This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json) Hash identifier: AfIuYz4in9KihaKyKfp938qE4V3W/yJvLG78K0ASpJo= Subject key identifier: 87:91:2C:86:76:D1:F7:AE:F7:A9:F8:D7:26:AF:71:2C:F0:C3:9C:5E Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0 Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0 Certificate serial: 019B1A29A52A734AEE1AF04303376A3E179E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 00:01:35 +0000 Manifest this update: Sun 14 Dec 2025 00:01:35 +0000 Manifest next update: Mon 15 Dec 2025 00:01:35 +0000 Files and hashes: 1: 9jNi3XWKVAeYgvXNk0P0T-yhT_A.roa (hash: r6wD0yfA7SejIQA44lGGyfTLE1iB9zVRdLay3h3WMPk=) 2: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: 7PycKKd7qcDwR6TRCM2PV3J6i60S85yeg4TPFcEq540=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:a5:2a:73:4a:ee:1a:f0:43:03:37:6a:3e:17:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0 Validity Not Before: Dec 14 00:01:35 2025 GMT Not After : Dec 15 00:01:35 2025 GMT Subject: CN=87912c8676d1f7aef7a9f8d726af712cf0c39c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d4:59:f7:02:dc:34:91:3e:5f:4f:5d:6a:ec: 1d:98:22:0f:15:e7:03:37:eb:ad:e1:2f:64:1e:83: 0a:da:8f:45:8e:ca:1b:ae:c5:c7:7a:78:90:1a:b5: 07:d9:30:0c:00:51:e0:7e:14:07:cd:94:b6:79:73: 7c:9e:c8:70:49:80:6f:1c:17:8f:18:f7:25:ef:c5: 23:33:bd:9c:bc:df:e4:63:06:19:1e:20:9f:e5:12: 37:ea:dc:b9:67:1b:fe:01:43:2c:62:f8:51:a5:a0: e1:43:3e:bc:4b:fd:4b:75:24:20:03:bd:dd:e2:43: 52:4a:cd:99:38:d7:fe:d4:a5:6c:f0:7f:4b:d1:07: 03:7a:ce:23:56:2f:71:98:2a:13:0f:ca:48:c7:44: cc:02:85:18:ed:69:d5:71:bd:29:e2:36:35:79:3b: 5a:a6:d3:66:31:b0:fc:84:08:96:6a:e8:79:80:55: ba:ff:ec:4d:95:ed:b5:e3:23:b5:cb:54:e0:85:ec: 17:66:45:8f:f3:89:c0:22:1e:c7:0d:88:45:85:77: 6a:ee:97:fc:36:ec:b0:c5:3e:50:e6:3b:f2:ea:7d: d0:7e:50:0e:2d:53:8e:48:ea:e2:15:6e:5c:c0:00: 61:ed:49:da:90:b1:0b:30:b8:6a:4f:af:1c:65:69: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:91:2C:86:76:D1:F7:AE:F7:A9:F8:D7:26:AF:71:2C:F0:C3:9C:5E X509v3 Authority Key Identifier: keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:60:a7:26:0c:5f:97:9b:04:1e:46:bb:c7:ed:dd:2b:c8:83: fd:01:7f:c0:c3:15:86:1e:2d:ce:c4:d4:d8:5a:d8:2e:83:55: aa:57:ef:5b:14:bf:e0:02:d2:d3:63:95:c9:a5:6d:9f:d8:6b: b5:ed:4f:2b:4a:ab:37:4e:5b:49:ad:94:39:6f:d4:c6:ec:b7: 39:69:4d:30:bd:00:74:3a:6c:e6:5e:32:40:07:c1:4a:35:10: a3:a6:cb:3a:c4:e9:26:9e:9a:95:ad:ba:2d:1a:c1:56:76:c9: eb:ab:c6:cd:3b:40:b4:c8:f0:d3:6b:a7:65:32:c4:b8:8b:0d: 00:ce:83:0a:a2:c9:08:c6:cf:67:bf:23:d4:2a:ae:ba:3c:2b: 4d:8b:25:8c:11:a1:bb:bf:dc:9f:0a:a6:94:85:c3:77:a0:27: f1:6b:f1:73:b5:eb:1e:fb:8b:b6:f6:c9:57:8f:2f:63:40:67: fb:7b:0d:d4:39:85:9d:3c:4e:5a:af:44:04:da:33:fc:99:f5: c3:66:48:e4:e6:2d:2a:a4:14:1d:16:7d:08:b4:11:a9:dc:ad: 7b:0c:b7:bf:e8:3d:4a:81:b4:a4:cb:db:cd:5a:ed:2e:05:b9: 66:3b:64:56:e4:08:8a:f1:76:51:37:56:0e:07:51:6c:cc:ed: 0f:41:e5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKaUqc0ruGvBDAzdqPheeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWZlNDViMzBmYTdmNTk0OTI1ZGQzOTViYTE0Y2VmYjY3 M2UyYzAwHhcNMjUxMjE0MDAwMTM1WhcNMjUxMjE1MDAwMTM1WjAzMTEwLwYDVQQD Eyg4NzkxMmM4Njc2ZDFmN2FlZjdhOWY4ZDcyNmFmNzEyY2YwYzM5YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tRZ9wLcNJE+X09dauwdmCIPFecD N+ut4S9kHoMK2o9FjsobrsXHeniQGrUH2TAMAFHgfhQHzZS2eXN8nshwSYBvHBeP GPcl78UjM72cvN/kYwYZHiCf5RI36ty5Zxv+AUMsYvhRpaDhQz68S/1LdSQgA73d 4kNSSs2ZONf+1KVs8H9L0QcDes4jVi9xmCoTD8pIx0TMAoUY7WnVcb0p4jY1eTta ptNmMbD8hAiWauh5gFW6/+xNle214yO1y1TghewXZkWP84nAIh7HDYhFhXdq7pf8 NuywxT5Q5jvy6n3QflAOLVOOSOriFW5cwABh7UnakLELMLhqT68cZWn8SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeRLIZ20feu96n41yavcSzww5xeMB8GA1UdIwQY MBaAFEqv5Fsw+n9ZSSXdOVuhTO+2c+LAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODct ZjFmNjAzZjkxOTcxLzEvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODctZjFmNjAzZjkxOTcx LzEvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGCnJgxf l5sEHka7x+3dK8iD/QF/wMMVhh4tzsTU2FrYLoNVqlfvWxS/4ALS02OVyaVtn9hr te1PK0qrN05bSa2UOW/Uxuy3OWlNML0AdDps5l4yQAfBSjUQo6bLOsTpJp6ala26 LRrBVnbJ66vGzTtAtMjw02unZTLEuIsNAM6DCqLJCMbPZ78j1CquujwrTYsljBGh u7/cnwqmlIXDd6An8Wvxc7XrHvuLtvbJV48vY0Bn+3sN1DmFnTxOWq9EBNoz/Jn1 w2ZI5OYtKqQUHRZ9CLQRqdytewy3v+g9SoG0pMvbzVrtLgW5ZjtkVuQIivF2UTdW DgdRbMztD0Hlzg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:46 2025 by rpki-client