This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft File: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft (raw, json) Hash identifier: MNg5eGWpaJSw78RuxDcgnjL8ed4gPOtJNCEbqhrG/TY= Subject key identifier: 29:9C:3B:43:08:FF:62:55:AC:44:71:9C:2B:30:1F:00:6E:F9:68:7D Authority key identifier: B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B Certificate issuer: /CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b Certificate serial: 019B465D2DFA25C77D78CBADB83355D9713D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft Manifest number: 042B Signing time: Mon 22 Dec 2025 14:01:10 +0000 Manifest this update: Mon 22 Dec 2025 14:01:10 +0000 Manifest next update: Tue 23 Dec 2025 14:01:10 +0000 Files and hashes: 1: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl (hash: abBMoIypyYJ4irDgytflLY2pmcVm9s45xK8+gqDMXnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:2d:fa:25:c7:7d:78:cb:ad:b8:33:55:d9:71:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b Validity Not Before: Dec 22 14:01:10 2025 GMT Not After : Dec 23 14:01:10 2025 GMT Subject: CN=299c3b4308ff6255ac44719c2b301f006ef9687d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:c8:e9:56:5a:0a:c9:f9:15:83:c2:29:2b: 73:aa:51:91:13:e8:26:38:2c:73:51:60:b4:26:25: 15:88:57:28:23:4b:a6:78:dd:59:3c:be:26:f8:2a: 12:96:6c:b4:7e:2e:86:f1:bc:d5:02:eb:61:1a:61: 0a:ec:4d:b1:99:d3:ad:8a:f3:6f:42:ac:2f:55:44: 3a:79:07:ec:e4:7b:b9:85:ae:dd:6e:db:df:02:36: 29:06:e4:d2:57:9c:d7:13:68:d5:a9:8a:a0:62:9b: 7f:24:9d:7d:5e:87:59:89:d6:89:d1:47:ae:72:5f: 7b:c5:80:bd:70:39:ea:05:33:b9:54:5e:d1:a3:a8: d7:67:a4:28:b2:59:65:f0:ef:78:09:a3:08:32:36: 12:c3:17:6b:3c:f7:b0:05:69:c3:f7:ab:17:c1:42: 82:a7:c1:bd:b1:8a:16:8a:7c:04:1f:a4:69:c5:df: e0:42:d9:be:29:33:48:3d:aa:f4:98:92:87:35:0a: 47:92:53:f1:47:73:8a:09:7c:da:0a:83:9f:a0:4f: 6b:e4:00:5f:02:6c:de:c4:06:9b:d9:37:11:94:a5: bd:8a:3e:05:8f:80:03:9b:d0:12:a7:f8:3b:39:6a: f3:ef:c6:84:00:7e:03:db:43:dc:0a:c5:b4:67:32: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:3B:43:08:FF:62:55:AC:44:71:9C:2B:30:1F:00:6E:F9:68:7D X509v3 Authority Key Identifier: keyid:B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f7:7d:05:a2:a2:64:b1:7b:a0:8c:71:0b:d1:53:f1:51:80: 4c:78:a8:f5:a3:ac:b0:e8:24:75:ec:ab:cc:ad:2d:34:6e:81: b6:39:5c:39:0b:40:17:d8:8e:25:0a:7a:b7:32:e8:fc:25:b7: 8c:09:b9:ba:3f:be:54:2d:1f:bf:27:83:20:9c:32:86:b1:5f: 4e:d7:0c:bd:aa:db:3c:95:d1:16:55:79:5d:f7:71:f1:b7:23: fa:4b:b5:19:d9:fc:b0:ac:81:c4:2a:e7:71:97:bb:ad:3c:c2: 08:b7:9c:29:b5:21:ff:43:dc:26:5e:b6:bd:fc:87:2f:04:1c: ec:08:0f:11:fd:a5:ca:5b:71:85:63:38:17:28:be:25:ee:5f: fa:ca:bd:2c:f0:69:4c:2f:b2:06:7f:74:65:f2:de:c6:99:c3: 22:c6:2c:c9:f4:8d:65:b6:02:13:20:63:6a:e1:64:69:b3:6e: 94:fd:50:76:c0:35:5f:4e:81:bc:ef:e2:b8:f1:01:12:f0:bb: 3f:c2:9d:58:53:4f:24:6b:71:48:61:3f:9b:d7:70:9e:5b:79: 3c:18:2c:c6:0d:cf:5d:5d:89:f3:4e:1a:9c:5d:1a:86:eb:a9: 6e:51:25:51:3f:03:bb:88:8c:a7:da:fc:8c:ec:aa:4b:4c:50: 03:45:1b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXS36Jcd9eMutuDNV2XE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTg1MzcxZTkyZjM5YTJiZTQyNDc2MGIwNGU0N2FkOWRh M2VkM2IwHhcNMjUxMjIyMTQwMTEwWhcNMjUxMjIzMTQwMTEwWjAzMTEwLwYDVQQD EygyOTljM2I0MzA4ZmY2MjU1YWM0NDcxOWMyYjMwMWYwMDZlZjk2ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZvI6VZaCsn5FYPCKStzqlGRE+gm OCxzUWC0JiUViFcoI0umeN1ZPL4m+CoSlmy0fi6G8bzVAuthGmEK7E2xmdOtivNv QqwvVUQ6eQfs5Hu5ha7dbtvfAjYpBuTSV5zXE2jVqYqgYpt/JJ19XodZidaJ0Ueu cl97xYC9cDnqBTO5VF7Ro6jXZ6Qoslll8O94CaMIMjYSwxdrPPewBWnD96sXwUKC p8G9sYoWinwEH6Rpxd/gQtm+KTNIPar0mJKHNQpHklPxR3OKCXzaCoOfoE9r5ABf AmzexAab2TcRlKW9ij4Fj4ADm9ASp/g7OWrz78aEAH4D20PcCsW0ZzKuJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmcO0MI/2JVrERxnCswHwBu+Wh9MB8GA1UdIwQY MBaAFLKoU3HpLzmivkJHYLBOR62do+07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FoVGNla3ZPYUstUWtkZ3NFNUhyWjJqN1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mNWQ3MzAtZjhlYi00ZjgwLTlhOWMt OWFiZTRlNmMyYmUxLzEvc3FoVGNla3ZPYUstUWtkZ3NFNUhyWjJqN1RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mNWQ3MzAtZjhlYi00ZjgwLTlhOWMtOWFiZTRlNmMyYmUx LzEvc3FoVGNla3ZPYUstUWtkZ3NFNUhyWjJqN1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvd9BaKi ZLF7oIxxC9FT8VGATHio9aOssOgkdeyrzK0tNG6BtjlcOQtAF9iOJQp6tzLo/CW3 jAm5uj++VC0fvyeDIJwyhrFfTtcMvarbPJXRFlV5Xfdx8bcj+ku1Gdn8sKyBxCrn cZe7rTzCCLecKbUh/0PcJl62vfyHLwQc7AgPEf2lyltxhWM4Fyi+Je5f+sq9LPBp TC+yBn90ZfLexpnDIsYsyfSNZbYCEyBjauFkabNulP1QdsA1X06BvO/iuPEBEvC7 P8KdWFNPJGtxSGE/m9dwnlt5PBgsxg3PXV2J804anF0ahuupblElUT8Du4iMp9r8 jOyqS0xQA0UbtQ== -----END CERTIFICATE-----Generated at Mon Dec 22 17:07:13 2025 by rpki-client