHCpOG6X9RMt1txjoEEoMnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+o6HzIA/E+nrnDz0Mti/KtPBXGMB8GA1UdIwQY MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVH5LpGun 1P96mlC2c0GIua6VU8850Ih7JfXy5l6SkokTm6UFYgFmTwEEpWM1RvdhNxsCbNpI Sp856w15IjyJnqyhnASn54jZe2QDSkydsnUV1sWULzuZp/EM9DUxpiz30+xHsGca zJ8/svkhdBCi9UyvVu2g+3QWsUm7vwbKw338x2yi0PBTUVOQRsW3STrdbfqr3jSF 8MRQ7QCgd0/JK1a0l9JCvKiLgwB9MDfjMlBQlQpGSqGG8VMr1KM/wz9mjhGnK43H c29O1mNuliUFFroZEbQYjZbWBmgRRKFUx+gsW9Cr1RhZQhteTNx5z4tDvNmHoYec EC4R30kg+B3e9g== -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:16 2025 by rpki-client